NEW QUESTION 1

Which of the following options are available for IPSec VPN peer authentication?

• A. Digital signature
• B. Digital certificate
• C. Digital envelope
• D. asymmetric key

Answer: ABC

NEW QUESTION 2

In some scenarios, it is necessary toIPAddress conversion, but also to the purposeIPaddress translation, which of the following techniques is used in this scenario?

• A. two-wayNAT
• B. sourceNAT
• C. NAT-Server
• D. NAT ALG

Answer: A

NEW QUESTION 3

About intrusion prevention systems (IPS), which of the following is false?

• A. IDSThe device needs to be linked with the firewall to block intrusion
• B. IPSThe device cannot be deployed in bypass mode in the network
• C. IPSDevices can be connected in series at the network boundary and deployed online
• D. IPSOnce the device detects intrusion behavior, it can achieve real-time blocking

Answer: B

NEW QUESTION 4

Which of the following options can bewindowsDo you do it in the advanced settings of the firewall? (multiple choice)

• A. Restore defaults
• B. Change notification rules
• C. Set up connection security rules
• D. Set up inbound and outbound rules

Answer: CD

NEW QUESTION 5

Which of the following is not a stand-alone anti-virus technology? ( )[Multiple choice]*

• A. [MISSING]
• B. Configure anti-virus technology on network firewall
• C. Use virus detection tools
• D. Patch the system

Answer: B

NEW QUESTION 6

The information security level protection is to improve the overall security level of the country, and at the same time reasonably optimize the allocation of security resources, so that it can send back the greatest
security and economic benefits.

• A. True
• B. False

Answer: A

NEW QUESTION 7

Which of the following is an encryption technique used in digital envelopes?

• A. Symmetric encryption algorithm
• B. Asymmetric encryption algorithm
• C. hash algorithm
• D. stream-add algorithm

Answer: B

NEW QUESTION 8

Digital envelope technology means that the sender uses the receiver's public key to encrypt the data and then sends the ciphertext to the receiver.

• A. True
• B. False

Answer: A

NEW QUESTION 9

Which of the following are remote authentication methods? (multiple choice)

• A. RADIUS
• B. Local
• C. HWTACACS
• D. LLDP

Answer: AC

NEW QUESTION 10

In practical applications, asymmetric encryption is mainly used to encrypt user data

• A. True
• B. False

Answer: B

NEW QUESTION 11

Social engineering is a means of harm such as deception, harm, etc. through psychological traps such as psychological weaknesses, instinctive reactions, curiosity, trust, and greed of victims ( )

• A. TURE
• B. False

Answer: A

NEW QUESTION 12

Which of the following options are suitable for business travelers to access the corporate intranet in the public network environment? ( )*

• A. L2 TP over IPSec VPN
• B. GER VPN
• C. MPLS VPN
• D. SSL VPN

Answer: AD

NEW QUESTION 13

Use the Ping command on the firewall to test the reachability to the server (the security zone where the server is located is the DMZ). If a security policy is configured to allow the test traffic, the source security zone is ______. [fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14

According to the logical architecture of the HiSec solution, please drag the HiSec solutions on the left to the right box and arrange them in order from top to bottom

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

NAPTtechnology can realize a public networkIPThe address is used by multiple private network hosts.

• A. True
• B. False

Answer: A

NEW QUESTION 16

aboutwindowsFirewall description, which of the following options are correct? (multiple choice)

• A. windowsThe firewall can only allow or prohibit preset programs or functions and programs installed on the system, and cannot customize the release rules according to the protocol or port number.
• B. windowsThe firewall can not only allow or prohibit preset programs or functions and programs installed on the system, but also support its own custom release rules based on protocols or port numbers.
• C. If you are settingwindowsDuring the firewall process, the Internet cannot be accesse
• D. You can use the restore default function to quickly restore the firewall to its initial state.
• E. windows the firewall can also change the notification rules in a closed state

Answer: BC

NEW QUESTION 17

at HuaweiUSGOn the series firewalls, the default security policy does not support modification.

• A. True
• B. False

Answer: B

NEW QUESTION 18

Which of the following is true about the security policy configuration command?

• A. prohibited fromtrustRegional accessuntrustarea and the destination address is 10.1.10.10hostICMPmessage
• B. prohibited fromtrustRegional accessuntrustarea and the destination address is10.1.0.0/16All hosts on the segmentICMPmessage
• C. prohibited fromtrustRegional accessuntrustregion and the source address is10.1.0.0/16All hosts from the network segmentICMPmessage
• D. prohibited fromtrustRegional accessuntrustregion and the source address is10.2.10.10All hosts from hostICMPmessage

Answer: C

NEW QUESTION 19
......