Advance Your Career by Using Online H12-731_V2.0-ENU Dumps

Category:

Comments:

0 Comments

Post Date:

April 7, 2024

Obtaining the HCIE-Security H12-731_V2.0-ENU certification can help you demonstrate your expertise in Huawei solutions and advance your career in related industry. Using H12-731_V2.0-ENU dumps as part of your study plan can help you identify knowledge gaps, improve your exam-taking skills, provide immediate feedback, and increase your chances of passing the H12-731_V2.0-ENU exam. Huawei H12-731_V2.0-ENU exam free dumps questions are available below.

Page 1 of 9

1. When you realize the security of cloud transmission.

Which of the following do we generally consider? (multiple selection).

Data source authentication

Data encryption efficiency

Encryption of transmission data

Integrity check

2. Which of the following options is required by Security Manager in Graded Protection 2.0 (multi-select

Audit management

Grading and filing

Centralized control

System administration

3. Which of the following are important to the corporate network?

Prevent DOS attacks by hackers

Provide security

System stability

Network serviceability

4. If the campus network egress is connected to multiple ISP chains, which of the following functions of the firewall can meet the DNS requests of school intranet users to be sent to the DNS servers on the Internet through different ISP links?

ISP chooses the way

DNS filtering

DNS transparent proxy

Flower energy DNS

5. Nmap is a network security tool for network discovery and security auditing, so which of the following options does it fall into?

Virus scan

App scanning

Vulnerability scanning

Port scanning

6. Which of the following devices can work with situational awareness to isolate infected hosts? (single selection).

Agile-controller Campus

gile-controller DCN

SecoManager

EDR

7. The following describes FW's application behavior control features.

Which one is correct? (single selection).

For FTP behavior, application behavior control can limit the size of upload/download files, but cannot control the upload/download line separately

For IM behavior You can set a black whitelist. The priority relationship between the black and white list and the provincial action is: blacklist, white list, default action.

When creating a security strategy Application behavior control and yellow files can be combined with users, time periods, and other objects to achieve the purpose of application control for different users and different time periods.

For HTTP behavior. The application behavior control function can be controlled by DET operation in POS

8. Which of the following situational aware detection attacks can DDOS attacks, firewall bypasses, and malware outreach attacks know? (multiple selection).

C&C anomaly detection

Hidden channel detection

Encrypted traffic detection

Meteor base rod anomaly detection

9. Nmap can only be used to scan a single host, but it cannot be used to scan a large computer network to find out which hosts and services of interest are found

TRUE

FALSE

10. The following describes port scanning.

Which is wrong? (single selection).

TCP port scanning uses the three-way handshake feature

The purpose of port scanning is to determine what kind of services are enabled on the peer host, so as to find an entry for intrusion.

When the scanner sends a Syn message If the peer does not reply, the peer port is down.

For UDP port scanning It is to determine whether the port is open by sending a UDP data packet to the peer with a specific port number and observing whether the ICMP port is unreachable packet.

Page 2 of 9

11. Which of the following access control types is defined according to the organization's security policy or (single-select).

Administrative access control

Logical/technical access control

Physical access control

Corrective access control

12. Which of the following is not a way to back up data? (Single selection)

Server-Less 份

Client-Less backup

LAN-Free S 份

LAN backup

13. The following description of security protection, which one is correct (single selection)

The packets received by the Ethernet interface cannot be bound to the corresponding relationship between the source IP address and the MAC address

When FW is deployed behind a NAT device, there may be a large amount of traffic accessing different destination ports with the same source IP address In this scenario, you cannot enable port scanning and attack prevention.

ASPF function will not affect device performance.

When FW works in transparent mode You can enable IP spoofing attack prevention.

14. One of the reasons why traditional passive defense does not protect against APT attacks is that traditional defense methods cannot correlate and analyze threats.

TRUE

FALSE

15. A description of the following IPv6 Secure Neighbor Discovery feature information for one of the interfaces.

Which one is wrong?

