New H12-722_V3.0-ENU Exam Questions Released For HCIP-Security-CSSN V3.0 Exam Preparation

To all, the current version of Huawei HCIP-Security certification is V3.0. Candidates are required to pass three exams to complete the HCIP-Security V3.0 certification:

H12-721_V3.0-ENU HCIP-Security-CISN V3.0
H12-722_V3.0-ENU HCIP-Security-CSSN V3.0
H12-723_V3.0-ENU HCIP-Security-CTSS V3.0

New H12-722_V3.0-ENU exam questions have been released with 387 practice questions and answers to ensure that you can pass the HCIP-Security-CSSN V3.0 certification exam on the first attempt. Here we have H12-722_V3.0-ENU free test online to help you read the Huawei H12-722_V3.0-ENU free demo questions first. We have shared 25 free H12-722_V3.0 demo questions online with all of you. Please test online, or if have any questions, just contact us via mail: [email protected].

Begin to Test:

1. The components of the HTTP response message do not include which of the following?

Status line

Response data

Blank line

Request Line

Question 1 of 25

2. When the NGFW implements URL filtering, it can obtain the URL accessed by the user by checking which field in the HTTP Request?

Request Method

User-Agent

Requset-URI+Host

Host

Question 2 of 25

3. Which of the following descriptions about the concept of intrusion prevention is wrong?

Intrusion prevention is a security mechanism that detects intrusion behaviors (including buffer overflow attacks, Trojan horses, worms, etc.) by analyzing network traffic.

Intrusion prevention can perform protocol analysis and detection on network data flow reorganization, but cannot detect the content of the application layer of packets

Intrusion prevention is a new security defense technology that can both discover and prevent intrusions

Intrusion prevention can not only prevent attacks from outside the enterprise, but also prevent attacks from within the enterprise

Question 3 of 25

4. Which of the following descriptions about DDos detection technology is wrong?

Packet-by-packet testing puts more pressure on device performance than flow-by-stream testing

Netflow-based traffic detection technology can only be used to detect large traffic attacks

It is recommended to use stream-by-stream detection when the network bandwidth is large

Netflow-based traffic detection technology can detect application-layer attacks and abnormal packets

Question 4 of 25

5. If you want to control the user's forum posting, user login and other behaviors, which of the following HTTP behavior controls should be configured?

File Download

File Upload

Redirect

Post operation

Question 5 of 25

6. Which type of attack is by sending a large number of defective packets, causing the host or server to crash when processing such packets?

Special control packet attack

Malformed Packet Attack

Illegal Access Attacks

Scanning attacks

Question 6 of 25

7. Which of the following descriptions about anti-virus gateways based on flow scanning is correct?

Higher detection rate than agent-based scanning

Can support decompression operation

Can support packing operation

High performance and low overhead

Question 7 of 25

8. Profile type ips name Test signature-set name Setos unix-1ike windows androld ios othorTarget both severity low medium high information protocol all category all application allException ips-signature-id 6116302 action block
If the above configuration information exists on the IPS, the final ID for the signature with 6116302, which of the following is the execution action?

allow

block-source-ip

alert

block

Question 8 of 25

9. Which of the following descriptions about verification and inspection after configuring anti-virus is wrong?

If the administrator thinks a virus is a false positive, the virus ID can be obtained from the log, and the virus ID can be set as a virus exception in the virus profile view

Anti-virus statistics cannot be cleared

You can view the information of the anti-virus configuration file through display profile type av

You can view the scan mode of anti-virus

Question 9 of 25

10. Which of the following descriptions about the restrictions on the use of anti-virus is wrong?

The upgrade of the anti-virus signature database requires the support of an anti-virus license

Does not support anti-virus detection for resuming files from breakpoints

When the anti-virus license is not activated, the function cannot be configured and does not take effect

The full-text scanning mode of anti-virus is not supported under the virtual system

Question 10 of 25

11. Which of the following descriptions about usage restrictions in IAE global configuration is wrong?

The setting value of the maximum number of decompression layers will not affect the detection results of anti-virus, file filtering and content filtering functions

For a single compressed file, the default detection timeout is 10 seconds. When a multi-layer compressed file containing RAR or ZIP format is detected through the full-text scanning mode, if the detected compressed file is too large, the detection timeout will occur and it will be released directly.

