Free Access To H12-711_V3.0-ENU HCIA-Security V3.0 Real Dumps

test2022-04-30T06:10:21+00:00

If you are start to prepare for H12-711_V3.0-ENU HCIA-Security V3.0 certification exam and really eager to do well, you can choose the most updated H12-711_V3.0-ENU dumps online to learn the actual questions and answers. With the H12-711_V3.0-ENU dumps questions is really a very good begin of one’s preparation to ensure that you are able to get the maximum outcomes in HCIA-Security V3.0 certification exam. You can use the free H12-711_V3.0-ENU practice tests to familiarize yourself with our product.

This free HCIA-Security V3.0 practice test can now be used to assess your preparation.

Page 1 of 11

1. After the firewall detects the virus, which of the following will release the virus?

Protocol n ot supported by firewall

Hit application exception

Source IP hits the whitelist

Hit v irus exception

2. When connecting to Wi-Fi in public places, which of the fol l owing is relatively safer?

Connect to unencrypt e d Wi-Fi hotspots

Connect to the paid Wi-Fi ho t spot provided by the ope r ator a nd only bro w se the Internet

Connect to unencrypted free W i -Fi for online shopping

Connect to encrypted free Wi- F i for online transfer operations

3. In tunnel encapsulati o n mode, there is no need to have the rou t ing to the destination private netwo r k segment, because the data will reseal using the new IP header to find routing table.

T rue

False

4. Evidence identificat i on needs to solve the integrity verification of evidence and determi n e if it meets t h e standards that can be used. Reg a r d i n g the standa r ds of evidence identification, wh i ch of the following statement i s correct?

Relevance standard refers to that i f the electronic evidence can have a material impact on the facts of the case to a certain ext e nt, the court should rule that it i s rele v ant.

Objective standard re f ers to the acquisition, storage, and su bmission of electron i c evidences shall be legal, and t h e basic rights such a s national interests, social welfare and pe r sonal privacy do not c onstitute strict violations.

Legality stand a rd is to ensure that e lectronic evi d ence is coll e cted from the initial acquisition, and the content is n o t changed in the process of sub m ission as litigation evidence.

Fair standard refers to that only the legal subject obtains the evidentiary mate r ial by legal means has evidentiary abilit y .

5. The single sign-on function of I nt ernet users, t he user dire c tly authenticates to the AD serve r , the device does not interfere with the user authenti c ation process, the AD monitoring service needs to be deployed in the USG de v ice to monitor the authentication infor m ation of the AD serve r .

T rue

False

6. Which of the following description i s wrong about the main implementation of Single Sign On?

Accept PC message mode

Query the security log mode of the AD server

Query syslog server mode

The firewall monitors AD authentication packets

7. Which of the following types of at t acks are DDos atta c ks?

Snooping scan attack

Malform e d message attack

Special message attack

T ra f f ic a t t a ck s

8. As shown in the figure, a TCP connection is established betwe e n client A and server

B.

Which of the following sh o uld be the serial number o f the "?" message in the t wo places in the figure?

a+1:a

a:a+1

b+1:b

a+1:a+1

9. Which protocols below can guar a ntee the con f identiality of data transmission? (Multiple Choice)

T elnet

S SH

FTP

HTTPS

10. Reg a rd i ng IKE SA, which of the following de s criptions is wron g ?

I KE SA i s two-way

IKE is an application l a yer protocol based on U D P

IKE SA s erves for I PS e c SA

The encryption algorit h m used in user da t a packets is determined by IKE SA

Page 2 of 11

11. can

view the di rection of the tra f fic in the firewal l .

S e ssion table

12. Which attack below does not belong to a speci a l packet attack?

IC M P redirection pac k et atta c k

ICMP unreachable packet a ttack

IP address scan attack

Super ICMP P a cket Attack

13. When one of the fol l owing situa t ions occurs i n the VGMP group, the VGMP group will not actively send VGMP messages to the opposite end?

