Free Access Huawei.H12-722.v2022-04-23.q110 Practice Test (Page 21)

Question 96

IPS is an intelligent intrusion detection and defense product. It can not only detect the occurrence of intrusions, but also can respond in real time through certain response methods.
Stop the occurrence and development of intrusions, and protect the information system from substantial attacks in real time. According to the description of PS, the following items are wrong?

A.IPS unifies IDS and firewall

B.IPS must use bypass deployment in the network

C.IPS is an intrusion detection system that can block real-time intrusions when found

D.Common IPS deployment modes are in-line deployment,

Question 97

IPS can't detect which of the following threats?

A.Virus

B.Spam

C.Worm

D.DoS

Question 98

After the data file hits the whitelist of the firewall anti-virus module, the firewall will no longer do virus detection on the file.

A.False

B.True

Question 99

For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?

A.TCP source authentication has the restriction that the return path must be consistent, so the application of TCP proxy is not common. State "QQ: 9233

B.TCP source authentication is added to the whitelist after the source authentication of the client is passed, and the SYN packet of this source still needs to be verified in the future.

C.TCP proxy means that the firewall is deployed between the client and the server. When the SYI packet sent by the client to the server passes through the firewall, the The firewall replaces the server and establishes a three-way handshake with the client. Generally used in scenarios where the back and forth paths of packets are inconsistent.

D.During the TCP proxy process, the firewall will proxy and respond to each SYN message received, and maintain a semi-connection, so when the SYN message is When the document flow is heavy, the performance requirements of the firewall are often high.

Question 100

When a data file hits the whitelist of the firewall's anti-virus module, the firewall will no longer perform virus detection on the file.