The following figure shows the configuration of the URL filtering configuration file. Regarding the configuration, which of the following statements is correct?

• A.Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.
• B.The firewall will first check the blacklist entries and then the whitelist entries.
• C.The user visits the website www.exzample.com, and when the black and white list is not hit, the next step is to query the predefined URL category entry.
• D.The default action means that all websites are allowed to visit. So the configuration is wrong here.

Comment: *

Name: *

Email: *

Verification: *

To protect the security of data transmission, more and more websites or companies choose to encrypt traffic through SSL.
Which of the following statements is true about the threat detection of SSL traffic using Huawei NIP6000?

• A.Processes such as "decryption," "threat detection," and "encryption."
• B.Threat-detected traffic is sent directly to the server without encryption.
• C.NIP000 does not support SSL traffic threat detection.
• D.NIP can directly crack and detect SSL encryption.

Comment: *

Name: *

Email: *

Verification: *

For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?

• A.TCP proxy means that the firewall is deployed between the client and the server. When the SYI packet sent by the client to the server passes through the firewall, the The firewall replaces the server and establishes a three-way handshake with the client. Generally used in scenarios where the back and forth paths of packets are inconsistent.
• B.During the TCP proxy process, the firewall will proxy and respond to each SYN message received, and maintain a semi-connection, so when the SYN message is When the document flow is heavy, the performance requirements of the firewall are often high.
• C.TCP source authentication is added to the whitelist after the source authentication of the client is passed, and the SYN packet of this source still needs to be verified in the future.
• D.TCP source authentication has the restriction that the return path must be consistent, so the application of TCP proxy is not common. State "QQ: 9233

Comment: *

Name: *

Email: *

Verification: *

Which of the following is correct about enhanced mode in HTTP Flood Source authentication? (Multiple selection)

• A.The enhanced mode support all HTTP flood source authentication scenarios.
• B.Enhanced mode refers to the use of verification code authentication.
• C.The enhanced mode is better than the basic mode in the user experience.
• D.Some bots have redirection function, or the free agent used during the attack supports the redirection function, resulting in the failure of defense of the basic mode. The enhanced mode can effectively defend.

Comment: *

Name: *

Email: *

Verification: *

The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are the possible reasons? (multiple choice)

• A.The security policy does not reference the anti-virus configuration file.
• B.The virus signature database version is older.
• C.No virus exceptions are configured.
• D.The anti-virus configuration file is configured incorrectly.

Comment: *

Name: *

Email: *

Verification: *