Huawei HCIP-Security (Fast track) V1.0 認定 H12-724 試験問題:

1. In the Agile Controller-Campus admission control technology framework, regarding the description of RADIUS, which of the following options is correct?

A) PADIUS Used for server to SACG Security policy issued by the device
B) PADIUS Used on the client and 802.1X Information such as user names and passwords are passed between switches.
C) PADIUS Used for Portal Server pushes to users Web page.
D) PADIUS Used in 802.1X Switch and AAA Information such as user name and password are passed between servers.

2. Regarding the application scenarios of Agile Controller-Campus centralized deployment and distributed deployment, which of the following options are correct? (Multiple select)

A) If most end users work in one area and a few end users work in branch offices, centralized deployment is recommended.
B) If end users are scattered in different geographical locations, a distributed deployment solution is recommended.
C) If most end users are concentrated on--Offices in several regions, and a small number of end users work in branches. Distributed deployment is recommended.
D) If end users are scattered in different regions, a centralized deployment solution is recommended.

3. Regarding the description of the logic architecture of the business accompanying, which of the following options is correct?

A) The user plane focuses on authentication points and policy enforcement points.
B) The business management plane focuses on administrators, authentication servers, and policy servers.
C) The business free mobility logic architecture includes a management subsystem, an authentication and authorization subsystem, and a business strategy subsystem.
D) The network equipment plane focuses on user terminals and static resources.

4. Use BGP protocol to achieve diversion, the configuration command is as follows
[sysname] route-policy 1 permit node 1
[sysname-route-policy] apply community no-advertise
[sysname-route-policy] quit
[sysname]bgp100
155955cc-666171a2-20fac832-0c042c04
29
[sysname-bgp] peer
[sysname-bgp] import-route unr
[sysname- bgpl ipv4-family unicast
[sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export
[sysname-bgp-af-ipv4] peer 7.7. 1.2 advertise community
[sysname-bgp-af-ipv4] quit
[sysname-bgp]quit
Which of the following options is correct for the description of BGP diversion configuration? (multiple choice)

A) After receiving the UNR route, the peer neighbor will not send it to any BGP neighbor.
B) The management center does not need to configure protection objects. When an attack is discovered, it automatically issues a traffic diversion task.
C) You also need to configure the firewall ddos bgp-next-hop fib-filter command to implement back-injection.
D) Use BGP to publish UNR routes to achieve dynamic diversion.

5. Regarding the description of file reputation technology in anti-virus engines, which of the following options is correct?

A) File reputation is to perform virus detection by calculating the full text MD5 of the file to be tested and matching it with the local reputation MD5 cache
B) File reputation database update and upgrade can only be achieved through linkage with sandbox
C) File reputation database can only be upgraded by manual upgrade
D) Local reputation MD5 cache only has static cache, which needs to be updated regularly

質問と回答：