Practice H12-722 Exam Online

Question 1

For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the

following descriptions is correct?

A :

TCP proxy means that the firewall is deployed between the client and the server. When the SYI packet

sent by the client to the server passes through the firewall, the

The firewall replaces the server and establishes a three-way handshake with the client. Generally used in

scenarios where the back and forth paths of packets are inconsistent.

B :

During the TCP proxy process, the firewall will proxy and respond to each SYN message received, and

maintain a semi-connection, so when the SYN message is

When the document flow is heavy, the performance requirements of the firewall are often high.

C :

TCP source authentication has the restriction that the return path must be consistent, so the application

of TCP proxy is not common. State "QQ: 9233

D :

TCP source authentication is added to the whitelist after the source authentication of the client is passed,

and the SYN packet of this source still needs to be verified in the future.

Answer: B

Question 2

If you combine security defense with big data technology, which of the following statements are correct? (multiple choice)

A : In the learning process, you should start from collecting samples, analyze their characteristics and then perform machine learning.

B : Machine learning only counts a large number of samples, which is convenient for security administrators to view.

C : In the detection process, the characteristics of unknown samples need to be extracted and calculated to provide samples for subsequent static comparisons.

D :

Security source data can come from many places, including data streams, messages, threat events, logs,

etc.

Answer: A,C,D

Question 3

Huawei USG6000 products can scan and process certain file transfer protocols for viruses, but which of the

following protocols is not included?

A : POP3

B : IMAP

C : FTP

D : TFTP

Answer: D

Question 4

Viruses can damage computer systems. v Change and damage business data: spyware collects, uses, and

disperses sensitive information of corporate employees.

These malicious pastoral software seriously disturb the normal business of the enterprise. Desktop anti-disease

software can solve the problem of central virus and indirect software from the overall situation.

A : True

B : False

Answer: B

Question 5

If the Huawei USG600 product uses its own protocol stack cache for all files passing through the device and then performs a virus scan, then the device uses It is the stream scanning method.

A : True

B : False

Answer: B

Name:	Huawei Certified ICT Professional - Constructing Service Security Network (HCIP-Security-CSSN V3.0)
Exam Code:	H12-722
Certification:	HCIP
Vendor:	Huawei
Total Questions:	178
Last Updated:	Apr 25, 2024

Huawei H12-722