1. When allocating various services according to the user group, account and terminal IP address range, if the same service (except the announcement service) is allocated to the user group, account and terminal IP address range, the business assigned to the highest priority will take effect.
Which of the following is true about the order of priority?

2. MAC authentication means that in the 802.1X authentication environment, when the terminal does not respond to the 802.1X authentication request from the access control device after accessing the network, the access control device automatically obtains the terminal's MAC address and sends it as a credential for accessing the network to the RADIUS server for verification.

3. The multi-level defense system is mainly reflected in the network level and the system level. Which of the following options are used for the security defense at the network level? (Multiple Choice)

4. The standard 802.1X client that comes with the Web client and the operating system only has the function of identity authentication, and does not support the execution of inspection-type policies and monitoring-type policies. Any Office client supports all inspection-type policies and monitoring-type policies.

5. Site refers to the terminal environment when the end user uses the AC-Campus to access the controlled network for office work.
Which of the following options is correct about the site?

6. In an agile network, users may need to access servers such as DNS, DHCP, and Portal before authentication. When the traffic of the user accessing the server passes through the firewall, the firewall queries the Agile controller-campus server for information about the agile security group corresponding to the traffic. Since the user has not passed the authentication at this time, the Agile controller-campus server will inform the firewall that the user belongs to the "Unknown Agile Security Group (Unknown)", which will cause the user's traffic to match the "Unknown Agile Security Group (Unknown)" before the firewall refreshes the user's identity.
As a result, the correct permissions cannot be obtained immediately after the user authentication is passed. How to solve this problem?

7. A network uses Portal authentication, and the user finds that there is no place to enter the username/password in the pushed Web page when accessing.
This failure may be caused by which of the following reasons?

8. It is difficult for a single traditional network strategy to cope with the current complex situations such as user diversification, location diversification, terminal diversification, application diversification, and insecure experience.

9. Regarding the deployment scenarios of hardware SACG certification, which of the following descriptions are correct? (Multiple Choice)

10. Mobile smartphone and tablet users establish an IPSec encrypted tunnel with AE through the Any Office client. After passing the authentication and compliance check, they can access the enterprise business.

11. Typical application scenarios of terminal security include: desktop management, illegal outreach and computer peripheral management.

12. Which of the following options is correct for the sequence description of the PKI work process?
1. The PKI entity requests the CA certificate from the CA.
2. After the PKI entity receives the CA certificate, install the CA certificate.
3. When the CA receives the CA certificate request from the PKI entity, it will reply its own CA certificate to the PKI entity.
4. The PKI entity sends a certificate registration request message to the CA.
5. When PKI entities communicate with each other, they need to obtain and install the local certificate of the peer entity.
6. The PKI entity receives the certificate information sent by the CA.
7. After the PKI entity installs the local certificate of the peer entity, it verifies the validity of the local certificate of the peer entity. When the certificate is valid, the PC entities use the certificate public key for encrypted communication.
8. The CA receives the certificate registration request message from the PKI entity.

13. Regarding the order of terminal Wi-Fi push, which of the following is correct?
1. Any Office mobile office system pushes Wi-Fi configuration
2. Any Office will automatically apply for a certificate.
3. The administrator configures enterprise Wi-Fi push.
4. The terminal automatically connects to the enterprise Wi-Fi.

14. Regarding the use of user isolation technology in a WLAN networking environment, which of the following statements is false?

15. The products and systems provided by BYOD solutions cover many fields such as terminal, network, security, application, and management, including: serialized BYOD equipment, wireless network system, network access security, VPN gateway, terminal security client software, Authentication system, mobile device management (MDM), mobile eSpace UC, etc.

16. When using local guest account authentication, Portal authentication is usually used to push the authentication page to the guest.
Before user authentication, when the admission control device receives the HTTP request sent by the user for a resource other than the Portal server authentication URL, how does the admission control device handle it?

17. Which of the following options describe the 802.1X access process correctly? (Multiple Choice)

18. The administrator issues notices to users in the form of announcements, such as the latest software and patch installation notices, etc. Which of the following options for announcements is false?

19. In the WLAN network with the WIDS function enabled, which of the following statements are correct regarding the determination of illegal devices? (Multiple Choice)

20. When deploying wired 802.1X authentication, if the admission control device is deployed at the aggregation layer, this deployment method has the characteristics of high security performance, many management devices, and complex management.

21. When managing guest accounts, you need to create a guest account policy and set the account creation method. For the account creation method, which of the following descriptions is wrong?

22. Which of the following options are correct for the description of MAC authentication and MAC bypass authentication? (Multiple Choice)

23. Which of the following options is correct for describing the effect of each role in the Portal authentication system?

24. Identity authentication determines whether to allow access by identifying the identity of the access device or user.

25. For the description of the account blacklist, which of the following options is incorrect?