H12-711_V3.0-ENU Online Training Archives

The candidates have not enough time to prepare the HCIA-Security H12-711_V3.0-ENU exam, while Exam4Training Huawei H12-711_V3.0-ENU HCIA-Security V3.0 Online Training are to develop to solve the problem. So, it can save much time for us. What’s more important, 100% guarantee to pass Huawei H12-711_V3.0-ENU exam at the first attempt. In addition, Exam4Training Huawei H12-711_V3.0-ENU HCIA-Security V3.0 Online Training will be updated at any time. If exam outline and the content change, Exam4Training can provide you with the latest HCIA-Security V3.0 information.

Page 1 of 12

1. Regarding the description of the Windows log event type, which of the following is correct? (Multiple Choice)

Warning event refers to an event that the application, driver or service is successful.

Error events usually refer to the loss of functionality and data. For example, a service cannot be loaded as a system boot, an error event is generated.

When the disk space is insufficient, it will be recorded as a "information event".

Failure audit event refers to a failure of security login attempts, such as failure when a user view accesses a network drive, is recorded as a failure audit event.

2. Which types of the following can the encryption technology be divided into? (Multiple Choice)

Symmetrical encryption

Fractional symmetric encryption

Fingerprint encryption

Data encryption

3. Which of the following is the status information that can be backed up by the HRP (Huawei Redundancy Protocol) protocol? (Multiple Choice)

Conference table

ServerMap entry

Dynamic blacklist

Routing table

4. Which of the following is the core part of the P2DR model?

Policy

Protection

Detection

Response

5. Evidence identification needs to solve the integrity verification of evidence and determine if it meets the standards that can be used. Regarding the standards of evidence identification, which of the following statement is correct?

Relevance standard refers to that if the electronic evidence can have a material impact on the facts of the case to a certain extent, the court should rule that it is relevant.

Objective standard refers to the acquisition, storage, and submission of electronic evidences shall be legal, and the basic rights such as national interests, social welfare and personal privacy do not constitute strict violations.

Legality standard is to ensure that electronic evidence is collected from the initial acquisition, and the content is not changed in the process of submission as litigation evidence.

Fair standard refers to that only the legal subject obtains the evidentiary material by legal means has evidentiary ability.

6. Data Analysis Technology is to find, match keywords or key phrases, and analyze the correlation of time in data streams or information streams that have been obtained.

Which of the following does not belong to evidence analysis technology?

Password decipherment, data decryption technology

File Digital Summary Analysis Technology

Exploring the technology of the connection between different evidence

Spam tracking technology

7. About AH and ESP security protocols, which of the following statements are correct? (Multiple Choice)

AH can provide the functions of encryption and verification

ESP can provide the functions of encryption and verification

AH's protocol number is 51

ESP's protocol number is 51

8. DDoS attack belongs to which attack type?

Snoop scan attack

Malformed packet attack

Special packet attack

Flow type attack

9. About SSL VPN technology, which of the following statement is wrong?

SSL VPN technology is perfect for NAT traversal scenarios

Encryption of SSL VPN technology only takes effect on the application layer

SSL VPN requires dial client

SSL VPN technology expands the network range of enterprises

10. Which options can be operated in the advanced settings of the Windows Firewall? (Multiple Choice)

Restore default

Change Notification Rules

Set connection safety rules

Set inbound and outbound rules

Page 2 of 12

11. When configuring NAT Server on the USG Series Firewall, a Server-Map table is generated. Which item below does not belong to content in this performance?

Destination IP

Destination port number

Agreement number

Source IP

12. Which attack below does not belong to a special packet attack?

ICMP redirection packet attack

ICMP unreachable packet attack

IP address scan attack

Super ICMP Packet Attack

13. Which attack below is not a malformated packet attack?

TEARDROP attack

Smurf attack

TCP shard attack

ICMP unreachable message attack

14. "Caesar Password" is mainly encrypted by using a stick of specific specifications.

True

False

15. Which of the following is a remote authentication method? (Multiple Choice)

RADIUS

Local

HWTACACS

LLDP

16. When the firewall hard disk is on the throne, which of the following statement about the firewall log is correct?

Administrators can announce the content log to view the detection and defense record of network threats

Administrators can understand the user's security risk behavior and the cause of the alarm or blocking reason via threat logs.

Administrators know the user's behavior, the keyword of the exploitation, and the effectiveness of the audit policy configuration through user activity logs.

