H12-722-ENU試験無料問題集（180題）「Huawei HCIP-Security-CSSN(Huawei Certified ICT Professional -Constructing Service Security Network) 認定」

出題：1

To protect the security of data transmission, more and more websites or companies choose to encrypt traffic through SSL.
Which of the following statements is true about the threat detection of SSL traffic using Huawei NIP6000?

A. Processes such as "decryption," "threat detection," and "encryption."

B. NIP000 does not support SSL traffic threat detection.

C. Threat-detected traffic is sent directly to the server without encryption.

D. NIP can directly crack and detect SSL encryption.

正解：A 解答を投票する

出題：2

Which of the following options does not belong to packet message attack?

A. ICMP redirect packet attack

B. Large ICMP packet attacks

C. Tracert packet attacks

D. IP fragmentation packet attacks

正解：D 解答を投票する

出題：3

In the security protection system of cloud era, reforms must be carried out in advance, in the event, and afterwards, and continuous improvement and development of closed loops must be formed.
Which of the following key points should be fulfilled in "in the matter"? (Multiple choices)

A. Vulnerability information

B. Counterattacks Hackers

C. Defense in depth

D. Offensive and defensive situation

正解：B,C 解答を投票する

出題：4

Which of the following options are correct for the description of URPF technology? (Multiple Choices)

A. Does not check whether the interfaces match in the strict mode. As long as there is a route to the source address, the packets can pass.

B. Use the loose mode of URPF in an environment where route symmetry is not guaranteed.

C. The main function is to prevent network attacks based on source address spoofing.

D. In loose mode, not only the corresponding entries in the forwarding table are required, but also the interfaces must match to pass the URPF check.

正解：B,C 解答を投票する

出題：5

Which of the following descriptions about scanning and snooping attacks is wrong?

A. The source address of the scanning attack is real, so you can use the method of directly adding a blacklist for defense.

B. Scanning attacks include address scanning and port scanning.

C. It is usually the network detection behavior before the attacker launches a real attack.

D. When a worm breaks out, it is generally accompanied by an address scan attack, so scanning attacks are aggressive.

正解：D 解答を投票する

出題：6

After the cleaning device establishes a BGP neighbor relationship with the peer router, uses BGP traffic diversion and policy routing reinjection, what configuration needs to be performed on the cleaning device? (Multiple Choice)

A. [sysname] policy-based-route [sysname-policy-pbr] rule name huizhu [sysname-policy-pbr-rule-huizhu] ingress-interface GigabitEthernet 2/0/1 [sysname-policy-pbr-rule-huizhu] action pbr egress-interface GigabitEthernet 2/0/2 next-hop X.X.X.X [sysname-policy-pbr-rule-huizhu] quit

B. [sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname] bgp 100 [sysname-bgp] peer X.X.X.X as-number 100 [sysname-bgp] import-route unr [sysname-bgp] ipv4-family unicast [sysname-bgp-af-ipv4] peer X.X.X.X route-policy 1 export [sysname-bgp-af-ipv4] peer X.X.X.X advertise-community [sysname-bgp-af-ipv4] quit

C. [sysname] interface GigabitEthernet 2/0/1 [sysname-GigabitEthernet2/0/1] anti-ddos flow-statistic enable

D. <sysname> system-view [sysname] firewall ddos bgp-next-hop X.X.X.X

正解：A,B 解答を投票する

出題：7

What content can be filtered by the content filtering technology of Huawei USG6000? (Multiple Choices)

A. File types

B. Keywords contained in the uploaded file contents

C. Keywords contained in the download file

D. Direction of file upload

正解：B,C 解答を投票する

出題：8

Which of the following descriptions are correct based on proxy-based anti-virus gateways?

A. System overhead will be small

B. All files are cached through the gateway own protocol stack

C. More advanced operations such as decompression and shelling can be performed

D. The detection rate is higher than the flow scan mode

正解：B,C,D 解答を投票する

出題：9

Divert traffic using BGP protocol. The configuration command is as follows.
[sysname] route-policy 1 permit node 1
[sysname-route-policy] apply community no-advertise
[sysname-route-policy] quit
[sysname] bgp 100
[sysname-bgp] peer 7.7.1.2 as-number 100
[sysname-bgp] import-route unr
[sysname-bgp] ipv4-family unicast
[sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export
[sysname-bgp-af-ipv4] peer 7.7.1.2 advertise-community
[sysname-bgp-af-ipv4] quit
[sysname-bgp] quit
Which of the following options are correct for the BGP drainage configuration description? (Multiple choice)

A. The management center does not need to configure protection objects. When an attack is discovered, the traffic diversion task is automatically delivered.

B. Use BGP to advertise UNR routes for dynamic traffic diversion.

C. After receiving the UNR route, the peer neighbor will not send it to any BGP neighbors.

D. You also need to configure the firewall ddos bgp-next-hop fib-filter command to implement the remarks.

正解：B,C 解答を投票する

出題：10

Which of the following is not an abnormal condition of the file type recognition result?

A. File extension does not match

B. The file type is not recognized

C. Files are compressed

D. File damage

正解：C 解答を投票する

H12-722-ENU試験無料問題集「Huawei HCIP-Security-CSSN(Huawei Certified ICT Professional -Constructing Service Security Network) 認定」