About the configuration command in the smart routing, which statement of the following is correct? (Multiple Choice)
#
multi-interface
mode priority-of-link-quality
priority-of-link-quality parameter delay jitter loss
priority-of-link-quality protocol tcp-simple
add interface GigabitEthernet1/0/1
add interface GigabitEthernet1/0/2

• A.Parameter of link quality detection has the delay, jitter, and packet loss rate
• B.Use the TCP protocol to detect
• C.Selected 3 links for sharing
• D.Use the way of bandwidth-based load sharing

Comment: *

Name: *

Email: *

Verification: *

IP address scanning attack defense not only prevents ICMP packet detection target addresses, but also prevents TCP/UDP scanning detection target addresses.

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

What are the correct statements about the IP address scanning attack and prevention principles?

• A.If the USG starts the blacklist function and is associated with IP address scanning attack prevention, when the scanning rate of a certain source exceeds the set threshold, the excess threshold will be discarded, and the packets sent by this source will be less than the subsequent time. Threshold, can also be forwarded
• B.IP address scanning attack is an attacker that uses an ICMP packet (such as ping and tracert) to detect the target address.
• C.IP address scanning attack is an attack method used by an attacker to detect a target address by using TCP/UDP packets.
• D.IP address scanning attack defense detects the rate of address scanning behavior of a host. If the rate exceeds the threshold, it is blacklisted.

Comment: *

Name: *

Email: *

Verification: *

In the dual-system hot backup networking environment as shown in the standby firewall also need to configure NAT function, assuming that the external address of the VRRP backup group. NAT address pool and NAT Server in the same network segment. Which of the following configuration needs to be on the Server? (choose two answers)

• A.HRP_M [USG_A] nat server global 2.2.2.10 inside 10.100.10.3 vrrp 2
• B.HRP_M [USG_A] nat address-group 1 2.2.2.5 2.2.2.6 vrrp 2
• C.HRP_M [USG_A] nat address-group 1 2.2.2.5 2.2.2.6 vrrp 1
• D.HRP_M [USG_A] nat server global 2.2.2.10 inside 10.100.10.3 vrrp 1

Comment: *

Name: *

Email: *

Verification: *

On the IP-MAC address binding, when both IP and MAC packets that match, it will go to the next processing firewall whereas the packet is discarded if IP and MAC does not match.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *