Online Access Free H12-711-ENU Exam Questions

After the network attack event occurs, set the isolation area, summary data, and estimated loss according to the plan. Which stage does the above actions belong to the work contents of in the network security emergency response?

• A.Detection phase
• B.Preparation stage
• C.Inhibition phase
• D.Recovery phase

Which of the following is the correct order for event response management?
1 detection
2 report
3 relief
4 summarizing experience
5 repair
6 recovery
7 response

• A.1-3-2-7-5-6-4
• B.1-3-2-7-6-5-4
• C.1-7-3-2-6-5-4
• D.1-2-3-7-6-5-4

Which of the following does not include the steps of the safety assessment method?

• A.Penetration test
• B.Manual audit
• C.Questionnaire survey
• D.Data analysis

In order to obtain evidence of crime, it is necessary to master the technology of intrusion tracking. Which of the following descriptions are correct about the tracking technology? (Multiple Choice)

• A.Packet tagging technology extracts information from attack sources by recording packets on the router and then using data drilling techniques
• B.Packet Recording Technology marks packets on each router that has been spoken by inserting trace data into the tracked IP packets.
• C.Analysis of shallow mail behavior can analyze the information such as sending IP address, sending time, sending frequency, number of recipients, shallow email headers, etc.
• D.Link detection technology determines the source of the attack by testing the network connection between the routers.

Which of the following are correct regarding the matching conditions of the security policy? (Multiple choice)

• A."Apply" in the matching condition is an optional parameter
• B."The source security zone" is an optional parameter in the matching condition.
• C."Service" is an optional parameter in the matching condition
• D."Time period" in the matching condition is an optional parameter