[Dec-2021] Huawei H12-723-ENU Official Cert Guide PDF
Exam H12-723-ENU: HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System) - TrainingQuiz
NEW QUESTION 26
Which of the following options is correct for PKI process sequence?
- A. 1-3-5-6-7-4-8-2
- B. 1-3-2-7-6-4-5-8
- C. 1-3-2-4-8-6-5-7
- D. 1-3-5-4-2-6-7-8
Answer: C
NEW QUESTION 27
Which of the following is not supported by the business?
- A. Teamwork office.
- B. Implement communication between devices.
- C. Intranet users access the data center/Internet.
- D. When traveling user accesses the intranet resources, the traveling user accesses the intranet through VPN.
Answer: B
NEW QUESTION 28
Which of the following is correct for the isolation domain role?
- A. End users can access the isolation domain regardless of identity authentication
- B. Isolation domain is an area that allows access when an end user passes identity authentication but fails security authentication, such as the patch server and virus database server.
- C. Isolation domain refers to the area where the terminal host can access before being authenticated, such as DNS server, external authentication source, service controller (SC) and service manager (SM) are located.
- D. Isolation domain refers to the area where end users can access after passing authentication and security authentication, such as ERP system, financial system and database system are located.
Answer: B
NEW QUESTION 29
Which of the following options is about Portal The description of the certification process is correct?
- A. Portal The certification process is only used in Web Certification
- B. Portal The authentication message will not carry the result of the security check
- C. Switch received Portal Online message, will give Radius Server send Radius Certification request
- D. Server for a terminal Portal Certification will only give one Portal Device sends authentication message
Answer: C
NEW QUESTION 30
Which of the following methods can be used to protect enterprise terminal security?
- A. Encrypted access
- B. Audit billing
- C. Business isolation
- D. Access control
Answer: D
NEW QUESTION 31
After configuring the announcement,Agile Controller-Campus The system cannot assign this announcement to which of the following objects?
- A. Assign to user
- B. Assign to terminal IP Address range
- C. Assigned to places
- D. Assigned to account
Answer: C
NEW QUESTION 32
A network adopts 802.1X to authenticate access users. The admission control device is deployed at the convergence layer. After the deployment is complete, the test-aaa command is used successfully on the admission control device, but the user can't access the network.
Which of the following may be the cause of the fault? (Multiple choices)
- A. The switch is not added to Agile Controller-Campus as NAS device.
- B. Layer 2 links are used between access devices and aggregation devices. The 802.1X transparent transmission function is not enabled.
- C. The 802.1X function is not enabled on the port on the access device.
- D. RADIUS authentication template is not configured on the aggregation layer device.
Answer: B,C
NEW QUESTION 33
Regarding the policy for checking account security, which of the following descriptions are correct? (Multiple choice)
- A. It cannot be repaired automatically._
- B. You can check whether there is a weak password.
- C. You can check whether the account has joined a specific group.
- D. It is not possible to check whether the password length meets the requirements.
Answer: B,C
NEW QUESTION 34
When using local guest account authentication, usually use(Portal The authentication method pushes the authentication page to the visitor. Before the user is authenticated, when the admission control device receives the HTTP The requested resource is not Portal Server authentication URL When, how to deal with the access control equipment.
- A. Discard message
- B. URL Address redirected to Portal Authentication page
- C. Direct travel
- D. Send authentication information to authentication server
Answer: B
NEW QUESTION 35
Business entourage is a special access control method. According to the user's access point, access time, access method and user terminal specified permission is granted. As long as the user access conditions remain unchanged, the permissions and network experience after accessing the network are the same.
- A. False
- B. True
Answer: B
NEW QUESTION 36
The terminal host access control function does not take effect, the following is SACG View information on:
<FW> display right- manager role-id rule
Advanced ACL 3099 ,25 rules,not bingding with vpn-instance Ad's step is 1 rule 1000 permit ip (1280 times matched) rule 1001 permit ip destination 172.18.11.2210 (581 times matched) rule 1002 permit ip destination 172:18.11.2230 (77 times matched) rule 1003 permit ip destination 172.19.0.0 0.0 255.255 (355 Book times matched) rule 1004 deny ip (507759 times matched) Which of the following statements is correct?
