Free Access Huawei.H12-722.v2022-06-03.q124 Practice Test (Page 20)

Question 91

Which of the following options are correct for the description of URPF technology? (Multiple Choices)

A.Use the loose mode of URPF in an environment where route symmetry is not guaranteed.

B.In loose mode, not only the corresponding entries in the forwarding table are required, but also the interfaces must match to pass the URPF check.

C.Does not check whether the interfaces match in the strict mode. As long as there is a route to the source address, the packets can pass.

D.The main function is to prevent network attacks based on source address spoofing.

Question 92

Which of the following options are correct for the configuration description of the management center ATIC?
(multiple choice)

A.Port mirroring needs to be configured on the management center to monitor abnormal traffic.

B.The reinjection strategy needs to be configured on the management center to guide the flow after cleaning.

C.It is necessary to configure the protection object on the management center to guide the abnormal access flow in etpa

D.The drainage task needs to be configured on the management center, and when an attack is discovered, it will be issued to the cleaning center.

Question 93

For SYN flood attacks, TCP source authentication and TCP proxy can be used for defense.
Which of the following description is correct?

A.After the TCP source authentication passes the source authentication of the client, it is added to the whitelist. Then the SYN packet of this source still needs to be verified.

B.TCP proxy means that the firewall is deployed between the client and the server. When the client sends an SYII packet to the server through the firewall, the firewall instead of the server establishes a three-way handshake with the client. Generally used for scenarios where the path of the packet is inconsistent.

C.TCP source authentication has the same restriction on the path of packets, so the application is not as common as TCP proxy.

D.During the TCP proxy process, the firewall proxies and responds to every SYN packet received and maintains half-connection. Therefore, when the traffic of the SYN packet is heavy, the firewall requires very high performance.

Question 94

Divert traffic using BGP protocol. The configuration command is as follows.
[sysname] route-policy 1 permit node 1
[sysname-route-policy] apply community no-advertise
[sysname-route-policy] quit
[sysname] bgp 100
[sysname-bgp] peer 7.7.1.2 as-number 100
[sysname-bgp] import-route unr
[sysname-bgp] ipv4-family unicast
[sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export
[sysname-bgp-af-ipv4] peer 7.7.1.2 advertise-community
[sysname-bgp-af-ipv4] quit
[sysname-bgp] quit
Which of the following options are correct for the BGP drainage configuration description? (Multiple choice)

A.The management center does not need to configure protection objects. When an attack is discovered, the traffic diversion task is automatically delivered.

B.Use BGP to advertise UNR routes for dynamic traffic diversion.

C.You also need to configure the firewall ddos bgp-next-hop fib-filter command to implement the remarks.

D.After receiving the UNR route, the peer neighbor will not send it to any BGP neighbors.

Question 95

Regarding the file filtering configuration file global configuration of the Huawei USG6000 product, which of the following is correct?

A.When the number of the file compressed layers is greater than the configured maximum number of uncompressed layers, the firewall cannot filter the file.

B.When the file type is not recognized, file filtering, content filtering, and anti-virus detection are not performed.

C.When the file extension does not match, if the action is "Allow" or "Alert", file filtering, content filtering, and anti-virus detection are performed according to the file type.

D.File filtering, content filtering and anti-virus detection are not available when the file is corrupted. At this time, the file can be released or blocked according to business requirements.

Other Version: 2267Huawei.H12-722.v2022-04-23.q110; 72Huawei.Pass4surecert.H12-722.v2021-10-01.by.erica.61q.pdf

Latest Upload: 111Oracle.1z0-1196-25.v2025-09-12.q18; 110NetworkAppliance.NS0-162.v2025-09-12.q86; 193OCEG.GRCP.v2025-09-11.q211; 111HP.HPE0-V27.v2025-09-11.q78; 126Oracle.1Z0-1057-23.v2025-09-10.q47; 169Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 141SAP.C-S4EWM-2023.v2025-09-08.q83; 205TheSecOpsGroup.CNSP.v2025-09-08.q20; 322CFAInstitute.ESG-Investing.v2025-09-08.q173; 280PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 91

Question 92

Question 93

Question 94

Question 95

Download PDF File