Huawei H12-722-ENU 問題集

質問 1：
For the description of the AntiDDoS system, which of the following option is correct?
A. The firewall can only be a detection device.
B. The main role of the cleaning center is to detect and analyze the DDoS attack traffic for the mirrored or light splitting traffic and provide the analysis data to the management center for judgment.
C. The detection center mainly uses the control strategy of the security management center to perform traction and cleaning of the attack traffic. The normal traffic after cleaning is injected back to the customer network and sent to the real destination.
D. The management center mainly completes the processing of attack events, controls the flow policy and cleaning policy of the cleaning center, and classifies various attack events and attack traffic to generate reports
正解：D

質問 2：
When configure the URL filtering configuration file, www.bt.com is configured in the URL blacklist, and URL is set to *bt.com in the custom URL classification, and the action for customizing the URL classification is warning. .
Which of the following statements is true about the above configuration? (Multiple choices)
A. Users can't access all websites ending with bt.com.
B. Users will be blocked when they visit www.bt.com.
C. Users can visit www.videobt.com.
D. Users can visit www.bt.com website, but administrators will receive warning message.
正解：B,C

質問 3：
Regarding the description of intrusion detection technology, which of the following statements is correct?
A. Cannot find the trace of the system being attacked.
B. Can detect authorized and non-authorized intrusions.
C. Unable to detect violation of security policy.
D. is an active, static security defense technology.
正解：B

質問 4：
The administrator has the following configuration:
1. The signature set Protect, all includes the signature ID 3000, and the entire signature set action is blocked.
2. Overwriting the signature ID3000 action is an alarm.
Which of the following judgments is correct?
A. The action of the signature ID3000 is an alarm
B. No relationship between signature set and coverage signature
C. Cannot determine the action of signature ID3000
D. The action of signature ID3000 is blocked
正解：A

質問 5：
The following figure is the diagram which shows the firewall and sandbox system linkage detection file.

The Web Reputation feature is enabled on the firewall, and Site A is set as a trusted site and Site B is set as a suspicious site. Which of the following statements is correct?
A. The files which the users obtain from Site A and Site B are sent to the detection node for detection.
B. When the user visits the Site B, although the firewall will extract the file and send it to the detection node, the user can still visit the Site B normally during the detection process.
C. Assume that Site A is an unknown website, the administrator cannot detect the website's traffic file.
D. After the detection node detects a suspicious file, it not only informs the firewall in the figure, but also informs other connected network devices.
正解：D

質問 6：
Intrusion detection is a kind of network security technology used to detect any damage or attempt to damage the confidentiality, integrity or availability of the system. Which of the following belongs to the intrusion detection knowledge base?
A. Complete virus sample
B. Complete Trojan sample
C. Security policy
D. Specific behavior patterns
正解：D

質問 7：
Which of the following description is correct about the Management Center?
A. The data collector is responsible for abnormal traffic cleaning, centralized device management configuration, and business report presentation.
B. The data collector and management server support distributed deployment and centralized deployment. Centralized deployment has good scalability.
C. The management server of the management center is responsible for the cleaning of abnormal traffic, as well as the collection, analysis, aggregation, and storage of service data, and is responsible for reporting the summarized traffic to the management server for report presentation.
D. Management Center is divided into two parts: management server and data collector.
正解：D