Which of the following descriptions about the action and security profile of the security policy are correct?
(Multiple choice)

• A.The security profile must be applied to the security policy thats allowed to take effect.
• B.If the action of the security policy is "prohibited", the device willdiscard this traffic, and then no content security check will be performed.
• C.If the security policy action is "Allow", the traffic will not match the security profile.
• D.The security profile may know: be applied to the security policy tfat the action is allowed and take effect.

Comment: *

Name: *

Email: *

Verification: *

In the environment of GRE configuration, which of the following statements are true? (Choose three.)

• A.In order to make the ends of the tunnel forward data packets normally, the devices of both ends are configured routing which through the Tunnel interface
• B.If both ends enable the configuration of keyword verification, the keyword must be the same
• C.When the local device send data packets, by identifying the protocol field value of IP header for GRE to determine whether send the data packet to GRE module for processing
• D.When the opposite end receives data packets, by identifying the protocol field value of IP header for GRE to determine whether send the data packet to GRE module for processing

Comment: *

Name: *

Email: *

Verification: *

Security technology has different methods at different technical levels and areas. Which of the following devices can be used for network layer security protection? (Multiple choice)

• A.IPS/IDS device
• B.Anti-DDoS device
• C.Firewall
• D.Vulnerability scanning device

Comment: *

Name: *

Email: *

Verification: *

In a Firewall hot standby configuration, HRP key configuration includes which of the following? (Choose three.)

• A.Specifies the heartbeat port
  hrp interface interface-type interface-number
• B.Enable HRP backup
  hrp enable
• C.Preemption delay
  hrp preempt [delay interval]
• D.Enabling fast backup session summary
  hrp mirror session enable

Comment: *

Name: *

Email: *

Verification: *

Against IP Spoofing,which of the following description is wrong?

• A.An attacker would need to cisguise the source IP addresses as trusted hosts, and send the data segment with the SYN flag request for connection
• B.Af-.er IP spoofing attack is successful, the attacker can use forged any IP address to imitate legitimate hast to access to critical information
• C.IP spoofing is to use the hosts' normal trust relationship based on the IP address to launch it

Comment: *

Name: *

Email: *

Verification: *