Huawei H12-723 Online Practice Questions and Exam Preparation

Huawei H12-723 Online Questions & Answers

• Question 81:

  For the convenience of visitors, different authentication and main pages can be distributed to different visitors. When configuring the push page policy, different matching conditions need to be defined. Which of the following options can be used as valid matching conditions? (Choose two)

  A. Terminal IP address
  B. Location information of the access device
  C. Priority of guest accounts
  D. Connected network SSID
  A. Terminal IP address
  D. Connected network SSID

• Question 82:

  Regarding the description of the logical architecture of service free mobility, which of the following options is correct?

  A. The business management plane focuses on administrators, authentication servers, and policy servers.
  B. The network equipment plane focuses on user terminals and static resources.
  C. The user plane focuses on authentication points and policy enforcement points.
  D. The service free mobility logical architecture includes a management subsystem, an authentication and authorization subsystem, and a service policy subsystem
  A. The business management plane focuses on administrators, authentication servers, and policy servers.

• Question 83:

  When performing terminal access control, which of the following authentication technologies cannot be used?

  A. 802.1X authentication
  B. SACG authentication
  C. Bypass authentication
  D. Portal authentication
  C. Bypass authentication

• Question 84:

  A policy template is a collection of several policies. To audit the security status of different terminal hosts and the behavior of end users, the administrator needs to customize and apply appropriate policy templates to protect and manage terminal hosts.

  Regarding policy templates, which of the following descriptions are correct? (Choose two)

  A. When configuring a policy template, you can inherit the parent template and modify the parent template policy.
  B. Only policies in the existing template can be used; the administrator cannot customize policies.
  C. You can assign a policy template to a specific network segment.
  D. If different policy templates are applied to departments and accounts, the template with the higher priority takes effect. The priority relationship is: account > department.
  C. You can assign a policy template to a specific network segment.
  D. If different policy templates are applied to departments and accounts, the template with the higher priority takes effect. The priority relationship is: account > department.

• Question 85:

  Regarding the application scenarios of Agile Controller-Campus centralized and distributed deployments, which of the following options are correct? (Choose two)

  A. If most end users work in one area and only a few users are in branch offices, centralized deployment is recommended.
  B. If most end users are concentrated in several regional offices and only a small number are in branches, distributed deployment is recommended.
  C. If end users are scattered across different geographical locations, a distributed deployment solution is recommended.
  D. If end users are scattered across different regions, a centralized deployment solution is recommended.
  A. If most end users work in one area and only a few users are in branch offices, centralized deployment is recommended.
  C. If end users are scattered across different geographical locations, a distributed deployment solution is recommended.

• Question 86:

  When using hardware SACG for access control, viewing the session table results on the device, which of the following statements are correct? (Choose two)

  A. 192.168.1.0 is definitely the Agile Controller-Campus Management Center (MC) IP address.
  B. If 192.168.200.11 is a post-authentication domain server, then if the terminal with IP address 192.168.0.1 has not been authenticated, it may still be able to access the server.
  C. 192.168.100.1 is definitely the Agile Controller-Campus Controller (SC) IP address.
  D. If within 6 minutes the session 192.168.0.119:5154 192.168.200.11:15080 is not refreshed, and the terminal with IP 192.168.0.119 wants to communicate with 192.168.200.11, the session must be re-established.
  A. 192.168.1.0 is definitely the Agile Controller-Campus Management Center (MC) IP address.
  B. If 192.168.200.11 is a post-authentication domain server, then if the terminal with IP address 192.168.0.1 has not been authenticated, it may still be able to access the server.
  D. If within 6 minutes the session 192.168.0.119:5154 192.168.200.11:15080 is not refreshed, and the terminal with IP 192.168.0.119 wants to communicate with 192.168.200.11, the session must be re-established.

• Question 87:

  In some scenarios, an anonymous account can be used for authentication. Which of the following descriptions about anonymous accounts are correct? (Choose two)

  A. The use of anonymous accounts for authentication is based on mutual trust, and the authentication server does not require the user to provide identity information to offer services.
  B. In Agile Controller-Campus, the "~anonymous" account needs to be manually created.
  C. By default, access control and policy operations for anonymous accounts cannot be performed, such as invoking patch templates and software distribution.
  D. Administrators cannot delete the "~anonymous" account.
  A. The use of anonymous accounts for authentication is based on mutual trust, and the authentication server does not require the user to provide identity information to offer services.
  D. Administrators cannot delete the "~anonymous" account.

• Question 88:

  When configuring the antivirus software policy, if you set "The required antivirus software is not installed or running" violation level to General, and check the option "Immediately prohibit access to the network for serious violations," when the user uses AnyOffice for authentication, the authentication passes - but if the antivirus software is not running during the security check, can the user access the network?

  A. Can access the network and also access network resources.
  B. Cannot access the network.
  C. Can connect to the network but must repair the issue before accessing network resources.
  D. Can access the network but must re-authenticate to access network resources.
  C. Can connect to the network but must repair the issue before accessing network resources.

• Question 89:

  Which of the following options belong to third-party server accounts? (Choose two)

  A. AD account
  B. Mobile certificate account
  C. Anonymous account
  D. Guest account
  A. AD account
  B. Mobile certificate account

• Question 90:

  When managing guest accounts, you need to create a guest account policy and set the account creation method. Which of the following descriptions about the account creation method is wrong?

  A. When adding accounts individually, you can choose to create them one by one.
  B. If there are many users, you can choose to create accounts in batches.
  C. If there are many users, you can choose database synchronization.
  D. To facilitate management and improve user experience, self-registration can be used.
  C. If there are many users, you can choose database synchronization.