H12-725_V4.0 Exam Questions
518 real H12-725_V4.0 exam questions with expert-verified answers and explanations. Page 5 of 11.
- Question #203Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following traffic diversion methods does Huawei Anti-DDoS defense system support? (Multiple choice)
Anti-DDoS traffic diversionBGP drainagepolicy routingGRE VPN - Question #204Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following mirroring methods does Huawei Anti-DDoS defense system support? (Multiple choice)
Anti-DDoStraffic diversionBGP drainageport mirroring - Question #205VPN Technologies
Which of the following descriptions of web proxy methods are correct? (Multiple choice)
SSL VPNweb proxyweb rewritingURL rewriting - Question #206VPN Technologies
Which of the following protocols can be encapsulated by GRE over IPSec? (Multiple choice)
GRE over IPSecprotocol encapsulationtunnelingmultiprotocol support - Question #207VPN Technologies
Which of the following are advantages of GRE over IPSec VPN? (Multiple choice)
GRE over IPSecVPN advantagesvirtual interfacesencryption - Question #208VPN Technologies
What are the following differences between establishing IPSec SA manually and establishing IPSec SA using IKE? (Multiple choice)
IPSec SAIKE negotiationmanual configurationkey management - Question #209VPN Technologies
Which of the following scenarios is suitable for certificate authentication? (Multiple choice)
certificate authenticationIKEdynamic IPpoint-to-multipoint - Question #210Advanced Security Features
In the quota control policy, which policies can be set for users to select multiple times? (Multiple choice)
quota controlinternet access policyuser traffic limitsonline time management - Question #211Advanced Security Features
Which of the following are processing actions that a bandwidth channel can perform? (Multiple choice)
bandwidth channeltraffic shapingQoSconnection limiting - Question #212Advanced Security Features
Which of the following items are outbound technologies in intelligent routing? (Multiple choice)
intelligent routingpolicy routingISP routingoutbound optimization - Question #213VPN Technologies
Which of the following items are the differences between transmission mode and tunnel mode? (Multiple choice)
IPSec modestunnel modetransport modeIP header protection - Question #214VPN Technologies
Which of the following descriptions about file sharing in SSL VPN are correct? (Multiple choice)
SSL VPNfile sharingSMBNFS - Question #215VPN Technologies
Which of the following descriptions of the file sharing function in SSL VPN are correct? (Multiple choice)
SSL VPNfile sharingprotocol conversionintranet access - Question #216Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following attacks does the application layer source authentication function of Anti- DDoS prevent? (Multiple choice)
Anti-DDoSapplication layer authenticationHTTP floodDNS flood - Question #217Advanced Security Features
If the firewall recognizes keywords during content filtering detection, what impact actions can it take? (Multiple choice)
content filteringkeyword detectionsecurity policy actionsNGFW - Question #218Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following options will be recorded in the IPS business module log of Huawei NGFW? (Multiple choice)
IPS loggingNGFWsignature detectionlog fields - Question #219Security O&M and Management
When querying the network connection through the netstat command on a Windows host, which of the following output information can be seen? (Multiple choice)
netstatnetwork diagnosticsconnection statusWindows tools - Question #220Security O&M and Management
As a security management mechanism, AAA provides which of the following services in a modular manner? (Multiple choice)
AAAauthenticationauthorizationaccounting - Question #222Advanced Security Features
Bandwidth management cannot completely limit the traffic of which of the following applications? (Multiple choice)
bandwidth managementP2P trafficapplication controltraffic limitations - Question #223Firewall Technologies and Deployment
Which of the following types of virtual systems exist on the firewall? (Multiple choice)
virtual systemsfirewall architectureroot systemvsys - Question #224Network Security Solution Design
If server authentication is used, which of the following devices may be included in the network access control system architecture? (Multiple choice)
network access controlserver authenticationNAC architectureauthentication server - Question #225Network Security Solution Design
A customer's current network uses Huawei wireless controller to deploy MAC authentication, and the authentication server is iMaster NCE-Campus. After the terminal associates with t...
MAC authenticationwireless controlleriMaster NCE-Campusdisplay command output - Question #226Network Security Solution Design
An engineer is setting up a wireless network environment at the customer's site. The wireless terminal authentication method uses 802.1X authentication. The authentication point is...
802.1X authenticationwireless controllerVAP templatesecurity template - Question #227VPN Technologies
As shown in the figure, firewall A and firewall B use IKE v1 main mode to establish IPSec VPN. Which of the following ISAKMP messages can detect the existence of NAT devices betwee...
IKEv1 main modeIPSec VPNNAT detectionISAKMP messages - Question #228Network Security Solution Design
The directory of LDAP is a tree structure composed of entries, each entry has its own unique identifiable name DN (Distinguished Name). The DN of a certain recording server is: CN=...
