[2022] H12-723.pdf – Questions Answers PDF Sample Questions Reliable [Q110-Q127]

Rate this post

[2022] H12-723.pdf – Questions Answers PDF Sample Questions Reliable

Huawei H12-723 Dumps PDF Are going to be The Best Score

NO.110 After the user authentication succeeds, which of the following actions can be performed on the user on Agile Controller-Campus?

Remote assistance for users access the Any Office.

Force users to go offline.

Audit users’ online and offline records.

Disable/disable the move certificate account and assign roles.

NO.111 Policy template is collection of several policy. To audit the security status of different terminal hosts and the behavior of end users, administrators need to customize different policy templates for protecting and managing terminal hosts.
Which of the following are correct regarding the policy template? (Multiple choices)

When configure policy template, you can inherit the parent template and modify the parent template policy.

Only policy in the policy template can be used. Administrators can’t customize the policy.

You can assign policy template to a network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of departments and accounts is: account > department.

NO.112 The visitor management process includes page customization, account application, user authentication, audit, and logout. After the user successfully applies for an account, he needs to change.
When the account is distributed to users, what stage does the distribution of the account belong to?

Page customization stage

Account application stage

User authentication phase

Audit and cancellation stage

NO.113 After the user is successfully authenticated, Agile Controller-Campus Which of the following actions can be performed on the user(Multiple choice)

To use Any Office The connected user performs remote assistance.

Force users to go offline.

Audit users’ online and offline records.

Disable the mobile certificate account/Disable and assign roles.

NO.114 Visitor management can authorize visitors based on their account number, time, location, terminal type and access method, also can push personalized pages to visitors based on time, location and terminal type.

True

False

NO.115 Which of the following options belong to a third-party server account? (Multiple choice)

AD account number

Mobile certificate account)

Anonymous account

Guest account

NO.116 Which of the following options is not included in the mobile terminal life cycle?

Obtain

deploy

run

Uninstall

NO.117 Which of the following options are right 802. 1X The description of the access process is correct? (Multiple choice).

Through the entire authentication process, the terminal passes EAP The message exchanges information with the server.

Terminal and 802.1X Switch EAP Message interaction,802.1X Switch and server use Radius Message exchange information

802.1X Authentication does not require security policy checks.

use MD5 The algorithm checks the information.

NO.118 Regarding the basic principles of user access security, it is wrong not to list any description?

When a terminal device accesses the network, it first authenticates the user’s identity through the access device, and the access device cooperates with the authentication server to complete the user Authentication.

The terminal device directly interacts with the security policy server, and the terminal reports its own status information, including virus database version, operating system version, and terminal Information such as the patch version installed on the device.

The security policy server checks the status information of the terminal, and for terminal devices that do not meet the corporate security standards, the security policy server reissues. The authorization information is given to the access device.

The terminal device selects the answer to the resource to be accessed according to the result of the status check.

NO.119 Terminal security the three-dimensional defense includes three aspects. Which of the following options does not belong to the three-dimensional defense?

Integration

Traceability

Multi-level

Comprehensive

NO.120 For the convenience of visitors, different authentication and registration pages can be pushed for different visitors. When configuring push page policy, you need to define different matching conditions. Which of the following can be used as qualified matching conditions? (Multiple selection)

Terminal IP address

Access device location information

Guest account priority

SSID of access network

NO.121 Sort all services according to user group and account: By the end IP The address range is time-sharing, if it is a user group, a small terminal with an account IP Address range allocation for the same business(Chen Gongji outside business) I The business assigned to the one with the highest priority will take effect.
Which of the following is correct regarding the order of priority?

account>user group>terminal IP Address range

By the end P Address range>account number>user group

account>Terminal protection address range>user group

user group>terminal P Address range>Account

NO.122 A policy template is a collection of several policies. In order to audit the security status of different terminal hosts and the behavior of end users, the administrator needs to customize.
The same policy template is used to protect and manage terminal hosts. Regarding the policy template, which of the following option descriptions are correct? (multiple choice)

When configuring the policy template, you can inherit the parent template and modify the parent template policy

Only the strategy in the strategy template can be used, and the administrator cannot customize the strategy.

You can assign a policy template to a certain network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of the number is: account>department

NO.123 Which of the following is correct for the isolation domain role?

Isolation domain refers to the area where the terminal host can access before being authenticated, such as DNS server, external authentication source, service controller (SC) and service manager (SM) are located.

Isolation domain is an area that allows access when an end user passes identity authentication but fails security authentication, such as the patch server and virus database server.

Isolation domain refers to the area where end users can access after passing authentication and security authentication, such as ERP system, financial system and database system are located.

End users can access the isolation domain regardless of identity authentication

NO.124 Which of the following statement is correct IDS and IPS?

IDS only supports Inline online deployment

IPS deployed as a bypass mode is similar to the function of ID

the core technology of IPS is deep packet inspection and bypass inspection

With the IPS does not need to deploy a firewall and IDS

NO.125 A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)

The aggregation layer device is not configured RADIUS Certification template.

Agile Controller-Campus The switch is not added on NAS equipment.

Connect to the terminal on the device to open 802.1X Function.

The Layer 2 link is used between the access device and the aggregation device, and it is not turned on
802 Instrument transparent transmission function

NO.126 Security authentication is mainly achieved through security policies. The terminal host support management for the security check of monthly users is mainly realized by loose check policies. End user behavior management is mainly realized by monitoring policies. If users need to formulate policies according to their own wishes, they can use them. Custom strategy.

right

wrong

NO.127 Traditional access control policy passed ACL or VLAN Can not be achieved with IP Address decoupling, in IP The maintenance workload is heavy when the address changes. And because the agile network introduces the concept of security group, it can achieve the same IP Address decoupling.

right

wrong

Use H12-723 Exam Dumps (2022 PDF Dumps) To Have Reliable H12-723 Test Engine: https://www.free4dump.com/H12-723-braindumps-torrent.html

You may also like

Leave a Reply Cancel reply