Huawei H12-723_V3.0 Exam Questions Instant Access

Question 1

Which of the following options is right PKI The sequence description of the work process is correct?

1. PKI Entity direction CA ask CA Certificate. .

2. PKI Entity received CA After the certificate, install CA Certificate.

3. CA receive PKI Entity CA When requesting a certificate, add your own CA Certificate reply to PKI entity.

4. PKI Entity direction CA Send a certificate registration request message.

5. PKI When the entities communicate with each other, they need to obtain and install the local certificate of the opposite entity.

6. PKI Entity received CA The certificate information sent.

7. PKI After the entity installs the local certificate of the opposite entity,Verify the validity of the local certificate of the peer entity. When the certificate is valid,PC The public key of the certificate is used for encrypted communication between entities.

8. CA receive PKI The entity's certificate registration request message.

A1-3-5-4-2-6-7-8

B1-3-5-6-7-4-8-2

C1-3-2-7-6-4-5-8

D1-3-2-4-8-6-5-7

Answer : D

Question 2

Regarding the policy for checking account security, which of the following descriptions are correct? (Multiple choice)

AYou can check whether there is a weak password.

BYou can check whether the account has joined a specific group.

CIt cannot be repaired automatically._

DIt is not possible to check whether the password length meets the requirements.

Answer : A, B

Question 3

In the terminal security management, the black and white list mode is used to check the terminal host software installation status. Which of the following situations is a compliant behavior?

AThe terminal host does not install the software in the whitelist, nor the software in the blacklist.

BThe terminal host installs all the software in the whitelist, but does not install the software in the blacklist.

CThe terminal host installs part of the software in the whitelist, but does not install the software in the blacklist.

DThe terminal host installs all the software in the whitelist, and also installs some of the software in the blacklist.

Answer : B

Question 4

A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)

AThe aggregation layer device is not configured RADIUS Certification template.

BAgile Controller-Campus The switch is not added on NAS equipment.

CConnect to the terminal on the device to open 802.1X Function.

DThe Layer 2 link is used between the access device and the aggregation device, and it is not turned on 802 Instrument transparent transmission function

Answer : C, D

Question 5

After the user is successfully authenticated, Agile Controller-Campus Which of the following actions can be performed on the user(Multiple choice)

ATo use Any Office The connected user performs remote assistance.

BForce users to go offline.

CAudit users' online and offline records.

DDisable the mobile certificate account/Disable and assign roles.

Answer : A, B, C, D

Question 6

VIP Experience guarantee, from which two aspects are the main guarantees VIP User experience? (Multiple choice)

Abandwidth

BForwarding priority

CAuthority

DStrategy

Answer : A, B

Question 7

Which of the following options belongs to MC prioritized pail Authentication application scenarios?

AUser use portal Page for authentication

BUsers follow WeChat for authentication.

CUser use IAC Client authentication

DUser use Pota At the first certification,RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache,RAIUS The server directly searches the cache for the terminal's MAC The address is discussed.

Answer : D

Huawei HCIP-Security-CTSS V3.0 H12-723_V3.0 Exam Questions