Reliable HCNP-Security H12-723 Dumps PDF Aug 01, 2022 Recently Updated Questions [Q116-Q132] : Top Exam Collection : http://blog.topexamcollection.com

Q116. About the anti-spam local black and white list, which of the following statements is wrong?

created manually by the user on the USG

black and white list is matched by the sender’s DNS suffix

black and white list is by extracting the source IP address of the SMTP connection to match

if the source IP address of the SMTP connection matches the blacklist, blocking the connection

Q117. Which of the following is correct for the isolation domain role?

Isolation domain refers to the area where the terminal host can access before being authenticated, such as DNS server, external authentication source, service controller (SC) and service manager (SM) are located.

Isolation domain is an area that allows access when an end user passes identity authentication but fails security authentication, such as the patch server and virus database server.

Isolation domain refers to the area where end users can access after passing authentication and security authentication, such as ERP system, financial system and database system are located.

End users can access the isolation domain regardless of identity authentication

Q118. A network administrator configure IP function, when the signed agreement is http, will only detect http header information.

TRUE

FALSE

Q119. Security authentication is mainly achieved through security policies. The terminal host support management for the security check of monthly users is mainly realized by loose check policies. End user behavior management is mainly realized by monitoring policies. If users need to formulate policies according to their own wishes, they can use them. Custom strategy.

right

wrong

Q120. When the test-aaa command is used on the access control device to test the connectivity to the Radius server, the operation result is displayed successfully. However, the user cannot access the device normally. Possible reasons do not include the following options:

The access layer switch does not enable EAP transparent transmission.

In the wireless 802.1X scenario, no security profile is configured on the access control device.

The service controller does not join AD domain in AD authentication scenario.

The user account or password is wrong configured.

Q121. Which of the following options are relevant to MAC Certification and MAC The description of bypass authentication is correct? (Multiple choice)

MAC Certification is based on MAC The address is an authentication method that controls the user’s network access authority. It does not require the user to install any client software.

MAC Bypass authentication is first performed on the devices that are connected to the authentication
802 1X Certification;If the device is 802. 1X No response from authentication, re-use MAC The authentication method verifies the legitimacy of the device.

MAC During the authentication process, the user is required to manually enter the user name or password.

MAC The bypass authentication process does not MAC The address is used as the user name and password to automatically access the network.

Q122. Which of the following statements is true about the description of ACL used by SACG devices and TSM systems?

The default ACL rule group number can be arbitrarily specified.

The default ACL rule group number can only be 3999.

Because SACG needs to use ACL 3099 to 3999 to receive the rules delivered by TSM system, you must first ensure that these ACL are not referenced by other functions before configuring TSM linkage.

TSM linkage can be successfully enabled even if ACL with the original group number 3099 to 3999 is occupied.

Q123. An account can only belong to one user group, that is, a user can only belong to one department.

right

wrong

Q124. How to check if MC service is started?

Check whether TMCServer service is started in task manager.

Check whether TMCServerDaemon service is started in Task Manager.

Check whether TMCServer and TMCServerDaemon services are started in Task Manager.

On the server, choose “Start> All Programs> Huawei> Agile Controller> Server Controller” Check whether MC status is “Running”.

Q125. VIP Experience guarantee, from which two aspects are the main guarantees VIP User experience? (Multiple choice)

bandwidth

Forwarding priority

Authority

Strategy

Q126. When configuring an antivirus software policy, if set “The required antivirus software violation level is not installed or not running” is “general”, and select the option “There is a serious violation of the rules prohibit access to the network.” When the user use Any office for authentication, the authentication is passed. However, if the result of the security check shows that the antivirus software is not enabled, can the user access the network?

Can access the network, but also can access network resources.

Can’t access the network.

Can access the network, but need to be repaired to access network resources.

Can access the network, but need to re-authenticate to access network resources.

Q127. Visitor management can authorize visitors based on their account number, time, location, terminal type, access method, etc., and can also push personalized pages to visitors based on time, location, and terminal type.

right

wrong

Q128. URL filtering, according to the classification of the remote or local classification, the user can create multiple urls strategy, determines the corresponding processing action in URL strategies, a URL strategy was applied to the domain, which can realize the corresponding URL filtering.

TRUE

FALSE

Q129. After the Agile Controller-Campus is installed successfully, how can you check whether SM and SC components start normally? (Multiple choices)

Open https://SM server IP:8943 in browser and enter the account admin and the default password Changeme123. If the login succeeds, the SM component is normal.

After logging in SC, choose Resources> Users> User Management and create a new common account. Open the https://SM server IP:8447/newauth in browser. If the account created in the previous step can be successfully logged in, the SM component is normal.

Open https://SC server IP:8443 in browser and enter the account admin and the default password Changeme123. If the login succeeds, the SC component is normal.

After logging in SM, choose Resources> Users> User Management and create a new common account. Open the https://SC server IP:8447/newauth in browser and use the account created in the previous step. If the login succeeds, the SC component is normal.

Q130. Identity authentication determines whether to allow access by identifying the access device or user.

True

False

Q131. Agile Controller-Campus All components are supported Windows System and Linux system.

right

wrong

Q132. Which of the following is true about software SACG and hardware SACG?

Hardware SACG use Any Office for admission control.

Software SACG use Any Office for admission control.

Hardware SACG save costs compared to software SACG.

Hardware SACG is more secure.