Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 71:

  Which of the following options is not a special message attack?

  A. ICMP redirect message attack
  B. Oversized ICMP packet attack
  C. Tracert packet attack
  D. IP fragment message attack
  D. IP fragment message attack

• Question 72:

  Information security is the protection of information and information systems to prevent unauthorized access, use, disclosure, interruption, modification, or damage, and to improve confidentiality, integrity, and availability.

  A. True
  B. False
  A. True

• Question 73:

  IPS is an intelligent intrusion detection and defense product. It can not only detect intrusions but also respond in real time through specific response methods to stop the occurrence and development of intrusions, protecting the information system from substantial attacks.

  According to the description of IPS, which of the following items is wrong?

  A. IPS is an intrusion detection system that can block real-time intrusions when found.
  B. IPS unifies IDS and firewall.
  C. IPS must use bypass deployment in the network.
  D. Common IPS deployment modes include in-line deployment.
  C. IPS must use bypass deployment in the network.

• Question 74:

  Which of the following options is correct for the sequence of the flow-by-stream detection of AntiDDoS?

  1.The Netflow analysis device samples the current network flow;

  2.Send a drainage command to the cleaning center;

  3.Discover the DDoS attack stream;

  4.Netior: analysis equipment sends alarms to ATIC management center

  5.The abnormal flow is diverted to the cleaning center for further inspection and cleaning;

  6.The cleaning center sends the host route of the attacked target IF address server to the router to achieve drainage

  7.The cleaning log is sent to the management center to generate a report;

  8.The cleaned traffic is sent to the original destination server.

  A. 1-3-4-2-5-6-7-8
  B. 1-3-2-4-6-5-7-8
  C. 1-3-4-2-6-5-8-7
  D. 1-3-24-6-5-8-7
  C. 1-3-4-2-6-5-8-7

• Question 75:

  The processing flow of IPS has the following steps;

  1.Reorganize application data

  2.Match the signature

  3.Message processing

  4.Protocol identification

  Which of the following is the correct order of the processing flow?

  A. 4-1-2-3
  B. 1-4-2-3
  C. 1-3-2-4
  D. 2-4-1-3
  B. 1-4-2-3

• Question 76:

  Regarding scanning and snooping attacks, which of the following descriptions is wrong?

  A. Scanning attacks include address scanning and port scanning.
  B. It is usually the network detection behavior before the attacker launches the real attack.
  C. The source address of the scanning attack is real, so it can be defended by adding direct assistance to the blacklist.
  D. When a worm virus breaks out, it is usually accompanied by an address scanning attack, so scanning attacks are offensive.
  D. When a worm virus breaks out, it is usually accompanied by an address scanning attack, so scanning attacks are offensive.

• Question 77:

  The virus signature database on the device needs to be continuously upgraded from the security center platform. Which of the following is the website of the security center platform?

  A. sec. huawei. com.
  B. support.huaver: com
  C. www. huawei. com
  D. security.. huawei. com
  A. sec. huawei. com.

• Question 78:

  In the context of Huawei USG6000 Anti-Virus module, which of the following statements is correct?

  A. Files in the whitelist are still subject to virus scanning.
  B. The virus database can be updated automatically or manually.
  C. The antivirus feature only supports HTTP and FTP protocols.
  D. The antivirus engine must be restarted after each signature update.
  B. The virus database can be updated automatically or manually.

• Question 79:

  Regarding HTTP behavior, which of the following statements is wrong?

  A. HTTP POST is generally used to send information to the server through a web page, such as forum posting, form submission, and username/password login.
  B. When the file upload operation is allowed, the alarm threshold and blocking threshold can be configured to control the size of the uploaded file.
  C. When the size of the uploaded or downloaded file or the content size of the POST operation reaches the alarm threshold, the system will generate log information to prompt the device administrator and block the behavior.
  D. When the size of the uploaded or downloaded file or the content size of the POST operation reaches the blocking threshold, the system will only block the uploaded or downloaded file or the POST operation.
  D. When the size of the uploaded or downloaded file or the content size of the POST operation reaches the blocking threshold, the system will only block the uploaded or downloaded file or the POST operation.

• Question 80:

  Regarding intrusion prevention, which of the following option descriptions is wrong?

  A. Intrusion prevention is a new security defense technology that can detect and prevent intrusions.
  B. Intrusion prevention is a security mechanism that detects intrusions (including buffer overflow attacks, Trojan horses, worms, etc.) by analyzing network traffic.
  C. Intrusion prevention can block attacks in real time.
  D. Intrusion prevention technology, after discovering an intrusion, the firewall must be linked to prevent the intrusion.
  D. Intrusion prevention technology, after discovering an intrusion, the firewall must be linked to prevent the intrusion.