Online Access Free H12-731-ENU Exam Questions

As shown in the figure, the corresponding defense methods are:

• A.Payload Check Defense
• B.Fingerprint Learning Defense
• C.Method defense through source authentication
• D.Authenticate the user through the associated TCP protocol
• E.Defense by TTL checking

The following figure shows the IKEv1 negotiation process. What information is negotiated in the ① and ② messages?

• A.IKE Security Proposal
• B.Swap temporary random numbers
• C.ID payload
• D.AUTH payload

For border network security, which of the following options are recommended for planning and deployment priorities?

• A.Security Domain Isolation
• B.Enable DDoS function
• C.Deploy VPN
• D.IPS Real-Time Intrusion Prevention
• E.Enable device virtualization

When using the SSL VPN network extension function, the virtual IP address pool can be set to the same network segment as the IP address of the internal network interface of the device.
If the virtual IP address pool and the IP address of the intranet interface are not in the same network segment, manually configure the route to the address pool on the device, the outgoing interface is the intranet interface, and the next hop is the next hop of the intranet interface.

• A.FALSE
• B.TRUE

A network expects to use URPF technology to improve network security. Which mode of URPF is used in the following networking scenarios:

• A.strict mode or loose mode
• B.loose mode
• C.strict mode
• D.According to the stem information, the corresponding mode cannot be judged