Huawei H12-723 Online Practice Questions and Exam Preparation

Huawei H12-723 Online Questions & Answers

• Question 91:

  Regarding the description of the account blacklist, which of the following options is wrong?

  A. The automatic account lock and manual account lock functions cannot be activated at the same time.
  B. For automatically locked accounts, if the number of incorrect passwords entered by a user exceeds the limit within a certain time, the account will be automatically locked.
  C. For manually locked accounts, the administrator must manually add the account to the locked account list.
  D. After manually locking an account, deleting it from the list will release the account lock.
  A. The automatic account lock and manual account lock functions cannot be activated at the same time.

• Question 92:

  Which of the following sequences correctly describes the PKI workflow process?

  The PKI entity requests a CA certificate from the CA.

  The PKI entity installs the CA certificate after receiving it.

  The CA, upon receiving the PKI entity's certificate request, attaches its own CA certificate and replies to the PKI entity.

  The PKI entity sends a certificate registration request message to the CA.

  When PKI entities communicate, they must obtain and install each other's local certificates.

  The PKI entity receives the certificate information sent by the CA.

  After the PKI entity installs the peer's local certificate, it verifies its validity. If valid, the entity uses the public key of the certificate for encrypted communication.

  The CA receives the PKI entity's certificate registration request message.

  A. 1-3-5-4-2-6-7-8
  B. 1-3-5-6-7-4-8-2
  C. 1-3-2-7-6-4-5-8
  D. 1-3-2-4-8-6-5-7
  D. 1-3-2-4-8-6-5-7

• Question 93:

  User access authentication technology does not include which of the following options?

  A. Authentication
  B. Isolation repair
  C. Security check
  D. Access control
  B. Isolation repair

• Question 94:

  An enterprise adopts a hardware SACG access method for admission control. The configuration commands are as follows, where the key is Admin@123: [USG] right-manager server-group [USG-rightm] localip 10.1.10.2 [USG-rightm] serverip 10.1.31.78 shared-key AdnIn@123 [USG-rightm] right-manager server-group enable Assuming that the other configurations are correct, based on the above configuration only, which of the following options is correct?

  A. After completing the configuration, SACG can successfully link with the Agile Controller-Campus.
  B. After completing the configuration, SACG cannot successfully link with the Agile Controller-Campus.
  C. The pre-authentication domain ACL can be issued.
  D. The linkage cannot be successful, but the terminal can access the pre-authentication domain server.
  B. After completing the configuration, SACG cannot successfully link with the Agile Controller-Campus.

• Question 95:

  The following configurations are authentication commands configured on admission control devices A and

  B. Based on the configuration, which of the following statements are correct? (Choose two)

  A. The configuration on device A is MAC Bypass authentication.
  B. The configuration on device B is MAC Bypass authentication.
  C. On device A, interface 2GE1/0/1 can connect to PCs as well as dumb terminal devices.
  D. On device B, interface GE1/0/1 can connect to PCs as well as dumb terminal devices.
  A. The configuration on device A is MAC Bypass authentication.
  C. On device A, interface 2GE1/0/1 can connect to PCs as well as dumb terminal devices.

• Question 96:

  The Agile Controller-Campus system can manage software installed on terminals, define software blacklists and whitelists, and assist terminals in installing required software or uninstalling prohibited software by linking with access control devices.

  Regarding the definition of blacklists and whitelists, which of the following statements is correct?

  A. Check for prohibited software licenses and sub-licensed software.
  B. Check for prohibited software.
  C. Check for prohibited software and software that must be installed.
  D. Check for software that must be installed.
  C. Check for prohibited software and software that must be installed.

• Question 97:

  Regarding the principle of MAC authentication, which of the following descriptions is wrong?

  A. MAC authentication requires cooperation with the Portal server.
  B. MAC authentication is implemented through the 802.1X protocol.
  C. MAC authentication requires obtaining the terminal's MAC address and storing it in the AAA server.
  D. After MAC authentication is configured on the NAS device, the terminal's MAC address is used as the username and password.
  A. MAC authentication requires cooperation with the Portal server.

• Question 98:

  Traditional access control policies using ACL or VLAN cannot achieve decoupling from IP addresses. When IP addresses change, the maintenance workload is heavy. Because the agile network introduces the concept of security groups, it can achieve IP address decoupling.

  A. True
  B. False
  A. True

• Question 99:

  When using a normal account for authentication, which of the following descriptions is wrong?

  A. Users can use AnyOffice for authentication.
  B. Users cannot use the web method for authentication.
  C. Users can use Web Agent for authentication.
  D. Users can use their own 802.1X client for authentication.
  B. Users cannot use the web method for authentication.

• Question 100:

  The following is the 802.1X access control switch configuration: [S5720] dot1x authentication-method eap [S5720-GigabitEthernet0/0/1] port link-type access [S5720-GigabitEthernet0/0/1] port default vlan 11 [S5720-GigabitEthernet0/0/1] authentication dot1x Assuming that GE0/0/1 is connected to User 1 and User 2 through a HUB, which of the following options is correct?

  A. After User 1 is authenticated, User 2 can access network resources without authentication.
  B. User 1 and User 2 must each be individually authenticated before accessing network resources.
  C. GE0/0/1 does not need to enable 802.1X.
  D. Neither User 1 nor User 2 can pass authentication or access network resources.
  A. After User 1 is authenticated, User 2 can access network resources without authentication.