QUESTION 181
Which of the following statements are true about email protocols?

A. If POP3 is used, users can directly manage emails on the server without downloading all emails to the local PC.
B. With POP3, the client software downloads all unread emails to the local PC, and the mail server deletes the emails.
C. With IMAP, the client software downloads all unread emails to the local PC, and the mail server deletes the emails.
D. If IMAP is used, users can directly manage emails on the server without downloading all emails to the local PC.

Correct Answer: BD
QUESTION 182
In the data filtering technology, if violation information is identified based on keywords, enterprise security can only be ensured by blocking content transmission.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 183
Which of the following is not a response action for abnormal file identification?

A. Allow
B. Block
C. Alert
D. Delete

Correct Answer: D
QUESTION 184
In file blocking, which of the following attributes can be identified by the firewall for received files?

A. File type
B. Application protocol
C. File transfer direction
D. File name extension

Correct Answer: ABCD
QUESTION 185
An IPS signature filter is a set of signature conditions. Signatures that meet any one of the filtering conditions can match the signature filter.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 186
The IPs profile can filter signatures based on severity. Which of the following is not a severity level?

A. Low
B. Info
C. High
D. Custom

Correct Answer: D
QUESTION 187
Nmap is a common network scanning and sniffing tool. It can scan and discover open UDP or TCP ports on the target host, but cannot determine the operating system used by the target host.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 188
SQL injection attacks have serious consequences, such as data loss, data damage, and data leakage.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 189
The figure shows the output of the top command in a Linux operating system. Which of the following statements are true about the command output?

A. PID indicates the process ID, which is unique in the Linux operating system.
B. PR indicates the process priority. A smaller value indicates a higher priority.
C. %MEM indicates the percentage of the memory used by the process to the total physical memory.
D. %CPU indicates the CPU usage of a process. The upper limit is 100%.

Correct Answer: ABCD
QUESTION 190
Which of the following Linux environment variables can be used to check whether a non-default or abnormal service program registration path is added to a Linux host?

A. $ HOSTNAME
B. $ PATH
C. $ SHELL
D. $ HOME

Correct Answer: B

QUESTION 191
To improve the information security awareness of all employees, an enterprise holds an in-house information security education and training session. What should employees do to effectively protect the data security of individuals and enterprises?

A. Periodically change system passwords, especially passwords of key database systems, and ensure that the passwords meet complexity requirements.
B. Download necessary software from official websites only.
C. Do not use USB flash drives from unknown sources or without security verification to copy sensitive data.
D. After receiving an abnormal email from an unknown source, do not open any hyperlink, report this security event in a timely manner, and delete the email.

Correct Answer: ABCD
QUESTION 192
Portal authentication is also known as web authentication. When accessing the network, a user must be authenticated on the web portal. If authentication fails, the user can access only specified network resources. The user can access other network resources only after being authenticated successfully. Which of the following can trigger Portal authentication?

A. The access device triggers authentication.
B. A user accesses the Portal authentication page.
C. A user accesses any page other than the Portal authentication page, after which the user is redirected to the Portal authentication page for authentication.
D. A client sends a DHCP request packet.

Correct Answer: ABC
QUESTION 193
Network Access Control (NAC) is an end-to-end security control technology that works in combination with AAA to implement access authentication. Which of the following statements about NAC and AAA are true?

A. NAC provides three authentication modes: 802.1x authentication, MAC address authentication, and Portal authentication.
B. NAC is mainly used for interaction between access devices and authentication servers.
C. AAA is mainly used for interaction between users and access devices.
D. An AAA server controls network access rights of users through authentication, authorization, and accounting.

Correct Answer: ABCD
QUESTION 194
When an LDAP server is used as the authentication server, which of the following operations needs to be performed on the LDAP server data for user authentication?

A. query
B. Delete
C. Update
D. Write

Correct Answer: A
QUESTION 195
Which of the following statements about Portal authentication is false?

A. The Portal authentication system consists of four main components: client, access device, Portal server, and authentication server.
B. A Portal server can be external or built into an access device.

C. Portal authentication can be triggered in proactive or passive mode. Proactive authentication is initiated by a client, whereas passive authentication is initiated by the authentication server.
D. In most cases, Portal authentication allows a client to be directly authenticated on a web page, without needing to install additional software on the client.

Correct Answer: C
QUESTION 196
Assume that Portal authentication is configured for wireless guest access, a WAC acts as an authentication device, iMaster NCE-Campus functions as an authentication server, and a Portal server template has been configured on the WAC as follows. Which of the following statements about the configuration are true?

A. The Portal server address is 10.23.200.1.
B. The WAC uses the IP address 10.10.10.254 to communicate with the Portal server.
C. The URL to which users are redirected contains the SSID name.
D. The WAC uses port 50200 to process Portal protocol packets.

Correct Answer: ABC
QUESTION 197
In network extension, an SSL VPN tunnel can be established in either reliable or transmission mode. (Enter lowercase letters.)

Correct Answer: unreliable
QUESTION 198
The action modes of URLs are strict mode and mode. (Enter lowercase letters.)
Correct Answer: losse
QUESTION 199
In 802.1X authentication, a user may log out in the following scenarios: The user proactively logs out of the client; the access device controls user logout; and the RADIUS server controls user logout. When the RADIUS server controls user logout, it can log out the user by sending packets. (Enter the acronym in uppercase letters.)

Correct Answer: DM-Requst
QUESTION 200
Match the Portal authentication profiles on Huawei WACs with their functions.
Select and Place:

Correct Answer: