Figure 1 is the first to be attacked host. A packet capture screenshots is shown in line no
132, Figure 2 is a screenshot of attacked first host with line no. 133 packet capture.
Analyse what type of attack is this?

• A.IP fragmentation attack
• B.UDP Flood attack slice
• C.TAP Fragment Flood
• D.UDP Flood

Comment: *

Name: *

Email: *

Verification: *

With the Huawei Anti-DDoS equipment first packet discard technology, the defense is constantly changing the source IP address or source port number of attack packets.
Regarding the first packet discard technology, which of the following is not correct?

• A.The first packet discarding used in conjunction with source authentication, prevents false source of attacks.
• B.The packet transmission interval is less than the lower limit of the first packet detection rate, or the rate is higher than the upper limit of the first packet inspection packets believed to be the first package.
• C.Based triples (source IP address, source port, and protocol) to match packets and packets by time interval to determine the first packet
• D.UDP protocol does not have retransmission mechanism, so you can not use the first packet discard techniques

Comment: *

Name: *

Email: *

Verification: *

For a virtual service technology, which of the following statements is correct?

• A.For multiple real servers, real servers may not be in the same security zone, but must be in the same segment
• B.For multiple real servers, network and security zone where the real server load balancing does not affect
• C.For multiple real servers, real servers may not be in the same segment, but must be in the same security zone
• D.For multiple real servers, real servers need to be in the same network and the same security zone

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a drawback of an L2TP VPN?

• A.No authentication
• B.No encryption
• C.It cannot be routed in two layers
• D.You must use L2TP Over IPsec

Comment: *

Name: *

Email: *

Verification: *

Which is incorrect about the IKE DPD statement?

• A.is used for detection of IKE neighbor status
• B.PDUs are sent periodically between B IKE PEERs.
• C.After the DPD function is enabled, the IPSec packet is not received within the interval specified by the interval, and the DPD sends a DPD request to the peer and waits for the response. Text
• D.DPD sends the query only before the encrypted message is sent and the timer expires.

Comment: *

Name: *

Email: *

Verification: *