The interface does not have strict security mode enabled

The maximum key length that the interface can accept is 2048

The minimum key length that the interface can accept is 512

The security level of the CGA address is 1

16. JDBC is a mechanism for Java applications to talk to various different databases, and ODEC, similar to JDEC, is also an important database access technology.

TRUE

FALSE

17. XSS vulnerabilities are injection vulnerabilities formed by sending invalid database commands

TRUE

FALSE

18. Which of the following does HiSec Insight's big data processing not include?

Data preprocessing

Flow data collection

Distributed storage

Distributed indexes

19. Which of the following is wrong about Huawei's approach to business security resilience? (single selection).

Achieve active security through correlation analysis and collaborative joint defense.

Abandon the traditional passive cyber threat defense mode and achieve security resilience with business as the center.

Use Al technology to compensate for the lag of threat defense.

Active security and passive defense through the department Protect against attacks at all stages of the cyber attack chain.

20. What are the correct options for describing the impact of IPv6 technology on cyberattacks (multiple selection).

A PV6 is enough to take into account the security aspects and does not have its own security vulnerabilities.

B. IPv6 also has a defensive effect on application-layer spoofing attacks.

C. In the IPv6 environment Sharding attacks, ARP, and DHCP attacks can be mitigated or eliminated to some extent.

D. IPv6 has the ability to locate the initiator of the attack through attacks

Page 3 of 9

21. With the following description of the database auditing system, which option is wrong? (single selection).

Detect abnormal operations of legitimate users.

Usually carry out direct deployment, extract messages and records.

Ability to analyze operational behavior that does not contain threat signatures.

Support deployment in cloud environment, and the strategy is matched as needed Rules are on demand.

22. Configure the source NAT policy for the campus network egress firewall to use the internal network users to access the external network, if you need to use security policies to block access to the external network. The source IP address matched in the security policy is the private IP address of the user.

TRUE

FALSE

23. Which of the following threats cannot be detected by the sandbox virtual execution environment? (Single selection)

C&C 攻击

PDF file virus

PE file virus

Web file virus

24. The following describes the role of logs.

Which one is wrong? (single selection).

Attack traceability

Log storage

Virus blockade

O&M failure analysis

25. The web reputation feature categorizes websites and differentiates them according to different classifications. When a user visits a potentially risky website, it can be promptly alerted or blocked by the system thus helping the user quickly confirm the security of the target website.

Which of the following options does not fall under the classification of Web Reputation Sites?

Default trusted Web site

Customize trusted websites

Customize the suspicious station

Predefined trusted websites

26. What are the logical/technical access controls in the following equation? (multiple selection).

Access control list

Camera

Encryption

Employment Guidelines

27. Which of the following is not a cybersecurity threat (single selection).

DDOS attacks

Phishing attacks

IP Spoofing

IP address scanning

28. By default, two subnets of the same VPC network deployed in different physical resource pools cannot access each other.

TRUE

FALSE

29. How does the following not belong to the firewall to detect viruses? (single selection).

Heuristic detection technology

First package detection technology

Malicious domain name detection technology

Document reputation detection technology

30. About Huawei's firewall defense technology against SYN Flood.

Which of the following options is correctly described?

The limiting method of limiting the number of TCP half-open connections can prevent SYN Flood political attacks

Through SYN Cookie technology, SYN Flood can be prevented

By purchasing inter-domain security policies, SYN Flood attacks can be prevented

The TCP new connection rate limiting method protects against SYN Flood attacks

Page 4 of 9

31. Which of the following can be used as a Huawei IPS device to determine intrusion behavior? (single selection).

Session table

signature

Routing table

IP address

32. Control of ping packets to the USG firewall itself. The access control management function of the interface takes precedence over the security policy.

TRUE

FALSE

33. The guarantee of information security does not need to be fully integrated with business implementation, because information security will increase the complexity of the network and reduce the efficiency of business processing. (single selection).

TRUE

FALSE

34. In • User Login Web Page with User Name and Password Medium. The following is about Username".

Which one is described correctly? (single selection).