- A. 172.18.11.223 It is a post-domain server.
- B. The escape route was opened.
- C. 172.18.11.221 It is the server of the isolation domain.
- D. The terminal host stream is the default ACL Blocked.
Answer: B
NEW QUESTION 37
Terminal security access technology does not include which of vthe following options?
- A. Safety certification
- B. Authentication
- C. Admission control
- D. System Management
Answer: D
NEW QUESTION 38
A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)
- A. Connect to the terminal on the device to open 802.1X Function.
- B. The aggregation layer device is not configured RADIUS Certification template.
- C. The Layer 2 link is used between the access device and the aggregation device, and it is not turned on
802 Instrument transparent transmission function - D. Agile Controller-Campus The switch is not added on NAS equipment.
Answer: A,C
NEW QUESTION 39
Typical application scenarios of terminal security include desktop management, illegal outreach and computer peripheral management.
- A. False
- B. True
Answer: B
NEW QUESTION 40
Which of the following options is for Portal The statement of the gateway access process is correct?
- A. Portal gateway initiates Radius Challenge request message, including user name and password information
- B. The Portal server needs to pass the security check result to the access gateway device
- C. The ACL issued by the server to the access gateway is carried in the Portal protocol message
- D. Issue policies while performing identity authentication
Answer: B
NEW QUESTION 41
How to check if MC service is started?
- A. Check whether TMCServerDaemon service is started in Task Manager.
- B. Check whether TMCServer service is started in task manager.
- C. Check whether TMCServer and TMCServerDaemon services are started in Task Manager.
- D. On the server, choose "Start> All Programs> Huawei> Agile Controller> Server Controller" Check whether MC status is "Running".
Answer: C
NEW QUESTION 42
In order to increase the security of AP, online AP may be authenticated on AC.
What are the current authentication methods supported by Huawei AC?
- A. Password authentication
- B. MAC authentication
- C. SN certification
- D. No certification
Answer: B,C,D
NEW QUESTION 43
In WLAN network, intra-group isolation and inter-group isolation can be used simultaneously.
- A. False
- B. True
Answer: B
NEW QUESTION 44
Business entourage function of Agile Controller can direct traffic to the security center based on services and improve the utilization of physical devices.
- A. False
- B. True
Answer: A
NEW QUESTION 45
Using Agile Controller-Campus for visitor management, users can obtain the account they applied for in a variety of ways, but which of the following are not included A way?
- A. E-mail
- B. Web Print
- C. Voicemail
- D. Short message
Answer: C
NEW QUESTION 46
Which of the following options belongs to MC prioritized pail Authentication application scenarios?
- A. Users follow WeChat for authentication.
- B. User use portal Page for authentication
- C. User use IAC Client authentication
- D. User use Pota At the first certification,RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache,RAIUS The server directly searches the cache for the terminal's MAC The address is discussed.
Answer: D
NEW QUESTION 47
Regarding the description of the account blacklist, which of the following options is wrong?
- A. Manually lock the account and delete it from the list, the lock of the account will be released.
- B. For automatically locked accounts, if the number of incorrect passwords entered by the terminal user during authentication exceeds the limited number of times within a limited time, the account will be automatically locked.
- C. For manually locked accounts, the administrator needs to manually add the account to the locked account list.
- D. The automatic account lock and manual account lock functions cannot be activated at the same time.
Answer: D
NEW QUESTION 48
Which of the following options are right 802. 1X The description of the access process is correct? (Multiple choice).
- A. Terminal and 802.1X Switch EAP Message interaction,802.1X Switch and server use Radius Message exchange information
- B. 802.1X Authentication does not require security policy checks.
- C. use MD5 The algorithm checks the information.
- D. Through the entire authentication process, the terminal passes EAP The message exchanges information with the server.
Answer: A,C
NEW QUESTION 49
There are two types of accounts on Agile Controller-Campus: one is local account and the other is external account.
Which of the following does not belong to local account?
- A. anonymous account
- B. Guest account
- C. Ordinary account
- D. Mobile certificate account
Answer: D
NEW QUESTION 50
......
Free H12-723-ENU Exam Dumps to Improve Exam Score: https://www.trainingquiz.com/H12-723-ENU-practice-quiz.html
