H12-731_V2.0試験無料問題集（280題）「Huawei HCIE-Security (Written) V2.0 認定」

出題：1

Which of the following options is a pseudonymized method for data?

A. encrypt

B. Tokenization

C. hash

正解：A,B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

In the capacity building of the security team, it is generally divided into management positions and technical posts, which of the following are not the key responsibilities of technical positions? (single selection).

A. Responsible for organizing the emergency handling of information security emergencies.

B. Responsible for organizing and carrying out information system security graded protection work

C. Responsible for formulating enterprise-level information security technology planning and technical architecture.

D. Responsible for security vulnerability detection and protection.

正解：C 解答を投票する

出題：3

IPS (Intrusion Prevention System) is an application-layer-based security appliance, so which of the following options is it used to match attack identification?

A. Feature library

B. Destination IP address

C. Source IP address

D. Port number

正解：A 解答を投票する

出題：4

Figure 1 shows the raw data table Figure 2 shows the data processed by K*anonymization technology, what is the K value of the processing? (Selection).

A. 2

B. 1

C. 4

D. 3

正解：C 解答を投票する

出題：5

If the campus network egress is connected to multiple ISP chains, which of the following functions of the firewall can meet the DNS requests of school intranet users to be sent to the DNS servers on the Internet through different ISP links?

A. Flower energy DNS

B. DNS filtering

C. ISP chooses the way

D. DNS transparent proxy

正解：A 解答を投票する

出題：6

Digital certificates can ensure the credibility of the public key of the communicating partner in the process of data transmission.

A. FALSE

B. TRUE

正解：B 解答を投票する

出題：7

Requirements for physical facilities in the computer room in Class Protection 2.0

A. Personnel authorization

B. Electromagnetic protection

C. Intrusion prevention

正解：B 解答を投票する

出題：8

Nmap is a network security tool for network discovery and security auditing, so which of the following options does it fall into ?

A. Virus scan

B. App scanning

C. Port scanning

D. Vulnerability scanning

正解：C 解答を投票する

出題：9

HiSec Insight's detection principle for XSS attacks is based on IPs signature libraries, such as detecting JS code features (script, alert), etC. o

A. FALSE

B. TRUE

正解：A 解答を投票する

出題：10

The following description of configuring elog management, which one is wrong? (single selection).

A. If FW simultaneously imports session aging logs, session new logs, and periodic session logs This will cause an increase in the number of logs received by eLog Consume eLog storage space.

B. At present, elog supports manual addition and automatic discovery of two ways to manage FW The manual addition method requires SNMP parameters to be configured on the FW.

C. By default eLog does not parse session creation logs, if you need to parse and display session creation logs on eLog, you need to configure them on the collector.

D. The time zone and time on FW must be consistent with the time zone and time on the eLog cold collector, otherwise the log viewing results will be affected.

正解：B 解答を投票する

出題：11

Which of the following options is not included in virtualization security? (single selection).

A. Virtual machine security

B. Physical machine security

C. Virtualized inter-network security

D. Virtualization platform security

正解：A 解答を投票する

出題：12

Anonymization and pseudonymization of data While reducing the risk of data privacy leakage, it will also reduce the availability of data

A. FALSE

B. TRUE

正解：B 解答を投票する

出題：13

Which of the following features can be used for operation auditing of HUAWEI CLOUD bastion hosts?

A. Action playback

B. Double License

C. Work order management

D. report analysis

正解：A,C,D 解答を投票する

出題：14

As shown in the following figure The headquarters network is deployed with dual machines, and the L2TPoverlPSec is configured separately to access the headquarters network. Below is a description of the configuration of interest in IPSec Which one is correct? (single selection).

A. acl number 3000
rule 10 permit udp destingation-port eq 1701

B. ad number 3000
rule 10 permit tcp destingation-poa eq 1701

C. As ad number 3000
rule 10 permit udp souce-port eq 1701

D. acl number 3000
rule 10 permit tcp souce-port eq 1701

正解：A 解答を投票する

出題：15

According to the type and purpose of the bait, it can be divided into log bait, certificate bait, account bait, email bait, project code bait, etC.

A. FALSE

B. TRUE

正解：B 解答を投票する

H12-731_V2.0試験無料問題集「Huawei HCIE-Security (Written) V2.0 認定」