Huawei HCIP-Security-CSSN(Huawei Certified ICT Professional -Constructing Service Security Network) - H12-722-ENU FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Regarding the process of file filtering, which of the following statements is wrong?

A. After the file extraction fails, the file will still be filtered. B. The application identification module can identify the type of application hosting the file. C. The file type identification module is responsible for identifying the real type of the file and the extension of the file based on the file data D. Protocol decoding is responsible for parsing the file data and file transfer directions in the data stream.

Discussion 0

Correct Answer: A Vote an answer

Question 2

In the construction of information security, the intrusion detection system plays a role as a monitor. Through monitoring the traffic of critical nodes in the information system, it conducts in-depth analysis and explores the security events that are taking place. Which of the following are its characteristics?

A. Cannot perform in-depth inspection B. Unable to detect malicious operations or mis-operations from insiders. C. IDS can be linked with firewalls and switches to become a powerful "helper" for firewalls to better and more precisely control access between domains. D. Malicious code that is doped in allowable application data streams cannot be correctly analyzed.

Discussion 0

Correct Answer: C Vote an answer

Question 3

Which of the following is wrong about the 3 types of abnormalities in the file type recognition result?

A. File extension mismatch means that the file type does not match the file extension. B. Unrecognized file type means that the file type can't be identified and there is no file extension. C. Unrecognized file type means that the file type can't be recognized and the file extension can't be recognized. D. File corruption means that the file type can't be identified because the file is damaged.

Discussion 0

Correct Answer: C Vote an answer

Question 4

The network-based intrusion detection system is mainly used for real-time monitoring of critical network path information, listening to all packets on the network, collecting data, and analyzing suspicious objects. Which of the following options are its main features? (Multiple Choice)

A. Needs a lot of monitors. B. Good concealment, network-based monitors do not run other applications, do not provide network services, do not respond to other computers, and are therefore less vulnerable to attacks. C. Monitoring is fast, problems can be detected in microseconds or seconds, and host-based IDS rely on analysis of audit records in the last few minutes. D. Can detect the source address and destination address, can identify whether the address is illegal, can locate the real intruder.

Discussion 0

Correct Answer: B,C Vote an answer

Question 5

Which of the following statements is wrong about anti-spam answerback codes?

A. Release the message if the answerback code does not reply to or the replied answerback code is not configured on the USG. B. USG treats the mail that matches the answerback code as spam. C. The answerback code is uniformly set as 127.0.0.1. D. The answerback code will be different for different RBL service providers.

Discussion 0

Correct Answer: C Vote an answer

Question 6

Which of the following options does not pose security threat to the network?

A. Poor personal safety awareness B. Hacking C. Open company confidential documents D. The virus database was not updated in time

Discussion 0

Correct Answer: C Vote an answer

Question 7

During the infiltration phase of APT attack, which of the following attack behaviors will the attacker generally have?

A. Long-term latency and key data collection. B. By phishing emails, attachments carrying a 0day vulnerability cause the user's terminal to become a springboard for attacks. C. The attacker sends C&C attack or other remote command to the infected host, cause the attack to spread horizontally across the intranet. D. Leaks key data information to interested third parties.

Discussion 0

Correct Answer: C Vote an answer

Question 8

If the regular expression is "abc.de", which of the following will not match the regular expression?

A. abc.de B. abc+de C. abcdde D. abcde

Discussion 0

Correct Answer: D Vote an answer

Question 9

Which of the following are true about the e-mail protocol? (Multiple choices)

A. Use IMAP, the client software download all unread messages to the computer and the mail server deletes the message. B. Use IMAP, the user directly operates the mail on the server, and does not need to download all the mails locally and perform various operations. C. Use POP3, the user directly operates the mail on the server, and does not need to download all the mails locally and perform various operations. D. Use POP3, the client software download all unread messages to the computer and the mail server deletes the message.

Discussion 0

Correct Answer: B,D Vote an answer