Huawei HCIP-Security (Fast track) V1.0 Sample Questions:

1. Which of the following options is correct for the sequence of the flow-by-stream detection of AntiDDoS?
1. The Netflow analysis device samples the current network flow;
2. Send a drainage command to the cleaning center;
3. Discover the DDoS attack stream;
4.Netior: analysis equipment sends alarms to ATIC management center
5. The abnormal flow is diverted to the cleaning center for further inspection and cleaning;
6. The cleaning center sends the host route of the attacked target IF address server to the router to achieve drainage
7. The cleaning log is sent to the management center to generate a report;
8. The cleaned traffic is sent to the original destination server.

A) 1-3-4-2-5-6-7-8
B) 1-3-24-6-5-8-7
C) 1-3-4-2-6-5-8-7
D) 1-3-2-4-6-5-7-8

2. Visitors can access the network through their registered account. Which of the following is not an account approval method?

A) Self-approved by visitors
B) Administrator approval
C) Exemption from approval
D) Receptionist approval

3. The administrator has configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not allowed Can the reason?

A) License is not activated.
B) The action configuration of the file extension does not match is incorrect
C) File filtering configuration file is incorrect
D) The file filtering configuration file is not referenced in the security policy

4. Which of the following options are relevant to MAC Certification and MAC The description of bypass authentication is correct? (Multiple choice)

A) MAC During the authentication process, the user is required to manually enter the user name or password.
B) MAC Bypass authentication is first performed on the devices that are connected to the authentication
802 1X Certification;If the device is 802. 1X No response from authentication, re-use MAC The authentication method verifies the legitimacy of the device.
C) MAC The bypass authentication process does not MAC The address is used as the user name and password to automatically access the network.
D) MAC Certification is based on MAC The address is an authentication method that controls the user's network access authority. It does not require the user to install any client software.

5. Regarding the description of intrusion detection technology, which of the following statements is correct?

A) Unable to find traces of the system being attacked.
B) It can detect all kinds of authorized and unauthorized intrusions.
C) It is impossible to detect violations of security policies.
D) is an active and static security defense technology.
155955cc-666171a2-20fac832-0c042c0425

Solutions: