The whitelist rule of the firewall antivirus module is configured as *example*. Which of the following matches is used in this configuration?

• A.Keyword matching
• B.exact match
• C.Prefix matching
• D.Suffix matching

Comment: *

Name: *

Email: *

Verification: *

The application behavior control configuration file takes effect immediately after being referenced, without configuration submission.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Cloud sandbox refers to deploying the sandbox in the cloud and providing remote detection services for tenants. The process includes:
1. Report suspicious files
2. Retrospective attack
3. Firewall linkage defense
4. Prosecution in the cloud sandbox
For the ordering of the process, which of the following options is correct?

• A.1-4-2-3
• B.3-1-4-2
• C.1-3-4-2
• D.1-4-3-2

Comment: *

Name: *

Email: *

Verification: *

Which of the following descriptions about scanning and snooping attacks is wrong?

• A.When a worm breaks out, it is generally accompanied by an address scan attack, so scanning attacks are aggressive.
• B.Scanning attacks include address scanning and port scanning.
• C.It is usually the network detection behavior before the attacker launches a real attack.
• D.The source address of the scanning attack is real, so you can use the method of directly adding a blacklist for defense.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about IPS is wrong?

• A.The priority of the coverage signature is higher than that of the signature in the signature set.
• B.When the "source security zone" is the same as the "destination security zone", it means that the IPS policy is applied in the domain.
• C.Modifications to the PS policy will not take effect immediately. You need to submit a compilation to update the configuration of the IPS policy.
• D.The signature set can contain either predefined signatures or custom signatures. 832335

Comment: *

Name: *

Email: *

Verification: *