H12-725_V4.0 Exam Questions
518 real H12-725_V4.0 exam questions with expert-verified answers and explanations. Page 4 of 11.
- Question #153Network Security Solution Design
As shown in the figure is the global routing strategy based on link priority active and backup backup. Which of the following descriptions of this scenario is incorrect? (Multiple...
link priorityactive-backup routingload balancingoverload protection - Question #154VPN Technologies
During the IPSec diagnosis process, which of the following parameter information can be viewed through the display ike sa command? (Multiple choice)
IPSecIKE SAVPN diagnosticssecurity association - Question #155VPN Technologies
Which of the following descriptions about SSL VPN and IPSec VPN is incorrect? (Multiple choice)
SSL VPNIPSec VPNVPN comparisonclient authentication - Question #156Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following characteristics can be used as filter conditions for Anti-DDos filter? (Multiple choice)
Anti-DDoStraffic filteringsource IPTTL filter - Question #157Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following descriptions about the Anti-DDos detection center are correct? (Multiple choice)
DDoS detection centertraffic mirroringmanagement centertraffic distribution - Question #158Advanced Security Features
Which of the following are file type anomalies that the firewall can recognize? (Multiple choice)
file anomaly detectionfile type mismatchcontent inspectionfile corruption - Question #159Advanced Security Features
When the firewall identifies a file abnormality, which of the following corresponding actions can be implemented? (Multiple choice)
file anomaly responseblock actionalarm actionfirewall policy - Question #160Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following functions can be achieved when Huawei IPS equipment is deployed in the network? (Multiple choice)
IPSP2P traffic controlSQL injection preventionvulnerability defense - Question #161Advanced Security Features
Deploy Portal authentication on Huawei wireless controller. To ensure that the authentication terminal can jump to the page normally and open the Portal authentication page, what t...
Portal authenticationauthentication-free templateDNS trafficaccess whitelist - Question #162Advanced Security Features
A certain URL parameter is: Which of the following fields does this URL include? (Multiple choice)
URL structureURL componentshost fieldquery string - Question #163Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following back-injection methods does Huawei Anti-DDoS defense system support? (Multiple choice)
Anti-DDoStraffic back-injectionpolicy routingVPN re-injection - Question #164VPN Technologies
Which of the following protocol applications does the file sharing function in SSLVPN support? (Multiple choice)
SSL VPNfile sharingNFSSMB - Question #165VPN Technologies
Which of the following security protocols does IPSec use to encapsulate business packets? (Multiple choice)
IPSecAHESPencapsulation - Question #166Advanced Security Features
Which of the following are the contents contained in the session persistence table entry? (Multiple choice)
session persistenceload balancingsession tableoutbound interface - Question #167Network Security Solution Design
Which of the following descriptions of the Eth-Trunk interface are correct? (Multiple choice)
Eth-Trunklink aggregationdual-machine hot backupload sharing - Question #168Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following descriptions of SYN scanning attacks are correct? (Multiple choice)
SYN scanport scanningTCP handshakereconnaissance - Question #169Advanced Security Features
Which of the following descriptions of LDAP and AD authentication are correct? (Multiple choice)
LDAPActive DirectoryKerberosauthentication - Question #170Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following are special message attacks? (Multiple choice)
ICMP redirect attackIP source routingspecial message attacknetwork attack types - Question #171Advanced Security Features
Which of the following descriptions about the classification of bandwidth resources in virtual systems are correct? (Multiple choice)
virtual systemsbandwidth classificationvirtual interfacetraffic management - Question #172Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following are the prevention mechanisms supported by Huawei Anti-DDoS? (Multiple choice)
Anti-DDoSsession checkrate limitingfirst packet inspection - Question #173VPN Technologies
IPSec uses IKE v1 primary and horizontal tunnels to establish tunnels, and uses certificates to verify identities. Which of the following messages verifies the validity of the cert...
IKEv1certificate authenticationmain mode messagesIPSec PKI - Question #174Network Security Solution Design
Which of the following conditions can be matched by policy routing? (Multiple choice)
policy routingsource zonesource IPapplication matching - Question #175Advanced Security Features
Which of the following are characteristics of virtual systems? (Multiple choice)
virtual systemsresource isolationrouting tablemulti-tenant - Question #176Security O&M and Management
The output of the top command in a Linux system is displayed as shown in the figure. Which items are correct in the description of this output information? (Multiple choice)
Linux top commandprocess managementsystem monitoringCPU and memory - Question #177Advanced Security Features
Trojan horses are very harmful. They may leak the victim's sensitive information and even remotely control the victim's host. Which of the following are the ways in which Trojan ho...
