Note! Following H19-376 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is H19-376_V1.0

H19-376 Exam Dumps - HCS-Pre-sales-IP(Security)

Question # 4

Huawei's USG6300E series AI firewall has a competitive advantage over its friends. What is wrong with the following description?

Support interface extension

High interface density

Front and rear ventilation

Application protocol processing performance is high

Full Access

Question # 5

Which of the following routing options are IPV6 routing protocols

BGP4+

ISIS6

OSPFv3

RIPv3

BGP4

Full Access

Question # 6

Anti-Ddos solution In the actual server protection scenario, the function that is more prone to misjudgment is

SYN-ACK Flood source detection

TOPN Cache

SYN Flood source detection

DNS format check

Full Access

Question # 7

.Anti-Ddos SYN Flood source detects the TCP destination port of the attack that can defend against

1234

179

Full Access

Question # 8

The Linux executable type that the Huawei sandbox supports detection is ()?

ELF

DLL

SYS

EXE

Full Access

Question # 9

Regarding the application identification of Huawei's USG6000 next-generation firewall, what is the correct statement?

When the application characteristics change, you need to upgrade the firewall software.

Ability to identify applications based on statistical features and associated features

Identify Shuliang more than 6000

Ability to distinguish between different functions of the application, such as distinguishing uploads and downloads of network disk applications.

Full Access

Question # 10

NGFW SSL VPN does not currently support the following user authentication methods.

Fingerprint authentication

One-time password authentication, such as SecurID token authentication

Account password authentication, including local database, RADIUS, LDAP, AD

Digital certificate authentication, digital certificate + USB Key certification

Full Access

Question # 11

Which interfaces are included in the NGFW logical interface?

LOOPBACK

VLANIF

NULL

ETH-TRUNK

Subinterface

Full Access

Question # 12

Huawei Anti-Ddos ICMP Flood defense usually uses source detection to defend against

True

False

Full Access

Question # 13

Anti-Ddos HTTP source detection Meta Refresh method can be applied to AJAX (Ajax) objects

Applicable only to image objects

Fully applicable

Applicable only to text objects

Not applicable

Full Access

Question # 14

After the Huawei sandbox detects the threat, how to deal with it:

The sandbox will take the initiative to clear the part of the virus sample, similar to anti-virus software.

The sandbox is a straight-line device that can directly kill the threat sample. C. The sandbox needs to be linked with other security devices to block the threat.

You can use MTA to process the mail, so you can block the threat directly after detecting the damage.

Full Access

Question # 15

Which of the following types of packet capture tasks can be supported on ATIC?

Mirror capture

Globally discard packets

ACL capture

Protection object attack packet capture

The protection object is caught abnormally.

Full Access