Identification

Identity authentication

Billing

Authorization

35. In the HCIE-Security V2.0 course architecture, which of the following pieces are included? (multiple selection).

Cloud security

Security operations and analytics

Security attack and defense technology

Code auditing

36. Formatting your computer means that the files have been completely erased Unable to fix.

TRUE

FALSE

37. Which of the following belong to the development of information security? Extravagant selection)

Information assurance stage

Big data security stage

Artificial intelligence security stage

Communication confidentiality stage

38. To protect against viruses, which of the following security appliances can be deployed at the cloud network perimeter? (single selection).

Bastion host

Database audit

Anti-DDos

Sandbox

39. Broiler chickens Also known as a zombie, it usually refers to a machine that can be controlled remotely by hackers and is often used in DDOS attacks.

TRUE

FALSE

40. Categorize vulnerabilities by common ways.

Which of the following types of vulnerabilities should XSS fall into? (single selection).

Webloophole

Host vulnerabilities

Middleware vulnerabilities

Database vulnerabilities

Page 5 of 9

41. USG firewall's DDoS attack prevention techniques include which of the following?

Current limiting technology

Cryptography

Fingerprint technology

Source detection technology

42. In the Linux log security settings.

Which of the following options is included in the user operational log? (multiple selection).

Permission modification

Account creation

Password modification

Whether the login is successful

43. PT (Advanced Persistent Threat) attacks are stealthy and persistent computer intrusion processes, usually orchestrated by certain personnel For specific goals.

TRUE

FALSE

44. Implement secure communication network requirements for Class-Protect on HUAWEI CLOUD.

Which of the following services does not need to be covered? (single selection).

Install anti-virus software

Web application protection

Anti-DDoS Pro

Security groups

45. After you deploy HUAWEI CLOUD ANTI-DDoS Pro or Anti-DDoS Premium (DDoS Pro) or Anti-DDoS Pro, whether or not a DDoS attack occurs All access traffic is sent directly to the origin server IPo

TRUE

FALSE

46. The main role of the audit system is to audit security events after the fact.

To provide sufficient evidence, a security audit product must have which of the following features7

Protect the security of user communications and the integrity of data, and prevent malicious users from intercepting and tampering with data It can fully protect users from malicious damage during operation

It can provide fine-grained access control to maximize the security of user resources

It provides centralized management of all server and network device accounts, which can complete the monitoring and management of the entire life cycle of the account

It can automatically display the user's operation process and monitor the user's every behavior Determine whether the user's behavior poses a danger to the internal network security of the enterprise

47. Which of the following options is a major cause of business disruption in the cloud? (multiple selection).

Vulnerabilities

Data breach

Cyber attacks

Viruses

48. In the Anti-DDos system, the function of cleaning devices is to detect anomalous traffic in the network and escalate to the management centre (single selection).

TRUE

FALSE

49. The following is a description of FW's DNS filtering feature What are the correct options? (multiple selection).

The DNS overcast function has a great impact on the performance of the device compared to the URL overcast, but all services corresponding to the domain name can be controlled.

DNS filtering can be controlled at the stage of initiating HTTP/HHPS URL requests.

DNS filtering can release or block requests for different time periods or different users/groups by referencing time periods or users/groups.

The DNS filtering function is usually used in enterprise gateways to effectively manage users' access to network resources

50. In the first half of 2021 alone, there were 944 data breaches that resulted in 3.3 billion data records being compromised. Organizations must follow the principle of which of the following options to keep data safe at all times.

in the file system Data at rest is protected on the database through storage technology

Check database backups regularly

Protection of data in use when using or processing data

Protect data in transit as it travels across the network

Page 6 of 9

51. Which of the following information cannot be scanned by the nmap tool? (single selection).

Operating system version

Port

Services

System vulnerabilities

52. Which of the following items is not part of the firewall dual-machine hot standby ES-induced check is small

Whether the address set configuration is the same

Whether the IP addresses of the interfaces are consistent

Whether the service set configuration is the same

Whether the security policy configuration is the same

53. When a user terminates the use of HUAWEI CLOUD services, as a service provider, we should ensure the security of user data operations.

