H12-722-ENU Online Training Archives

Exam4Training helps millions of candidates pass the H12-722-ENU HCNP-Security-CSSN (Constructing Service Security Network) exam and get the HCNP-Security certifications. Our Huawei H12-722-ENU HCNP-Security-CSSN (Constructing Service Security Network) Online Training are reliable, affordable, updated and of really best quality to overcome the difficulties of Huawei H12-722-ENU exam. Exam4Training Huawei H12-722-ENU HCNP-Security-CSSN (Constructing Service Security Network) Online Training are latest updated in highly outclass manner on regular basis and material is released periodically.

Page 1 of 2

1. If the user's FTP operation matches the FTP filtering policy, which actions can be performed? (Multiple choice)

Blocking

Announcement

Alerts

Execution

2. About firewalls and IDS, which of the following is true?

Firewall is a bypass device for fine-grained detection

IDS is a straight-path device and can't perform depth detection

Firewall is unable to detect insider malicious operation or misoperation

IDS can't interact with the firewall

3. Which of the following attack types is DDoS attack?

Single package attack

Traffic attack

Malformed packet attack

Snooping scanning attack

4. Why APT attacks are difficult to defend? Part of the reason is that they use zero-day loopholes to attack. This zero-day loopholes usually takes a lot of time to research and analyze and make corresponding defense methods.

True

False

5. The following figure shows the configuration of the URL filtering configuration file. Which of the following statements is true about this configuration?

The firewall will check the blacklist first and then check the whitelist.

Assume that user visit www.exzample.com, which is part of Humanities and Social Networking category. At this time, the user cannot access the site.

The user visit the website www.exzample.com. When there is no black and white list of hits, the predefined URL category entry is next queried.

The default action means that all websites allow access. Therefore, this configuration error.

6. The whitelist rule of the firewall antivirus module is configured as *example*. Which of the following matches is used in this configuration?

Prefix matching

Suffix matching

Keyword matching

exact match

7. UDP is a connectionless protocol. A large number of UDP flood attacks cause the performance of network devices that rely on session forwarding to be degraded and even the session table is exhausted, causing network congestion.

Which of the following options does not prevent UDP flood attacks?

UDP fingerprint learning

Associated defense

Current limiting

First packet discarded

8. Regarding the process of file filtering, which of the following statements is wrong?

After the file extraction fails, the file will still be filtered.

The application identification module can identify the type of application hosting the file.

Protocol decoding is responsible for parsing the file data and file transfer directions in the data stream.

The file type identification module is responsible for identifying the real type of the file and the extension of the file based on the file data

9. Huawei WAF products mainly consist of implementing front-end, back-end central systems and databases. The database mainly stores the front-end detection rules and black and white list configuration files.

True

False

10. Misuse detection discovers intrusion activity in system by detecting similar behaviors of user intrusions, or by detecting violations of system security rules indirectly by exploiting system flaws.

Which of the following is not misuse detection feature?

Easy to implement

Accurate detection

Effective detection of impersonation of legitimate users

Easy to upgrade

Page 2 of 2

11. Huawei NIP6000 products have zero-setting network parameters and plug-and-play functionality because interfaces pairs only work on Layer 2 and do not need to set IP address.

True

False

12. During the infiltration phase of APT attack, which of the following attack behaviors will the attacker generally have?

Long-term latency and key data collection.

Leaks key data information to interested third parties.

By phishing emails, attachments carrying a 0day vulnerability cause the user's terminal to become a springboard for attacks.

The attacker sends C&C attack or other remote command to the infected host, cause the attack to spread horizontally across the intranet.

13. What are the risks to information security caused by unauthorized access? (Multiple choices)

Confidentiality

Integrity

Availability

recoverability

14. Network attacks are classified into two types: single-packet attacks and traffic-based attacks. Single-packet attacks include scanning and snooping attacks, malformed packet attacks and special packet attacks.

True

False

15. Which of the following attacks are belong to attacks against Web servers? (Multiple choices)

Website fishing fraud

Website Trojan

SQL injection

Cross-site scripting attacks