Instantly download H12-723 training test engine

Huawei H12-723 Exam Overview:

Huawei H12-723 Exam Syllabus Topics:

Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System) Sample Questions:

1. A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)

A) Connect to the terminal on the device to open 802.1X Function.
B) The aggregation layer device is not configured RADIUS Certification template.
C) The Layer 2 link is used between the access device and the aggregation device, and it is not turned on
802 Instrument transparent transmission function
D) Agile Controller-Campus The switch is not added on NAS equipment.

2. A university user requirements are as follows:
1. The environmental flow is larger, two-way add up to OOOM, UTM deployed in its network node.
2. The intranet is divided into students zones, server zones, etc., users are most concerned about the security of the server area, to avoid all kinds of the threat of attack.
3. At the same time to ban students area some pornographic websites.
In UTM configured Extranet for untrust domain, Intranet for trust domain, how to deploy the UTM strategy?
(Select 2 answers)

A) can be directly under the global open AV, PS protective function, URL filtering function, then it can be realized
B) Outbound direction only open AV, IPS protective function for server areas, protected server
C) inboud direction only open AV, IPS protective function for server areas, protected server
D) Outbound direction open URL filtering function for the entire campus network, and filtering of part classification website

3. URL filtering, according to the classification of the remote or local classification, the user can create multiple urls strategy, determines the corresponding processing action in URL strategies, a URL strategy was applied to the domain, which can realize the corresponding URL filtering.

A) FALSE
B) TRUE

4. Traditional access control policy passed ACL or VLAN Can not be achieved with IP Address decoupling, in IP The maintenance workload is heavy when the address changes. And because the agile network introduces the concept of security group, it can achieve the same IP Address decoupling.

A) wrong
B) right

5. Which of the following options is about SACG The description of the online process is wrong?

A) Authentication fails, end users can only access resources in the pre-authentication domain
B) Terminal and Agile Controller-Campus Server communication SSL encryption
C) Security check passed,Agile Controller-Campus Server notification SACG Will end user's IP Address switch to isolated domain
D) Agile Controller-Campus Server gives SACG Carrying domain parameters in the message

Solutions: