Practice H12-723_V3.0 Exam Online

Question 1

Regarding the description of the ACL used in the linkage between SACG equipment and the TSM system, which of the following statements is correct!?

A : default ACL The rule group number can be arbitrarily specified.

B : default ACL The rule group number can only be 3999.

C : due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you needto ensure these ACL Not referenced by other functions.

D : The original group number is 3099-3999 of ACL Even if it is occupied, it can be successfully activated TSM Linkage.

Answer: C

Question 2

Which of the following options are relevant to MAC Certification and MAC The description of bypassauthentication is correct? (Multiple choice)

A : MAC Certification is based on MAC The address is an authentication method that controls the user's network access authority. It does not require the user to install any client software.

B : MAC Bypass authentication is first performed on the devices that are connected to the authentication 802 1X Certification;If the device is 802. 1X No response from authentication, re-use MAC The authentication method verifies the legitimacy of the device.

C : MAC During the authentication process, the user is required to manually enter the user name or password.

D : MAC The bypass authentication process does not MAC The address is used as the user name and password to automatically access the network

Answer: A,B

Question 3

In the process of establishing CAPWAPchannel between AP and AC, AP and AC negotiate to establish CAPWAP tunnel. In this process, CAPWAP tunnel is established. Use DTLS to encrypt and transmit UDP packets. What are the encryption methods supported by DTLS? (multiple choice)

A : Certificate encryption

B : AES encryption

C : PSK encryption

D : Plaintext encryption

Answer: A,C

Question 4

The following configuration is in A with B The authentication commands are configured on the two admission control devices. For the analysis of the following configuration commands, which ones are correct? (Multiple choice)

A : A What is configured on the device is MAC Bypass authentication

B : B What is configured on the device is MAC Bypass authentication o

C : A On the device 2GE1/01 Can access PC Can also access dumb terminal equipment

D : B On the device GE1/0/1 Can access PC It can also access dumb terminal equipment. Upper

Answer: A,C

Question 5

Security zone division means to better protect the internal network security,Based on the business type and security requirements of the intranet, divide the intranet into several granularities. Logical area. Which of the following options does not belong Agile Controller-Campus Security domain?

A : User domain

B : Network domain

C : Business domain:

D : Attack domain

Answer: D

Name:	HCIP-Security-CTSS V3.0
Exam Code:	H12-723_V3.0
Certification:	HCIP
Vendor:	Huawei
Total Questions:	170
Last Updated:	Apr 23, 2024

Huawei H12-723_V3.0