The dual-system hot b ackup function is enabl e d

Manually switch the fi r ewall status betwe e n active and standby

Firewall service interface failure

Session table entry changes

14. Rega r di n g the investigation and ev idence collection, which of t he following statement is correct?

Evidence is not necessarily needed in an investi g ation

Evidence acquired by eavesdro p ping is also e f fective

During all investigation and eviden c e, preferably with law enf o rcement involved.

Document evidence is requ ir ed in computer crimes

15. When t he user uses the session authentication method to trigger the fi r ewall's built-in Portal authentication, the u s er does not act iv ely perform identity au t hentication, fi r s t performs business access, and the device pushes "redirect" to t h e authentication page.

T rue

False

16. When configuring user single sign-on, if the mode of query i ng the security log of the AD server is adopted, please sort the following authentication processes:

17. Which of the following is the acti o n to be taken in the eradic a tion phase in cybersecurity emergency

response? ( Multiple choice)

Look for trojan horses, illegal authorization s , and system loopholes, and deal with them in time

Revise t h e security policy based on the security incidents that occu r , and enable secu r ity auditing

Block the attacking behavior and r e duce the sc o pe of influence

Confirm the de g ree of damage ca us ed by the security incid e nt and report the s e curity incident

18. Which item stipulat e s that "spam should be d e tected and p r otec t ed at k e y network nodes, and the upgrade and update of the spam protection mech a nism should be m aintain e d"?

Malicious c ode preven t ion

Communication transmission

Centralized control

Border p r otection

19. The results seen through display ike sa are as follows.

Which o f the f o llowing statements is wrong?

IKE SA has been established

IPSec SA has been established

The neig h bor a d dress is 2.2.2.1

IKE uses t he V1 version

20. Network administrators can c o llect data that needs to be analyzed on network devices through packet capt u re, port mirr o ring or logs.

T rue

False

Page 3 of 11

21. Hu a wei USG firewall VRRP notification mess a ge is a multicast m e ssage, so each firewall in the backup gro u p must be able to achieve direct layer 2 intercommunication

T rue

False

22. Rega r di n g port mirror i ng, which of the following descriptions a re correct? (Multiple C h oice)

The mirror port copies t he packet to the observing port

The observation port sends the received mess a ge to the monitoring dev ic e

The mirror port sends the rec e ived message to the monitori n g device

The observing port copies the pac k et to the mir r or port

23. Which of the following is not a sta n d-alone anti-virus technology?

I n stall ant i -virus so f tware

Configure anti-virus techno l ogy on the netw o rk firewall

Use virus detection tools

Patch the system

24. Which of the following is the ne c e ssary configuration of IPSec VPN? ( Multiple choice)

Configure IKE neighbo r s

Configure IKE SA related pa r amet e rs

Configure IPS e c SA r e lated param e ters

Configure the stream o f interest

25. Which of the following SSL VPN f u nctions can only access all TCP res o urces?

Network expansion

File sharing

WEB agency

Port forwarding

26. Which of the following options belong to the certification fie l d of ISO27001? (Multiple choice)

Access control

Personnel safety

V ulnerability manage m ent

Business con t inuity mana g ement

27. On the surface, threats such as vi r uses, vulnerabilities, and T rojan hors e s are the causes of information security incid e nt s , but at t h e root, information s e curity incidents are a l so closely related to people a nd the informati o n system its e lf.

