Reliable HCNP-Security H12-723 Dumps PDF Aug 01, 2022 Recently Updated Questions [Q116-Q132]

可靠的 HCNP-Security H12-723 Dumps PDF 2022年08月01日最近更新的问题 [Q116-Q132]

8 月 1, 2022 管理 0 条评论

给本帖评分

Reliable HCNP-Security H12-723 Dumps PDF Aug 01, 2022 Recently Updated Questions

Pass Your Huawei H12-723 Exam with Correct 200 Questions and Answers

Q116. About the anti-spam local black and white list, which of the following statements is wrong?

created manually by the user on the USG

black and white list is matched by the sender’s DNS suffix

black and white list is by extracting the source IP address of the SMTP connection to match

if the source IP address of the SMTP connection matches the blacklist, blocking the connection

Q117. Which of the following is correct for the isolation domain role?

Isolation domain refers to the area where the terminal host can access before being authenticated, such as DNS server, external authentication source, service controller (SC) and service manager (SM) are located.

Isolation domain is an area that allows access when an end user passes identity authentication but fails security authentication, such as the patch server and virus database server.

Isolation domain refers to the area where end users can access after passing authentication and security authentication, such as ERP system, financial system and database system are located.

End users can access the isolation domain regardless of identity authentication

Q118. A network administrator configure IP function, when the signed agreement is http, will only detect http header information.

真

假

Q119. Security authentication is mainly achieved through security policies. The terminal host support management for the security check of monthly users is mainly realized by loose check policies. End user behavior management is mainly realized by monitoring policies. If users need to formulate policies according to their own wishes, they can use them. Custom strategy.

对

错误的

Q120. When the test-aaa command is used on the access control device to test the connectivity to the Radius server, the operation result is displayed successfully. However, the user cannot access the device normally. Possible reasons do not include the following options:

The access layer switch does not enable EAP transparent transmission.

In the wireless 802.1X scenario, no security profile is configured on the access control device.

The service controller does not join AD domain in AD authentication scenario.

The user account or password is wrong configured.

Q121. Which of the following options are relevant to MAC Certification and MAC The description of bypass authentication is correct? (Multiple choice)

MAC Certification is based on MAC The address is an authentication method that controls the user’s network access authority. It does not require the user to install any client software.

MAC Bypass authentication is first performed on the devices that are connected to the authentication
802 1X Certification;If the device is 802. 1X No response from authentication, re-use MAC The authentication method verifies the legitimacy of the device.

MAC During the authentication process, the user is required to manually enter the user name or password.

MAC The bypass authentication process does not MAC The address is used as the user name and password to automatically access the network.

Q122. 关于 SACG 设备和 TSM 系统使用的 ACL 说明，以下哪项说法是正确的？

默认 ACL 规则组编号可任意指定。

默认 ACL 规则组编号只能是 3999。

由于 SACG 需要使用 ACL 3099 至 3999 来接收 TSM 系统发送的规则，因此在配置 TSM 联动之前，必须首先确保这些 ACL 不被其他功能引用。

即使原始组号为 3099 至 3999 的 ACL 被占用，也能成功启用 TSM 联动。

Q123. An account can only belong to one user group, that is, a user can only belong to one department.

对

错误的

Q124. How to check if MC service is started?

Check whether TMCServer service is started in task manager.

Check whether TMCServerDaemon service is started in Task Manager.

Check whether TMCServer and TMCServerDaemon services are started in Task Manager.

On the server, choose “Start> All Programs> Huawei> Agile Controller> Server Controller” Check whether MC status is “Running”.

Q125. VIP Experience guarantee, from which two aspects are the main guarantees VIP User experience? (Multiple choice)

bandwidth

Forwarding priority

Authority

Strategy

Q126. When configuring an antivirus software policy, if set “The required antivirus software violation level is not installed or not running” is “general”, and select the option “There is a serious violation of the rules prohibit access to the network.” When the user use Any office for authentication, the authentication is passed. However, if the result of the security check shows that the antivirus software is not enabled, can the user access the network?

Can access the network, but also can access network resources.

Can’t access the network.

Can access the network, but need to be repaired to access network resources.

Can access the network, but need to re-authenticate to access network resources.

Q127. Visitor management can authorize visitors based on their account number, time, location, terminal type, access method, etc., and can also push personalized pages to visitors based on time, location, and terminal type.

对

错误的

Q128. URL过滤，根据远程分类或本地分类，用户可以创建多个URL策略，在URL策略中确定相应的处理动作，将一个URL策略应用到域中，即可实现相应的URL过滤。

真

假

Q129. After the Agile Controller-Campus is installed successfully, how can you check whether SM and SC components start normally? (Multiple choices)

Open https://SM server IP:8943 in browser and enter the account admin and the default password Changeme123. If the login succeeds, the SM component is normal.

After logging in SC, choose Resources> Users> User Management and create a new common account. Open the https://SM server IP:8447/newauth in browser. If the account created in the previous step can be successfully logged in, the SM component is normal.

Open https://SC server IP:8443 in browser and enter the account admin and the default password Changeme123. If the login succeeds, the SC component is normal.

After logging in SM, choose Resources> Users> User Management and create a new common account. Open the https://SC server IP:8447/newauth in browser and use the account created in the previous step. If the login succeeds, the SC component is normal.

Q130. Identity authentication determines whether to allow access by identifying the access device or user.

正确

假的

Q131. Agile Controller-Campus All components are supported Windows System and Linux system.

对

错误的

Q132. Which of the following is true about software SACG and hardware SACG?

Hardware SACG use Any Office for admission control.

Software SACG use Any Office for admission control.

Hardware SACG save costs compared to software SACG.

Hardware SACG is more secure.

加载中 …