Huawei HCIP-Security-CSSN V3.0 認定 H12-722_V3.0 試験問題:

1. For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?

A) TCP proxy means that the firewall is deployed between the client and the server. When the SYI packet sent by the client to the server passes through the firewall, the The firewall replaces the server and establishes a three-way handshake with the client. Generally used in scenarios where the back and forth paths of packets are inconsistent.
B) During the TCP proxy process, the firewall will proxy and respond to each SYN message received, and maintain a semi-connection, so when the SYN message is When the document flow is heavy, the performance requirements of the firewall are often high.
C) TCP source authentication is added to the whitelist after the source authentication of the client is passed, and the SYN packet of this source still needs to be verified in the future.
D) TCP source authentication has the restriction that the return path must be consistent, so the application of TCP proxy is not common. State "QQ: 9233

2. Huawei USG6000 products can scan and process certain file transfer protocols for viruses, but which of the following protocols is not included?

A) IMAP
B) FTP
C) POP3
D) TFTP

3. Which of the following descriptions about viruses and Trojans are correct? (multiple choices)

A) Trojan horses are triggered by computer users
B) Trojans can replicate themselves
C) Viruses can replicate themselves
D) Viruses are triggered by computer users

4. Regarding intrusion detection I defense equipment, which of the following statements are correct? (multiple choice)

A) Protect the intranet from external attacks, and inhibit malicious flows, such as spyware, worms, etc.
from flooding and spreading to the intranet.
B) The number of applications that NIP6000 can recognize reaches 6000+, which realizes refined application protection, saves export bandwidth, and guarantees key business services Experience.
C) It cannot effectively prevent the virus from spreading from the Internet to the intranet.
D) Ability to quickly adapt to threat changes

5. Malicious code usually uses RootKit technology in order to hide itself. RootKit modifies the kernel of the system by loading a special driver.
To hide itself and the role of designated files.

A) True
B) False

質問と回答：