Feb-2022 Huawei H12-722 Certification Real 2022 Mock Exam
H12-722 Exam Questions and Valid PMP Dumps PDF
NEW QUESTION 58
After the Huawei USG6000 product license expires, the RBL function is unavailable.
Users can only use local black and white lists to filter spam.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 59
AntiDDoS 7-layer defense works from the interface-based defense, global-based defense, and defense-based defense dimension.
- A. True
- B. False
Answer: A
NEW QUESTION 60
When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.
- A. True
- B. False
Answer: A
NEW QUESTION 61
With regard to APT attacks, the attacker often lurks for a long time and launches a formal attack on the enterprise at the key point of the incident.
Generally, APT attacks can be summarized into four stages:
1. Collecting Information & Intrusion
2. Long-term lurking & mining
3. Data breach
4. Remote control and penetration
Regarding the order of these four stages, which of the following options is correct?
- A. 2-1-4-3
- B. 1-2-4-3
- C. 2-3-4-1
- D. 1-4-2-3
Answer: D
NEW QUESTION 62
Attacks on the Web can be divided into three types of attacks on the client, server, or communication channel.
- A. True
- B. False
Answer: A
NEW QUESTION 63
The virus signature database on the device needs to be continuously upgraded from the security center platform. Which of the following is the website of the security center platform?
- A. sec. huawei. com.
- B. support.huaver: com
- C. www. huawei. com
- D. security.. huawei. com
Answer: A
NEW QUESTION 64
Which of the following behaviors is a false positive of the intrusion detection system?
- A. Use Ping to perform network detection and be alerted as an attack
- B. Unable to detect new types of worms
- C. The process of trying to log in to the system is recorded
- D. Web-based attacks are not detected by the system
Answer: A
NEW QUESTION 65
When users deploy a firewall anti-virus policy, there is no need to deploy anti-virus software.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION 66
Which of the following options are correct for the configuration description of the management center ATIC?
(multiple choice)
- A. Port mirroring needs to be configured on the management center to monitor abnormal traffic.
- B. The reinjection strategy needs to be configured on the management center to guide the flow after cleaning.
- C. It is necessary to configure the protection object on the management center to guide the abnormal access flow in etpa
- D. The drainage task needs to be configured on the management center, and when an attack is discovered, it will be issued to the cleaning center.
Answer: C,D
NEW QUESTION 67
Malicious code usually uses RootKit technology to hide itself. RootKit modifies the kernel of the system by loading special drivers to hide itself and specific files.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 68
The core technology of content security lies in anomaly detection, and the concept of defense lies in continuous monitoring and analysis.
- A. True
- B. False
Answer: A
NEW QUESTION 69
About the description of the file filtering technology in the USG6000, which statement is wrong?
- A. It can identify the application hosting the file, the file transfer direction, the file type, and the file extension.
- B. It supports the filtering of the decompressed contents of the compressed file.
- C. It can identify the types of files transmitted by itself and can block, alert and announce specific type of files.
- D. Even if the file type is modified, it can recognize the true type of the file.
Answer: C
NEW QUESTION 70
The administrator configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not possible?
- A. The file filtering configuration file is incorrect
- B. Misconfigured action for file extension mismatch
- C. License is not activated
- D. The file filtering configuration file is not referenced in the security policy
Answer: B
NEW QUESTION 71
Which of the following statements about IPS is wrong?
- A. When the "source security zone" is the same as the "destination security zone", it means that the IPS policy is applied in the domain.
- B. The signature set can contain either predefined signatures or custom signatures. 832335
- C. Modifications to the PS policy will not take effect immediately. You need to submit a compilation to update the configuration of the IPS policy.
- D. The priority of the coverage signature is higher than that of the signature in the signature set.
Answer: B
NEW QUESTION 72
An enterprise administrator configures a web reputation website in the form of a domain name and configures the domain name as www.abc.example.com.
Which of the following is an entry that the firewall will match when looking for a website URL?
- A. www.abc.example
- B. www.abc.example.com
- C. example.com
- D. example
Answer: D
NEW QUESTION 73
The IPS process has the following steps:
1. Reorganize application data
2. Match signature
3. Message processing
4. Protocol identification
Which of the following is the correct ordering for the processing?
- A. 2-4-1-3
- B. 1-3-2-4
- C. 4-1-2-3
- D. 1-4-2-3
Answer: D
NEW QUESTION 74
......
H12-722 Question Bank: Free PDF Download Recently Updated Questions: https://www.actualcollection.com/H12-722-exam-questions.html