Practice Examples and Dumps & Tips for 2021 Latest H12-723-ENU Valid Tests Dumps
Latest [Oct 25, 2021] 100% Passing Guarantee - Brilliant H12-723-ENU Exam Questions PDF
NEW QUESTION 81
Agile Controller-Campus The product architecture includes three levels. Which of the following options does not belong to the product architecture level?
- A. Server layer
- B. Network device layer
- C. User access layer
- D. Access control layer
Answer: D
NEW QUESTION 82
Which of the following statement is correct IDS and IPS?
- A. With the IPS does not need to deploy a firewall and IDS
- B. IPS deployed as a bypass mode is similar to the function of ID
- C. IDS only supports Inline online deployment
- D. the core technology of IPS is deep packet inspection and bypass inspection
Answer: B
NEW QUESTION 83
Portal authentication on the Agile Controller-Campus has been configured and is correct.
Configure the following commands on the access control switch:
[S5720] authentication free-rule 1 destination ip 10.1.31.78 mask 255.255. 255.255 Which of the following options are correct? (multiple choice)
- A. Only after the authentication is passed, the terminal can access 10.1.31.78 Host.
- B. This configuration allows users to access network resources before authentication.
- C. After the configuration is complete, the switch will automatically release the data flow to access the security controller,No need for manual configuration by the administrator.
- D. After the configuration is complete, the administrator still needs to manually configure the release network segment
Answer: B,C
NEW QUESTION 84
Import user information of AD server on Agile Controller-Campus to implement user access authentication. If the user does not find user information on Agile Controller-Campus, which of the following actions will be performed next?
- A. Discard user information.
- B. Return authentication failure information directly.
- C. Send the user's information to AD server for verification.
- D. Synchronize the database again.
Answer: C
NEW QUESTION 85
Which of the statement is not correct according to following configuration?
[USG] pattern-group 6t type url
[USG-pattern-group-url-bt] pattern any bt.com
[USG] url-filter policy urlpolicy3
[USG-urlfilter-policy-urlpolicy3] blacklist enable
[USG-urlfilter-policy-urlpolicy3] whitelist enable
[USG-urlfilter-policy-urlpolicy3] blacklist group 6t
[USG] web-filter policy webpolicy3
[USG-web-filter-policy-webpolicy3] policy url-filter urlpolicy3
[USG-policy-interzone-trust-untrust-outbound] policy 3
[USG-policy-interzone-trust-untrust-outbound-3] action permit
[USG-policy-interzone-trust-untrust-outbound-3] policy source range 10.10.10.101 10.10.10.200
[USG-policy-interzone-trust-untrust-outbound-3] policy web-filter webpolicy3
- A. users of IP address 10.10.10.120 can access bt.com website
- B. users of IP address 10.10.10.199 cannot access bt.com website
- C. users of IP address 10.10.10.220 can access bt.com website
- D. users of IP address 10.10.10.100 can access bt.com website
Answer: A
NEW QUESTION 86
Which of the following descriptions are correct regarding the process of use LDAP account for authentication? (Multiple choices)
- A. If Agile Controller-Campus authentication account exists, verify the account on Agile Controller-Campus. If the account does not exist, send the account to AD/LDAP authentication password. After passed the password verification, it returns to Agile Controller-Campus and authorizes the user according to the configured authorization rules.
- B. If Agile Controller-campus authentication account does not exist, continue sending the account to AD/LDAP authentication. If the account exists on the AD/LDAP server, the account is incrementally synchronized to Agile Controller-Campus. After the synchronization is successful, Agile Controller-Campus sends the password of the account to AD/DAP server for verification. After the verification succeeds, the authentication passes.
- C. If the account is synchronized to Agile Controller-Campus, verify the account on Agile Controller-Campus. If the account exists, send the password to AD/LDAP server for verification. After the password is verified, it returns to Agile Controller-Campus and authorizes the user according to the configured authorization rules.
- D. The account has been synchronized to Agile Controller-Campus, and Agile Controller-Campus continues to send AD/LDAP authentication. If the account exists on AD/LDAP server, Agile Controller-Campus sends the password corresponding to the account to AD/LDAP server for verification. After successful verification, the authentication passes.
Answer: B,C
NEW QUESTION 87
Regarding CAPWAP encryption, which of the following statements is wrong?
- A. DTLS supports two authentication methods: certificate authentication (factory AC, AP has been carried) and PSK password authentication.
- B. CAPWAP data tunnels can be encrypted use DTLS.
- C. DTLS encryption can ensure that the control message delivered by AC is not eavesdropped.
- D. DTLS negotiation is performed by use certificate. The certificate is only used to generate the key and does not authenticate AP.
Answer: B
NEW QUESTION 88
When deploy wired 802.1X authentication, if the admission control device is deployed at the convergence layer, this deployment method has features such as high security performance, multiple management devices and complicated management.
- A. True
- B. False
Answer: B
NEW QUESTION 89
The user accesses the network through the network access device, and the third-party RADIUS server authenticates and authorizes the user. Regarding the certification process, which of the following options is wrong?
- A. Configure the Agile Controller-Campus for local data source authentication, receive the packets sent by the device, and perform authentication.
- B. Configure RADIUS authentication and accounting on the RADIUS server.
- C. Configure RADIUS authentication and authorization on the Agile Controller-Campus.
