[Nov-2021] Verified H12-723_V3.0 dumps Q&As - H12-723_V3.0 dumps with Correct Answers
The Best HCIP-Security Study Guide for the H12-723_V3.0 Exam
NEW QUESTION 61
Regarding patch management and Windows patch checking strategies, which of the following descriptions is wrong?
- A. Windows Patch check strategy focuses on checking whether the terminal host is installed Windows Operating system patches.
- B. Patch management focuses on checking whether the terminal host has installed the specified patch,Perform access control on the terminal host.
- C. Patch management and Windows The patch check strategy can check whether the terminal host has installed the specified Windows Make system patches.
- D. When the terminal host does not install the specified Windows When making a system patch, according toWindows The patch check policy prohibits terminal hosts from accessing the controlled network.
Answer: B
NEW QUESTION 62
Which of the following options is about SACG The description of the online process is wrong?
- A. Security check passed,Agile Controller-Campus Server notification SACG Will end user's IP Address switch to isolated domain
- B. Authentication fails, end users can onlyaccess resources in the pre-authentication domain
- C. Agile Controller-Campus Server gives SACG Carrying domain parameters in themessage
- D. Terminal and Agile Controller-Campus Server communication SSL encryption
Answer: A
NEW QUESTION 63
Regarding the description of the account blacklist, which of thefollowing options is wrong?
- A. Manually lock the account anddelete it from the list, the lock of the account will be released.
- B. The automatic account lock and manual account lock functions cannot be activated at the same time.
- C. For automatically locked accounts, if the number of incorrect passwords entered by the terminal user during authenticationexceeds the limited number of times within a limited time, the account will be automatically locked.
- D. For manually locked accounts, the administrator needs to manually add the account to the locked account list.
Answer: B
NEW QUESTION 64
Portal At the time of certification, pass Web After the browser enters the account password for authentication, it prompts"Authenticating.."The status lasts for a long time before it shows that the authentication is successful. Which of the following reasons may cause this phenomenon?
- A. Insufficient curtains of the terminal equipment result in a relatively large delay.
- B. Agile Controller-Campus There are too many authorization rules on the "It takes a lot of time to find
835 - C. Multiple Agile Controller The same terminal IP Address added Portal"Access terminal IP Address list",Some of them Agile Controller The server and the terminal cannot communicate normally.
- D. Portal The template is configured with an incorrect password.
Answer: C
NEW QUESTION 65
Regarding the file source set in the software management, which of the following descriptions is correct?
- A. The Microsoft Windows file sharing server uses the UNC (Universal Naming Conversion) path (beginning with "\\") to provide waiting. The path to distribute the software.
- B. External data sources cannot distribute files from FTP-type file servers.
- C. When the file source is an external data source, Any 0fce will obtain the software to be distributed.
- D. When the file source is an internal data source, when distributing software, the business manager will only send thepath of the data source of the software to be distributed to Any Office
Answer: A
NEW QUESTION 66
Using Agile Controller-Campus for visitor management, users can obtain the account they applied for in a variety of ways, but which of the following are not included A way?
- A. Voicemail
- B. Web Print
- C. Short message
- D. E-mail
Answer: A
NEW QUESTION 67
The use of the 802.1X authentication scheme generally requires the terminal to install specific client software.
For large-scale deployment of client software, the methods that can be taken. What are the cases? (multiple choices)
- A. Configure Free-rule and web push functions on the switch to push the installation package to users.
- B. Copy the installation packages to each other via U disk.
- C. Enable Guest VLAN so that users can obtain the installation package in Guest VLAN
- D. Installed by the administrator for each user.
Answer: A,C
NEW QUESTION 68
Which of the following equipment is suitable for use MAC Authentication access network?
