Latest Nov 06, 2022 Real H12-724 Exam Dumps Questions Valid H12-724 Dumps PDF [Q171-Q193]

ExamBoosts November 6, 2022 H12-724 > Huawei 0

Rate this post

Latest Nov 06, 2022 Real H12-724 Exam Dumps Questions Valid H12-724 Dumps PDF

Huawei H12-724 Exam Dumps – PDF Questions and Testing Engine

QUESTION 171
Huawei NIP6000 products provide carrier-class high-reliability mechanisms from multiple levels to ensure the stable operation of equipment.
Which of the following options belong to the network reliability? (multiple choice)

Dual machine hot backup

Power supply. 1+1 redundant backup

Hardware Bypass

Link-group

QUESTION 172
In centralized networking, database,SM server,SC server AE Servers are centrally installed in the corporate headquarters. This networking method is suitable for companies with a wide geographical distribution of users and a large number of users.

True

False

QUESTION 173
Regarding the strong statement of DNS Request Flood attack, which of the following options is correct?

The DNS Request Flood attack on the cache server can be redirected to verify the legitimacy of the source

For the DNS Reguest Flood attack of the authorization server, the client can be triggered to send DINS requests in TCP packets: to verify The legitimacy of the source IP.

In the process of source authentication, fire prevention will trigger the client to send DINS request via TCP report to verify the legitimacy of the source IP, but in a certain process It will consume the TCP connection resources of the OINS cache server.

Redirection should not be implemented on the source IP address of the attacked domain name, and the destination P address of the attacked domain name should be implemented in the wild.

QUESTION 174
Agile Controller-Campus All components are supported Windows System and Linux system.

True

False

QUESTION 175
In the Agile Controller-Campus solution, which device is usually used as the hardware SACG?

router

switch

Firewall

IPS

QUESTION 176
Buffer overflows, Trojan horses, and backdoor attacks are all attacks at the application layer.

True

False

QUESTION 177
The multi-level defense system is mainly reflected in the network level and the system level. Which of the following options are used for security defense at the network level? (Multiple choice)

software SACG

hardware SACG

802.1X switch

Authentication server

QUESTION 178
Regarding the sequence of the mail transmission process, which of the following is correct?
1. The sender PC sends the mail to the designated SMTP Server.
2. The sender SMTP Server encapsulates the mail information in an SMTP message and sends it to the receiver SMTP Server according to the destination address of the mail
3. The sender SMTP Server encapsulates the mail information in an SMTP message according to the destination address of the mail and sends it to the receiver POP3/MAP Senver
4. The recipient sends an email.

1->2->3

1->2->4,

1->3->2

1->4->3

QUESTION 179
Using Agile Controller-Campus for visitor management, users can obtain the account they applied for in a variety of ways, but which of the following are not included A way?

Short message

E-mail

Web Print

Voicemail

QUESTION 180
Regarding Huawei’s anti-virus technology, which of the following statements is wrong?

The virus detection system cannot directly detect compressed files

The anti-virus engine can detect the file type through the file extension

Gateway antivirus default file maximum decompression layer is 3 layers

The implementation of gateway antivirus is based on proxy scanning and stream scanning

QUESTION 181
Regarding the description of the ACL used in the linkage between SACG equipment and the TSM system, which of the following statements is correct!?

default ACL The rule group number can be arbitrarily specified.

default ACL The rule group number can only be 3999.

due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you need to ensure these ACL Not referenced by other functions.

The original group number is 3099-3999 of ACL Even if it is occupied, it can be successfully activated TSM Linkage.

QUESTION 182
Agile Controller-Campus The product architecture includes three levels. Which of the following options does not belong to the product architecture level?

Server layer

Network device layer

Access control layer

User access layer

QUESTION 183
Regarding the definition of WIPS/WIDS, which of the following statements is correct?

WIDS Is a wireless intrusion prevention system

WIPS Wireless intrusion detection system

WIDS Is a wireless intrusion countermeasure system

WIPS Is a wireless intrusion prevention system

QUESTION 184
When the -aa command is used on the access control device to test the connectivity with the Radius server, the running result shows success, but the user cannot Normal access, the possible reason does not include which of the following options?

