Verified H12-731_V2.0 Dumps Q&As - H12-731_V2.0 Test Engine with Correct Answers [Q37-Q52] : IT certification exam materials : http://blog.dumpleader.com

NEW QUESTION 37
Which of the following scenarios is for network intrusion prevention? (multiple selection).

IDC or server cluster frontend.

The front end of the firewall for the exit of the corporate network.

Between branches of the company’s network interconnection.

The boundary between the campus network and the Internet

NEW QUESTION 38
If you want to intelligently select traffic for the source IP address, you can use which of the following intelligent routing methods^ (single selection).

Global traffic steering strategy

Policy routing and routing

ISProuting

Health check

NEW QUESTION 39
The IPS function of Huawei’s intrusion prevention device is not controlled by License (radio selection).

TRUE

FALSE

NEW QUESTION 40
Which of the following options is a major cause of business disruption in the cloud? (multiple selection).

Vulnerabilities

Data breach

Cyber attacks

Viruses

NEW QUESTION 41
With the prevalence of e-commerce, online banking, e-government The business value of WEB servers is getting higher and higher, and the security threats faced by web servers are also increasing, and the defense against the web application layer has become an inevitable trend, WAF (WebApplication Firewall WEB APPLICATION FIREWALL) PRODUCTS BEGAN TO BECOME POPULAR. As shown in the figure The firewall uses the deployment mode of transparent proxy About the deployment mode of WAF using transparent proxy Which of the following options is described incorrectly.

You need to configure the IP address and route for the forwarding interface of the WAF

The agent works in route-forwarding mode instead of bridge mode

JUDGING FROM THE ANGULARITY OF THE WEB CLIENT THE WEB CLIENT IS STILL DIRECTLY ACCESSING THE SERVER AND IS NOT AWARE OF THE EXISTENCE OF WAF

Minimal network changes enable zero-configuration deployment

NEW QUESTION 42
The following is a description of the trapping technique The correct ones are which women’s multiple choices).

If the attacker cannot notice the fake service provided by the honeypot, the capture efficiency of the honeypot is relatively low

Honeypot technology is to absorb the network by deploying some king machines as bait Trick attackers into attacking them This allows attacks to be captured and analyzed

Discuss the access layer switch equipment as honeypot equipment

The honeypile can only passively wait for the attacker to attack

NEW QUESTION 43
In 2017, hackers unveiled a slew of cyberattack tools, including Eternal Blue tools. Then * Eternal Blue exploits the vulnerability of which of the following options of the Windows system can obtain the maximum relaxation limit of the system.

UMCODE vulnerability

Printer vulnerability

Frontpage server extension vulnerability

SMB vulnerabilities

NEW QUESTION 44
Which of the following implementation elements is a multi-choice that can be controlled throughout cloud operations).

Security policy deployment

Account authority management

Risks can be identified

The operation can be audited

NEW QUESTION 45
The following is a description of DNS transparent proxy Which ones are correct? (multiple selection).

The DNS proxy function replaces the source address header in the DNS request packet.

After enabling the DNS transparent proxy function The DNS server address to replace is determined for the outgoing interface

In the case of NGFW as the exit network and the DNS server of the enterprise intranet The DNS transparent proxy function can still be implemented normally.

Two DNS requests for the same user in the case of DNS transparent proxies The replaced address may be different.

NEW QUESTION 46
The following describes the authentication method and authentication domain relationship for Internet users single sign-on What are the correct ones? (multiple selection).

The firewall participates in the authentication process of single sign-on users, so authentication configuration can be performed in the authentication domain.

If no other authentication domain exists on the server, the default authentication domain is online.

Single sign-on in progress Firewalls can also be bound to users based on IP/MAC addresses Identify the authentication domain to which the local user belongs

Single sign-on users need to be online on the firewall Policy control based on user Therefore, the single sign-on user must also belong to a certain authentication domain.

NEW QUESTION 47
Take the following description of safety measures Which one is wrong? (single selection).

Security audit can identify risks by analyzing threat logs

Security audit is usually divided into database audit, behavior audit and operation and maintenance audit

Security audit is generally a post-event audit, because permission management and authorization are the core of security audit

B/S architecture model and C/S class of database audit Implement a two-layer (presentation layer, data access layer) architecture

NEW QUESTION 48
IPS (Intrusion Prevention System) is an application-layer-based security appliance, so which of the following options is it used to match attack identification?

Destination IP address

Port number

Feature library

Source IP address

NEW QUESTION 49
The Pv6 multicast address range is FE80::/10

TRUE

FALSE

NEW QUESTION 50
Which of the following options protects against SMRF attacks?

If the source address of an ICMP request packet is a broadcast address, the packet is discarded

If the destination address of an ICMP request packet is a network address, the packet is discarded

If the destination address of an ICMP request packet is a broadcast address, the packet is discarded

If the source address of the ICMP request packet is the host address The message is discarded

NEW QUESTION 51
According to the requirements of Graded Protection 2.0, the scope of security audits should cover not only every operating system user on the server, but also which of the following

Database user

Monitor users

Configure the user

Non-admin users

NEW QUESTION 52
Which of the following options is required by Security Manager in Graded Protection 2.0 (multi-select

Audit management

Grading and filing

Centralized control

System administration