QUESTION 121
Which of the following measures can be taken to address the risk of confidential disclosure by intranet users?

A. Content filtering
B. CC attack prevention
C. Fingerprint learning
D. Web page tampering prevention

Correct Answer: A
QUESTION 122
Which of the following is not a task in the continuous improvement phase of the ISO27001 project implementation step?

A. System operation and monitoring
B. ISMS Internal audit
C. Project summary meeting
D. ISMS external audit

Correct Answer: A
QUESTION 123
Which of the following aspects are involved in information security?

A. Reliability
B. Availability
C. Controllability
D. Integrity

Correct Answer: ABCD
QUESTION 124
Security policies check data flows that pass through firewalls. Only the data flows that match the security policies are allowed to pass.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 125
Which of the following is not a characteristic of a worm?

A. Occupy system resources
B. Information theft
C. Independent individual
D. Relying on Vulnerability Propagation

Correct Answer: B
QUESTION 126
Which of the following actions can be taken on matched data flows by a firewall authentication policy?

A. Authentication exemption
B. SMS authentication
C. Non-authentication
D. Server authentication

Correct Answer: ABC
QUESTION 127
Which of the following information attributes does an intrusion attempt to destroy?

A. Availability
B. Integrity
C. Confidentiality
D. Controllability

Correct Answer: ABCD
QUESTION 128
3-tuple NAT translates both addresses and port numbers so that multiple private addresses can share one or more public addresses.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 129
What are the types of computer viruses?

A. Backdoor program
B. Worm
C. File infector virus
D. Troian horse

Correct Answer: ABCD
QUESTION 130
Which of the following types of traffic do not trigger authentication even if they match an authentication policy?

A. Traffic generated when a user accesses the HTTP service
B. OSPF traffic
C. LDP traffic
D. Device access traffic

Correct Answer: BCD
QUESTION 131
Which of the following statements is correct about local authentication?

A. A user sends the user name and password to the firewall through the Portal authentication page. The user password is stored and verified on the firewall.
B. A user sends the user name and password to the firewall through the Portal authentication page. As the firewall does not store the user password, it sends the user name and password to a third-party authentication server, which performs the authentication.
C. A user enters the SMs verification code obtained on the Portal authentication page for authentication.
D. A user sends the user name and password to a third-party authentication server. After authenticating the user, the third-party authentication server sends the user’s identity information to the firewall. The firewall only records the user’s identity information and does not participate in authentication.

Correct Answer: D
QUESTION 132
Which of the following packets is controlled by a firewall’s security policy by default?

A. Broadcast
B. Unicast
C. Multicast
D. Anycast

Correct Answer: B
QUESTION 133
What are the default roles of Huawei firewall administrators?

A. Configuration administrator
B. System administrator
C. Audit administrator
D. Monitoring administrator

Correct Answer: ABC
QUESTION 134
Which of the following statements are correct about VRRP and VGMP?

A. A VGMP group controls the switching of all VRRP groups.
B. A VGMP group uses the non-preemption principle
C. In VRRP, when the faulty master device recovers, its priority is restored. In this case, the master device preempts to become the master device again.
D. A VRRP group has the preemption feature.

Correct Answer: ACD
QUESTION 135
Which of the following are types of RADIUS packets?

A. Access-Request
B. Accounting-Request
C. Access-Accept
D. Accounting-Response

Correct Answer: ABCD

QUESTION 136
Which of the following statements is correct about heartbeat interface configuration?

A. The heartbeat interfaces on two firewalls can be of different types.
B. The heartbeat interfaces of two firewalls do not need to be added to the same security zone.
C. The MTU of an interface can be smaller than 1500 bytes.
D. The management interface cannot be used as a heartbeat interface.

Correct Answer: D
QUESTION 137
In hot standby networking, the heartbeat interfaces of the two Firewalls must be directly connected.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 138
Which security zone can be deleted and its priority can be reconfigured?

A. Trust
B. Untrust
C. DMZ
D. ISP

Correct Answer: D
QUESTION 139
While working for a company, Tom receives an email with an attachment. Which of the following operations is correct?

A. Checking the email sender. If the email was sent from the company’s mailbox, Tom can open and save the attachment
B. Checking the sender and email information, and using antivirus software to check the attachment
C. Checking the email’s content. If the email is related to work, Tom can open and save the attachment
D. Opening the attachment directly because email attachments do not affect information security

Correct Answer: B

QUESTION 140
Which of the following protocols are file transfer protocols?

A. NFS
B. POP3
C. FTP
D. HTTP

Correct Answer: ABCD