H12-722_V3.0 試験問題を無料オンラインアクセス

The following commands are configured on the Huawei firewall:
[USG] firewall defend ip-fragment enable
Which of the following situations will be recorded as an offensive behavior? (multiple choice)

• A.DF bit is 0, and Fragment Offset + Length> 65535.
• B.The DF bit is 1, and Fragment Ofset + Length <65535.
• C.DF bit is 023, MF bit is 1 or Fragment Offset is not 0,
• D.DF, bit is down, and MF bit is also 1 or Fragment Offset is not 0,

Use BGP protocol to achieve diversion, the configuration command is as follows
[sysname] route-policy 1 permit node 1
[sysname-route-policy] apply community no-advertise
[sysname-route-policy] quit
[sysname]bgp10029
[sysname-bgp] peer
[sysname-bgp] import-route unr
[sysname- bgpl ipv4-family unicast
[sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export
[sysname-bgp-af-ipv4] peer 7.7. 1.2 advertise community
[sysname-bgp-af-ipv4] quit
[sysname-bgp]quit
Which of the following options is correct for the description of BGP diversion configuration? (multiple choice)

• A.The management center does not need to configure protection objects. When an attack is discovered, it automatically issues a traffic diversion task.
• B.You also need to configure the firewall ddos bgp-next-hop fib-filter command to implement back-injection.
• C.Use BGP to publish UNR routes to achieve dynamic diversion.
• D.After receiving the UNR route, the peer neighbor will not send it to any BGP neighbor.

Which of the following options is wrong for the description of the cleaning center?

• A.The cleaning equipment supports rich and flexible attack prevention technologies, but it is ineffective against cc attacks and ICMP Flood attacks.
• B.Re-injection methods include: policy route re-injection, static route re-injection, VVPN back-injection and layer 2 same.
• C.The cleaning center completes the functions of drainage, cleaning, and re-injection of the flow after cleaning in the abnormal flow.
• D.There are two types of drainage methods: static drainage and dynamic drainage.

The virus signature database on the device needs to be continuously upgraded from the security center platform. Which of the following is the website of the security center platform?

• A.support.huaver: com
• B.www. huawei. com
• C.security.. huawei. com
• D.sec. huawei. com.

Regarding intrusion detection I defense equipment, which of the following statements are correct? (multiple choice)

• A.The number of applications that NIP6000 can recognize reaches 6000+, which realizes refined application protection, saves export bandwidth, and guarantees key business services Experience.
• B.Ability to quickly adapt to threat changes
• C.Protect the intranet from external attacks, and inhibit malicious flows, such as spyware, worms, etc.
  from flooding and spreading to the intranet.
• D.It cannot effectively prevent the virus from spreading from the Internet to the intranet.