Free H12-723 Exam Dumps PDF Preview

Question 1

Single choice

Which of the following describes the main function of SACG in the Agile Controller-Campus solution?

A
Performs admission control and enforces access policies.
B
Provides remote access for mobile terminals.
C
Stores authentication logs and configuration backups.
D
Acts as a DHCP relay agent for the network.

Reveal answer details Close answer details

Correct answerA

Question 2

Single choice

After configuring an announcement, the Agile Controller-Campus system cannot assign this announcement to which of the following objects?

A
User
B
Account
C
Terminal IP address range
D
Location

Reveal answer details Close answer details

Correct answerD

Question 3

Single choice

Regarding CAPWAP encryption, which of the following statements is wrong?

A
The CAPWAP data tunnel can use DTLS encryption.
B
DTLS supports two authentication methods: certificate authentication (the AC and AP already contain certificates) and PSK password authentication.
C
DTLS encryption ensures that the control messages issued by the AC cannot be eavesdropped on.
D
When using the certificate method for DTLS negotiation, the certificate is only used to generate the key, not to authenticate the AP.

Reveal answer details Close answer details

Correct answerA

Question 4

Multiple choice

Which of the following options belong to third-party server accounts? (Choose two)

A
AD account
B
Mobile certificate account
C
Anonymous account
D
Guest account

Reveal answer details Close answer details

Correct answersA, B

Question 5

Single choice

If you deploy Free Mobility, in its logical architecture, which of the following options should the administrator focus on?

A
Whether the policy is automatically deployed
B
Choosing the appropriate policy control point and user authentication point
C
Whether the policy targets a single user
D
Whether the policy targets a single department

Reveal answer details Close answer details

Correct answerB

Question 6

Single choice

The user access security solution is an end-to-end security architecture. The user access security architecture includes three key components: terminal equipment, network access equipment, and access server.

A
True
B
False

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

Visitors can access the network through their registered account.

Which of the following is not an account approval method?

A
Exemption from approval
B
Administrator approval
C
Receptionist approval
D
Self-approved by visitors

Reveal answer details Close answer details

Correct answerD

Question 8

Multiple choice

The multi-level defense system is mainly reflected at the network level and the system level.

Which of the following options are used for security defense at the network level? (Choose three)

A
Software SACG
B
Hardware SACG
C
802.1X switch
D
Authentication server

Reveal answer details Close answer details

Correct answersA, B, C

Question 9

Single choice

The traditional campus network is based on IP as the core network.
If there are mobile office users, which of the following options is not a problem that mobile office users face when deploying access authentication?

A
The user distribution range is large, and the access control requirements are high.
B
The deployment of the access control policy is complex.
C
Access rights are difficult to control.
D
User experience technology.

Reveal answer details Close answer details

Correct answerA

Question 10

Single choice

In centralized networking, the database, SM server, SC server, and AE server are all centrally installed at the corporate headquarters. This networking method is suitable for companies with a wide geographical distribution of users and a large number of users.

A
True
B
False

Reveal answer details Close answer details

Correct answerB

Question 11

Single choice

An account can belong to multiple roles, meaning a user may hold multiple positions.

A
True
B
False

Reveal answer details Close answer details

Correct answerA

Question 12

Multiple choice

Portal authentication on the Agile Controller-Campus has been correctly configured. The following command is configured on the access control switch:

[S5720] authentication free-rule 1 destination ip 10.1.31.78 mask 255.255.255.255
Which of the following options are correct?
(multiple choice)

A
After the configuration is complete, the switch automatically permits data flow to access the security controller without manual configuration by the administrator.
B
This configuration allows users to access network resources before authentication.
C
After the configuration is complete, the administrator still needs to manually configure the permitted network segment.
D
Only after passing authentication can the terminal access the 10.1.31.78 host.

Reveal answer details Close answer details

Correct answersA, B

Question 13

Single choice

In the terminal security system, which of the following policies are mainly used to manage end-user behavior?

A
Check policy
B
Monitoring policy
C
Binding policy
D
Account policy

Reveal answer details Close answer details

Correct answerB

Question 14

Multiple choice

Which of the following descriptions of the 802.1X access process are correct? (Choose two)

A
Throughout the authentication process, the terminal exchanges information with the server using EAP messages.
B
The terminal exchanges EAP messages with the 802.1X switch, while the 802.1X switch exchanges RADIUS messages with the server.
C
802.1X authentication does not require security policy checks.
D
The MD5 algorithm is used for information verification.

Reveal answer details Close answer details

Correct answersB, D

Question 15

Multiple choice

Regarding the roles in the Portal authentication framework, which of the following descriptions are correct? (Choose two)

A
The AAA server stores information such as usernames and passwords for authenticating access users.
B
The Web server stores information such as usernames and passwords for authenticating access users.
C
The AAA server is used to push the Portal authentication page to the user.
D
The Web server is used to push the Portal authentication page to the user.

Reveal answer details Close answer details

Correct answersA, C

Question 16

Single choice

Visitors refer to users who need temporary access to the network at a specific location.

