Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 21:

  Regarding Huawei USG6000 products, which of the following statements about file filtering is correct? (Choose Two)

  A. Files can be filtered by file type and file extension.
  B. The filtering engine only supports HTTP protocol.
  C. The filtering process can identify compressed file contents.
  D. Filtering can only be applied to inbound traffic.
  A. Files can be filtered by file type and file extension.
  C. The filtering process can identify compressed file contents.

• Question 22:

  Which of the following statement on the scanner is wrong?

  A. When deploying NAC Agent, can use scanner to scan and assess the number of installed and non-installed agent.
  B. When the terminal NAC Agent uninstall, the scanner can send alarm information.
  C. the scanner by the SNMP protocol to obtain network equipment resources information.
  D. scanner and Policy Center controller linkage scan tasks.
  A. When deploying NAC Agent, can use scanner to scan and assess the number of installed and non-installed agent.
  D. scanner and Policy Center controller linkage scan tasks.

• Question 23:

  Which of the following options is not a feature of big data technology?

  A. The data boy is huge
  B. A wide variety of data
  C. Low value density
  D. Slow processing speed
  D. Slow processing speed

• Question 24:

  When you suspect that the company's network has been attacked by hackers, you have carried out a technical investigation. Which of the following options does not belong to the behavior that occurred in the early stage of the attack?

  A. Planting malware
  B. Vulnerability attack
  C. Web application attacks
  D. Brute force
  A. Planting malware

• Question 25:

  Land attack means that the source address and destination address of the TCP packet are both set to the IP address of a certain victim. This behavior will cause the victim to receive a SYN-ACK message from itself; that address then sends back an ACK message and creates a half-open connection, which causes system resources to be occupied or causes the target host to crash.

  A. True
  B. False
  B. False

• Question 26:

  Regarding Huawei's anti-virus technology, which of the following statements is wrong?

  A. The virus detection system cannot directly detect compressed files
  B. The anti-virus engine can detect the file type through the file extension
  C. Gateway antivirus default file maximum decompression layer is 3 layers
  D. The implementation of gateway antivirus is based on proxy scanning and stream scanning
  B. The anti-virus engine can detect the file type through the file extension

• Question 27:

  When the device recognizes a keyword during content filtering detection, which response actions can the device perform? (Choose Three)

  A. Warning
  B. Block
  C. Declare
  D. Operate by weight
  A. Warning
  B. Block
  D. Operate by weight

• Question 28:

  An enterprise has 3 server, which is the most reasonable plan when deploy Policy Center system planning?

  A. manager + controller + FTP + witness database, controller + master database + FTP, controller + mirror database+ FTP
  B. manager + controller + FTP + master database, controller + FTP + witness database, controller + FTP + mirror database
  C. manager + controller + FTP + mirror database, controller + FTP + witness database, controller + FTP + master database
  D. manager + controller + FTP, controller + FTP + witness databases, controller + FTP + master database
  A. manager + controller + FTP + witness database, controller + master database + FTP, controller + mirror database+ FTP

• Question 29:

  In the construction of information security, the intrusion detection system plays the role of a monitor. It monitors the flow of key nodes in the information system. In-depth analysis to discover security incidents that are occurring. Which of the following are its characteristics?

  A. IDS can be linked with firewalls and switches to become a powerful "assistant" of firewalls, which can better and more accurately control access between domains.
  B. It is impossible to correctly analyze the malicious code doped in the allowed application data stream.
  C. Unable to detect malicious operations or misoperations from internal killings.
  D. Cannot do in-depth inspection.
  A. IDS can be linked with firewalls and switches to become a powerful "assistant" of firewalls, which can better and more accurately control access between domains.

• Question 30:

  Regarding firewall and IDS, which of the following statements is correct?

  A. The firewall is a bypass device, used for fine-grained detection
  B. IDS is a straight line equipment and cannot be used for in-depth inspection
  C. The firewall cannot detect malicious operations or misoperations by insiders
  D. IDS cannot be linked with firewall
  C. The firewall cannot detect malicious operations or misoperations by insiders