Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 81:

  Which of the following options are common reasons for IPS detection failure? (Choose Three)

  A. IPS policy is not submitted for compilation
  B. False Policy IDs are associated with IPS policy domains
  C. The IPS function is not turned on
  D. Bypass function is closed in IPS
  A. IPS policy is not submitted for compilation
  B. False Policy IDs are associated with IPS policy domains
  C. The IPS function is not turned on

• Question 82:

  Content filtering is a security mechanism that filters the content of files or applications through Huawei USG6000 products. It focuses on deeply recognizing the content of traffic passing through the device, which can then block or alert on traffic containing specific keywords.

  A. True
  B. False
  A. True

• Question 83:

  Regarding the statement of the mail protocol, which of the following is correct? (Choose Two)

  A. Using POP3, the client software will download all unread mails to the computer, and the mail server will delete the mails.
  B. Use JIMAP, the client software will download all unread mails to the computer, and the mail server will delete the mails.
  C. With IMAP, users can directly operate on the mail on the server, without downloading all the mails locally to perform various operations.
  D. Using POP3, users can directly operate on the mail on the server without sending all mails to the local to perform various operations.
  A. Using POP3, the client software will download all unread mails to the computer, and the mail server will delete the mails.
  C. With IMAP, users can directly operate on the mail on the server, without downloading all the mails locally to perform various operations.

• Question 84:

  Attacks on the Web can be divided into three types of attacks on the client, server, or communication channel.

  A. True
  B. False
  A. True

• Question 85:

  Which patches does Policy Center support to management? (Choose Three)

  A. Microsoft Windows operating system patches
  B. Microsoft SQL Windows database patch
  C. Microsoft Internet Explorer patches
  D. android system patches
  A. Microsoft Windows operating system patches
  B. Microsoft SQL Windows database patch
  C. Microsoft Internet Explorer patches

• Question 86:

  Which of the following is the correct configuration idea for the anti-virus strategy?

  1.Load the feature library

  2.Configure security policy and reference AV Profile

  3.Apply and activate the license

  4.Configure AV Profile

  5.Submit

  A. 3->1->4->2->5
  B. 3->2->4->1->5
  C. 3->2->1->4->5
  D. 3->1->2->4->5
  A. 3->1->4->2->5

• Question 87:

  Regarding the processing flow of file filtering, which of the following statements is wrong?

  A. After the file decompression fails, the file will still be filtered. .
  B. The application identification module can identify the type of application that carries the file.
  C. Protocol decoding is responsible for analyzing the file data and file transmission direction in the data stream.
  D. The file type recognition module is responsible for identifying the true type of the file and the file extension based on the file data
  A. After the file decompression fails, the file will still be filtered. .

• Question 88:

  Use the BGP protocol to achieve diversion. The configuration commands are as follows: [sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname] bgp 100 [sysname-bgp] peer [sysname-bgp] import-route unr [sysname-bgp] ipv4-family unicast [sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export [sysname-bgp-af-ipv4] peer 7.7.1.2 advertise community [sysname-bgp-af-ipv4] quit [sysname-bgp] quit Which of the following options is correct for the description of the BGP diversion configuration? (Choose Two)

  A. Use BGP to publish UNR routes to achieve dynamic diversion.
  B. After receiving the UNR route, the peer neighbor will not send it to any BGP neighbor.
  C. You also need to configure the firewall anti-ddos bgp-next-hop fib-filter command to implement back injection.
  D. The management center does not need to configure protection objects. When an attack is discovered, it automatically issues a traffic diversion task.
  A. Use BGP to publish UNR routes to achieve dynamic diversion.
  B. After receiving the UNR route, the peer neighbor will not send it to any BGP neighbor.

• Question 89:

  The following figure shows the configuration of the URL filtering configuration file. Regarding the configuration, which of the following statements is correct?

  

  A. The firewall will first check the blacklist entries and then the whitelist entries.
  B. Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.
  C. The user visits the website www.exzample.com, and when the black and white list is not hit, the next step is to query the predefined URL category entry.
  D. The default action means that all websites are allowed to visit. So the configuration is wrong here.
  B. Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.

• Question 90:

  Regarding the global configuration of file filtering configuration files for Huawei USG6000 products, which of the following descriptions is correct?

  A. File filtering, content filtering and anti-virus detection cannot be performed when the file is damaged. At this time, the documents can be released or blocked according to business requirements.
  B. When the file extension does not match, if the action is "Allow" or "Alarm", file filtering, content filtering and anti-virus are performed according to the file type Detection.
  C. When the number of compression layers of a file is greater than the configured "Maximum Decompression Layers", the firewall cannot filter the file.
  D. When the file type cannot be recognized, file filtering, content filtering and anti-virus detection are not performed.
  C. When the number of compression layers of a file is greater than the configured "Maximum Decompression Layers", the firewall cannot filter the file.