Huawei HCS-Pre-sales-IP(Security) 認定 H19-376 試験問題:

1. The basic implementation process of NGFW Intrusion Prevention (IPS) is:

A) Threat identification based on message port number
B) First, reassemble IP fragmented packets and TCP streams, then match characteristics, then perform protocol identification and protocol analysis to complete detection, and finally respond to processing.
C) Protocol identification and protocol analysis are performed first, then IP fragment message reassembly and TCP stream reassembly are performed, then feature matching is performed to wake up intrusion detection, and finally response processing is performed.
D) First, reassemble IP fragmented packets and TCP streams, then perform protocol identification and protocol analysis, then perform feature matching to wake up intrusion detection, and finally perform response processing.

2. What are the methods in the Anti-Ddos solution that are not dynamic draining?

A) Policy routing
B) MPLS
C) GRE
D) BGP
E) OSPF

3. The DNS CNAME redirect method in the Anti-Ddos solution is applied to only the objects of the DNS client.

A) Only applicable to clients that support UDP DNS
B) Fully applicable
C) Only applicable to clients that support TCP DNS
D) Not applicable

4. Where is the IP route happening?

A) Transport layer
B) Physical layer
C) Data link layer
D) Network layer

5. Firehunte feature library supports offline and online upgrades

A) True
B) False

質問と回答：