T rue

False

28. Reg a rd i ng the description of the intrusion det ec tion system, which of the following is wrong?

The intrusion detection system can dynamically c olle c t a large amount of key information throu g h the network and compute r , a n d can ana l yze and jud g e the current state of the entire system e nvironment in time

Once the intrusion det ec tion system finds any behavior that violates the s e curity policy or the system has traces of being attacked, it can implement blocking operat io ns

Intrusion detection system in c ludes all software and hardwa r e systems used for intrusion detection

The imm e rsion detection syst e m can be linked with firewalls and switches, beco m ing a pow e rful "assistant" of the firewall, and better a nd more pr e cise contr o l of tra f f i c a cc ess between domains

29. After the c o mpan y ’ s network administra t or has configured dua l -system h ot backup, h e can view

VRRP and other informat i on through commands, and get the following info r mation

HRP_M<F W A>

Gigabit Ethernet 0/0/3 V irtual Router 1

State: M a s t e r

V irtual IP: 10.3.0.3

Master IP: 1 0.3.0.1

Priority Run: 120

Priority Config: 100

Master Priority: 120

Preempt: Y E S Delay T i m e: 0s

T imer Run: 60s T imer Config: 60s Auth type: N ONE

V irtual MAC: 0000 - 5e0 0- 0101

Check TIL: Y ES

Config type: vgmp V rrp

Backup-for w ard ： disabl e d

Create time ： 202 0 -03 -1 7 17:35:54 U TC+08:02

Last change time: 2020- 0 3-22 1 6:01: 5 6 UTC+08: 0 2

T y pe in the blank space to view the c o mmand is

display v mp

30. Which of the following does not belong to the classification of cybersecurity i n c idents?

Major cy b ersecurity i n c idents

Special cybersecurity incidents

General cybersecurity incidents

Major cy b ersecurity i n c idents

Page 4 of 11

31. Drag the steps of electronic forensics on the l e ft into the box on the right to summarize, and arrange them from t o p to bottom i n the order o f execution.

32. Which of the following options is not included in the consistency check o f the HRP master and backup configuratio n ?

N A T poli c y

Whether the he a rtbeat interface with the same serial numb e r is configured

Next hop and outgo i ng inte r face of the static route

Authentication strategy

33. NAPT t e chnology can implement a public IP a ddress for multiple private network h os ts.

T rue

False

34. In the construction of an infor m ation security system, a security model is needed to accurately describe the relationship betwe e n important aspects of security and system behavior

T rue

False

35. Which of the following options does not belong to the log type of the windows op e r a ting system?

B u s iness l og

Applicati o n log

Security log

S y s tem l o g

36. Which of the following is the encry p tion t e chnology used in t h e digital envelope?

S ymmetr i c encr y ption algorithm

Asymm e tric encryption algorithm

Hashing a lgorithm

Streaming algorithm

37. Which of the following is the di f ference betwe e n NAPT and No- PA T?

After No- PA T conversi o n, for external users, all messages come from the same IP address

No- PA T o nly supports protoc o l port conversion at the transp o rt layer

NAPT on l y supports protocol address translation at the network layer

No- PA T supports protocol address translation at the network layer

38. Digital signature is to generate a d igital fingerp r int by u sing a hash algorithm to en s ure the integrity of data transmission

T rue

False

39. In addition to supporting built-in Portal authentication, firewall also supports c u s tom Portal authentication, and does not requi r e sepa r ate dep l oyment of ex t ernal Portal servers when using custom Portal auth e ntication.

T rue

False

40. In the Huawei SDSec solution, w hich layer of e quipment d o es the firewall belong to?

Analysis layer

Control layer

Execu t ive level

Monitoring layer

Page 5 of 11

41. Which of the following is not included in the Business Impact Analys i s (BIA)?

B u s iness priority

I n cident handling prior i ty

Impact a s sessment

Risk identification

42. The European TCSEC criterion is d ivided into two modules of function a nd evaluati o n, mainly in the militar y , government, and business.

T rue

False

43. Digital envelope technology means t h at the sender encrypts the data with the rec e iver's public ke y , and then se n ds the ciphert e xt to the receive r .

TRUE

F ALSE

44. User au t hentication is the authentication of the client's identity by the SSL virtual gat e wa y , including:

_, server auth en tication, certificate anonymous authe n tication and certificate c h allenge authentication.

