H12-723-ENU HCNP-Security-CSSN (Huawei Certified Network Professional -Constructing Service Security Network)

Please prepare for HCNP-Security H12-723 HCNP-Security-CSSN(Huawei Certified Network Professional – Constructing Service Security Network) exam with real Huawei H12-723 HCNP-Security exam questions. We ensure you pass HCNP-Security Certification H12-723 exam smoothly. Here we recommend you test Huawei HCNP-Security H12-723 Free Online Test first.

We will provide 20 questions for Huawei HCNP-Security H12-723-ENU online test. You can get 5 points after answer one question correctly. All the questions we provide are the latest exam subjects. If you have taken the exam you will know it. Just leave your message here or contact us via email [email protected] if you have any questions.

Start to test:

1. Configuring DNS server of RBL feature on USG, which of the following statement is not correct?

must use the DNS server not been DNS hijacking

must use recursive query DNS server

DNS server should be reachable IP

DNS server must listen on port 25

Question 1 of 20

2. Enterprise Intranet users access to the Internet, what may cause the UFL filtering function failure? (Select 3 answers)

no reference URL filtering strategy in Web filtering policy

no Web filtering strategy applied in the corresponding direction in inter-domain

the URL filtering strategy in the corresponding filter sub-function switch did not open

Web content filtering is not enabled

Question 2 of 20

3. In SA detection technology, which feature detection matching method does not include?

single packet match

IP match

multi-Pack match

multi-stream match

Question 3 of 20

4. By default, the device file, there is a knowledge base file in device, during the upgrade, the device will automatically update the knowledge base files and backups.

TRUE

FALSE

Question 4 of 20

5. Administrator creates the correct IPS strategy, applied to domain or inter-domain , but found that no matter in the IPS signature set movement is blocking or alarm, when the invasion attack, only produce the alarm.
What is the reason for this problem?

Set IPS work mode in the IPS global parameters for alarm

did not select the correct domain

did not configure corresponding IPS strategy

configure Firewall running mode for Firewall mode

Question 5 of 20

6. A network administrator configure IP function, when the signed agreement is http, will only detect http header information.

TRUE

FALSE

Question 6 of 20

7. WEB filtering technology is a kind of in-depth testing for WEB loophole, WEB classification and access control security management technology on the Internet.

TRUE

FALSE

Question 7 of 20

8. About the anti-spam local black and white list, which of the following statements is wrong?

created manually by the user on the USG

black and white list is matched by the sender's DNS suffix

black and white list is by extracting the source IP address of the SMTP connection to match

if the source IP address of the SMTP connection matches the blacklist, blocking the connection

Question 8 of 20

9. IPS signature set priorities cannot be adjusted.

TRUE

FALSE

Question 9 of 20

10. A university user requirements are as follows:
1. The environmental flow is larger, two-way add up to OOOM, UTM deployed in its network node.
2. The intranet is divided into students zones, server zones, etc., users are most concerned about the security of the server area, to avoid all kinds of the threat of attack.
3. At the same time to ban students area some pornographic websites.
In UTM configured Extranet for untrust domain, Intranet for trust domain, how to deploy the UTM strategy? (Select 2 answers)

can be directly under the global open AV, PS protective function, URL filtering function, then it can be realized

Outbound direction only open AV, IPS protective function for server areas, protected server

inboud direction only open AV, IPS protective function for server areas, protected server

Outbound direction open URL filtering function for the entire campus network , and filtering of part classification website

Question 10 of 20

11. Which of the following statement is correct IDS and IPS?

IDS only supports Inline online deployment

IPS deployed as a bypass mode is similar to the function of ID

the core technology of IPS is deep packet inspection and bypass inspection

With the IPS does not need to deploy a firewall and IDS

Question 11 of 20

12. Which of the statement is not correct according to following configuration?
[USG] pattern-group 6t type url
[USG-pattern-group-url-bt] pattern any bt.com
[USG] url-filter policy urlpolicy3
[USG-urlfilter-policy-urlpolicy3] blacklist enable
[USG-urlfilter-policy-urlpolicy3] whitelist enable
[USG-urlfilter-policy-urlpolicy3] blacklist group 6t
[USG] web-filter policy webpolicy3
[USG-web-filter-policy-webpolicy3] policy url-filter urlpolicy3
[USG-policy-interzone-trust-untrust-outbound] policy 3
[USG-policy-interzone-trust-untrust-outbound-3] action permit
[USG-policy-interzone-trust-untrust-outbound-3] policy source range 10.10.10.101 10.10.10.200
[USG-policy-interzone-trust-untrust-outbound-3] policy web-filter webpolicy3

users of IP address 10.10.10.120 can access bt.com website

users of IP address 10.10.10.199 cannot access bt.com website

users of IP address 10.10.10.100 can access bt.com website

users of IP address 10.10.10.220 can access bt.com website

Question 12 of 20

13. URL filtering configure exact match www.test.com/news field, then not meet the URL of the filtering strategy include:

http://www.test.com/news

www.test.com/news/

WWW.TEST.COM/news

www.test.com/news.aspx

Question 13 of 20

14. Perform the UTM upgrade in the process of operation, appeared the following information:
Error: Executing the update, please wait.
USG may be executed (choose 3 answers)

online upgrade

there are business flow being processed

local upgrade

install the factory default version

Question 14 of 20

15. After opening IP strategy, found part of the business fails, what are the possible reasons? (Choose 2 answers)

message through the firewall only one direction

the same message repeatedly through the firewall

IP omission

heavy traffic cause Bypass features enabled

Question 15 of 20

16. What do the common virus behavior characteristics include?(select 3 answers)

Download and backdoor characteristics

Information Collection feature

own hidden feature

system attacks characteristics

Question 16 of 20

17. Which statement is wrong about SA principle configuration?

feature detection to identify the different applications by matching message feature and Knowledge Base feature set

reduces the maximum number of packets detection threshold, can reduce the sas module identification number of packets, thus improve the recognition rate agreement

There are some protocol packets are carried in other agreements, enable sa whole packet inspection can better detect such messages

Configure SA associated protocol identification is mainly used for the same data stream signaling channel and data channel associated with the identification , and thus identify protocol

Question 17 of 20

18. Which of the following statement is wrong about NIP?

NIP compare the data packet and application knowledge base, identify specific data flow

NIP support for specific IP network segment, in a specific time period, for strategy processing

NIP using leading hardware architecture, FPGA realization of the application layer acceleration, ESP achieve forward acceleration

NIP Manager supports mail alarm response mode

Question 18 of 20

19. About WEB URL filtering technology audit function, which of the following description is correct? (Choose 3 answers)

URL audit function is used to record the user's HTTP Internet behavior as the basis for the audit.

The user can configure the web type to be audited, WEB types to distinguish with file extensions, including html, jsp, aspx, etc.

can audit user HTTP access in the specific content of the Post, as a user Internet censorship

internal users access to the specified type of WEB resource, the firewall will be logged and sent to log server.

Question 19 of 20

20. URL filtering, remote classification list provided and maintained by a third-party classification servers, devices can be synchronous updated automatically or manually from third-party classification servers.

TRUE

FALSE

Question 20 of 20

HCDA Test Preparations

Latest Huawei Exam Dumps | New HCIA, HCIP and HCIE Tests

Tag Archives: Huawei Certified Network Professional -Constructing Service Security Network

H12-723-ENU HCNP-Security-CSSN (Huawei Certified Network Professional -Constructing Service Security Network)

Recent Posts

Tags