Master 2021 Latest The Questions HCNP-Security and Pass H12-723-ENU Real Exam!
Penetration testers simulate H12-723-ENU exam PDF
NEW QUESTION 82
Agile Controller-Campus system architecture belongs to C/S architecture.
- A. False
- B. True
Answer: A
NEW QUESTION 83
The administrator issues notices to users through the form of announcements, such as the latest software and patch installation notices, etc. Which of the following options is wrong?
- A. The endpoint must have proxy client installed to receive announcements.
- B. You can issue an announcement by department.
- C. You can issue an announcement by account number.
- D. If the system issues an announcement and the proxy client is not online, it will not receive the announcement information after going online.
Answer: D
NEW QUESTION 84
When performing terminal admission control, which of the following are not include when use the authentication technology?
- A. Portal authentication
- B. Bypass certification
- C. SACG certification
- D. 802.1X authentication
Answer: B
NEW QUESTION 85
After an enterprise deploys anti-virus software, it finds that virus infection still occurs in large areas. The reason for this problem is that apart from the limitations of the product's own technology, personal terminal security is weak and it is also an important factor.
- A. True
- B. False
Answer: A
NEW QUESTION 86
If use normal account for authentication, which of the following options is wrong?
- A. Users can use Any Office for authentication.
- B. Users can use built-in 802.1X client for authentication.
- C. Users can use Web Agent for authentication.
- D. Users can't use web method for authentication.
Answer: D
NEW QUESTION 87
Which of the following is correct about the source of files set in software management?
- A. The external data source can't distribute FTP-type file server files.
- B. When the source of file is external data source, Any Office will obtain the software to be distributed.
- C. Microsoft Windows file sharing server provides the path to the software to be distributed in UNC (Universal Naming Conversion) path (beginning with "\\").
- D. When the source of the file is internal data source, when distributing the software, the service manager only sends the path of software data source to be distributed to Any Office.
Answer: C
NEW QUESTION 88
Location refers to the terminal environment when terminal user use AC-Campus to access controlled network.
Which of the following about the location is correct?
- A. Different locations can have different security strategy.
- B. There is no relationship between locations.
- C. There can only be one location in the company.
- D. There is no relationship between location and safety.
Answer: A
NEW QUESTION 89
Import user information of AD server on Agile Controller-Campus to implement user access authentication. If the user does not find user information on Agile Controller-Campus, which of the following actions will be performed next?
- A. Send the user's information to AD server for verification.
- B. Synchronize the database again.
- C. Discard user information.
- D. Return authentication failure information directly.
Answer: A
NEW QUESTION 90
The terminal host access control function does not take effect. The following information is displayed on SACG:
<FW> display right-manager role-id rule
Advanced ACL 3099 , 5 rules , not bingding with vpn-instance
Ad's step is 1
rule 1000 permit ip (1280 times matched)
rule 1001 permit ip destination 172.18.11.2210 (581 times matched)
rule 1002 permit ip destination 172.18.11.223 0 (77 times matched)
rule 1003 permit ip destination 172.19.0.0 0.0.255.255 (355 times matched) rule 1004 deny ip (507759 times matched) Which of the following statements is correct?
- A. End-host traffic is blocked by the default ACL.
- B. 172.18.11.223 is the post domain server.
- C. 172.18.11.221 is the server that isolates the domain.
- D. Open the escape route.
Answer: D
NEW QUESTION 91
MAC authentication means that in 802.1X authentication environment, when the terminal does not respond to 802.1X authentication request from the access control device after accessing the network, the access control device automatically obtains MAC address of the terminal and sends it to RADIUS server as a certificate for accessing the network.
- A. False
- B. True
Answer: A
NEW QUESTION 92
Which of the following descriptions is correct for distributed deployment scenario for an authentication server?
- A. Scenarios where the number of users in branches is less than 2,000 and the network between the headquarters and branches is relatively stable.
- B. The terminal security management services between the branches and the headquarters are relatively independent, and the headquarters provides monitoring and recommendation scenarios for the terminal security management services of the branches.
- C. The quality of the network between the branch office and the headquarters is difficult to guarantee. The network between the headquarters and the branch office may be interrupted, making the terminal of the branch office unable to connect to the data center of the headquarters.
- D. The enterprise network is relatively decentralized. There are multiple branches and the users of the branches are large.
Answer: C,D
NEW QUESTION 93
Which of the following steps does not need to be completed before install Agile Controller-Campus?
- A. Install the database
- B. Install the operating system
- C. Import License
- D. Install antivirus software
Answer: C
NEW QUESTION 94
A network adopts 802.1X to authenticate access users. The admission control device is deployed at the convergence layer. After the deployment is complete, the test-aaa command is used successfully on the admission control device, but the user can't access the network.
Which of the following may be the cause of the fault? (Multiple choices)
- A. Layer 2 links are used between access devices and aggregation devices. The 802.1X transparent transmission function is not enabled.
- B. RADIUS authentication template is not configured on the aggregation layer device.
- C. The 802.1X function is not enabled on the port on the access device.
- D. The switch is not added to Agile Controller-Campus as NAS device.
Answer: A,C
NEW QUESTION 95
When manage guest accounts, you need to create guest account policy and set account creation method. Which of the following descriptions is incorrect for account creation?
- A. If the number of users is large, you can choose database synchronization.
- B. If the number of users is large, you can create them in batches.
- C. Self-registration can be used to facilitate management and enhance the user experience.
- D. When you add accounts individually, you can select individual creation.
Answer: A
NEW QUESTION 96
Which of the following descriptions is wrong for the basic principle of user access security?
- A. The terminal device selects the resource to be accessed according to the result of the status check
- B. The terminal device directly interacts with the security policy server. The terminal reports its own status information, including the virus database version, operating system version and patch version installed on the terminal.
- C. The security policy server checks the terminal status information. For terminal devices that do not meet enterprise security standards, the security policy server re-issues authorization information to the access device.
- D. When terminal device accesses the network, it first authenticates the user through the access device, and the access device cooperates with the authentication server to complete the user identity authentication.
Answer: A
NEW QUESTION 97
......
Penetration testers simulate H12-723-ENU exam: https://www.validbraindumps.com/H12-723-ENU-exam-prep.html