H12-722-ENU Exam Training Practice Tests (Huawei HCIP-Security-CSSN(Huawei Certified ICT Professional -Constructing Service Security Network))]

Question 1

The network-based intrusion detection system is mainly used for real-time monitoring of critical network path information, listening to all packets on the network, collecting data, and analyzing suspicious objects. Which of the following options are its main features? (Multiple Choice)

A. Can detect the source address and destination address, can identify whether the address is illegal, can locate the real intruder. B. Monitoring is fast, problems can be detected in microseconds or seconds, and host-based IDS rely on analysis of audit records in the last few minutes. C. Needs a lot of monitors. D. Good concealment, network-based monitors do not run other applications, do not provide network services, do not respond to other computers, and are therefore less vulnerable to attacks.

Correct Answer: B,D

Question 2

A college user needs are as follows:
1. The environmental traffic is relatively large and can add up to 800M in both directions. Huawei USG6000 series firewalls are deployed at its network nodes.
2. The intranet is divided into student areas, server areas, etc. Users are most concerned about the security of the server area and avoid being attacked by various types of threats.
3. At the same time, some pornographic websites in the student district are prohibited.
The external network is configured as untrust zone on the firewall, and the internal network is configured as trust zone. How to configure the firewall to meet the above requirements? (Multiple choices)

A. Enable URL filtering for the entire campus network in the direction of untrust and filter some classified websites B. untrust to the internal network direction only for the server area to open AV, IPS protection to protect the server C. Enable AV and IPS protection only for the server zone in the untrust direction to protect the server D. You can enable the AV, IPS protection and URL filtering functions in the global environment.

Correct Answer: A,B,D

Question 3

Which of the following statement is wrong about a network intrusion detection system (NIDS)?

A. Use newly received network packets as a data source; B. Mainly used for real-time monitoring of critical network path information, listening to all packets on the network, collecting data, and analyzing suspicious objects C. Used to monitor network traffic and can be deployed independently. D. Real-time monitoring through network adapters and analysis of all communication traffic through the network;

Correct Answer: A

Question 4

Regarding the local black and white list of anti-spam messages, which of the following statements is wrong?

A. The black and white list is matched by the sender's dns suffix B. The black and white list is matched by extracting the destination IP address of the SMTP connection C. Black and white lists are matched by extracting the source IP address of the SMTP connection D. Block the connection if the source IP address of the SMTP connection matches the blacklist

Correct Answer: A

Question 5

About firewalls and IDS, which of the following is true?

A. IDS can't interact with the firewall B. IDS is a straight-path device and can't perform depth detection C. Firewall is unable to detect insider malicious operation or misoperation D. Firewall is a bypass device for fine-grained detection

Correct Answer: C

Question 6

To protect the security of data transmission, more and more websites or companies choose to encrypt traffic through SSL.
Which of the following statements is true about the threat detection of SSL traffic using Huawei NIP6000?

A. Threat-detected traffic is sent directly to the server without encryption. B. NIP000 does not support SSL traffic threat detection. C. Processes such as "decryption," "threat detection," and "encryption." D. NIP can directly crack and detect SSL encryption.

Correct Answer: C

Question 7

Which of the following is correct about the AntiDDoS system configuration?

A. Add protection objects on the management center. B. Configure drainage and injection on the management center. C. Configure drainage and injection on the detection device. D. Configure port mirroring on the cleaning device.

Correct Answer: A

Question 8

For compressed files, the virus detection system can directly detect.

A. True B. False

Correct Answer: A

Question 9

Information security is the protection of information and information systems against unauthorized access, use, disclosure, interruption, modification, destruction and thereby providing confidentiality, integrity and availability.

A. True B. False

Correct Answer: A

Question 10

When the AntiDDoS system detects attack traffic, the attack traffic is directed to the cleaning device. After the cleaning device completes cleaning, the traffic is re-injected to the original link. Which of the following options does not belong to the injection method?

A. GRE injection B. BGP injection C. Policy Routing injection D. MPLS LSP injection

Correct Answer: B

Question 11

The DDoS attack defense configuration process is as follows:
1, start the flow statistics function;
2. Set different protection thresholds for different types of attacks;
3. When the traffic exceeds the preset threshold, the system starts attack defense.

A. FALSE B. TRUE

Correct Answer: B

Question 12

Configure the following command on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-default-route acl 3000
Which of the following options are correct? (Multiple choice)

A. For the loose type check, if the source address of the packet exists in the FIB table of the firewall, the packet passes the check. B. If the default route is configured but the parameter allow-default-route is not configured. As long as the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected. C. If the default route is configured and the allow-default-route parameter is also matched, if the source address of the packet does not exist in the FIB table of the firewall, but for the loose type check, the packet will pass through URPF check, and perform normal forwarding. D. If the source address of the packet does not exist in the FIB table of the firewall and the default route is configured and the allow-default-route parameter is also matched, the packet cannot pass the URPF check even if it is a loose type check.

Correct Answer: A,B,C

Question 13

Threat after the big data intelligent security analysis platform detect will be synchronized to each network device, and then continue to learn and optimize by collecting to the logs from the network device.

A. True B. False

Correct Answer: A

Question 14

Which of the following attacks are belong to attacks against Web servers? (Multiple choices)

A. Website Trojan B. Cross-site scripting attacks C. SQL injection D. Website fishing fraud

Correct Answer: B,C

Huawei HCIP-Security-CSSN(Huawei Certified ICT Professional -Constructing Service Security Network) - H12-722-ENU Exam Practice Test