HCIP-Security (Fast track) V1.0 (H12-724) Free Practice Test

Question 1

Which of the following options is about Portal The description of the certification process is correct?

A. Switch received Portal Online message, will give Radius Server send Radius Certification request

B. Portal The authentication message will not carry the result of the security check

C. Portal The certification process is only used in Web Certification

D. Server for a terminal Portal Certification will only give one Portal Device sends authentication message

Correct Answer: A

Question 2

The following figure shows the configuration of the URL filtering configuration file. Regarding the configuration, which of the following statements is correct?

A. Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.

B. The default action means that all websites are allowed to visit. So the configuration is wrong here.

C. The user visits the website www.exzample.com, and when the black and white list is not hit, the next step is to query the predefined URL category entry.

D. The firewall will first check the blacklist entries and then the whitelist entries.

Correct Answer: A

Question 3

After enabling the IP policy, some services are found to be unavailable. Which of the following may be caused by? (multiple choice)

A. Only packets in one direction pass through the firewall

B. IPS underreporting

C. The same message passes through the firewall multiple times

D. Excessive traffic causes the Bypass function to be enabled

Correct Answer: A,C

Question 4

Huawei WAF products are mainly composed of front-end execution, back-end central systems and databases.
Among them, the database mainly stores the front-end detection rules and black Whitelist and other configuration files.

A. False

B. True

Correct Answer: B

Question 5

Regarding the sequence of the mail transmission process, which of the following is correct?
1. The sender PC sends the mail to the designated SMTP Server.
2. The sender SMTP Server encapsulates the mail information in an SMTP message and sends it to the receiver SMTP Server according to the destination address of the mail
3. The sender SMTP Server encapsulates the mail information in an SMTP message according to the destination address of the mail and sends it to the receiver POP3/MAP Senver
4. The recipient sends an email.

A. 1->3->2

B. 1->2->3

C. 1->2->4,

D. 1->4->3

Correct Answer: C

Question 6

Portal page push rules have priority, and the rules with higher priority are matched with the user's authentication information first. If none of the configured rules match, The default rules are used.

A. False

B. True

Correct Answer: B

Question 7

Regarding the strategy for checking the screensaver settings, which of the following descriptions are correct?
(Multiple choice)

A. You can check whether the screen saver password is enabled

B. Screen saver settings cannot be automatically repaired

C. You can check whether the screen saver is enabled on the terminal

D. Only supports Windows operating system

Correct Answer: A,C

Question 8

Regarding patch management and Windows patch checking strategies, which of the following descriptions is wrong?

A. Patch management and Windows The patch check strategy can check whether the terminal host has installed the specified Windows Make system patches.

B. Windows Patch check strategy focuses on checking whether the terminal host is installed Windows Operating system patches.

C. When the terminal host does not install the specified Windows When making a system patch, according to Windows The patch check policy prohibits terminal hosts from accessing the controlled network.

D. Patch management focuses on checking whether the terminal host has installed the specified patch,Perform access control on the terminal host.

Correct Answer: D

Question 9

Install Agile Controller-Campus Which of the following steps do not need to be completed before?

A. Install the operating system

B. Install the database

C. Install antivirus software

D. Import License

Correct Answer: D

Question 10

Which of the following options are right 802. 1X The description of the access process is correct? (Multiple choice).

A. Through the entire authentication process, the terminal passes EAP The message exchanges information with the server.

B. use MD5 The algorithm checks the information.

C. 802.1X Authentication does not require security policy checks.

D. Terminal and 802.1X Switch EAP Message interaction,802.1X Switch and server use Radius Message exchange information

Correct Answer: B,D

Question 11

MAC Bypass authentication means that after the terminal is connected to the network, the access control device automatically obtains the terminal MAC Address, which is sent to RADIUS The server performs euverification.

A. False

B. True

Correct Answer: A

Question 12

In order to protect the security of data transmission, more and more websites or companies choose to use SSL to encrypt transmissions in the stream. About using Huawei NIP6000 The product performs threat detection on (SSL stream boy, which of the following statements is correct?

A. NIP can directly crack and detect SSL encryption.

B. The traffic after threat detection is sent directly to the server without encryption

C. After the process of "decryption", "threat detection", and "encryption"

D. NIP0OO does not support SSL Threat Detection.

Correct Answer: C

Question 13

When a virus is detected in an email, which of the following is not the corresponding action for detection?

A. Delete attachments

B. Warning

C. Block

D. Declare

Correct Answer: C

Question 14

Security zone division means to better protect the internal network security,Based on the business type and security requirements of the intranet, divide the intranet into several granularities.
Logical area. Which of the following options does not belong Agile Controller-Campus Security domain?

A. User domain

B. Attack domain

C. Business domain:

D. Network domain

Correct Answer: B

Welcome to TestSimulate

Huawei HCIP-Security (Fast track) V1.0 (H12-724) Free Practice Test