Real H12-722 Exam PDF Test Engine Practice Test Questions [Q44-Q64]

NO.44 Which of the following options is correct about the file reputation technology in the anti-virus engine?

NO.45 Anti-DDoS defense system includes: management center, inspection center and cleaning center.

NO.46 Anomaly detection establishes the normal behavior characteristics of the system’s main body through analysis of system audit data: In the detection, if the audit data in the system is different from the normal behavior characteristics of the established subject, it is considered an intrusion behavior. Which of the following can be used as the system body? (Multiple choices)

NO.47 UDP is a connectionless protocol. A large number of UDP flood attacks cause the performance of network devices that rely on session forwarding to be degraded and even the session table is exhausted, causing network congestion.
Which of the following options does not prevent UDP flood attacks?

NO.48 If the Huawei USG600 product uses its own protocol stack cache for all files passing through the device and then performs a virus scan, then the device uses It is the stream scanning method.

NO.49 Which of the following categories of sandbox can be used by a company to detect image files, shellcode code files, and PDF files? (Multiple choices)

NO.50 Which of the following descriptions are correct based on proxy-based anti-virus gateways?

NO.51 Which of the following statement about IPS is wrong?

NO.52 About the anti-virus gateways based on flow-scanning, which of the following statement is wrong?

NO.53 What content can be filtered by the content filtering technology of Huawei USG6000 products? (multiple choice)

NO.54 Viruses can damage computer systems and falsify or damage business data: Spyware collects, use and disseminate sensitive information from employees. These malicious software seriously interfere with the normal business operations of enterprises. Desktop anti-virus software can solve the problem of viruses and spyware globally.

NO.55 Which of the following options does not belong to packet message attack?

NO.56 Network attacks are classified into two types: single-packet attacks and traffic-based attacks. Single-packet attacks include scanning and snooping attacks, malformed packet attacks and special packet attacks.

NO.57 Which of the following technologies can achieve content security? (multiple choice)

NO.58 Which of the following signature properties cannot be configured for IP custom signatures?

NO.59 During the infiltration phase of APT attack, which of the following attack behaviors will the attacker generally have?

NO.60 The administrator has made the following configuration:
1. The signature set Protect_ all includes the signature ID3000, and the overall action of the signature set is to block.
2. The action of overwriting signature ID3000 is an alarm.

NO.61 When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.

NO.62 Use BGP protocol to achieve diversion, the configuration command is as follows
[sysname] route-policy 1 permit node 1
[sysname-route-policy] apply community no-advertise
[sysname-route-policy] quit
[sysname]bgp10029
[sysname-bgp] peer
[sysname-bgp] import-route unr
[sysname- bgpl ipv4-family unicast
[sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export
[sysname-bgp-af-ipv4] peer 7.7. 1.2 advertise community
[sysname-bgp-af-ipv4] quit
[sysname-bgp]quit
Which of the following options is correct for the description of BGP diversion configuration? (multiple choice)

NO.63 Which of the following are the network layer attacks of the TCP/IP stack? (Multiple Choices)

NO.64 With regard to traditional firewalls, which of the following statements are correct? (Multiple choice)