[Sep 20, 2022] New 2022 Huawei H12-722 Exam Dumps with PDF from PracticeMaterial (Updated 180 Questions) [Q24-Q38]

20Sep 2022 by admin No Comments

Rate this post

New 2022 H12-722 exam questions Welcome to download the newest PracticeMaterial H12-722 PDF dumps (180 Q&As)

P.S. Free 2022 HCNP-Security H12-722 dumps are available on Google Drive shared by PracticeMaterial

QUESTION 24
The whitelist rule of the firewall antivirus module is configured as *example*. Which of the following matches is used in this configuration?

Prefix matching

Suffix matching

Keyword matching

exact match

QUESTION 25
Regarding HTTP behavior, which of the following statements is wrong?

HTTP POST is generally used to send information to the server through a web page, such as forum posting x form submission, username I password login.

When the file upload operation is allowed, the alarm threshold and blocking threshold can be configured to control the size of the uploaded file.

When the size of the uploaded or downloaded file and the size of the content of the POST operation reach the alarm threshold, the system will generate log information to prompt the device management And block behavior.

When the uploaded or downloaded file size, POST operation content size reaches the blocking threshold, the system will only block the uploaded or downloaded file, POST operate.

QUESTION 26
Which of the following is correct about the AntiDDoS system configuration?

Configure drainage and injection on the detection device.

Configure port mirroring on the cleaning device.

Add protection objects on the management center.

Configure drainage and injection on the management center.

QUESTION 27
IPS is an intelligent intrusion detection and defense product. It can not only detect the occurrence of intrusions, but also can respond in real time through certain response methods.
Stop the occurrence and development of intrusions, and protect the information system from substantial attacks in real time. According to the description of PS, the following items are wrong?

IPS is an intrusion detection system that can block real-time intrusions when found

IPS unifies IDS and firewall

IPS must use bypass deployment in the network

Common IPS deployment modes are in-line deployment,

QUESTION 28
About the anti-virus gateways based on flow-scanning, which of the following statement is wrong?

Depends on state detection technology and protocol analysis technology

Performance is higher than proxy-based

The cost is smaller than proxy-based

The detection rate is higher than proxy-scanning-based

QUESTION 29
Which of the following are the network layer attacks of the TCP/IP stack? (Multiple Choices)

Address scan

Buffer overflow

Port scanning

IP spoofing

QUESTION 30
Which of the following is the correct about computer virus?

Patching the system can completely solve the problem of virus intrusion

The computer virus is latent. It may be lurking for a long time. It will only begin to perform sabotage if certain conditions are met.

The computer virus is contagious. It can spread through floppy disks and optical disks but it does not spread through the network.

All computer viruses must be parasitic in files and cannot exist independently

QUESTION 31
When the two-way SSL function is used to decrypt the HTTPS data packet, the value of the reverse proxy series represents the number of times which the data packet can be decrypted.

True

False

QUESTION 32
In the Huawei USG6000 product, after the security profile is created or modified, the configuration does not take effect immediately. You need to click “Submit” in the upper right corner of the page to activate it.

True

False

QUESTION 33
Which of the following descriptions are correct based on proxy-based anti-virus gateways?

The detection rate is higher than the flow scan mode

System overhead will be small

All files are cached through the gateway own protocol stack

More advanced operations such as decompression and shelling can be performed

QUESTION 34
Which two of the following options use similar attack methods and generate a large number of useless reply packets, occupying network bandwidth and consuming device resources?

Fraggle and Smurf

Land and Smurf

Fraggle andLand

Teardrop and Land

QUESTION 35
Cloud sandbox refers to deploying the sandbox in the cloud and providing remote detection services for tenants. The process includes:
1. Report suspicious files
2. Retrospective attack
3. Firewall linkage defense
4. Prosecution in the cloud sandbox
For the ordering of the process, which of the following options is correct?

1-3-4-2

1-4-2-3

1-4-3-2

3-1-4-2

QUESTION 36
Intrusion detection is a network security technology used to detect any damage or attempt to damage the confidentiality, integrity or availability of the system. Which of the following What is the content of the intrusion detection knowledge base?

Complete virus sample

Complete Trojan Horse

Specific behavior patterns

Security Policy

QUESTION 37
The cloud sandbox refers to deploying the sandbox to the cloud and providing tenants with remote detection services. The process includes:
1. Report suspicious files
2. Backtracking attacks
3. Firewall defense linkage
4. Cloud sandbox detection
Which of the following option is correct for the sorting of this process?

1-3-4-2

1-4-2-3

1-4-3-2

3-1-4-2

QUESTION 38
Configure the following command on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-default-route acl 3000
Which of the following options are correct? (Multiple choice)

For the loose type check, if the source address of the packet exists in the FIB table of the firewall, the packet passes the check.

If the default route is configured but the parameter allow-default-route is not configured. As long as the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected.

If the default route is configured and the allow-default-route parameter is also matched, if the source address of the packet does not exist in the FIB table of the firewall, but for the loose type check, the packet will pass through URPF check, and perform normal forwarding.

If the source address of the packet does not exist in the FIB table of the firewall and the default route is configured and the allow-default-route parameter is also matched, the packet cannot pass the URPF check even if it is a loose type check.

Loading …

H12-722 exam questions from PracticeMaterial dumps: https://www.practicematerial.com/H12-722-exam-materials.html (180 Q&As)

Leave a Reply Cancel reply