Transmission security

Storage security

Destroy security

Collect security

54. The purpose of access control is to provide access to authorized subjects and prevent any unauthorized and intentional access.

TRUE

FALSE

55. Let's see which devices can be used as Huawei CIS (Cybersecurity Intelligence system.).

Trapping probes in network security intelligence systems?

firewall

switchboard

router

server

56. The following describes the black hole route.

Which one is wrong? (single selection).

When the NAT address pool address and the public network interface address are not on the same network segment Blackhole routing must be configured.

The black hole routing configuration consumes the CPU processing resources of the device.

Configuration command line of black hole routing: ip route-static (ip-address) null o

Configure the destination NAT In order to prevent the routing environment, the concubine needs to configure a blackholed route to the destination IP address before translation.

57. Data destruction refers to the use of various technical means to completely delete the data in computer storage devices, so as to prevent unauthorized users from using residual data to restore the original data information, so as to achieve the purpose of protecting key data.

Which of the following options is wrong about how data is destroyed?

Storage media such as disk or tape It's all magnetic technology If it can destroy its magnetic structure. The existing data no longer exists.

In addition to low-level formatting of disks and tapes, it can also be done in the form of physical rhetoric

Since tapes can be used repeatedly, data can be destroyed using overwrite. As long as the disk is overwritten once Data cannot be interpreted.

Destruction of the entity's storage media Make the data unreadable by the system It is also one of the ways to ensure the confidentiality and security of data.

58. The firewall policy feature supports IPv4, but does not support IPv6 (radio selection).

TRUE

FALSE

59. There are many firewall security policies in the data center network, and the administrator enables the policy backup acceleration function, and the source address matching conditions of the security policy are modified It can be effective immediately.

TRUE

FALSE

60. Whitelisting may not properly handle complex obfuscation, which could allow attackers to subvert filters and potentially inject SQL language.

TRLE

FALSE

Page 7 of 9

61. Digital signature technology can guarantee the credibility of the data source and verify whether the data has been tampered with during transmission. (Single selection)

TRUE

FALSE

62. What are the common database intrusion detection techniques? (Multiple selection)

Intrusion detection technology based on known attack behaviors

Intrusion detection technology based on data mining

Statistical-based intrusion detection technology

Intrusion detection technology based on pattern matching

63. The sandbox is actively protected against viruses (single selection)

TRUE

FALSE

64. Hypothetical has a set of raw data as follows: 10, 20. 30. 40, 50". The set of data was desensitized

by randomly swapping the position of the data, and the desensitized data was: 30, 20, 50, 10,40

Which of the following algorithms is used in this data masking method? (single selection).

AV hash

Change

Load break

Noise

65. Which of the following describes the business process of the network trapping scheme wrong? (single selection).

The attacker initiates a network scanning attack. The purpose is to probe the network structure.

The business that the attacker eventually attacks is a deliberately constructed counterfeit food business. Therefore, all the actions of the attacker are monitored and reported to the CIS platform

When the access traffic reaches the trapping probe A collision between the probe needle and the trap will be used to send the access flow to the trap

Trapping probes can analyze the frequency of scanning different destination IPs or ports for the same source address Then a virtual MAC responds to the attacker.

66. The following describes how the intrusion prevention signature database is upgraded.

Which is wrong which n single selection)

Local upgrade methods include scheduled upgrade and immediate upgrade.

Online upgrade methods include scheduled upgrade and immediate upgrade. C can be upgraded locally to the feature database.

You can upgrade the special library by upgrading in Lee.

67. Which of the following is not a virus exemption method? (single selection).

Modify system files

Parasitic in macro files

Modify the memory signature

Modify the file signature

68. Let's take the L2TP over IPSec in the dual-machine scenario What is wrong with the description is the egg? (single selection).

