H12-723 Exam Training Practice Tests (Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System))]

Question 1

Deployed by an enterprise network managerAgile Controller-Campus withSACG Later;Identity authentication is successful but cannot access the post-authentication domain, This phenomenon may be caused by any reason? (Multiple choice)

A. ALC The number of rules issued is too many, and a lot of time is required to match, causing interruption of access services. B. A serious violation will prohibit access to the post-authentication domain. C. Agile Controller-Campus Wrong post-authentication domain resources are configured on the server. D. The access control list of the post-authentication domain has not been delivered SACG.

Correct Answer: B,C,D

Question 2

Agile Controller-Campus The product architecture includes three levels. Which of the following options does not belong to the product architecture level?

A. Network device layer B. Access control layer C. Server layer D. User access layer

Correct Answer: B

Question 3

After an enterprise deployed antivirus software, it was discovered that virus infections still occurred on a large scale. In addition to the limitations of the product's own technology, the reason for the problem is weak personal terminal security protection, which is also an important factor.

A. wrong B. right

Correct Answer: B

Question 4

Webmail filter support Intranet users receive mail filtering.

A. FALSE B. TRUE

Correct Answer: B

Question 5

In the terminal host check strategy, you can check whether the important subkeys and key values of the registry meet the requirements to control the terminal host's Access, which of the following check results will be recorded as violations? (multiple choice)

A. The registry does not contain the mandatory requirements of the policy"Subkeys and key values". B. The registry contains the mandatory requirements of the policy"Subkeys and key values", C. The registry contains the prohibited"Subkeys and key values"W D. The registry does not contain any prohibited by this policy"Subkeys and key values"

Correct Answer: A,C

Question 6

When using local guest account authentication, usually use(Portal The authentication method pushes the authentication page to the visitor. Before the user is authenticated, when the admission control device receives the HTTP The requested resource is not Portal Server authentication URL When, how to deal with the access control equipment.

A. Direct travel B. URL Address redirected to Portal Authentication page C. Send authentication information to authentication server D. Discard message

Correct Answer: B

Question 7

When a guest needs to access the network through an account, which of the following methods can be used to access? (Multiple choice)

A. Use existing social media accounts B. No authentication, no account required C. Create new account D. Scan public QR code

Correct Answer: A,B,C,D

Question 8

When managing guest accounts, you need to create a guest account policy and set the account creation method. For the account creation method, which of the following descriptions is wrong?

A. If there are many users, you can choose database synchronization B. In order to facilitate management and improve user experience, self-registration can be used. C. If there are a lot of users, you can choose to create in batches. D. When adding accounts individually, you can choose to create them individually.

Correct Answer: A

Question 9

Regarding the principle of MAC authentication, which of the following descriptions is wrong?

A. MAC Authentication requires obtaining the terminal's MAC The address is stored in AAA server. B. MAC Certification required Portal Server cooperation. C. MAC Certification is passed 802.1X Implementation of the agreement. D. NAS Device Configuration MAC After authentication, the terminal's MAC The address is used as the username and password.

Correct Answer: B

Question 10

Mobile smartphone, tablet PC users through Any Office Client and AE Establish IPSec Encrypted tunnel, After passing the certification and compliance check, visit the enterprise business.

A. wrong B. right

Correct Answer: A

Question 11

Regarding the use of MAC authentication to access the network in the WLAN networking environment, which of the following statements is wrong en.

A. MAC bypass authentication solves the situation of both 802.1x client authentication and MAC authentication in the same network environment. B. MAC authentication does not require users to install any client software. C. The user name format used by MAC authentication is only one of MAC address user name format. D. MAC authentication actually uses 802 1X authentication method.

Correct Answer: C

Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System) - H12-723 Exam Practice Test