H12-722-ENU HCNP-Security-CTSS (Huawei Certified Network Professional -Constructing Terminal Security System)

Please prepare for HCNP-Security H12-722 HCNP-Security-CTSS(Huawei Certified Network Professional – Constructing Terminal Security System) exam with real Huawei H12-722 HCNP-Security exam questions. We ensure you pass HCNP-Security Certification H12-722 exam smoothly. Here we recommend you test Huawei HCNP-Security H12-722 Free Online Test first.

We will provide 20 questions for H12-722-ENU online test. You can get 5 points after answer one question correctly. All the questions we provide are the latest exam subjects. If you have taken the exam you will know it. Just leave your message here or contact us via email [email protected] if you have any questions.

Start to test:

1. About several kinds of terminal security system access control method, which of the following statement is correct?

the highest management control is hardware SACG access control

the highest maintenance deployment difficulty and cost are Portal gateway access control

the lowest certified domain access control ability is 802.1 X access control

the reliability of hardware SACG is higher than the reliability of Portal access control

Question 1 of 20

2. After an enterprise network manager allocate Policy Center and SACG, after identity authentication successfully, checked found that cannot access to authentication certified domain, which is wrong?

After severe violations, can prohibit access authentication domain

after authentication domain access control lists are not issued to SACG

after synchronous issued to ACL, customers must first be offline, then log in again

access errors after authentication domain resources

Question 2 of 20

3. The Policy Center patch management, which of the following included? (Select three answers)

use the system's own patch download and distribution function.

use Microsoft WSUS system patch download and distribution function.

don't provide patch download and distribution function.

use the superior management center patch download and distribution function.

Question 3 of 20

4. An enterprise network configuration terminal exchange control, the enterprise all devices are joined the controlled network segment, administration department and personnel department join to the same trusted domain, treasury department join to another trusted domains, which option is correct?

after the safety certification, personnel department terminal can access to treasury department terminal.

after identity authentication, administration department terminal and personnel department terminal can visit each other.

administration department terminal and treasury department terminal can not visit each other before or after certification.

administration department terminal passed the security certification, personnel department terminal didn't pass the security certification, but the two in the same trusted domains, so can visit each other.

Question 4 of 20

5. Security manager can be used as Policy Center system time server.

TRUE

FALSE

Question 5 of 20

6. Policy Center can separate terminal access switches and AP/AC equipment, as well as the terminal access SSID, etc., to provide different access strategy and access authorization.

TRUE

FALSE

Question 6 of 20

7. In Policy Center, what kind of access control in the user layer and also in the control layer.

software SACG

hardware SACG

based on standard 802.1 X switches

Poratl gateway

Question 7 of 20

8. A company visitors in the reception hall, temporary access a large number of terminal user access. Administrators hope don't need memory specific account and password to access the Internet. What kind of account can be used?

visitors account

the anonymous authentication

AD account

MAC account

Question 8 of 20

9. Hardware SACG and Portal access authentication, may through the push Web page to convenient user authentication, the following about Web push principle, which is wrong?

Web push may be used in the hardware SACG and Portal gateway access control

if access by domain name, need to make sure domain name can be parsed and DNS server deploy in pre-authentication, If the access by IP address, need to ensure that the IP address is valid unicast address.

TCP connection between control the fake target computer and terminals.

Terminal access to any IP address, can realize the WEB push, there is no requirement to the access gateway equipment.

Question 9 of 20

10. The Policy Center can carry on the safety inspection and monitoring to the terminal, which is monitor strategy?

DHCP setting strategy

printer sharing strategy

the registry configuration strategy

software black and white list strategy

Question 10 of 20

11. The following about hardware SACG access authentication process, which option is wrong?

First Agent and SACG established SSL connection, for the follow-up information encryption processing.

after the success of the authentication request security policy parameters, safety certification.

terminal security authentication failed, reported SACG, forbidden access authentication domain.

from isolated domain switch to the authentication domain, need identity certification and safety certification.

Question 11 of 20

12. The following about escape which options is correct? (Select three answers)

the security is more important than the availability scenario, it is best not to open the emergency exits.

Software security access control gateway default open escape, does not support configured to enable or disable emergency exits.

terminal host visits control function is enabled by default escape, support configured to enable or disable emergency exits.

escape after troubleshooting should be closed manually.

Question 12 of 20

13. An enterprise has 6000 sets of terminal equipment, in order to save costs, can use one server deploy Policy Center system.

TRUE

FALSE

Question 13 of 20

14. Which options included in terminal security system design? (Select three answers)

the identity authentication

security encryption

access control

business license audit

Question 14 of 20

15. Policy Center system provides the equipment identification function, according to the equipment identification probe to get the characteristics of the data, which probe that Policy Center supported? (Select three answers)

MAC OUI probe

DHCP Option probe

HTTP User-Agent probe

STMP probe

Question 15 of 20

16. Which of the following is the third party certification system supported by Huawei terminal security system? (Choose 3 answers)

the Microsoft AD domain controller

non-standard LADP server

IBM Tivoli

Novell eDirectory

Question 16 of 20

17. An enterprise has 37,000 terminal users, deploy a total of five controllers, without considering Policy Center system reliability, only to ensure availability, how many controllers remaining and available will open escape?

1 station

2 sets

3 sets

4 sets

Question 17 of 20

18. Hardware security access control gateway configures at most two pre-authentication domains; the pre-authentication domain is suitable for all terminal users.

TRUE

FALSE

Question 18 of 20

19. For the terminal which deployed the NAC client, the Policy Center access authorization according to the result of terminal compliance check, isolate non-compliance terminal network, protect the customer's network security, and help enforce the terminals security Policy of the enterprise.

TRUE

FALSE

Question 19 of 20

20. Policy Center offers patch management function, which of the following statement is wrong?

Only Windows and Linux operating systems NAC client support patch management.

Special patch refers to the patch which the security manager needs to give priority to download when the security manager download Microsoft Windows patch from Microsoft official website.

Configure patch template, you can specify the patch which needs to install.

Check the patch policy and patch management function and action are the same.

Question 20 of 20

HCDA Test Preparations

Latest Huawei Exam Dumps | New HCIA, HCIP and HCIE Tests

Tag Archives: Constructing Terminal Security System

H12-722-ENU HCNP-Security-CTSS (Huawei Certified Network Professional -Constructing Terminal Security System)

Recent Posts

Tags