Administrators can use the security policy in which traffic hits in the policy, for fault location when there is a problem.

17. In the Client-Initiated VPN configuration, it is generally recommended to plan the address pool and headquarters network address as different network segments, otherwise you need to turn on the proxy forwarding function on the gateway device.

True

False

18. In addition to supporting built-in Portal authentication, firewall also supports custom Portal authentication, and does not require separate deployment of external Portal servers when using custom Portal authentication.

True

False

19. NAPT technology can implement a public IP address for multiple private network hosts.

True

False

20. IPSec VPN technology does not support NAT crossing when using the ESP security protocol package, because ESP encrypts the header of the packet.

True

False

Page 3 of 12

21. Which item is correct about SSL VPN?

Can be used without the client

Can encrypt the IP layer

There is a NAT crossing problem

No authentication

22. Some applications such as Oracle Database Applications, has no data streaming for a long time, so that the firewall session connection is interrupted, resulting in business interruption, which of the following is the optimal solution?

Configure a long connection for one business

Open the ASPF function

Optimize safety strategy

Open Split Cache

23. "Implementing security monitoring management for information and information systems, preventing illegal use of information and information systems", is to achieve which feature in information security?

Confidentiality

Controllability

Non-repudiation

Integrity

24. When configuring a security policy, a security policy can reference the address set or configure multiple destination IP addresses.

True

False

25. Which of the following is not a quintuple range?

Source IP

Source Mac

Destination IP

Destination port

26. Which of the following statement is wrong about the L2TP VPN of Client-Initialized?

After the remote user access the Internet, the L2TP tunnel connection request can be initiated directly from the remote LNS through the client software.

The LNS device receives the user's L2TP connection request, and the user can be verified according to the username and password.

LNS assign private IP addresses for remote users.

The remote users do not need to install VPN client software

27. About the description of the vulnerability scan, which of the following is wrong?

Vulnerability Scan is a technology based on network remote monitoring target network or host security performance vulnerability, which can be used to simulate attack experiments and security audits.

Vulnerability scan is used to detect if the target host system has a vulnerability, generally a scan for a specific vulnerability for the target host

Vulnerability scan is a passive prevention measures to effectively avoid hacker attack behavior

Vulnerability scan can be used according to the results of ping scanning and port scanning

28. Regarding the firewall security strategy, which of the following is wrong?

If the security policy is Permit, the discarded message will not be accumulated "hitting"

When configuring the security policy name, you cannot reuse the same name.

Adjust the order of the security policy, do not need to save the configuration file, take effect immediately

Huawei USG series firewall security strategy entry cannot exceed 128

29. What protection levels are included in TCSEC standard? (Multiple Choice)

Verification Protection

Forced Protection

Self-protection

Passive Protection

30. Which one of the options below belong to the component of the PKI architecture? (Multiple Choice)

Terminal entity

Certificate certification authority

Certificate registration authority

Certificate Storage authority

Page 4 of 12

31. "Be good at observation" and "keep suspicion" can help us better identify security threats in the online world.

True

False

32. In tunnel encapsulation mode, there is no need to have the routing to the destination private network segment, because the data will reseal using the new IP header to find routing table.

True

False

33. About the description of the Windows firewall, which of the following statements are correct? (Multiple Choice)

Windows firewalls can only allow or prohibit preset programs or features and programs installed on the system, and cannot customize the release rules in accordance with protocols or port numbers.

Windows firewall not only allows or prohibits preset programs or features and programs installed on the system, but also support to customize the release rules in accordance with protocols or port numbers.

If in the process of setting up the Windows firewall, the Internet cannot be accessed, you can quickly restore the firewall to the initial state using the restored default value function.

Windows firewall can change the notification rule in the closed state

34. Regarding the investigation and evidence collection, which of the following statement is correct?

Evidence is not necessarily needed in an investigation

Evidence acquired by eavesdropping is also effective

During all investigation and evidence, preferably with law enforcement involved.

Document evidence is required in computer crimes

35. Regarding the online user management, which of the following is incorrect?

Each user group can include multiple users and user groups

Each user group can belong to multiple parent user groups

The system has a default user group by default, and it is also the system default authentication domain.

Each user at least belongs to one user group, or it can belong to multiple user groups.

