H12-723-ENU by Huawei Valid Free Exam Practice Test

Question 1

The user accesses the network through the network access device, and the third-party RADIUS server authenticates and authorizes the user. Regarding the certification process, which of the following options is wrong?

A. Configure RADIUS authentication and accounting on the device side. W" B. Configure RADIUS authentication and authorization on the Agile Controller-Campus. C. Configure the Agile Controller-Campus for local data source authentication, receive the packets sent by the device, and perform authentication. D. Configure RADIUS authentication and accounting on the RADIUS server.

Correct Answer: C

Question 2

Regarding the way SACG devices connect to the network, which of the following descriptions are correct?
(multiple choice)

A. SACG Equipment requirements and Agile Controller-Campus Interoperability on the second floor. B. SACG It is usually connected to the core switch equipment and uses policy routing to divert traffic. C. SACG Support hanging on non-Huawei devices. D. SACG The equipment requires Layer 3 intercommunication with the terminal.

Correct Answer: B,C

Question 3

The terminal host access control function does not take effect, the following is SACG View information on:
<FW> display right- manager role-id rule
Advanced ACL 3099 ,25 rules,not bingding with vpn-instance Ad's step is 1 rule 1000 permit ip (1280 times matched) rule 1001 permit ip destination 172.18.11.2210 (581 times matched) rule 1002 permit ip destination 172:18.11.2230 (77 times matched) rule 1003 permit ip destination 172.19.0.0 0.0 255.255 (355 Book times matched) rule 1004 deny ip (507759 times matched) Which of the following statements is correct?

A. 172.18.11.221 It is the server of the isolation domain. B. The escape route was opened. C. The terminal host stream is the default ACL Blocked. D. 172.18.11.223 It is a post-domain server.

Correct Answer: B

Question 4

MAC Certification refers to 802.1x In the protocol authentication environment, the terminal does not respond to the connection control device after accessing the network 802.1x When protocol authentication is requested, the access control does not automatically obtain the terminal's MAC The address is sent as a credential to access the network RADIUS The server performs verification.

A. right B. wrong

Correct Answer: B

Question 5

The user access security solution is one-kind"End to end"Security architecture. The user access security architecture includes three key components:Terminal equipment, network access equipment and access server.

A. right B. wrong

Correct Answer: A

Question 6

The administrator issues notices to users in the form of announcements, such as the latest software and patch installation notices. Which of the following options of the announcement is incorrect?

A. If the system issues an announcement and the proxy client is not online, the announcement information will not be received after going online. B. Announcements can be issued by account. C. Announcements can be issued by the security department D. The terminal must have a proxy client installed to receive announcements.

Correct Answer: A

Question 7

Which of the following statement is not correct about application and identification of knowledge base upgrade?

A. The upgrade process of abnormal will not be able to return to the original Knowledge base B. When USG device unable to connect to the Internet, you can choose local upgrade C. When the USG devices can connect to the Internet, can upgrade manually and automatically* D. You can configure the automatic save function, after saving the upgrade application control is configured as system configuration

Correct Answer: A,B

Question 8

Hardware in useSACG At the time of certification,SACG After the configuration is completed, you can seeSACG andAgile Agile Controller-Campus The linkage is successful, but the user authentication fails. This phenomenon may be caused by the following reasons? (Multiple choice)

A. User flow has not passed SACG. B. SACG There is no release on the user stream. C. SACG There is no closed state detection on it. D. Agile Controller-Campus On and SACG Wrong key configuration for linkage

Correct Answer: B,C

Question 9

Regarding the identity authentication method and authentication type, which of the following descriptions is correct?

A. User passed web Agent The method can support two authentication types: digital certificate authentication and system authentication. B. User passed Agent The method can support three authentication types: local authentication, digital certificate authentication and system authentication. C. User passed web Agent The method can support two authentication types: digital certificate authentication and local authentication. D. User passed web The method can support two authentication types: local authentication and digital certificate authentication.

Correct Answer: B

Question 10

Identity authentication determines whether to allow access by identifying the identity of the access device or user.

A. right B. wrong

Correct Answer: A

Question 11

For the scenario where the authentication server adopts distributed deployment, which of the following descriptions are correct? (multiple choice)

A. It is difficult to guarantee the quality of the network between the branch and the headquarters, and the network between the headquarters and the branch may be interrupted, making the terminal of the branch no longer available. B. A scenario where there are less than 2,000 branch users, and the headquarters and branch networks are relatively stable. C. The terminal security management business between the branch and the headquarters is relatively independent, and the headquarters provides supervision and control over the branch terminal security management business. D. The enterprise network is relatively scattered, there are multiple branches, and the branch users are larger in scale.

Correct Answer: A,D

Question 12

There are two types of accounts on the Agile Controller-Campus: one is a local account and the other is an external account.
Which of the following is not a local account?

A. Guest account B. Ordinary account C. Anonymous account D. Mobile certificate account

Correct Answer: D

Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System) - H12-723-ENU Exam Practice Test