Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System)

QUESTION NO: 1
Regarding the role of each role in the Portal authentication framework, which of the following descriptions are correct? (multiple choice)

A. The web server is used to push the Portal authentication page to the user. B. The Web server saves information such as user names and passwords for authentication of access users. C. The AAA server is used to push the Portal authentication page to the user. D. The AAA server saves information such as usernames and passwords for authentication of access users.

Correct Answer: C,D

QUESTION NO: 2
Which of the following description is incorrect against server loophole security threats ?

A. The Internet has made application software loophole to spread rapidly, making loophole easier to become targets of attack. B. hackers, malicious employee use loophole to attack or invade enterprise servers, business secrets were tampered, damaged and theft . C. worms using application software loophole to spread wantonly, consume network bandwidth and destroy important data. D. As long as the system software update in time for system loophole problems can be effectively solved.

Correct Answer: C,D

QUESTION NO: 3
The following is the 802.1X access control switch configuration:
[S5720]dot1x authentication-method eap
[S5720-GigabitEthernet0/0/1] port link-type access
[S5720-GigabitEthemet0/0/1] port default vlan 11
[S5720-GigabitEthernet0/0/1] authentication dot1x
Assuming that GE0/0/1 is connected to user 1 and user 2 through the HUB, which of the following options is correct?

A. GE0/0/1 does not need to enable dot1X B. Neither user 1 nor user 2 can pass the authentication and access network resources. C. After user 1 is authenticated, user 2 can access network resources without authentication D. User 1 and User 2 must be individually authenticated before they can access network resources

Correct Answer: C

QUESTION NO: 4
For the scenario where the authentication server adopts distributed deployment, which of the following descriptions are correct? (multiple choice)

A. A scenario where there are less than 2,000 branch users, and the headquarters and branch networks are relatively stable. B. The terminal security management business between the branch and the headquarters is relatively independent, and the headquarters provides supervision and control over the branch terminal security management business. C. The enterprise network is relatively scattered, there are multiple branches, and the branch users are larger in scale. D. It is difficult to guarantee the quality of the network between the branch and the headquarters, and the network between the headquarters and the branch may be interrupted, making the terminal of the branch no longer available.

Correct Answer: C,D

QUESTION NO: 5
Agile Controller-Campus The system architecture belongs to C/S Architecture.

A. wrong B. right

Correct Answer: A

QUESTION NO: 6
If the self-determined meter function is enabled on the Agile Controller-Campus and the account PMAC address is bound, Within a period of time, the number of incorrect cipher input by the end user during authentication exceeds the limit. Which of the following descriptions is correct? (multiple choice)

A. After the lock time, the account will be automatically unlocked B. If you want to lock out the account, the administrator can only delete the account from the list. C. The account is locked on all terminal devices and cannot be recognized. D. When the account number is reserved, only the sword type number cannot be authenticated on the bound terminal device, and it can be authenticated normally on other terminal devices.

Correct Answer: A,D

QUESTION NO: 7
Security zone division means to better protect the internal network security,Based on the business type and security requirements of the intranet, divide the intranet into several granularities.
Logical area. Which of the following options does not belong Agile Controller-Campus Security domain?

A. Network domain B. Attack domain C. User domain D. Business domain:

Correct Answer: B

QUESTION NO: 8
In the campus network, employees can use 802.1X, Portal,MAC Address or SACG Way to access. Use different access methods according to different needs to achieve the purpose of user access control.

A. wrong B. right

Correct Answer: B

QUESTION NO: 9
The greater Virus Scan rating value, the higher the virus detection rate, but the smaller the probability of false positives.

A. FALSE B. TRUE

Correct Answer: B

QUESTION NO: 10
In the WLAN wireless access scenario, which of the following network security technologies belong to user access security? (Multiple choice)

A. Link authentication B. data encryption C. User access authentication D. AP Certification

Correct Answer: A,B,C

QUESTION NO: 11
Which of the following options are relevant to MAC Certification and MAC The description of bypass authentication is correct? (Multiple choice)

A. MAC Bypass authentication is first performed on the devices that are connected to the authentication
802 1X Certification;If the device is 802. 1X No response from authentication, re-use MAC The authentication method verifies the legitimacy of the device. B. MAC The bypass authentication process does not MAC The address is used as the user name and password to automatically access the network. C. MAC During the authentication process, the user is required to manually enter the user name or password. D. MAC Certification is based on MAC The address is an authentication method that controls the user's network access authority. It does not require the user to install any client software.

Correct Answer: A,D

QUESTION NO: 12
Which of the following options is about Portal The description of the certification process is correct?

A. Server for a terminal Portal Certification will only give one Portal Device sends authentication message B. Portal The certification process is only used in Web Certification C. Portal The authentication message will not carry the result of the security check D. Switch received Portal Online message, will give Radius Server send Radius Certification request

Correct Answer: D

QUESTION NO: 13
For the terminal Wi-Fi The order of the push, which of the following is correct?
1. Any Office Mobile office system push Wi-Fi Configuration
2. Any Office The mobile office department automatically applies for a certificate.
3. The administrator configures the enterprise Wi-Fi Push.
4. The terminal automatically connects to the enterprise Wi-Fi.

A. 1-2-3-4 B. 2-3-1-4 C. 4-2-3-1 D. 3-2-1-4

Correct Answer: D

Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System) - H12-723 Exam Questions