36. Which of the following is not used by the Detection link in the P2DR model?

Real-time monitoring

Detection

Alarm

Close service

37. Which item below is not a Linux operating system?

CentOS

RedHat

Ubuntu

MAC OS

38. In some scenarios, it is necessary to convert the source IP address, but also convert the destination IP address, which technology of the following is used by these scenarios?

Two-way NAT

Source Nat

NAT-Server

Nat Alg

39. Which protocols below can guarantee the confidentiality of data transmission? (Multiple Choice)

Telnet

SSH

FTP

HTTPS

40. On the USG series firewall, after configuring the web redirection, the the authentication page cannot pop up. Which item below does not belong to the cause?

Unconfigured authentication policy or authentication policy configuration error

Unenable WEB authentication function

Browser SSL version is not matched with the firewall authentication page SSL version

The port number of the authentication page service is set to 8887

Page 5 of 12

41. Regarding the description of the Windows log event type, which of the following is correct? (Multiple Choice)

Warning event refers to an event that the application, driver or service is successful.

Error events usually refer to the loss of functionality and data. For example, a service cannot be loaded as a system boot, an error event is generated.

When the disk space is insufficient, it will be recorded as a "information event".

Failure audit event refers to a failure of security login attempts, such as failure when a user view accesses a network drive, is recorded as a failure audit event.

42. Which types of the following can the encryption technology be divided into? (Multiple Choice)

Symmetrical encryption

Fractional symmetric encryption

Fingerprint encryption

Data encryption

43. Which of the following is the status information that can be backed up by the HRP (Huawei Redundancy Protocol) protocol? (Multiple Choice)

Conference table

ServerMap entry

Dynamic blacklist

Routing table

44. Which of the following is the core part of the P2DR model?

Policy

Protection

Detection

Response

45. Evidence identification needs to solve the integrity verification of evidence and determine if it meets the standards that can be used. Regarding the standards of evidence identification, which of the following statement is correct?

Relevance standard refers to that if the electronic evidence can have a material impact on the facts of the case to a certain extent, the court should rule that it is relevant.

Legality standard is to ensure that electronic evidence is collected from the initial acquisition, and the content is not changed in the process of submission as litigation evidence.

Fair standard refers to that only the legal subject obtains the evidentiary material by legal means has evidentiary ability.

46. Data Analysis Technology is to find, match keywords or key phrases, and analyze the correlation of time in data streams or information streams that have been obtained.

Which of the following does not belong to evidence analysis technology?

Password decipherment, data decryption technology

File Digital Summary Analysis Technology

Exploring the technology of the connection between different evidence

Spam tracking technology

47. About AH and ESP security protocols, which of the following statements are correct? (Multiple Choice)

AH can provide the functions of encryption and verification

ESP can provide the functions of encryption and verification

AH's protocol number is 51

ESP's protocol number is 51

48. DDoS attack belongs to which attack type?

Snoop scan attack

Malformed packet attack

Special packet attack

Flow type attack

49. About SSL VPN technology, which of the following statement is wrong?

SSL VPN technology is perfect for NAT traversal scenarios

Encryption of SSL VPN technology only takes effect on the application layer

SSL VPN requires dial client

SSL VPN technology expands the network range of enterprises

50. Which options can be operated in the advanced settings of the Windows Firewall? (Multiple Choice)

Restore default

Change Notification Rules

Set connection safety rules

Set inbound and outbound rules

Page 6 of 12

51. When configuring NAT Server on the USG Series Firewall, a Server-Map table is generated. Which item below does not belong to content in this performance?

Destination IP

Destination port number

Agreement number

Source IP

52. Which attack below does not belong to a special packet attack?

ICMP redirection packet attack

ICMP unreachable packet attack

IP address scan attack

Super ICMP Packet Attack

53. Which attack below is not a malformated packet attack?

TEARDROP attack

Smurf attack

TCP shard attack

ICMP unreachable message attack

54. "Caesar Password" is mainly encrypted by using a stick of specific specifications.

True

False

55. Which of the following is a remote authentication method? (Multiple Choice)

RADIUS

Local

HWTACACS

LLDP

56. When the firewall hard disk is on the throne, which of the following statement about the firewall log is correct?

Administrators can announce the content log to view the detection and defense record of network threats

Administrators can understand the user's security risk behavior and the cause of the alarm or blocking reason via threat logs.

Administrators know the user's behavior, the keyword of the exploitation, and the effectiveness of the audit policy configuration through user activity logs.

Administrators can use the security policy in which traffic hits in the policy, for fault location when there is a problem.

