Which of the following are the control items for HTTP behavior? (Multiple Choice)

• A.Acting on the Internet
• B.POST operation
• C.File Upload and Download
• D.Browse the web

Comment: *

Name: *

Email: *

Verification: *

The following figure is a schematic diagram of the detection file of the firewall and the sandbox system linkage.

The Web reputation function is enabled on the firewall, and website A is set as a trusted website and website B is set as a suspicious website.
Which of the following statements is correct

• A.The files obtained by users from website A and website B will be sent to the inspection node for inspection.
• B.After the detection node detects the suspicious file, it not only informs the firewall in the figure of the result, but also informs other network devices connected to it.
• C.When a user visits website B, although the firewall will extract the file and send it to the detection node, the user can still access normally during the detection process Site B.
• D.Assuming that website A is an unknown website, the administrator cannot detect the traffic file of this website sC

Comment: *

Name: *

Email: *

Verification: *

Regarding the processing process of file overwhelming, which of the following statements is correct?

• A.The file filtering module will compare the application type, file type, and transmission direction of the file identified by the previous module with the file filtering rules configured by the administrator.
  Then the lookup table performs matching from top to bottom.
• B.There are two types of actions: warning and blocking.
• C.If all the parameters of Wenzhu can match all file filtering rules, then the module will execute the action of this file filtering rule.
• D.If the file type is a compressed file, then after the file filtering check, the female file will be sent to the file decompression module for decompression and decompression.
  Press out the original file. If the decompression fails, the file will not be re-filed.

Comment: *

Name: *

Email: *

Verification: *

Intrusion detection is a kind of network security technology used to detect any damage or attempt to damage the confidentiality, integrity or availability of the system. Which of the following belongs to the intrusion detection knowledge base?

• A.Security policy
• B.Complete Trojan sample
• C.Complete virus sample
• D.Specific behavior patterns

Comment: *

Name: *

Email: *

Verification: *

Divert traffic using BGP protocol. The configuration command is as follows.
[sysname] route-policy 1 permit node 1
[sysname-route-policy] apply community no-advertise
[sysname-route-policy] quit
[sysname] bgp 100
[sysname-bgp] peer 7.7.1.2 as-number 100
[sysname-bgp] import-route unr
[sysname-bgp] ipv4-family unicast
[sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export
[sysname-bgp-af-ipv4] peer 7.7.1.2 advertise-community
[sysname-bgp-af-ipv4] quit
[sysname-bgp] quit
Which of the following options are correct for the BGP drainage configuration description? (Multiple choice)

• A.The management center does not need to configure protection objects. When an attack is discovered, the traffic diversion task is automatically delivered.
• B.You also need to configure the firewall ddos bgp-next-hop fib-filter command to implement the remarks.
• C.Use BGP to advertise UNR routes for dynamic traffic diversion.
• D.After receiving the UNR route, the peer neighbor will not send it to any BGP neighbors.

Comment: *

Name: *

Email: *

Verification: *