359 Exam Questions for H12-724 Updated Versions With Test Engine [Q92-Q112]

Rate this post

359 Exam Questions for H12-724 Updated Versions With Test Engine

Pass H12-724 Exam with Updated H12-724 Exam Dumps PDF 2023

NO.92 When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.

True

False

NO.93 In centralized networking, database,SM server,SC server AE Servers are centrally installed in the corporate headquarters. This networking method is suitable for companies with a wide geographical distribution of users and a large number of users.

True

False

NO.94 If a company wants to detect image files, Shellcode code files and PDF files, which of the following types of sandboxes can be used? (More
155955cc-666171a2-20fac832-0c042c0420
select)

PDF heuristic sandbox
ja$

PE heuristic sandbox

Web heuristic sandbox

Heavyweight sandbox (virtual execution)

NO.95 In the construction of information security, the intrusion detection system plays the role of a monitor. It monitors the flow of key nodes in the information system.
In-depth analysis to discover security incidents that are occurring. Which of the following are its characteristics?. c0O

IDS can be linked with firewalls and switches to become a powerful “assistant” of firewalls, which can better and more accurately control access between domains.

It is impossible to correctly analyze the malicious code doped in the allowed application data stream.

Unable to detect malicious operations or misoperations from internal killings.

Cannot do in-depth inspection

NO.96 A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)

The aggregation layer device is not configured RADIUS Certification template.

Agile Controller-Campus The switch is not added on NAS equipment.

Connect to the terminal on the device to open 802.1X Function.

The Layer 2 link is used between the access device and the aggregation device, and it is not turned on
802 Instrument transparent transmission function

NO.97 For the convenience of visitors, different authentication and master pages can be distributed for different visitors. When configuring the push page strategy, different matching conditions need to be defined, so which of the following options can be used as the limited matching conditions? (Multiple choice)

Terminal P address

Location information of the access device

Priority of guest accounts

Connected to the network SSID’

NO.98 Regarding the file filtering technology in the USG6000 product, which of the following options is wrong?

It can identify the application that carries the file, the file transfer direction, the file type and the file extension.

Even if the file type is modified, it can also identify the true type of the file

It can identify the type of files transmitted by itself, and can block, alert and announce specific types of files.

It supports filtering the contents of compressed files after decompression. “

NO.99 The following figure shows the configuration of the URL filtering configuration file. Regarding the configuration, which of the following statements is correct?

The firewall will first check the blacklist entries and then the whitelist entries.

Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.

The user visits the website www.exzample.com, and when the black and white list is not hit, the next step is to query the predefined URL category entry.

The default action means that all websites are allowed to visit. So the configuration is wrong here.

NO.100 When configuring the antivirus software policy, if you set”The required antivirus software violation level is not installed or running”for”generally”And check”out Now serious violation of the rules prohibits access to the network”Options. When the user uses Any office Certify, The certification is passed, but the result of the security check Can the user access the network when the virus software is not turned on?

Can access the network? Can also access network resources.

Cannot access the network.

Can pick up? The network needs to be repaired before you can access network resources.

You can access the network, but you need to re-authenticate to access network resources.

NO.101 Which of the following iterations is correct for the description of the management center?

The management server of the management center is responsible for the cleaning of abnormal flow, as well as the collection and analysis of business data, and storage, and is responsible for the summary The stream is reported to the management server for report presentation.

The data coking device is responsible for the cleaning of abnormal flow, the centralized management and configuration of equipment, and the presentation of business reports.

The data collector and management server support distributed deployment and centralized deployment.
Centralized deployment has good scalability.

The management center is divided into two parts: management server and teaching data collector.

NO.102 Which of the following options is wrong for the description of the cleaning center?

The cleaning center completes the functions of drainage, cleaning, and re-injection of the flow after cleaning in the abnormal flow.

There are two types of drainage methods: static drainage and dynamic drainage.

Re-injection methods include: policy route re-injection, static route re-injection, VVPN back-injection and layer 2 same.

The cleaning equipment supports rich and flexible attack prevention technologies, but it is ineffective against cc attacks and ICMP Flood attacks.

NO.103 Which of the following options cannot be triggered MAC Certification?

ARP Message

DHCP Message P

DHCPv6 Message

ICMP Message

NO.104 In the Agile Controller-Campus admission control technology framework, regarding the description of RADIUS, which of the following options is correct?

PADIUS Used on the client and 802.1X Information such as user names and passwords are passed between switches.

PADIUS Used in 802.1X Switch and AAA Information such as user name and password are passed between servers.

PADIUS Used for Portal Server pushes to users Web page.

PADIUS Used for server to SACG Security policy issued by the device

NO.105 Regarding the description of the logic architecture of the business accompanying, which of the following options is correct?

The business management plane focuses on administrators, authentication servers, and policy servers.

The network equipment plane focuses on user terminals and static resources.

The user plane focuses on authentication points and policy enforcement points.

The business free mobility logic architecture includes a management subsystem, an authentication and authorization subsystem, and a business strategy subsystem.

NO.106 Deployed by an enterprise network managerAgile Controller-Campus withSACG Later;Identity authentication is successful but cannot access the post-authentication domain, This phenomenon may be caused by any reason? (Multiple choice)

A serious violation will prohibit access to the post-authentication domain.

The access control list of the post-authentication domain has not been delivered SACG.

ALC The number of rules issued is too many, and a lot of time is required to match, causing interruption of access services.

Agile Controller-Campus Wrong post-authentication domain resources are configured on the server.

NO.107 Regarding worms and viruses, which of the following statements is correct?

Worms exist in a parasitic way
155955cc-666171a2-20fac832-0c042c0413

Viruses mainly rely on system vulnerabilities to spread

The target of the worm infection is other computer systems on the network.

The virus exists independently in the computer system.

NO.108 Which of the following options are right 802. 1X The description of the access process is correct? (Multiple choice).

Through the entire authentication process, the terminal passes EAP The message exchanges information with the server.

Terminal and 802.1X Switch EAP Message interaction,802.1X Switch and server use Radius Message exchange information

802.1X Authentication does not require security policy checks.

use MD5 The algorithm checks the information.

NO.109 Secure email is Any ffice Solution for corporate office 0A The killer application provided, it provides powerful email business capabilities and rich email strategies. For secure mail, which of the following descriptions are correct? (Multiple choice)

Through the mail client, you can connect No or Exchange Mail system.

Support automatic mail transmission encryption, transmission encryption method supports a full range of IPSec/TLS protocol.

Online survey of attached documents is not supported.

Support MAP4/SMTP/EAS Send and receive emails with standard protocols such as, and support real-time email push.

NO.110 Which of the following descriptions are correct for proxy-based anti-virus gateways? (multiple choice)

The detection rate is higher than the flow scanning method

System overhead will be relatively small

Cache all files through the gateway’s own protocol stack

More advanced operations such as decompression, shelling, etc. can be performed

NO.111 The visitor management process includes page customization, account application, user authentication, audit, and logout. After the user successfully applies for an account, he needs to change.
When the account is distributed to users, what stage does the distribution of the account belong to?

Page customization stage

Account application stage

User authentication phase

Audit and cancellation stage

NO.112 Anti-DDoS defense system includes: management center, detection center and cleaning center.

True
155955cc-666171a2-20fac832-0c042c0421

False