Anomaly detection establishes the normal behavior characteristics of the system's main body through analysis of system audit data: In the detection, if the audit data in the system is different from the normal behavior characteristics of the established subject, it is considered an intrusion behavior. Which of the following can be used as the system body? (Multiple choices)

• A.Host
• B.Single user
• C.A key program and file in the system
• D.A group of users

Comment: *

Name: *

Email: *

Verification: *

Which of the following descriptions about viruses and Trojans are correct? (multiple choices)

• A.Viruses can replicate themselves
• B.Trojan horses are triggered by computer users
• C.Viruses are triggered by computer users
• D.Trojans can replicate themselves

Comment: *

Name: *

Email: *

Verification: *

The following figure shows the configuration of the URL filtering configuration file. Regarding the configuration, which of the following statements is correct?

• A.The firewall will first check the blacklist entries and then the whitelist entries.
• B.The default action means that all websites are allowed to visit. So the configuration is wrong here.
• C.The user visits the website www.exzample.com, and when the black and white list is not hit, the next step is to query the predefined URL category entry.
• D.Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.

Comment: *

Name: *

Email: *

Verification: *

Regarding the process of file filtering, which of the following statements is wrong?

• A.The application identification module can identify the type of application hosting the file.
• B.Protocol decoding is responsible for parsing the file data and file transfer directions in the data stream.
• C.After the file extraction fails, the file will still be filtered.
• D.The file type identification module is responsible for identifying the real type of the file and the extension of the file based on the file data

Comment: *

Name: *

Email: *

Verification: *

After the cleaning device establishes a BGP neighbor relationship with the peer router, uses BGP traffic diversion and policy routing reinjection, what configuration needs to be performed on the cleaning device? (Multiple Choice)

• A.<sysname> system-view [sysname] firewall ddos bgp-next-hop X.X.X.X
• B.[sysname] policy-based-route [sysname-policy-pbr] rule name huizhu [sysname-policy-pbr-rule-huizhu] ingress-interface GigabitEthernet 2/0/1 [sysname-policy-pbr-rule-huizhu] action pbr egress-interface GigabitEthernet 2/0/2 next-hop X.X.X.X [sysname-policy-pbr-rule-huizhu] quit
• C.[sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname] bgp 100 [sysname-bgp] peer X.X.X.X as-number 100 [sysname-bgp] import-route unr [sysname-bgp] ipv4-family unicast [sysname-bgp-af-ipv4] peer X.X.X.X route-policy 1 export [sysname-bgp-af-ipv4] peer X.X.X.X advertise-community [sysname-bgp-af-ipv4] quit
• D.[sysname] interface GigabitEthernet 2/0/1 [sysname-GigabitEthernet2/0/1] anti-ddos flow-statistic enable

Comment: *

Name: *

Email: *

Verification: *