Huawei H12-722-ENU 問題集

質問 1：
The administrator defines two keywords that need to be identified on the firewall. The keyword x has a weight value of 2, the keyword y has a weight value of 3, and the content filtering alarm threshold is 5 (blocking threshold) 10. If the device detects that there is a keyword x in the page viewed by the user, the two keywords are Y;
What is the following statement about the value of weights and the behavior of users visiting web pages?
A. The weight value is 8 and you cannot access the web page.
B. The weight value is 10 and you cannot access the web page.
C. The weight value is 8 and you can access the web page.
D. The weight value is 10 and you can access the web page.
正解：C

質問 2：
Regarding the file filtering configuration file global configuration of the Huawei USG6000 product, which of the following is correct?
A. When the file type is not recognized, file filtering, content filtering, and anti-virus detection are not performed.
B. When the number of the file compressed layers is greater than the configured maximum number of uncompressed layers, the firewall cannot filter the file.
C. File filtering, content filtering and anti-virus detection are not available when the file is corrupted. At this time, the file can be released or blocked according to business requirements.
D. When the file extension does not match, if the action is "Allow" or "Alert", file filtering, content filtering, and anti-virus detection are performed according to the file type.
正解：B

質問 3：
The administrator has the following configuration:
1. The signature set Protect, all includes the signature ID 3000, and the entire signature set action is blocked.
2. Overwriting the signature ID3000 action is an alarm.
Which of the following judgments is correct?
A. The action of the signature ID3000 is an alarm
B. No relationship between signature set and coverage signature
C. Cannot determine the action of signature ID3000
D. The action of signature ID3000 is blocked
正解：A

質問 4：
File filtering technology can filter files based on their application, file transfer direction, file type, and file extension.
A. FALSE
B. TRUE
正解：B

質問 5：
Divert traffic using BGP protocol. The configuration command is as follows.
[sysname] route-policy 1 permit node 1
[sysname-route-policy] apply community no-advertise
[sysname-route-policy] quit
[sysname] bgp 100
[sysname-bgp] peer 7.7.1.2 as-number 100
[sysname-bgp] import-route unr
[sysname-bgp] ipv4-family unicast
[sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export
[sysname-bgp-af-ipv4] peer 7.7.1.2 advertise-community
[sysname-bgp-af-ipv4] quit
[sysname-bgp] quit
Which of the following options are correct for the BGP drainage configuration description? (Multiple choice)
A. After receiving the UNR route, the peer neighbor will not send it to any BGP neighbors.
B. Use BGP to advertise UNR routes for dynamic traffic diversion.
C. The management center does not need to configure protection objects. When an attack is discovered, the traffic diversion task is automatically delivered.
D. You also need to configure the firewall ddos bgp-next-hop fib-filter command to implement the remarks.
正解：A,B

質問 6：
The following figure is the diagram which shows the firewall and sandbox system linkage detection file.

The Web Reputation feature is enabled on the firewall, and Site A is set as a trusted site and Site B is set as a suspicious site. Which of the following statements is correct?
A. The files which the users obtain from Site A and Site B are sent to the detection node for detection.
B. When the user visits the Site B, although the firewall will extract the file and send it to the detection node, the user can still visit the Site B normally during the detection process.
C. Assume that Site A is an unknown website, the administrator cannot detect the website's traffic file.
D. After the detection node detects a suspicious file, it not only informs the firewall in the figure, but also informs other connected network devices.
正解：D

質問 7：
Network attacks are classified into two types: single-packet attacks and traffic-based attacks. Single-packet attacks include scanning and snooping attacks, malformed packet attacks and special packet attacks.
A. False
B. True
正解：B