57. In the Client-Initiated VPN configuration, it is generally recommended to plan the address pool and headquarters network address as different network segments, otherwise you need to turn on the proxy forwarding function on the gateway device.

True

False

58. Which items are the encryption techniques used by digital envelopes? (Multiple Choice)

Symmetrical encryption algorithm

Asymmetric encryption algorithm

Hash algorithm

Flow encryption algorithm

59. In addition to supporting built-in Portal authentication, firewall also supports custom Portal authentication, and does not require separate deployment of external Portal servers when using custom Portal authentication.

True

False

60. NAPT technology can implement a public IP address for multiple private network hosts.

True

False

Page 7 of 12

61. IPSec VPN technology does not support NAT crossing when using the ESP security protocol package, because ESP encrypts the header of the packet.

True

False

62. Which item is correct about SSL VPN?

Can be used without the client

Can encrypt the IP layer

There is a NAT crossing problem

No authentication

63. Some applications such as Oracle Database Applications, has no data streaming for a long time, so that the firewall session connection is interrupted, resulting in business interruption, which of the following is the optimal solution?

Configure a long connection for one business

Open the ASPF function

Optimize safety strategy

Open Split Cache

64. "Implementing security monitoring management for information and information systems, preventing illegal use of information and information systems", is to achieve which feature in information security?

Confidentiality

Controllability

Non-repudiation

Integrity

65. When configuring a security policy, a security policy can reference the address set or configure multiple destination IP addresses.

True

False

66. Which of the following is not a quintuple range?

Source IP

Source Mac

Destination IP

Destination port

67. Which of the following statement is wrong about the L2TP VPN of Client-Initialized?

After the remote user access the Internet, the L2TP tunnel connection request can be initiated directly from the remote LNS through the client software.

The LNS device receives the user's L2TP connection request, and the user can be verified according to the username and password.

LNS assign private IP addresses for remote users.

The remote users do not need to install VPN client software

68. About the description of the vulnerability scan, which of the following is wrong?

Vulnerability Scan is a technology based on network remote monitoring target network or host security performance vulnerability, which can be used to simulate attack experiments and security audits.

Vulnerability scan is used to detect if the target host system has a vulnerability, generally a scan for a specific vulnerability for the target host

Vulnerability scan is a passive prevention measures to effectively avoid hacker attack behavior

Vulnerability scan can be used according to the results of ping scanning and port scanning

69. Regarding the firewall security strategy, which of the following is wrong?

If the security policy is Permit, the discarded message will not be accumulated "hitting"

When configuring the security policy name, you cannot reuse the same name.

Adjust the order of the security policy, do not need to save the configuration file, take effect immediately

Huawei USG series firewall security strategy entry cannot exceed 128

70. What protection levels are included in TCSEC standard? (Multiple Choice)

Verification Protection

Forced Protection

Self-protection

Passive Protection

Page 8 of 12

71. Which one of the options below belong to the component of the PKI architecture? (Multiple Choice)

Terminal entity

Certificate certification authority

Certificate registration authority

Certificate Storage authority

72. "Be good at observation" and "keep suspicion" can help us better identify security threats in the online world.

True

False

73. In tunnel encapsulation mode, there is no need to have the routing to the destination private network segment, because the data will reseal using the new IP header to find routing table.

True

False

74. About the description of the Windows firewall, which of the following statements are correct? (Multiple Choice)

Windows firewalls can only allow or prohibit preset programs or features and programs installed on the system, and cannot customize the release rules in accordance with protocols or port numbers.

If in the process of setting up the Windows firewall, the Internet cannot be accessed, you can quickly restore the firewall to the initial state using the restored default value function.

Windows firewall can change the notification rule in the closed state

75. Regarding the investigation and evidence collection, which of the following statement is correct?

Evidence is not necessarily needed in an investigation

Evidence acquired by eavesdropping is also effective

During all investigation and evidence, preferably with law enforcement involved.

Document evidence is required in computer crimes

76. Regarding the online user management, which of the following is incorrect?

Each user group can include multiple users and user groups

Each user group can belong to multiple parent user groups

The system has a default user group by default, and it is also the system default authentication domain.

Each user at least belongs to one user group, or it can belong to multiple user groups.

77. Which of the following is not used by the Detection link in the P2DR model?

Real-time monitoring

Detection

Alarm

Close service

78. Which item below is not a Linux operating system?

CentOS

RedHat

Ubuntu

MAC OS

79. In some scenarios, it is necessary to convert the source IP address, but also convert the destination IP address, which technology of the following is used by these scenarios?