Local authentication

45. In the c l assif i cation of the inf o rmation security level protect i on sy s tem, w hich of the f o llowing levels defines if the information system i s d a maged, it will cause da m age to social ord e r and p u blic interests?

The third l evel: se c urity mark protection

The fourth level: structured p r otection

The sec o nd level: system audit protection

The fir s t l evel: user s e lf-protection

46. Rega r di n g the matching conditio n s of the sec u rity polic y , w hich of the f o llowing opti o ns are correct? (Multiple C h oice)

The "sou r ce security zone" in the matching c o ndition is an o ptional p a r a meter

" T ime period" in the match i ng condition is an optional para m eter

"Application" in the match i ng condition is an optional para m eter

"Service" in the matching condition is an op t ional parameter

47. When the company's network administra t or is performing dua l- system hot b ackup, because of the possibility of inconsistent b a ck and forth paths, if y ou want to tu r n on the session fast backup function, the command you need to en t er is .

hrp mirror session enable

48. Which of the following is not a requirement for firewall dual-machine hot backup?

The firewall hard w are models are consistent

The firewall software version is co n sistent

The interface type and nu m ber us e d are consistent

The firewall interface IP addresses are consist e nt

49. Which of the following description i s wrong about the digi t al fingerpr i nt in the digital si g natur e ?

It is the data obtained b y the sender after calculating the plaintext information throu g h the HASH algorithm.

The receiver will use the sende r ’ s public k ey to calculate the gen e rated d ata fingerpr in t and compa r e it with the received digital finge r print.

Digital fi n gerprints are al s o called infor m ation d i gests.

The receiver needs to use the sender's public key to unlock the digital signature and get the digital fingerpr i nt.

50. If users on the external network (where the security zone is Untrust) are allowed to access the intranet server (wh e re t h e secur i ty z o ne is DMZ), the destination security z o ne selected when confi g uri n g the security policy is _.

DMZ

Page 6 of 11

51. In the USG s ystem f i rewall, you can use which function to p rov i de well-known a ppli ca tion services for non- w ell - known ports?

Port mapping

MAC and IP address binding

Packet fi lt ering

Long co n nection

52. Which of the following options belongs to the Layer 2 VPN technology?

S SL V PN

L2TP VPN

GRE VPN

IPS e c V P N

53. Which of the following i s the status information that can be backed up by the HRP (H u awei

Red u nd a ncy Protocol) pro t ocol? (Multiple Choice)

Conference table

ServerM a p entry

Dynamic blacklist

Routing table

54. In the PKI system archit e c ture, is the CA's window to users, and

is an extension of CA's certificateissuan c e and m anagement functions. He is responsible for accepting u s ers' certif i cate registration a nd revocation applicatio ns , reviewing employees' identity information, and deciding w he ther to apply for certificate registration and revocation. T he CA submits an application to issue or revoke a digital certificate.

55. The firewall imports users locall y , and supports importing user information in format files and datab ase dbm files to the local device.

CSV

56. Which of the following is not a symmetrical encryption algorithm?

DES

3DES

AES

RSA

57. Regard i ng the description of IP Spoofing, which of the foll o wing i s wro n g?

IP spoofing attacks are launched by using the normal IP address-based trust relationship betwe e n hosts

After an IP spoofing attack is successfu l , the attacker can use any forged IP address to imitate a legitimate host to a cc e ss key informat i on

The attacker needs to disguise the source IP a d dress as a t r usted host a nd send a d a ta segment marked with SYN to request a connection

Hosts in a trust relationsh i p based on IP addresses can log in directly without entering password verification

58. The digital certificate uses a t hird-party organization to imp a rtiality to the public k e y , thereby ensur in g the non- r ep u diation of data tran s mission. Therefo r e, only the certificate of t he communicating party i s requi r ed to confirm the c o rrectness of the public ke y .

T rue

False

59. Regard i ng the source of electronic evidence, which of the following de s criptions is wron g ?

Fax information and mobile pho n e recordings are electron i c evidence r elated to communication technolog y .

