Which of the following behaviors is a false positive of the intrusion detection system?

• A.The process of trying to log in to the system is recorded
• B.Web-based attacks are not detected by the system
• C.Use Ping to perform network detection and be alerted as an attack
• D.Unable to detect new types of worms

Comment: *

Name: *

Email: *

Verification: *

Regarding the process of file filtering, which of the following statements is wrong?

• A.The file type identification module is responsible for identifying the real type of the file and the extension of the file based on the file data
• B.Protocol decoding is responsible for parsing the file data and file transfer directions in the data stream.
• C.The application identification module can identify the type of application hosting the file.
• D.After the file extraction fails, the file will still be filtered.

Comment: *

Name: *

Email: *

Verification: *

When a virus is detected in an email, which of the following is not the corresponding action for detection?

• A.Declare
• B.Delete attachments
• C.Warning
• D.Block

Comment: *

Name: *

Email: *

Verification: *

Configure the following commands on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-defult-route acl 3000
Which of the following options are correct? (multiple choice)

• A.For loose inspection: if the source address of the packet exists in the FB of the firewall: the packet passes the inspection directly
• B.For the case where the default route is configured, but the parameter allow-defult-route is not configured. As long as the source address of the packet is in the FIB table of the firewall If it does not exist, the message will be rejected.
• C.For the situation where the default route is configured and the parameter allow-defult-route is matched at the same time, if the source address of the packet is in the FIB table of the firewall If the packet does not exist in the loose check mode, all packets will pass the URPF check and be forwarded normally.
• D.For the configuration of the default route, and at the same time matching the parameter allow-defult-route, if the source address of the message is in the FIB table of the firewall If it does not exist in the l0e check, the packet cannot pass the URPF check.

Comment: *

Name: *

Email: *

Verification: *

When you suspect that the corporate network is being attacked by hackers, you have conducted technical investigations.
Which of the following options does not belong to the pre-attack behavior?

• A.Brute force attack
• B.Loophole attack
• C.Web Application Attacks
• D.Planting Malware

Comment: *

Name: *

Email: *

Verification: *