Two-way NAT

Source Nat

NAT-Server

Nat Alg

80. Which protocols below can guarantee the confidentiality of data transmission? (Multiple Choice)

Telnet

SSH

FTP

HTTPS

Page 9 of 12

81. Regarding the description of the Windows log event type, which of the following is correct? (Multiple Choice)

Warning event refers to an event that the application, driver or service is successful.

Error events usually refer to the loss of functionality and data. For example, a service cannot be loaded as a system boot, an error event is generated.

When the disk space is insufficient, it will be recorded as a "information event".

Failure audit event refers to a failure of security login attempts, such as failure when a user view accesses a network drive, is recorded as a failure audit event.

82. Which types of the following can the encryption technology be divided into? (Multiple Choice)

Symmetrical encryption

Fractional symmetric encryption

Fingerprint encryption

Data encryption

83. Which of the following is the status information that can be backed up by the HRP (Huawei Redundancy Protocol) protocol? (Multiple Choice)

Conference table

ServerMap entry

Dynamic blacklist

Routing table

84. Which of the following is the core part of the P2DR model?

Policy

Protection

Detection

Response

85. Evidence identification needs to solve the integrity verification of evidence and determine if it meets the standards that can be used. Regarding the standards of evidence identification, which of the following statement is correct?

Relevance standard refers to that if the electronic evidence can have a material impact on the facts of the case to a certain extent, the court should rule that it is relevant.

Legality standard is to ensure that electronic evidence is collected from the initial acquisition, and the content is not changed in the process of submission as litigation evidence.

Fair standard refers to that only the legal subject obtains the evidentiary material by legal means has evidentiary ability.

86. Data Analysis Technology is to find, match keywords or key phrases, and analyze the correlation of time in data streams or information streams that have been obtained.

Which of the following does not belong to evidence analysis technology?

Password decipherment, data decryption technology

File Digital Summary Analysis Technology

Exploring the technology of the connection between different evidence

Spam tracking technology

87. About AH and ESP security protocols, which of the following statements are correct? (Multiple Choice)

AH can provide the functions of encryption and verification

ESP can provide the functions of encryption and verification

AH's protocol number is 51

ESP's protocol number is 51

88. DDoS attack belongs to which attack type?

Snoop scan attack

Malformed packet attack

Special packet attack

Flow type attack

89. About SSL VPN technology, which of the following statement is wrong?

SSL VPN technology is perfect for NAT traversal scenarios

Encryption of SSL VPN technology only takes effect on the application layer

SSL VPN requires dial client

SSL VPN technology expands the network range of enterprises

90. Which options can be operated in the advanced settings of the Windows Firewall? (Multiple Choice)

Restore default

Change Notification Rules

Set connection safety rules

Set inbound and outbound rules

Page 10 of 12

91. When configuring NAT Server on the USG Series Firewall, a Server-Map table is generated. Which item below does not belong to content in this performance?

Destination IP

Destination port number

Agreement number

Source IP

92. Which attack below does not belong to a special packet attack?

ICMP redirection packet attack

ICMP unreachable packet attack

IP address scan attack

Super ICMP Packet Attack

93. Which attack below is not a malformated packet attack?

TEARDROP attack

Smurf attack

TCP shard attack

ICMP unreachable message attack

94. "Caesar Password" is mainly encrypted by using a stick of specific specifications.

True

False

95. Which of the following is a remote authentication method? (Multiple Choice)

RADIUS

Local

HWTACACS

LLDP

96. When the firewall hard disk is on the throne, which of the following statement about the firewall log is correct?

Administrators can announce the content log to view the detection and defense record of network threats

Administrators can understand the user's security risk behavior and the cause of the alarm or blocking reason via threat logs.

Administrators know the user's behavior, the keyword of the exploitation, and the effectiveness of the audit policy configuration through user activity logs.

Administrators can use the security policy in which traffic hits in the policy, for fault location when there is a problem.

97. In the Client-Initiated VPN configuration, it is generally recommended to plan the address pool and headquarters network address as different network segments, otherwise you need to turn on the proxy forwarding function on the gateway device.