Movies and TV series are ele c tron i c evidence r elated to network technolog y .

Database ope r ation records and o pe rating system logs are electronic evi d ence related to computers

The oper a ting system logs, e-mail, and chat records can all be used as the source of electronic evidence.

60. DDoS attack belongs to which attack type?

Snoop scan attack

Malform e d packet att a ck

Special p acket a t tack

Flow type attack

Page 7 of 11

61. Which of the following is not a maj o r form of c o mputer crime?

Plant a T r ojan horse i n to the target host

Hacking the target ho s t

Use a c o mputer to conduct perso n al surveys

Use scanning tools to collect network information without permission

62. Common scan attacks include: port scan tools, v ulnerability sc a nning tools, applica t ion scan tools a n d database scanning tools, etc.

T rue

False

63. Which it e m below is not a Linux operating syst e m?

CentOS

RedHat

Ubuntu

MAC OS

64. Regarding the firewall securi t y po l icy stateme n t, which of t h e following o ptions is wrong?

If the sec u rity policy i s permit, the discarded packets will not accumulate t he "hit times"

When configuring the security policy name, the same name cannot be us e d rep e atedly

Adjust the order of the security policy without s aving the c onfiguration file, it will t a ke e f f ect immediately

The number of security policy entri e s of Huawei USG series f irewalls can n ot exceed 128

65. When using the passive mode to establish an FTP connection, use port 20 for the control channel and p o rt 21 for the data chan n el.

T rue

False

66. When d e ploying the IPSec VPN t u nnel mode, the AH protocol is u s ed for packet enc a psulation. In t h e header field of the new IP pack e t, which of the foll o wing para me ters does not require d ata integrity verification?

Source IP address

Destinati o n IP address

TTL

Idetification

67. Reg a rd i ng the N A T policy proc e ss ing, which of the following are correct? (Multiple choice)

Server-map is processed after status detection

The source N A T policy query is processed after the session i s created

The source N A T policy is proc e ssed after the s e curity policy is matched

Server-map is processed before the security policy is matc h e d

68. In response to network security i n cidents, remote emerg en cy re s ponse is generally t aken first. If the problem ca n not be solved for the customer throu g h remote acces s , a fter the customer c onfirms, it will be transferred to the local e m ergency r e sponse process.

T rue

False

69. Which is the order of the four stag e s of the Information Secur i ty Management System (ISMS) in t h e following opt i ons?

Plan->Check->Do->Action

Check->Plan-> D o->Action

Plan->Do - >Check->Action

Plan->C h eck->Action->Do

70. In the USG series firewall, wh i ch of the following commands can be us e d to query the N A T

conversion result?

display nat translation

display fi r ewall sessi o n table

display current nat

display f irewall nat translation

Page 8 of 11

71. What versions of the SNMP protocol are ther e ? (Multiple choice)

SNM P v 1

SNM P v 2b

SNMPv2c

SNMPv3

72. Which of the following mechanisms are used to implement MAC flooding attacks? (Multiple choice)

MAC learning mecha n ism of the s w itch

The forwarding mech a nism of the switch

ARP learning mechan i sm

Limit on the numb e r o f MAC entri e s

73. Reg a rd i ng the description of the bu f fer overflow attac k , which of the following opti on s are correct? (Multiple choice)

B u f fer ov e rflow attack explo i ts the flaws in the memory oper a tion of the s o ftware system to run the attack code with high o p erating aut ho rity

B u f fer ov e rflow attacks have nothing to do with operating system vulnerab i lities and architecture

Bu f fer ov e rflow attack i s one of the common methods in the behavior of attacking soft w are systems

Bu f fer ov e rflow attac k s are a p plication layer attacks

74. The att a cker scans the ports to find the ports currently op e n by the att a cked object to determine the attack method. In port sc a nning a ttacks, attackers usually use PortScan attack s o ftware to initiate a series of TCP/UDP connection s , and determ i ne whet h er the host uses these ports to provide se rv ices based on the response message.