- A. For testing Linux System host
- B. Office Windows Systemhost
- C. Network printer 232335
- D. Mobile client, such as smart phone, etc
Answer: C
NEW QUESTION 69
Agile Controller-Campus As RADIUS When the server performs authentication, how many ends need to be configured for authentication on the admission control device?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 70
The relationship between user groups and accounts in user management is stored in a tree on the Agile Controller-Campus. An account belongs to only one user group.
Consistent with the corporate organizational structure: If the OU (OnizbonUnit) structure stored in the AD/LDAP server is consistent with the corporate organizational structure, users are stored Under 0OU, when the Agile Controller-Campus synchronizes AD/LDAP server accounts, which synchronization method can be used?
- A. AO Synchronize by "group", "0U describes the organizational structure
- B. LDAP synchronization by "group"
- C. AO Press "Group" "Synchronize," "Group" Jida organization structure
- D. Press"0U" to synchronize
Answer: D
NEW QUESTION 71
According to the user's access5W1H Conditions determine access rights andQoS Strategy for5W1Ho[Which of the following descriptions are correct? (Multiple choice)
- A. WhoseTo determine the identity of the access person(member I, Visitors, etc.)
- B. WhoTo determine the ownership of the access device(Company standard,BYOD Wait)
- C. WhatTo determine the access device(PC,iOS Wait)
- D. How Determine the access method(Wired, wireless, etc.)
Answer: C,D
NEW QUESTION 72
Which of the following options is right PKI The sequence description of the work process is correct?
1. PKI Entity direction CA ask CA Certificate. .
2. PKI Entity received CA After the certificate, install CA Certificate.
3. CA receive PKI Entity CA When requesting a certificate, add your own CA Certificate reply to PKI entity.
4. PKI Entity direction CA Send a certificate registration request message.
5. PKI When the entities communicate with each other, they need to obtain and install the local certificate of the opposite entity.
6. PKI Entity received CA The certificate information sent.
7. PKI After the entity installs the localcertificate of the opposite entity,Verify the validity of the local certificate of the peer entity. When the certificate is valid,PC The public key of the certificate is used for encrypted communication between entities.
8. CA receive PKI The entity's certificate registration request message.
- A. 1-3-2-4-8-6-5-7
- B. 1-3-5-4-2-6-7-8
- C. 1-3-5-6-7-4-8-2
- D. 1-3-2-7-6-4-5-8
Answer: A
NEW QUESTION 73
Regarding the description of the security zone in the Agile Controller-Campus, which of the following options are correct? (multiple choice)
- A. The user domain is generally composed of various terminal users. The terminals in this area have the characteristics of large numbers, wide distribution, and strong mobility.
- B. The network domain is the most concerned security protection area of various enterprises, and it carries the important and core information assets of the enterprise.
- C. The business domain is a platform for the heavy load of business flows. According to the needs of the enterprise, security technology is used to logically divide the business to realize thesecurity of the network.
- D. The service domain is the area that provides security services for the corporate intranet. This area is generally composed of systems that provide security services such as antivirus servers, patch management servers, and terminal security servers.
Answer: A,D
NEW QUESTION 74
MAC Bypass authentication means that after the terminal is connected to the network, the access control device automatically obtains the terminal MAC Address, which is sent to RADIUS The serverperforms euverification.
- A. True
- B. False
Answer: B
NEW QUESTION 75
There is a three-layer forwarding device between the authentication client and the admission control device:If at this time Portal The certified three-layer authentication device can also obtain the authentication client's MAC address,So you can use IP Addressand MC The address serves as the information to identify the user.
- A. True
- B. False
Answer: B
NEW QUESTION 76
When the account assigned by the administrator for the guest is connected to the network, the audit action that the administrator can perform on the guest does not include which of the following options?
- A. Visitor online and offline records
- B. Account deactivation 1 reset Password
- C. Force users to go offline
- D. Send a warning message to the user
Answer: D
NEW QUESTION 77
......
H12-723_V3.0 certification guide Q&A from Training Expert ActualTestsIT: https://www.actualtestsit.com/Huawei/H12-723_V3.0-exam-prep-dumps.html