Online Access Free H12-724 Practice Test

The network-based intrusion detection system is mainly used to monitor the information of the critical path of the network in real time, listen to all packets on the network, collect data, and divide Analyze the suspicious object, which of the following options are its main features? (multiple choices)

• A.It can detect the source address and destination address, identify whether the address is illegal, and locate the real intruder.
• B.The monitoring speed is fast (the problem can be found in microseconds or seconds, and the host-based DS needs to take an analysis of the audit transcripts in the last few minutes
• C.Good concealment, the network-based monitor does not run other applications, does not provide network services, and may not respond to other computers, so Not vulnerable to attack.
• D.Need a lot of monitors.

In Portal authentication, which of the following parameters must be configured on the switch? (Multiple choice)

• A.shared-key
• B.Portal server IP
• C.Portal page URL
• D.Portal Protocol version

Regarding the network intrusion detection system (NIDS), which of the following statements is wrong?

• A.It is mainly used for real-time monitoring of the information of the critical path of the network, listening to all packets on the network, collecting data, and analyzing suspicious objects
• B.Real-time monitoring through the network adapter, and analysis of all communication services through the network;
• C.Used to monitor network traffic, and can be deployed independently.
• D.Use the newly received network packet as the data source;

Portal page push rules have priority, and the rules with higher priority are matched with the user's authentication information first. If none of the configured rules match, The default rules are used.

• A.True
• B.False

Tianyu Nei answered the role of safety filtering technology, which of the following is still correct? (multiple choice)

• A.Content filtering can prevent the disclosure of confidential information and the transmission of illegal information
• B.Mail filtering refers to the management and control of mail sending and receiving, including preventing the flooding of spam and anonymous emails, and controlling the sending and receiving of illegal emails.
• C.File filtering can reduce the risk of malicious code execution and virus infection in the internal network by blocking the transmission of fixed types of files, and it can also prevent Prevent employees from leaking company confidential documents to the Internet.
• D.The application behavior control function can finely control common HTTP behaviors and FTP behaviors.