True

False

98. Which items are the encryption techniques used by digital envelopes? (Multiple Choice)

Symmetrical encryption algorithm

Asymmetric encryption algorithm

Hash algorithm

Flow encryption algorithm

99. In addition to supporting built-in Portal authentication, firewall also supports custom Portal authentication, and does not require separate deployment of external Portal servers when using custom Portal authentication.

True

False

100. NAPT technology can implement a public IP address for multiple private network hosts.

True

False

Page 11 of 12

101. IPSec VPN technology does not support NAT crossing when using the ESP security protocol package, because ESP encrypts the header of the packet.

True

False

102. Which item is correct about SSL VPN?

Can be used without the client

Can encrypt the IP layer

There is a NAT crossing problem

No authentication

103. Some applications such as Oracle Database Applications, has no data streaming for a long time, so that the firewall session connection is interrupted, resulting in business interruption, which of the following is the optimal solution?

Configure a long connection for one business

Open the ASPF function

Optimize safety strategy

Open Split Cache

104. "Implementing security monitoring management for information and information systems, preventing illegal use of information and information systems", is to achieve which feature in information security?

Confidentiality

Controllability

Non-repudiation

Integrity

105. When configuring a security policy, a security policy can reference the address set or configure multiple destination IP addresses.

True

False

106. Which of the following is not a quintuple range?

Source IP

Source Mac

Destination IP

Destination port

107. Which of the following statement is wrong about the L2TP VPN of Client-Initialized?

After the remote user access the Internet, the L2TP tunnel connection request can be initiated directly from the remote LNS through the client software.

The LNS device receives the user's L2TP connection request, and the user can be verified according to the username and password.

LNS assign private IP addresses for remote users.

The remote users do not need to install VPN client software

108. About the description of the vulnerability scan, which of the following is wrong?

Vulnerability Scan is a technology based on network remote monitoring target network or host security performance vulnerability, which can be used to simulate attack experiments and security audits.

Vulnerability scan is used to detect if the target host system has a vulnerability, generally a scan for a specific vulnerability for the target host

Vulnerability scan is a passive prevention measures to effectively avoid hacker attack behavior

Vulnerability scan can be used according to the results of ping scanning and port scanning

109. Regarding the firewall security strategy, which of the following is wrong?

If the security policy is Permit, the discarded message will not be accumulated "hitting"

When configuring the security policy name, you cannot reuse the same name.

Adjust the order of the security policy, do not need to save the configuration file, take effect immediately

Huawei USG series firewall security strategy entry cannot exceed 128

110. What protection levels are included in TCSEC standard? (Multiple Choice)

Verification Protection

Forced Protection

Self-protection

Passive Protection

Page 12 of 12

111. Which one of the options below belong to the component of the PKI architecture? (Multiple Choice)

Terminal entity

Certificate certification authority

Certificate registration authority

Certificate Storage authority

112. "Be good at observation" and "keep suspicion" can help us better identify security threats in the online world.

True

False

113. In tunnel encapsulation mode, there is no need to have the routing to the destination private network segment, because the data will reseal using the new IP header to find routing table.

True

False

114. About the description of the Windows firewall, which of the following statements are correct? (Multiple Choice)

Windows firewalls can only allow or prohibit preset programs or features and programs installed on the system, and cannot customize the release rules in accordance with protocols or port numbers.

If in the process of setting up the Windows firewall, the Internet cannot be accessed, you can quickly restore the firewall to the initial state using the restored default value function.

Windows firewall can change the notification rule in the closed state

115. Regarding the investigation and evidence collection, which of the following statement is correct?

Evidence is not necessarily needed in an investigation

Evidence acquired by eavesdropping is also effective

During all investigation and evidence, preferably with law enforcement involved.

Document evidence is required in computer crimes

116. Regarding the online user management, which of the following is incorrect?

Each user group can include multiple users and user groups

Each user group can belong to multiple parent user groups

The system has a default user group by default, and it is also the system default authentication domain.

Each user at least belongs to one user group, or it can belong to multiple user groups.

117. Which of the following is not used by the Detection link in the P2DR model?

Real-time monitoring

Detection

Alarm

Close service

118. Which item below is not a Linux operating system?

CentOS

RedHat

Ubuntu

MAC OS

119. In some scenarios, it is necessary to convert the source IP address, but also convert the destination IP address, which technology of the following is used by these scenarios?

Two-way NAT

Source Nat

NAT-Server

Nat Alg

120. Which protocols below can guarantee the confidentiality of data transmission? (Multiple Choice)

Telnet

SSH

FTP

HTTPS