By default, the FW allows HTTP or FTP protocol to resume file transfer traffic

The URL remote query function is controlled by the URL remote query license

Question 11 of 25

12. Which of the following operations will not pose a security threat to the network?

Illegal Website Access

Send work emails

Open unfamiliar links at will

The virus database is not updated in time

Question 12 of 25

13. The filtering function based on mail protocol does not include which of the following?

RBL remote query

Attachment quantity control

Attachment size control

Email address check

Question 13 of 25

14. In order not to change the user's network structure, but at the same time to meet the protection requirements for the web server and to block illegal web requests, what is the most appropriate way for WAF to be deployed in the user's network?

Reverse proxy

Bridge Mode

Clear Agent

Reverse proxy-reference mode

Question 14 of 25

15. Which of the following Hisec Insight components is responsible for collecting traffic information?

Sandbox

NGFW

Flow Probes

Log Collector

Question 15 of 25

16. Which of the following firewall virus processing processes has the highest priority?

Virus detection

Application Exceptions

Whitelist

Virus exception

Question 16 of 25

17. Source authentication is one of the most used means to defend against HTTP floods. Which of the following is not a mode of source authentication defense?

Scheduled restart

META refresh

Verification code authentication

Redirect

Question 17 of 25

18. After the signature filter is linked with the firewall in intrusion prevention, the actions that can be set by the firewall do not include which of the following?

Unable to detect malicious operations or misoperations from insiders

Block the destination port. When the packet hits any signature in the signature filter, the associated firewall will add the destination port number of the packet to the blacklist

Two-way blocking, when the packet hits any signature in this signature, the linked firewall will add the source IP and destination IP of the packet to the blacklist

Block the source IP. When the packet hits any signature in the signature filter, the linked firewall will add the source IP of the packet to the blacklist

Question 18 of 25

19. Which of the following is the static behavior data of files that cannot be analyzed by the PE heuristic sandbox?

File size

Real-time feature library

Highlight information

Version Information

Question 19 of 25

20. Intrusion prevention is a security mechanism. Which of the following description about the comparison between IPS and traditional IDS is wrong?

IDS is a security function focused on risk management

IDS devices can only passively detect attacks on protected targets, while IPS is an active intrusion prevention and prevention system

IPS is a security function that focuses on risk control

Traditional IDS and intrusion prevention devices can effectively defend against application-layer attacks, but the false positives and false negatives are too high

Question 20 of 25

21. Which of the following cleaning solutions is realized through local ATIC combined with cloud services?

SLB

CDN Network

Smart DNS

Cloud traffic cleaning

Question 21 of 25

22. Which of the following descriptions about NFA is wrong?

Anti-DDoS packet-by-packet detection requires mirroring or splitting all traffic in the network, which puts a lot of pressure on packet-by-packet detection equipment in terms of performance

NFA can parse various types of flow data, but cannot perform aggregation statistics

When the network bandwidth is large, it is more suitable to use the NFA2000V for the flow-by-current detection method

NFA can report various binary logs generated by threat detection to ATIC

Question 22 of 25

23. Which of the following descriptions about the application scenarios of intrusion prevention equipment is wrong?

In the Internet border scenario, it is usually deployed at the back end of the egress firewall or router, and running to access network

In the IDC scenario, only a single machine can be deployed in the IDC server group to protect data security

It can police the network boundaries of different branches of the intranet of large and medium-sized enterprises, divide the intranet into multiple areas with different security levels, and achieve the requirements of risk isolation and security management and control between areas

It can be bypassed and deployed in the network to monitor the network security status

Question 23 of 25

24. Ani-DDoS packet-by-packet detection requires mirroring or splitting all traffic in the network, which puts a lot of pressure on the packet-by-packet detection device in terms of performance. Therefore, in the case of large network bandwidth, it is more appropriate to use NFA2000 for packet-by-stream detection.

True

False

Question 24 of 25

25. Huawei USG6000V series is a virtual integrated service gateway based on NFV architecture, with high utilization of virtual resources, and resource virtualization technology only supports a small number of multi-tenant joint use.

True

False

Question 25 of 25

HCDA Test Preparations

Latest Huawei Exam Dumps | New HCIA, HCIP and HCIE Tests

Tag Archives: H12-722_V3.0-ENU exam preparation

New H12-722_V3.0-ENU Exam Questions Released For HCIP-Security-CSSN V3.0 Exam Preparation

Recent Posts

Tags