- D. Configure RADIUS authentication and accounting on the device side. W"
Answer: A
NEW QUESTION 90
When configuring an antivirus software policy, if set "The required antivirus software violation level is not installed or not running" is "general", and select the option "There is a serious violation of the rules prohibit access to the network." When the user use Any office for authentication, the authentication is passed. However, if the result of the security check shows that the antivirus software is not enabled, can the user access the network?
- A. Can't access the network.
- B. Can access the network, but need to be repaired to access network resources.
- C. Can access the network, but also can access network resources.
- D. Can access the network, but need to re-authenticate to access network resources.
Answer: B
NEW QUESTION 91
Which of the following behaviors IPS can not detect?
- A. Worm
- B. DOS
- C. Spam
- D. Virus
Answer: C,D
NEW QUESTION 92
A network administrator configure IP function, when the signed agreement is http, will only detect http header information.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 93
A university user requirements are as follows:
1. The environmental flow is larger, two-way add up to OOOM, UTM deployed in its network node.
2. The intranet is divided into students zones, server zones, etc., users are most concerned about the security of the server area, to avoid all kinds of the threat of attack.
3. At the same time to ban students area some pornographic websites.
In UTM configured Extranet for untrust domain, Intranet for trust domain, how to deploy the UTM strategy?
(Select 2 answers)
- A. can be directly under the global open AV, PS protective function, URL filtering function, then it can be realized
- B. inboud direction only open AV, IPS protective function for server areas, protected server
- C. Outbound direction only open AV, IPS protective function for server areas, protected server
- D. Outbound direction open URL filtering function for the entire campus network, and filtering of part classification website
Answer: B,D
NEW QUESTION 94
Which of the following cybersecurity threats exist only in WLAN In the network?
- A. DoS Denial of service attack
- B. Crowd attack
- C. Weak IV attack
- D. Brute force
Answer: C
NEW QUESTION 95
Which of the following methods can be used to protect enterprise terminal security?
- A. Access control
- B. Business isolation
- C. Audit billing
- D. Encrypted access
Answer: A
NEW QUESTION 96
Which of the following is correct for the isolation domain role?
- A. End users can access the isolation domain regardless of identity authentication
- B. Isolation domain is an area that allows access when an end user passes identity authentication but fails security authentication, such as the patch server and virus database server.
- C. Isolation domain refers to the area where end users can access after passing authentication and security authentication, such as ERP system, financial system and database system are located.
- D. Isolation domain refers to the area where the terminal host can access before being authenticated, such as DNS server, external authentication source, service controller (SC) and service manager (SM) are located.
Answer: B
NEW QUESTION 97
For the application scenario of centralized deployment and distributed deployment of Agile Controller-Campus, which of the following are correct? (Multiple choices)
- A. If most of the end users are concentrated in one area, a few end users work in branch and distributed deployment is recommended.
- B. If end users are geographically dispersed, it is recommended to use centralized deployment solution.
- C. If end users are geographically dispersed, it is recommended to use distributed deployment solution.
- D. If most of the end users are concentrated in one area, a few end users work in branch and centralized deployment is recommended.
Answer: C,D
NEW QUESTION 98
In the visitor reception hall of a company, there are many temporary terminal users, and the administrator hopes that users do not need to provide any account numbers and passwords. access Internet. Which of the following authentication methods can be used for access?
- A. MAC Certification
- B. AD Account Verification
- C. Local account authentication
- D. Anonymous authentication
Answer: D
NEW QUESTION 99
In terminal security management, check the software installation of terminal host use the black and white list mode. Which of the following are compliance actions?
- A. The terminal host does not install whitelist software and also dose not install blacklist software.
- B. The terminal host installs some software in the whitelist. But does not install blacklist software.
- C. The terminal host installs all software in the whitelist. But does not install blacklist software.
- D. The terminal host installs all software in the whitelist and also installs some software in the blacklist.
Answer: C
NEW QUESTION 100
Traditional access control policy passed ACL or VLAN Can not be achieved with IP Address decoupling, in IP The maintenance workload is heavy when the address changes. And because the agile network introduces the concept of security group, it can achieve the same IP Address decoupling.
- A. right
- B. wrong
Answer: A
NEW QUESTION 101
In the scenario where SACG is linked in bypass mode, only the traffic initiated by the end user passes through the firewall. The traffic returned from the server to the end user does not need to pass through the firewall. For the firewall, it belongs to the inconsistent path of the traffic back and forth. In this case, you need to disable the session state detection function.
- A. True
- B. False
Answer: A
NEW QUESTION 102
After the announcement is configured, Agile Controller-Campus system can't assign the announcement to which of the following objects?
- A. Assigned to the terminal IP address range
- B. Assigned to the account
- C. Assigned to the user
- D. Assign to a place
Answer: D
NEW QUESTION 103
Regarding CAPWAP encryption, which of the following statements is wrong?
- A. Use the certificate method to carry out DTLS Negotiation, the certificate is only used to generate the key, not right AP Perform authentication.
- B. DTLS Encryption can guarantee AC The issued control messages will not be eavesdropped on.
- C. DTLS Support two authentication methods:Certificate authentication(out AC,AP Already brought)with PSK Password authentication.
- D. CAPWAP The data tunnel can be used DTLS Encrypted.
Answer: D
NEW QUESTION 104
......
H12-723-ENU are Available for Instant Access: https://www.torrentvce.com/H12-723-ENU-valid-vce-collection.html