NEW QUESTION 1

Which of the following options are technical characteristics of an intrusion prevention system? (multiple choice)

• A. online mode
• B. real-time blocking
• C. Self-learning and adaptive
• D. In-line deployment

Answer: ABC

NEW QUESTION 2

What are the correct options for the following description of the basic concepts of LDAP?

• A. Directory Information Tree DIT: A collection of attributes constitutes a Directory Information Tree.
• B. Unique identifier DN, the name that uniquely identifies an entry in a directory information tree
• C. Relative Distinguished Name RDN, the name of the entry, uniquely identifies child entries of the same parent entry
• D. Attribute: The attribute describes the characteristics of the objec
• E. An attribute consists of an attribute type and one or more attribute values.

Answer: BD

NEW QUESTION 3

Which of the following options areIATF(Information Assurance Technology Framework) core elements of the model? (multiple choice)

• A. surroundings
• B. people
• C. Technology
• D. operate

Answer: BCD

NEW QUESTION 4

Which of the following descriptions about the VGMP group is correct?

• A. The priority of VRRP in the VGMP group will change with the change of VGAMP
• B. VGMP is a protocol used to control the state of small VRRP groups
• C. The default priority of USG6000 is 65000
• D. The default priority of USG9000 is 45000

Answer: B

NEW QUESTION 5

After an engineer completes the source NAT configuration, the internal network still cannot access the external network. The engineer wants to query the detailed information of the address translation by using the command to query the session table, so the engineer directly uses the ( ) command in the user view to query the address translation. information. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6

Regarding the description of vulnerability scanning, which of the following is false?

• A. Vulnerability scanning is a network-based technology for remotely monitoring the security performance vulnerabilities of target networks or hosts, and can be used to conduct simulated attack experiments and security audits.
• B. Vulnerability scanning is used to detect whether there are vulnerabilities in the target host system, generally scanning the target host for specific vulnerabilities
• C. Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks
• D. can be based onpingScan and port scan results for vulnerability scanning

Answer: C

NEW QUESTION 7

aboutClient-InitializedofL2TP VPN, which of the following statements is false?

• A. remote user accessInternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request
• B. ;NSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password
• C. LNSAssign private keys to remote usersIPaddress
• D. Remote users do not need to installVPNClient software

Answer: D

NEW QUESTION 8

Under normal circumstances, the terminal number used by the RADIUS server to provide accounting services is ( ). (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

some applications such asOracleFor database applications, the firewall session connection is interrupted due to no data flow transmission for a long time, resulting in service interruption. Which of the following is the optimal solution?

• A. Configure a long-term connection for a service
• B. turn onASPFFeatures
• C. Optimize security policies
• D. Enable shard cache

Answer: A

NEW QUESTION 10

Which of the following optionsVPNDoes technical support encrypt data packets? (multiple choice)

• A. SSL VPN
• B. GRE VPN
• C. IPSec VPN
• D. L2TP VPN

Answer: AC

NEW QUESTION 11

The goal of ( ) is to provide a rapid, composed and effective response in emergency situations. Thereby enhancing the ability of a business to recover immediately from a disruptive event. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 12

Which of the following options are correct regarding the description of Windows log event types? (multiple choice)

• A. Warning events are events that refer to the successful operation of an application, driver, or service.
• B. False events generally refer to loss of functionality and dat
• C. For example, a service that cannot be loaded as a system boot will generate an error event.
• D. When the disk space is insufficient, it will be recorded as an "information event"
• E. Failed audit events refer to failed audit security logon attempts, such as failure to access a network drive from a user's view, will be logged as a failed audit event.

Answer: BD

NEW QUESTION 13

To configure a NAT policy in command line mode, you need to use the ( ) command in the system view to enter the NAT policy configuration view. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14

Which of the following are remote authentication methods? (multiple choice)

• A. RADIUS
• B. Local
• C. HWTACACS
• D. LLDP

Answer: AC

NEW QUESTION 15

One of the following options for information security management systems (ISMS) Which of the four stages describes the sequence correctly?

• A. Plan->Check->Do->Action
• B. Check->Plan->Do->Action
• C. Plan->Do->Check->Action
• D. Plan->Check->Action->Do

Answer: C

NEW QUESTION 16

aboutNATConfiguration statement, which of the following is false?

• A. Configure sources in transparent modeNAT, the firewall does not supporteasy-ipWay
• B. in the address poolIPaddress can beNATserverpublic networkIPaddress overlap
• C. in the networkVoIPWhen doing business, no configuration is requiredNATALG
• D. Firewall does not supportESPandAHmessageNAPTconvert

Answer: D

NEW QUESTION 17

For network security incidents that occur, remote emergency response is generally adopted first. If the problem cannot be solved for the customer through remote access, after confirmation by the customer, go to the local emergency response process

• A. True
• B. False

Answer: A

NEW QUESTION 18

Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc.
"and"That is to say, this policy is hit only if the information in the packet matches all fields.

• A. True
• B. False

Answer: B

NEW QUESTION 19

Which of the following options is notUSG6000What file formats are supported by serial devices for saving certificates?

• A. PKCS#12
• B. DER
• C. PEM
• D. PKCS#

Answer: D

NEW QUESTION 20
......