Such netwo r k detection b eha v ior is called scanning.

Port

75. In the future development trend of information securit y , te r mi n al detection is an im p ortant ring.

Which methods are the category of terminal detection? (Multiple Choi c e)

I n stall the host anti-virus so f tware

Monitoring the proce d ure e q uipm e nt

Prevent users from ac c essing public search engines

Monitor host registry modified record

76. Reg a rd i ng the description of the preemption f u nction managed by VGM P , which of t he following is wro n g?

By default, the preemption function of the VGMP manageme n t group is enabled

By default, the preemption delay time of the VGMP management gro u p i s 40s

Preemption means that when the original failed master device recovers from a failure, its priority will be restored, a n d you can regain i t s own status as the master

After the VRRP backup gro u p is added to the VGMP management gro up , the original preemption function on the VRRP b a ckup group b ecomes invalid

77. In the user management of Huawei firewall, which of the follow i ng categories are i ncluded? ( M ultiple choice)

Internet u ser management

Access user mana g ement

Administ r ator user managem e nt

Device user mana g ement

78. IPv6 supports configuring the rou t er authorizat i on function on the device, verifying the identity of t h e peer thr o ugh a digital certificate, and selecting a legal devi c e.

T rue

False

79. Which of the following i s the core p a rt of the P2 D R model?

Pol i c y

Prote c tion

Detection

Response

80. In a sta t eful inspecti o n firewall, when the stateful inspection mechanism is turned on, when the second packet (SYN+ACK) of the three-way hand s hake arrives at the firewall, i f there is n o correspon d i n g session table on the firewall, which of t he following descriptions i s correct?

The firewall does not create a session table, but allows pa c kets to pass

I f the firewall security pol i cy allows packets to pass, c reate a session table

Packets must not pass through the firewall

The message must pass through t h e firewall a n d establish a s ession

Page 9 of 11

81. The enterprise can directly enter the do m ain n a me in the br o wser when a ccessing the internal webpage of the enterprise.

T o meet the above requirements, which of the foll o wing servers does the enterprise ne e d to deploy? (Multiple choice)

T ime synchronization server

F T P s erver

DNS s erver

Mail serv e r

82. Reg a rd i ng the description of SSL VPN, which of the following is correct?

Can be used without a client

The IP l a y er can be e n crypted

There is a N A T traversal problem

No auth e ntication required

83. Reg a rd i ng L2TP VPN, which of the following i s wrong?

Applicable for emp l oyees on business trips to dial-up access to the intranet

Data will n ot be encrypted

Can be used in conju n ction with IP s ec V PN

Belongs to the three-tier VPN tec h nology

84. In order to obtain criminal evidence, it is necessary to master the intrusion tracking technolog y .

Which of the following de s cription of t h e tracking t e chnology i s correct? (Multiple choice)

The packet recording technology i ns erts tracki n g data into the tracked IP packet, ther e by marking the packet on each router mentioned.

Link detection technology determines the source of the atta c k information b y testing the network connection between r out e rs

Data packet marking technology r ecords data p a ckets on the route r , and then u s es data drilling technology to extract inf o rmation about the source of the attack

Shallow mail behavior analysis can realize the analysis of s ending IP a d dress, sending time, se n ding frequ e nc y , n umber of recipients, shall o w email he a ders and ot h er informati o n

85. Which of the following options are harmful to t r a f fic-based at t acks? (Multiple choices)

The network is down

Server down

Data is stolen

The web p age has be e n tampered with

86. In information security protec t ion, commonly used security products i n c lude firewalls, Anti-DDos equipment, and IPS/IDS equipment

T rue

False

87. Social engine e ring is a method of deceiving a n d hurting victims through psychological traps s u c h as psychological weakness, instinc t ual r e action, curi o sit y , trust, and gre e d.

