Online Access Free H12-722-ENU Practice Test

Because the sandbox can provide virtual execution environment to detect files on the network, the sandbox can replace devices such as Anti-Virus, IPS and spam detection when deploying security devices.

• A.False
• B.True

Which of the following categories of sandbox can be used by a company to detect image files, shellcode code files, and PDF files? (Multiple choices)

• A.Web inspired sandbox
• B.PE Heuristic Sandbox
• C.Heavyweight sandbox (virtual execution)
• D.PDF inspired sandbox

Buffer overflows, Trojans, backdoor attacks, etc. are all application-level attacks.

• A.False
• B.True

Which of the following options is incorrect for the IntelliSense engine IAE?

• A.English full name: Intelligent Awareness Engine.
• B.IAE engine's security detection is parallel and uses a message-based file processing mechanism that can receive file fragments and perform security checks.
• C.The core of IAE is to organically integrate all content security related detection functions.
• D.IAE's content security detection capabilities include application identification and awareness, intrusion prevention, and Web application security.

Anomaly detection establishes the normal behavior characteristics of the system's main body through analysis of system audit data: In the detection, if the audit data in the system is different from the normal behavior characteristics of the established subject, it is considered an intrusion behavior. Which of the following can be used as the system body? (Multiple choices)

• A.Single user
• B.A key program and file in the system
• C.A group of users
• D.Host