Trojan horsemalware propagationsocial engineeringvulnerability exploitation - Question #178Firewall Technologies and Deployment
Which of the following items are not included in the content security filtering technology supported by the firewall? (Multiple choice)
content security filteringfirewall capabilitiesDDoS protectionweb server protection - Question #179Advanced Security Features
Which of the following are content security filtering technologies? (Multiple choice)
content security filteringURL filteringemail filteringapplication control - Question #180Advanced Security Features
Which of the following descriptions about the comparison between URL filtering and DNS filtering are correct? (Multiple choice)
URL filteringDNS filteringcontrol granularityaccess control comparison - Question #181Intrusion Prevention System (IPS) and Anti-DDoS
Anti-DDoS's session inspection mechanism can prevent multiple-select which of the following attacks? (Multiple choice)
Anti-DDoSsession inspectionTCP connection exhaustionabnormal session - Question #182VPN Technologies
Which of the following items may cause IPSec VPN establishment to fail? (Multiple choice)
IPSec VPNtroubleshootingencryption mismatchACL configuration - Question #183VPN Technologies
Which of the following does not belong to the establishment method of IPSec SA? (Multiple choice)
IPSec SAIKE negotiationmanual SAmain mode vs aggressive mode - Question #184Network Security Solution Design
Which of the following types does the global routing strategy include? (Multiple choice)
global routing strategyload balancinglink prioritybandwidth sharing - Question #185Security O&M and Management
Before upgrading the dual-machine system software version, which of the following tasks need to be prepared? (Multiple choice)
dual-machine hot backupsoftware upgradeHRPconfiguration backup - Question #186Firewall Technologies and Deployment
As shown in the figure, the firewall load balancing network is used, and it is found that packet loss sometimes occurs in business traffic. Which of the following may cause this to...
HRPVRRPsession backupfirewall load balancing - Question #187Advanced Security Features
Which of the following contents can be filtered by content filtering technology? (Multiple choice)
content filteringemail filteringURL filteringfile upload filtering - Question #188Advanced Security Features
Which of the following descriptions of the principles of file filtering technology are correct? (Multiple choice)
file filteringapplication protocol identificationfile type detectiontransmission direction - Question #189VPN Technologies
Which of the following descriptions of IPSec security policies in policy template mode are correct? (Multiple choice)
IPSec policy templateIKE peerPPPoE dynamic IPIPSec tunnel - Question #190Advanced Security Features
Which of the following descriptions about independent control and overall control of uplink and downlink bandwidth in the bandwidth channel are correct? (Multiple choice)
bandwidth channeluplink downlink controltraffic shapingQoS - Question #191Advanced Security Features
Which of the following conditions can be used as the basis for matching packets in the bandwidth policy? (Multiple choice)
bandwidth policyURL classificationtime periodtraffic matching conditions - Question #192Firewall Technologies and Deployment
As shown in the figure, the firewall load balancing network is configured. By checking the HRP status on firewall A, the following information is obtained: HRP_M [FW_A] display hrp...
HRP statedual-machine hot backupBFD monitoringVRRP fault - Question #193Network Security Solution Design
In the 802.1X authentication system, if the EAP termination method is used between the access device and the authentication server. In this authentication method, the device not on...
802.1X authenticationEAP terminationRADIUS encapsulationEAP methods - Question #194Network Security Solution Design
In Huawei's access control solution, when the RADIUS protocol is used to issue authorization, which of the following authorization parameters does iMaster NCE-Campus support? (Mult...
RADIUS authorizationiMaster NCE-CampusVLAN assignmentACL authorization - Question #195Network Security Solution Design
In a Portal authentication scenario, when a user is offline but the access device, RADIUS server and Portal server do not sense that the user is offline, which of the following pro...
Portal authenticationoffline user detectionRADIUS billingIP MAC spoofing - Question #196Security O&M and Management
In order to improve the information security awareness of all employees, a company held an information security education and training within the company. Which of the following be...
security awarenesspassword managementUSB device securityphishing email - Question #197Security O&M and Management
According to the classification method in the "National Cyber Security Incident Emergency Plan", which of the following events are equipment and facility failures? (Multiple choice...
cyber security incident classificationemergency planequipment failureDDoS vs hardware fault - Question #198Intrusion Prevention System (IPS) and Anti-DDoS
The three-layer IPS bypass deployment method usually places IPS on other network devices, such as switches, routers, etc. Which of the following descriptions of the IPS Layer 3 byp...
IPS Layer 3 bypasstraffic diversionbidirectional trafficreal-time protection - Question #199Security O&M and Management
Which of the following are common cyber attack methods? (Multiple choice)
DDoS attackSQL injectionXSS attackmalware - Question #200Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following descriptions of the working principles and functions of Huawei IPS are correct? (Multiple choice)
IPS signature databasedirect path deploymentasymmetric routingIPS actions - Question #201Advanced Security Features
If the firewall recognizes keywords when performing content filtering, which of the following response actions can it perform? (Multiple choice)
content filteringkeyword detectionblock actionalarm response - Question #202Advanced Security Features
Which of the following application protocols can carry files? (Multiple choice)
file transfer protocolsIMAPFTPHTTP file transfer