The access layer switch does not start EAP Transparent transmission function.

wireless 02K In the scenario, the access control device is not equipped with a security board

AD The service controller is not added in the authentication scenario AD area.

The user account or password is incorrectly configured.

QUESTION 185
Regarding MAC authentication and MAC bypass authentication, which of the following descriptions are correct? (multiple choice)

The biggest difference between the two is MAC Bypass authentication belongs to 802 1X Certification, while MAC Certification does not belong to 802 1X Certification.

If a network can connect to dumb terminals(printer,IP telephone), The text may be connected to a portable computer, please use MAC Bypass authentication:First try 802 1X Authentication, try again if authentication fails MAC Certification

If a network will only connect to dumb terminals(printer,IP telephone),please use MAC Certification in order to shorten the certification time.

MAC Authentication MAC One more bypass authentication 802 In the instrument certification process, the open time is longer than MAC The bypass authentication time is long.

QUESTION 186
Which of the following options is not included in the mobile terminal life cycle?

Obtain

deploy

run

Uninstall

QUESTION 187
When managing guest accounts, you need to create a guest account policy and set the account creation method. For the account creation method, which of the following descriptions is wrong?

When adding accounts individually, you can choose to create them individually.

If there are a lot of users, you can choose to create in batches.

If there are many users, you can choose database synchronization

In order to facilitate management and improve user experience, self-registration can be used.

QUESTION 188
Regarding HTTP behavior, which of the following statements is wrong?

HTTP POST is generally used to send information to the server through a web page, such as forum posting x form submission, username I password login.

When the file upload operation is allowed, the alarm threshold and blocking threshold can be configured to control the size of the uploaded file.

When the size of the uploaded or downloaded file and the size of the content of the POST operation reach the alarm threshold, the system will generate log information to prompt the device management And block behavior.

When the uploaded or downloaded file size, POST operation content size reaches the blocking threshold, the system will only block the uploaded or downloaded file, POST operate.

QUESTION 189
Regarding patch management and Windows patch checking strategies, which of the following descriptions is wrong?

Patch management and Windows The patch check strategy can check whether the terminal host has installed the specified Windows Make system patches.

Windows Patch check strategy focuses on checking whether the terminal host is installed Windows Operating system patches.

When the terminal host does not install the specified Windows When making a system patch, according to Windows The patch check policy prohibits terminal hosts from accessing the controlled network.

Patch management focuses on checking whether the terminal host has installed the specified patch,Perform access control on the terminal host.

QUESTION 190
In some scenarios, an anonymous account can be used for authentication. What are the correct descriptions of the following options for the anonymous account?? (Multiple choice)

The use of anonymous accounts for authentication is based on the premise of trusting the other party, and the authentication agency does not need the other party to provide identity information to provide services to the other party.

Agile Controller-Campus Need to be manually created”~anonymous”account number.

By default, the access control and policy of anonymous accounts cannot be performed. 1 Operations such as invoking patch templates and software distribution.

Administrators cannot delete anonymous accounts”~anonymous*.

QUESTION 191
For hardware SACC Access control, if the terminal does not pass the authentication, it can access the resources of the post-authentication domain. This phenomenon may be caused by the following reasons?
(Multiple choice)

Authentication data flow has passed SACG filter.

TSM No hardware is added to the system SACG equipment.

SACG Enable the default inter-domain packet filtering.

Privileges are misconfigured IP

QUESTION 192
In the process of establishing CAPWAP channel between AP and AC, AP and AC negotiate to establish CAPWAP tunnel. In this process, CAPWAP tunnel is established.
Use DTLS to encrypt and transmit UDP packets. What are the encryption methods supported by DTLS?
(multiple choice)

Certificate encryption

AES encryption

PSK encryption

Plaintext encryption

QUESTION 193
The following configuration is in A with B The authentication commands are configured on the two admission control devices. For the analysis of the following configuration commands, which ones are correct? (Multiple choice)

A What is configured on the device is MAC Bypass authentication

B What is configured on the device is MAC Bypass authentication o

A On the device 2GE1/01 Can access PC Can also access dumb terminal equipment

B On the device GE1/0/1 Can access PC It can also access dumb terminal equipment. Upper

Loading …