In this scenario, Fireproof will assign an IP address to the client

After the L2TF tunnel is established, the user cannot access the Internet normally

The parameters set by the client should match the parameters set on the firewall.

The client should initiate a dial-up connection to the virtual address of the dual machine.

69. The following describes the configuration contents of the firewall file filtering feature.

Which one is wrong, (single selection).

Use the command display current-configuration to display configuration information for the default configuration file itself.

The administrator should first clarify which types of files need to be purged, and then select the types of files that the device can support Finally, fill in the remaining file types in "Custom extension".

When the default configuration file is referenced by the command line configuration security policy You need to enter the full profile name Otherwise, it cannot be successfully referenced.

Under the command line interface, you can view the configuration information in the default configuration file through the command display profile type url-filter.

70. Domain name information collection is the first step in technical means information collection Domain name information can be collected through a domain name lookup website such as hois (single selection).

TRUE

FALSE

Page 8 of 9

71. If you are deploying a WAF appliance in your network for the first time, which is the correct option for the WAF configuration process sequencing? (single).

1, View logs Understand security events in your network

2, Add protection sites

3, Custom rule groups

4, After going live, the strategy is adjusted

1-2-3-4

3-2-1-4

3-1-2-4.

1-3-2-4

72. Which options below are the main changes in Equal Protection 2.0 compared to Equal Protection 1.0' (multiple choices).

The classification of general safety requirements is more detailed.

The workflow of equal protection assessment is more detailed.

Added expansion requirements.

The security requirements of each level are more detailed.

73. The following describes the security risks caused by ordinary users.

Which gas single choice is wrong)

Unauthorized access to business systems unrelated to their own work

The user copies the screen content, My Screen or copied by other unlawful means Download the data library.

Fake user identity query and obtain data resulting in data leakage 5JL

Accidental operation causes the O&M database to be deleted, Destruction.

74. Common database security audit techniques according to technical characteristics.

What are the categories that can be divided into? (multiple selection).

Agent-based audit technology

Log-based estimation technology

Gateway-based audit technology

Audit technology based on network monitoring

75. The General Data Protection Regulation (GDPR) aims to protect personal data, which of the following options are fundamental rights of data subjects (multiple choices)?

Control

Weak expulsion

Right of Access

Right to information

76. The sandbox cannot link the anti-virus with which of the following devices, (single selection).

Firewall

switchboard

Router

CIS

77. Which of the following attack methods of 24L can be used in the strike phase of the cyber attack chain? (multiple selection).

DoS attacks

Virus attack

IP packet attack with routing record entries

Drag the library

78. Which of the following options is a virtual firewall use case?

Multi-tenant app environment Enable the virtual firewall to implement an independent port for administrative privileges

Network traffic isolation between VMs is not possible

VPN group and network environment Enable the virtual firewall for forward isolation

Isolation of different security areas of the campus network

79. Requirements for physical facilities in the computer room in Class Protection 2.0

Intrusion prevention

Electromagnetic protection

Personnel authorization

80. The intensity of a system security threat is only related to the vulnerability of the system, and a well-protected system is basically immune to attack.

TRUE

FALSE

Page 9 of 9

81. Figure 1 shows the raw data table Figure 2 shows the data processed by Kanonymization technology, what is the K value of the processing? (Selection).

82. NIP can scan the uploaded files for viruses to prevent intranet PCs from being infected with viruses.

TRLE

FALSE

TAGS:

H12-731_V2.0-ENU, H12-731_V2.0-ENU exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get H12-731_V2.0-ENU Dumps Full Version

Q&As: 276
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

Advance Your Career by Using Online H12-731_V2.0-ENU Dumps

Related

Posts

H13-527_V5.0 Dumps Questions Increase Your Chance of Success

Get Certified Easily with Online H19-402_V1.0 Dumps

Improve Your Knowledge with H13-321_V2.0-ENU Exam Dumps

Prepare H13-611_V5.0-ENU Exam with Using H13-611_V5.0-ENU Dump Questions

About Us

EMAIL

Services

Opening Hours