T rue

False

88. Equipment sabotage attacks are gen e rally not easy to cause inf o rmation leakage, but usually cause the interrupt i on of netwo r k communication servic e s .

T rue

False

89. Regarding the description of t he risk a ssessm e nt, which of the following options is wrong?

Risk ass e ssment requires training in asset collection and r i sk assessme n t methods.

Risk ass e ssment needs to identi f y threats, vulnerabilities, and scan for s e curity vulnerabilities.

Risk ass e ssment requires asses s ment of risks a nd classification of risk levels.

Risk ass e ssment requires ope r ation of monitoring system.

90. In the p r ocess of establish i ng IPSec VPN between the pe er s FW_A and FW_B, two types of sec u rity associations need to be establi s hed in two s tages. In the first s t a ge, establish to v erify the identity of the peers.

I KE SA

Page 10 of 11

91. Reg a rd i ng the actions of the s e c u rity policy and the descripti o n of the s e curity configuration file, which of the following opt i ons are cor r ect? (Multiple choice)

Prohibited If the action of the security policy is "prohibi t ed", the device will discard this tra f fic, and no further content securi t y c hecks will be performed

The security configuration file can take e f fect without being a pplied to the secur i ty policy where the action is all o wed

The security configuration file must be appli e d to the security policy whose action is allowed to take e f fe c t.

If the security policy action is "All o w", the tra f f i c will n ot ma tc h the securi t y profile

92. Which attack below is not a malformated packet atta c k ?

T EARDROP attack

S murf att a ck

TCP shard attack

ICMP un r eachable message attack

93. 1. Regard i ng the descript i on of the Windows log event type, wh i ch of the following is correct? (Multiple

Choice)

W arning event refers to an event that the application, driv e r or service i s succe s s ful.

Error events usually r efer to the l o ss of functi o nality and d a ta. For example, a s ervice c annot be l oad e d as a system boot, an err o r event is g e nerat e d.

When the disk space is insu f ficient, it will be recorded as a "i n formation event".

Failure audit event refers to a failure of s e c urity l ogin a t tempts, such as fa i lure when a user view access e s a n etwork drive, is recorded as a failure audit event.

94. The administrator PC is direct l y co n nected to the manageme n t port of the USG firewall and uses the web method to perform initiali z ation operations.

Which of the f ollowing statements is correct? (Multiple Choice)

The browser of the m a nagem e nt PC visits http://192.168.0.1

The IP a d dress of the manage m e nt PC is manually set to 1 9 2. 1 68.0.2- 19 2.168.0.254

The bro w ser of the m a nagem e nt PC visits http://192.168.1.1

Set the n e twork card of the manag e ment PC to a utomatically o btain an IP add r ess

95. In the Huawei SDS e c solution, w hich of the f o llowing bel on g to the execution layer equipment? (Multiple choice)

CIS

Fierhunter

Router

AntiDDoS

96. Which of the following is the action to be taken in the summary phase of cybersecurity emerg e ncy response? ( Multiple Cho i ce)

Establish a defense system and s p ecify control measures

Evaluate the impleme n tation of emergency plans and pro p ose f ollow-up improvement p l ans

Judging the e f fectiveness of isolation measures

Evaluate the members of the emergency response organization

97. Which of the following is the stat u s information that can be backed up by the HRP ( Hua w ei

Red u nd a ncy Protocol) pro t ocol? (Multiple choice)

S e ssion table

ServerM a p table entri e s

Dynamic blacklist

Routing table

98. Which of the following is n o t included in the trigger authentication method for firewall acc e ss u s er authentication?

M PLS V P N

S SL V PN

IPS e c V P N

L2TP VPN

99. Normall y , the port us e d by the FTP act i v e mode server for d ata transmission is the TCP ( ) port.

100. Match the following survey methods and descriptions one by one

Page 11 of 11

101. Please match the w hole worm virus attack p rocess and attack description.