[Jan-2022] Huawei H12-723_V3.0 Official Cert Guide PDF
Exam H12-723_V3.0: HCIP-Security-CTSS V3.0 - SurePassExams
NEW QUESTION 43
Agile Controller-Campus All components are supported Windows System and Linux system.
- A. True
- B. False
Answer: A
NEW QUESTION 44
On WIDS functional WLAN Regarding the judgment of illegal devices in the network, which of the following statements are correct? (Multiple choice)
- A. Not this AC Access STA,Also need to check access AP Does it contain law
- B. all Ad-hoc The device will be directly judged as an illegal device
- C. Not this AC Access STA Is illegal STA
- D. Not this AC Access AP Is illegal AP
Answer: A,B
NEW QUESTION 45
Regarding the description of the ACL used in the linkage between SACG equipment and the TSM system, which of the following statements is correct!?
- A. The original group number is 3099-3999 of ACL Even if it is occupied, it can be successfully activated TSM Linkage.
- B. default ACL The rule group number can only be 3999.
- C. due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you needto ensure these ACL Not referenced by other functions.
- D. default ACL The rule group number can be arbitrarily specified.
Answer: C
NEW QUESTION 46
When managing guest accounts, you need to create a guest account policy and set the account creation method. For the account creation method, which of the following descriptions is wrong?
- A. In order to facilitate management andimprove user experience, self-registration can be used.
- B. If there are a lot of users, you can choose to create in batches.
- C. If there are many users, you can choose database synchronization
- D. When adding accounts individually, you can choose to create them individually.
Answer: C
NEW QUESTION 47
Use the command on the switch to view the status of free mobility deployment, the command is as follows:
For the above command, which of the following descriptionsis correct?
- A. current Controller The server is backup n
- B. The control server address is 10.1.10.34
- C. The authentication device address is 10.1.31.78
- D. Status is"Working"Indicates that the switch and Controller Linkage is successful
Answer: D
NEW QUESTION 48
There are two types of accounts on the Agile Controller-Campus: one is a local account and theother is an external account.
Which of the following is not a local account?
- A. Anonymous account
- B. Ordinary account
- C. Mobile certificate account
- D. Guest account
Answer: C
NEW QUESTION 49
When the -aa command is used on the access control device to test the connectivity with the Radius server, the running result showssuccess, but the user cannot Normal access, the possible reason does not include which of the following options?
- A. The access layer switch does not start EAP Transparent transmission function.
- B. The user account or password is incorrectly configured.
- C. AD The service controller is not added in the authentication scenario AD area.
- D. wireless 02K In the scenario, the access control device isnot equipped with a security board
Answer: B
NEW QUESTION 50
Which of the following options is right PKI The sequence description of the work process is correct?
1. PKI Entity direction CA ask CA Certificate. .
2. PKI Entity received CA After the certificate, install CA Certificate.
3. CA receive PKI Entity CA When requesting a certificate, add your own CA Certificate reply to PKI entity.
4. PKI Entity direction CA Send a certificate registration request message.
5. PKI When the entities communicate with each other, they need to obtain and install the local certificate of the opposite entity.
6. PKI Entity received CA The certificate information sent.
7. PKI After the entity installs the localcertificate of the opposite entity,Verify the validity of the local certificate of the peer entity. When the certificate is valid,PC The public key of the certificate is used for encrypted communication between entities.
8. CA receive PKI The entity's certificate registration request message.
- A. 1-3-5-6-7-4-8-2
- B. 1-3-2-7-6-4-5-8
- C. 1-3-2-4-8-6-5-7
- D. 1-3-5-4-2-6-7-8
Answer: C
NEW QUESTION 51
Which of the following series of devices does not support the function of accompanying business?
- A. SVN5600 series
- B. S5720HI Series Switch:
- C. AR Series router
- D. USG6000 Series firewall
Answer: C
NEW QUESTION 52
Which of the following options is correct for the description of the role of the isolation domain?
- A. End users can access the isolated domain regardless of whether they pass identity authentication.
- B. Isolation domain refers to the area that terminal users can access after passing identity authentication and security authentication, such as ERP system, financial system database system. The area where you are.
- C. Isolation domain refers to the area that the terminal host can access before passing the identity authentication, such as DNS server, external authentication source, business controller (SC)c The area where the service manager (SM) is located.
- D. Isolation domain refers to the area that is allowed to be accessed when the terminal user passes the identity authentication but fails the security authentication,such as patch server, virus database server.
The area where the server is located.