LDAPDistinguished Namedirectory servicesAD server - Question #229VPN Technologies
Which of the following authentication methods does SSLVPN support? (Multiple choice)
SSL VPNcertificate authenticationlocal authenticationanonymous authentication - Question #230Network Security Solution Design
802.1X authentication supports two authentication methods: EAP termination and EAP relay. Which of the following descriptions of these two authentication methods is correct? (Multi...
802.1XEAP terminationEAP relayRADIUS - Question #231Network Security Solution Design
Which of the following protocols work based on TCP? (Multiple choice)
TCP protocolsNFSHTTPSMB - Question #232Intrusion Prevention System (IPS) and Anti-DDoS
In which of the following ways does a Flood attack cause denial of service? (Multiple choice)
Flood attackdenial of serviceDDoSnetwork bandwidth exhaustion - Question #233Advanced Security Features
The main way of SQL injection attack is to construct clever SQL statements and submit them as input items to the server to implement the attack. Specific methods of SQL injection a...
SQL injectionunion querycomment symbolsweb application security - Question #234Advanced Security Features
Which of the following descriptions of keywords in content filtering are correct? (Multiple choice)
content filteringkeywordspredefined keywordscustom keywords - Question #235Firewall Technologies and Deployment
Which of the following contents can be backed up by Huawei firewall through the HRP protocol? (Multiple choice)
HRP protocolfirewall backupsession tableserver-map table - Question #236Security O&M and Management
CVE (Common Vulnerabilities and Exposures) stands for Common Vulnerabilities and Exposures. It is a list of publicly disclosed network security vulnerabilities. Which of the follow...
CVEvulnerability managementCNAsecurity disclosure - Question #237Advanced Security Features
Which of the following descriptions of URL classification are correct? (Multiple choice)
URL filteringURL classificationpredefined categoriessecurity policy - Question #238Advanced Security Features
Which of the following items are controls for FTP behavior? (Multiple choice)
FTP controlfile uploadfile downloadapplication control - Question #239Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following descriptions about port scanning are correct? (Multiple choice)
port scanningattack preventionTCP detectionUDP detection - Question #240VPN Technologies
The message is encapsulated using GRE over IPSec, and IPSec uses AH tunnel mode. Which of the following are the payload contents of GRE encapsulation? (Multiple choice)
GRE encapsulationIPSec AH tunnel modeVPN packet structuretunnel encapsulation - Question #241Network Security Solution Design
Which of the following descriptions of policy routing matching rules are correct? (Multiple choice)
policy-based routingPBRmatching conditionsnode configuration - Question #242Network Security Solution Design
Portal authentication is also often called Web authentication. When users access the Internet, they must authenticate on the authentication website. If the authentication is not su...
Portal authenticationWeb authenticationtrigger methodsaccess control - Question #243Network Security Solution Design
User identity authentication and authorization can be completed on the access control device or can be completed by the server. When an access device is used for authentication and...
local authenticationauthorization parametersAAAaccess device - Question #244Security O&M and Management
Which of the following options belong to the operations in the emergency response summary phase? (Multiple choice)
incident responseemergency responsepost-incident analysissecurity operations - Question #245Security O&M and Management
Which of the following types of attacks can be defended against by security hardening the Windows operating system? (Multiple choice)
OS hardeningWindows securitymalware defensesecurity configuration - Question #246Advanced Security Features
Which of the following are host inspection strategies in terminal security? (Multiple choice)
terminal securityendpoint securityhost inspectionantivirus - Question #247Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following descriptions of the traffic table are correct? (Multiple choice)
traffic diversiontraffic tableanti-DDoSsession management - Question #248VPN Technologies
Shown in the figure is the business interaction process for mobile office users to access server resources through the network extension function. So which of the following descrip...
SSL VPNnetwork extensionmobile officevirtual gateway - Question #249Advanced Security Features
Which of the following descriptions of the EAP termination method for 802.1x authentication are correct? (Multiple choice)
802.1XEAP terminationRADIUSnetwork access control - Question #250Advanced Security Features
Which of the following descriptions about MAC authentication are correct? (Multiple choice)
MAC authenticationnetwork access controlAAAidentity management - Question #251Advanced Security Features
In Huawei's HWTACACS authentication scheme, which of the following packets are HTACACS accounting packets? (Multiple choice)
HWTACACSAAA accountingTACACS+authentication protocol - Question #252Advanced Security Features
In file filtering, which of the following attributes can the firewall identify in the received files? (Multiple choice)
file filteringcontent inspectionDPIapplication protocol - Question #253Intrusion Prevention System (IPS) and Anti-DDoS
Which of the following prevention mechanisms does Huawei firewall support against HTTP Flood attacks? (Multiple choice)
HTTP FloodDDoS mitigationsource detection302 redirect