Which statement is correct regarding the IP address scanning attack prevention principle?
(Choose three answers)

• A.If the USG open blacklist function, and the associated IP address scanning attack prevention, a source when the scan rate exceeds the set value elaborated beyond the threshold will be discarded packets within the follow-up time for this issue as long as the source is less than threshold can also be forwarded.
• B.In an IP address scanning attack, prevention is done by detecting the address of a host of behavioral scanning rate, if the rate exceeds the threshold value, and add it to the blacklist.
• C.In an IP address scanning attack, the attacker attacks using TCP / UDP packets to detect the target address.
• D.IP address scanning attack attacker attacks using ICMP packets (such as Ping and Tracert command) to detect the target address.

Comment: *

Name: *

Email: *

Verification: *

What type of packet sent in a VRRP HELLO message?

• A.unicast packets
• B.broadcast packets
• C.UDP packets
• D.multicast packets

Comment: *

Name: *

Email: *

Verification: *

ACK Flood attacks use botnets to send a large number of ACK packets and impacts the network bandwidth, resulting in network link congestion. If a large number of attack packets are sent, server processing power is exhausted, thereby refusing access to normal service.
Which statement is correct about the Huawei Anti-DDos equipment to prevent this attack, when the comparison of two treatments are strict mode and basic mode? (Choose two answers)

• A.If the cleaning equipment checks to hit a session ACK packet, regardless of the strict mode and basic mode will create a reason to check session.
• B.Bypass deploy dynamic drainage using strict mode.
• C.In strict mode, the cleaning device is not checked already established session, if session ACK packets do not match, the device discards the packet.
• D.Using the "basic model" even though checks on the cleaning equipment is less than a session, the device will first few ACK packet discard and start checking the session.

Comment: *

Name: *

Email: *

Verification: *

In the networking environment of dual-system hot backup and ip-link, which of the following configurations is the key configuration for ip-link and dual-system hot backup?

• A.hrp track ip-link 1 master
• B.hrp track ip-link 1 slave
• C.ip-link check enable
• D.hrp mirror ip-link 1

Comment: *

Name: *

Email: *

Verification: *

Which is the correct packet encapsulation order for L2TP over IPSec?

• A.The order from the first package to the post package is PPP-->UDP-->L2TP-->IPSec
• B.The order from the first package to the back package is PPP--> L2TP-->UDP--> IPSec
• C.The order of D from pre-package to post-encapsulation is IPSec --> PPP --> L2TP-->UDP
• D.The order of C from pre-package to post-encapsulation is IPSec --> L2TP-->UDP--> PPP

Comment: *

Name: *

Email: *

Verification: *