Answer: D
NEW QUESTION 53
Use on the terminalPortal The authentication is connected to the network, but you cannot jump to the authentication page. The possible reason does not include which of the following options?
- A. Agile Controller-Campus Configured on Portal The authentication parameters are inconsistent with the access control device.
- B. Access device Portal The authentication port number of the template configuration is 50100 ,Agile Controlle-Campus The above is the default.
- C. CS Did not start
- D. When the page is customized, the preset template is used.
Answer: D
NEW QUESTION 54
Which of the following options is about SACG The description of the online process is wrong?
- A. Authentication fails, end users can onlyaccess resources in the pre-authentication domain
- B. Security check passed,Agile Controller-Campus Server notification SACG Will end user's IP Address switch to isolated domain
- C. Agile Controller-Campus Server gives SACG Carrying domain parameters in themessage
- D. Terminal and Agile Controller-Campus Server communication SSL encryption
Answer: B
NEW QUESTION 55
Deploying on Windows platform, using SQL Server database About the HA function of Agile Cotoller-Campus, which of the following descriptions Is it correct? (multiple choice)
- A. Deploy the database DB Time, support HA use SQL Server Database mirroring technology requires the deployment of master DB+Mirroring DB+witness DB.
- B. Deployment Management Center MC Time, support HA,Provide based on Keepalived Technical HA Active/standby switchover.
- C. Deploy Business Manager SM Time, support HA, Provide based on Keepalived Technical HA Active/standby switchover.
- D. Deploy business controller 3SC Time, support HA, Provide a backup solution in resource pool mode, which needs to be deployed N+1 indivual SC
Answer: A,D
NEW QUESTION 56
Theaccess control server is the implementer of the corporate security policy, responsible for implementing the corresponding access control in accordance with the security policy formulated by the customer's network(Allow, deny, leave or restrict).
- A. True
- B. False
Answer: B
NEW QUESTION 57
Security zone division means to better protect the internal network security,Based on the business type and security requirements of the intranet, divide the intranet into several granularities.
Logical area. Which of the following options does not belong Agile Controller-Campus Security domain?
- A. Business domain:
- B. User domain
- C. Network domain
- D. Attack domain
Answer: D
NEW QUESTION 58
In theAgile Controller-Campus admission control scenario, regarding the role description of the RADIUS server I client, which of the following is positive True?
- A. Agile Controller-Campus As RADIUS On the server side, the user terminal acts as RADIUS Client.
- B. Agile Controller-Campus Integrated RADIUS All functions of server and client."
- C. Agile Controller-Campus As RADIUS Server side, authentication device(like 802.1X switch)As RADIUS Client.
- D. Certified equipment(like 802. 1X switch)As RADIUS On the server side, the user terminal acts as RADIUS Client.
Answer: C
NEW QUESTION 59
In the terminal security management, the blackand white list mode is used to check the terminal host software installation status. Which of the following situations is a compliant behavior?
- A. The terminal host installs all the software in the whitelist, and also installs some of the software in the blacklist.
- B. The terminal host installs part of the software in the whitelist, but does not install the software in the blacklist.
- C. The terminal host installs all the software in the whitelist, but does not install the software in the blacklist.
- D. The terminal host does not install the software in the whitelist, nor the software in the blacklist.
Answer: C
NEW QUESTION 60
In the park, users frequently enter and leave the wireless signal coverage area due to office needs. If youneed to ensure the user's Internet experience, after the user passes an authentication, when he accesses the network again, no important authentication is required:Which of the following authentication methods is recommended?
- A. 82.1 Certification
- B. MAC Certification
- C. MAC(prioritized
- D. Portal Certification
Answer: C
NEW QUESTION 61
Location refers to the end user's use AC-Campus The terminal environment when accessing the controlled network office. Which of the following options is correct for the description of the place?
- A. Place and location have nothing to do.
- B. Different places can have different security policies.
- C. The location has nothing to do with safety.
- D. There can only be one place in the company.
Answer: B
NEW QUESTION 62
How to check whether the MC service has started 20?
- A. Select on the server"Start>all programs> Huawei> Agile Cortroler> Sever rtrller",an examination MCWhether the status is"run".
- B. View in task manager TMCServer with TMCSeverDaemon Whether the service is started.
- C. View in task manager TMCServerDaemon Whether the service is started.
- D. View in task manager TMCSever Whether the service is started.
Answer: B
NEW QUESTION 63
......
Free H12-723_V3.0 Exam Dumps to Improve Exam Score: https://www.surepassexams.com/H12-723_V3.0-exam-bootcamp.html