USG6000V software logic architecture is divided into three planes: management plane, control plane and

• A.Data forwarding plane
• B.Business plane
• C.Configuration plane
• D.Log plane

Comment: *

Name: *

Email: *

Verification: *

Traditional firewalls have weak application layer analysis and processing capabilities, and cannot correctly analyze malicious code that is doped in the allowable application data stream. Many attacks or malicious behavior often use firewall open application data streams to cause damage, resulting in application layers threat can penetrate the firewall.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *

Configure the following commands on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-defult-route acl 3000
Which of the following options are correct? (multiple choice)

• A.For loose inspection: if the source address of the packet exists in the FB of the firewall: the packet passes the inspection directly
• B.For the case where the default route is configured, but the parameter allow-defult-route is not configured. As long as the source address of the packet is in the FIB table of the firewall If it does not exist, the message will be rejected.
• C.For the configuration of the default route, and at the same time matching the parameter allow-defult-route, if the source address of the message is in the FIB table of the firewall If it does not exist in the l0e check, the packet cannot pass the URPF check.
• D.For the situation where the default route is configured and the parameter allow-defult-route is matched at the same time, if the source address of the packet is in the FIB table of the firewall If the packet does not exist in the loose check mode, all packets will pass the URPF check and be forwarded normally.

Comment: *

Name: *

Email: *

Verification: *

Which of the following description is correct about the Management Center?

• A.The management server of the management center is responsible for the cleaning of abnormal traffic, as well as the collection, analysis, aggregation, and storage of service data, and is responsible for reporting the summarized traffic to the management server for report presentation.
• B.The data collector and management server support distributed deployment and centralized deployment. Centralized deployment has good scalability.
• C.Management Center is divided into two parts: management server and data collector.
• D.The data collector is responsible for abnormal traffic cleaning, centralized device management configuration, and business report presentation.

Comment: *

Name: *

Email: *

Verification: *

An enterprise administrator configures the Web reputation system as shown in the figure.
Which of the following statements is true about this configuration?

• A.The content of number 2 is mandatory.
• B.In addition to this page configuration, you need to enable the linkage between the firewall and the sandbox. Otherwise, the page configuration is invalid.
• C.After the configuration is complete, you need to submit the configuration for it to take effect.
• D.The content of number 4 is mandatory.

Comment: *

Name: *

Email: *

Verification: *