Online Access Free Huawei.H12-722-ENU.v2022-02-11.q63 Practice Test (Page 6)

H12-722-ENU Exam Question 21

Configure the following command on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-default-route acl 3000
Which of the following options are correct? (Multiple choice)

A.If the default route is configured and the allow-default-route parameter is also matched, if the source address of the packet does not exist in the FIB table of the firewall, but for the loose type check, the packet will pass through URPF check, and perform normal forwarding.

B.If the default route is configured but the parameter allow-default-route is not configured. As long as the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected.

C.For the loose type check, if the source address of the packet exists in the FIB table of the firewall, the packet passes the check.

D.If the source address of the packet does not exist in the FIB table of the firewall and the default route is configured and the allow-default-route parameter is also matched, the packet cannot pass the URPF check even if it is a loose type check.

H12-722-ENU Exam Question 22

Which of the following statements about intrusion detection/defense devices are correct? (Multiple Choice)

A.Can quickly adapt changes in threats.

B.Can't effectively resist the spread of viruses from the Internet to the Intranet.

C.Protect the intranet from external attacks and suppress malicious traffic, such as spyware, worms, etc., flooding and spreading to the intranet.

D.NIP6000 can identify applications up to 6000+, implement fine-grained application protection, save export bandwidth, and ensure the business experience of key services.

H12-722-ENU Exam Question 23

Which of the following statements is wrong about the content filtering configuration of Huawei USG6000?

A.When IMAP message is detected, if it is determined to be illegal, the response action of the firewall only support sending alarm information and does not block the message.

B.Mail filtering will not take effect until the mail filtering configuration file is invoked with the security policy enabled.

C.When POP3 message is detected, if it is determined to be illegal, the response action of the firewall only support sending alarm information and does not block the message.

D.The size of attachments is limited to single attachment, not to the total size of all attachments.

H12-722-ENU Exam Question 24

Which of the following are the common causes of IPS detection failures? (Multiple choices)

A.Bypass function in IPS is turned off

B.IPS function is not enabled

C.Policy IDs with incorrect associations between IPS policy domains

D.IPS policy is not submitted for compilation

H12-722-ENU Exam Question 25

Regarding the local black and white list of anti-spam messages, which of the following statements is wrong?

A.The black and white list is matched by extracting the destination IP address of the SMTP connection

B.Black and white lists are matched by extracting the source IP address of the SMTP connection

C.Block the connection if the source IP address of the SMTP connection matches the blacklist

D.The black and white list is matched by the sender's dns suffix

Other Version: 2000Huawei.H12-722-ENU.v2022-04-18.q103; 54Huawei.Actual4dump.H12-722-ENU.v2022-04-14.by.jay.103q.pdf; 62Huawei.Pass4training.H12-722-ENU.v2021-08-16.by.kimberley.59q.pdf

Latest Upload: 156CBIC.CIC.v2025-09-13.q75; 165Cisco.700-841.v2025-09-13.q131; 145SAP.C_ABAPD_2507.v2025-09-12.q56; 128SAP.C_TS452_2022.v2025-09-12.q83; 212ACSM.020-222.v2025-09-11.q48; 171VMware.5V0-31.23.v2025-09-10.q73; 138Oracle.1z0-915-1.v2025-09-10.q24; 174Citrix.1Y0-231.v2025-09-10.q87; 150SAP.C-THR85-2505.v2025-09-09.q29; 188Adobe.AD0-E727.v2025-09-09.q76

H12-722-ENU Exam Question 21

H12-722-ENU Exam Question 22

H12-722-ENU Exam Question 23

H12-722-ENU Exam Question 24

H12-722-ENU Exam Question 25

Download PDF File