Printable & Easy to Use H12-731_V2.0 Dumps 100% Same Q&A In Your Real Exam
H12-731_V2.0 Practice Test Give You First Time Success with 100% Money Back Guarantee!
Huawei H12-731_V2.0: HCIE-Security (Written) V2.0 exam is an essential step towards becoming a Huawei Certified Internetwork Expert (HCIE) in security. H12-731_V2.0 exam covers a wide range of topics, including network security architecture, security protocols, security technologies, and security management. Candidates can prepare for the exam by taking advantage of a range of resources, including training courses, study guides, and practice exams. Passing H12-731_V2.0 exam will demonstrate a candidate's ability to design, implement, and manage secure networks.
NEW QUESTION # 166
Which of the following types of journals cannot use the Netflow format? (single selection).
- A. URL session logs
- B. IPV6NAT64 SESSION LOGS
- C. IPV4 SESSION LOGS
- D. Half-connection session logs
Answer: A
NEW QUESTION # 167
Which of the following access control types is defined according to the organization's security policy or (single-select).
- A. Physical access control
- B. Corrective access control
- C. Administrative access control
- D. Logical/technical access control
Answer: C
NEW QUESTION # 168
Digital signature technology can guarantee the credibility of the data source and verify whether the data has been tampered with during transmission. (Single selection)
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION # 169
Which of the following is not a way to back up data? (Single selection)
- A. Client-Less backup
- B. Server-Less 份
- C. LAN-Free S份
- D. LAN backup
Answer: A
NEW QUESTION # 170
The following is a description of the trapping technique The correct ones are which women's multiple choices).
- A. Discuss the access layer switch equipment as honeypot equipment
- B. If the attacker cannot notice the fake service provided by the honeypot, the capture efficiency of the honeypot is relatively low
- C. Honeypot technology is to absorb the network by deploying some king machines as bait Trick attackers into attacking them This allows attacks to be captured and analyzed
- D. The honeypile can only passively wait for the attacker to attack
Answer: B,C,D
NEW QUESTION # 171
Which of the following options is required by Security Manager in Graded Protection 2.0 (multi-select
- A. Centralized control
- B. Grading and filing
- C. System administration
- D. Audit management
Answer: A,C,D
NEW QUESTION # 172
The following describes port scanning Which is wrong? (single selection).
- A. The purpose of port scanning is to determine what kind of services are enabled on the peer host, so as to find an entry for intrusion.
- B. When the scanner sends a Syn message If the peer does not reply, the peer port is down.
- C. TCP port scanning uses the three-way handshake feature
- D. For UDP port scanning It is to determine whether the port is open by sending a UDP data packet to the peer with a specific port number and observing whether the ICMP port is unreachable packet.
Answer: B
NEW QUESTION # 173
A description of the following IPv6 Secure Neighbor Discovery feature information for one of the interfaces Which one is wrong?
- A. The security level of the CGA address is 1
- B. The maximum key length that the interface can accept is 2048
- C. The interface does not have strict security mode enabled
- D. The minimum key length that the interface can accept is 512
Answer: C
NEW QUESTION # 174
Which of the following options protects against SMRF attacks?
- A. If the source address of the ICMP request packet is the host address The message is discarded
- B. If the destination address of an ICMP request packet is a network address, the packet is discarded
- C. If the source address of an ICMP request packet is a broadcast address, the packet is discarded
- D. If the destination address of an ICMP request packet is a broadcast address, the packet is discarded
Answer: C
NEW QUESTION # 175
The following describes the service identification Which item (single selection) is wrong
- A. The identification of all services can be achieved through port scanning technology.
- B. The SSH protocol will actively inform visitors of their version information.
- C. An attacker can retrieve the relevant hole according to the service version and exploit it.
- D. Service identification is a reconnaissance technique that identifies the type of service provided by the server.
Answer: A
NEW QUESTION # 176
A VPCA and VPCB are created under a virtual data center VDC, and host A (192.168.1.100/24) is applied for in the VPCA Filed Host B (1921682100/24). Now configure VPC access Create a virtual firewall security policy as follows:
Security-policy
Source-zone any
destination-zone any
source-address 192.168.2.100 32
destination-address 192.168.1.100 32
action permit
Which of the following statements is correct?
- A. A and B cannot visit each other
- B. Only A is allowed to access B
- C. A and B are able to visit each other
- D. Only B is allowed to visit A
Answer: D
NEW QUESTION # 177
The purpose of access control is to provide access to authorized subjects and prevent any unauthorized and intentional access.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION # 178
The following describes how to create a trap account Which one is correct? (single selection).
- A. Create a local account named Administrator and set its permissions to maximum Plus a weak password less than 6 digits
- B. Create a local account named Administrator and set its permissions to the most, plus a strong password of more than 10 digits
- C. Create a local account named Administrator and set its permissions to the minimum, plus a strong password of more than 10 digits
- D. Create a local account named Administrator and set its permissions to the minimum, plus a weak password less than 6 digits
Answer: C
NEW QUESTION # 179
The General Data Protection Regulation (GDPR) aims to protect personal data, which of the following options are fundamental rights of data subjects (multiple choices)?
- A. Right to information
- B. Right of Access
- C. Control
- D. Weak expulsion
Answer: A,B,D
NEW QUESTION # 180
IPS (Intrusion Prevention System) is an application-layer-based security appliance, so which of the following options is it used to match attack identification?
- A. Destination IP address
- B. Feature library
- C. Port number
- D. Source IP address
Answer: B
NEW QUESTION # 181
There are many firewall security policies in the data center network, and the administrator enables the policy backup acceleration function, and the source address matching conditions of the security policy are modified It can be effective immediately.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 182
What are the correct options for describing the impact of IPv6 technology on cyberattacks (multiple selection).
- A. IPv6 has the ability to locate the initiator of the attack through attacks
- B. In the IPv6 environment Sharding attacks, ARP, and DHCP attacks can be mitigated or eliminated to some extent.
- C. IPv6 also has a defensive effect on application-layer spoofing attacks.
- D. PV6 is enough to take into account the security aspects and does not have its own security vulnerabilities.
Answer: A,B,C
NEW QUESTION # 183
With the following description of network scanning defense technology, which is correct? (single selection).
- A. If the access frequency is set too high More false positives will be generated, blocking normal access traffic.
- B. If the rate at which its source IP accesses other protected addresses or ports exceeds the set access frequency threshold, this behavior is regarded as scanning behavior And add the purpose to the blacklist to block scan
- C. For port scanning, you can defend by setting the value of the access frequency bureau.
- D. If the frequency of the set direction is too low The scanning behavior is not recognized.
Answer: B
NEW QUESTION # 184
......
Fully Updated Free Actual Huawei H12-731_V2.0 Exam Questions: https://pass4sure.actualpdf.com/H12-731_V2.0-real-questions.html