A
True
B
False

Reveal answer details Close answer details

Correct answerA

Question 17

Single choice

Agile Controller-Campus includes three layers in its product architecture.

Which of the following options does not belong to the product architecture layer?

A
Server layer
B
Network device layer
C
Access control layer
D
User access layer

Reveal answer details Close answer details

Correct answerC

Question 18

Multiple choice

Regarding the WIDS function in WLAN, which of the following statements about determining illegal devices in the network are correct? (Choose two)

A
All Ad-hoc devices are directly judged as illegal devices.
B
APs not managed by this AC are illegal APs.
C
STAs not managed by this AC are illegal STAs.
D
For STAs not managed by this AC, it is also necessary to check whether the associated AP is legal.

Reveal answer details Close answer details

Correct answersA, D

Question 19

Single choice

Regarding asset management, which of the following descriptions is wrong?

A
Asset management can register assets automatically or manually.
B
When automatic asset registration mode is enabled, the process does not require user participation.
C
Automatic registration of assets is suitable for situations where the asset number is automatically maintained by the business manager.
D
Manual asset registration means the administrator manually creates an asset record on the business manager and enters the asset number in AnyOffice to complete registration.

Reveal answer details Close answer details

Correct answerD

Question 20

Single choice

Jailbroken mobile terminals, terminals with non-compliant applications installed, or terminals with non-compliant lock screen passwords that connect to the corporate network for office operations pose security risks to the company.

How does AnyOffice solve this problem in the mobile office system?

A
Directly discard data sent by non-compliant devices.
B
Authenticate non-compliant devices.
C
Detect non-compliant terminals and prohibit unsafe devices from accessing the network.
D
Send alarm notifications to administrators for manual handling.

Reveal answer details Close answer details

Correct answerC

Question 21

Single choice

There are three roles in the XMPP protocol: server, gateway, and client. Corresponding to the Free Mobility solution: Agile Controller-Campus acts as the server, the Huawei USG6000 series firewall acts as the gateway, and the agile switch acts as the client.

A
True
B
False

Reveal answer details Close answer details

Correct answerB

Question 22

Multiple choice

VIP Experience Guarantee - from which two aspects is the VIP user experience mainly ensured? (Choose two)

A
bandwidth
B
Forwarding priority
C
Authority
D
Strategy

Reveal answer details Close answer details

Correct answersA, B

Question 23

Single choice

A network uses Portal authentication, and the user finds that the pushed web page does not have fields for entering a username or password.

Which of the following could be the cause of this failure?

A
There is no corresponding user configured on the Agile Controller-Campus.
B
The switch AAA configuration is incorrect.
C
The switch has not enabled the Portal function.
D
The Portal push page on the server is incorrect.

Reveal answer details Close answer details

Correct answerD

Question 24

Single choice

Which of the following statements about the Portal authentication process is correct?

A
The Portal authentication process is only used in Web authentication.
B
The server performing Portal authentication for a terminal will send authentication messages to only one Portal device.
C
After the switch receives the Portal online message, it will send a Radius authentication request to the Radius server.
D
The Portal authentication message will not carry the result of the security check.

Reveal answer details Close answer details

Correct answerC

Question 25

Multiple choice

In some scenarios, an anonymous account can be used for authentication.

Which of the following descriptions about anonymous accounts are correct? (Choose two)

A
The use of anonymous accounts for authentication is based on mutual trust, and the authentication server does not require the user to provide identity information to offer services.
B
In Agile Controller-Campus, the "~anonymous" account needs to be manually created.
C
By default, access control and policy operations for anonymous accounts cannot be performed, such as invoking patch templates and software distribution.
D
Administrators cannot delete the "~anonymous" account.

Reveal answer details Close answer details

Correct answersA, D

Question 26

Multiple choice

Which of the following security authentication technologies is commonly used in WLAN access control? (Choose three)

A
802.1X authentication
B
Portal authentication
C
MAC authentication
D
SSH authentication

Reveal answer details Close answer details

Correct answersA, B, C

Question 27

Single choice

The following is the 802.1X access control switch configuration:

[S5720] dot1x authentication-method eap

[S5720-GigabitEthernet0/0/1] port link-type access

[S5720-GigabitEthernet0/0/1] port default vlan 11

[S5720-GigabitEthernet0/0/1] authentication dot1x Assuming that GE0/0/1 is connected to User 1 and User 2 through a HUB, which of the following options is correct?

A
After User 1 is authenticated, User 2 can access network resources without authentication.
B
User 1 and User 2 must each be individually authenticated before accessing network resources.
C
GE0/0/1 does not need to enable 802.1X.
D
Neither User 1 nor User 2 can pass authentication or access network resources.

Reveal answer details Close answer details

Correct answerA

Free H12-723 Exam Dumps Preview

Huawei Certified ICT Professional - Constructing Terminal Security System

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14

QUESTION 15

QUESTION 16

QUESTION 17

QUESTION 18

QUESTION 19

QUESTION 20

QUESTION 21

QUESTION 22

QUESTION 23

QUESTION 24

QUESTION 25

QUESTION 26

QUESTION 27

VOL	TYPE	QUESTIONS
1	Single choice	18
2	Multiple choice	9