The main attack prevention technologies of Huawei USG6000 products include: source detection, fingerprint learning and associated defense.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

For the basic mode of HTTP Flood Source authentication, which of the following are the correct descriptions? (Multiple choices)

• A.The basic mode effectively blocks access from non-browser clients.
• B.The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.
• C.The zombie tool does not implement a complete HTTP protocol stack and does not support automatic redirection. Therefore, the basic mode can effectively defend against HTTP flood attacks.
• D.When there is an HTTP proxy server in the network, the firewall will add the proxy server IP address to the whitelist, but the basic source authentication of the zombie host is still valid.

Comment: *

Name: *

Email: *

Verification: *

Threats detected by the big data intelligent security analysis platform will be synchronized to each network device at the same time C and then collected from the network device Collect it in the log for continuous learning and optimization.

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

Regarding the file filtering configuration file global configuration of the Huawei USG6000 product, which of the following is correct?

• A.When the file type is not recognized, file filtering, content filtering, and anti-virus detection are not performed.
• B.File filtering, content filtering and anti-virus detection are not available when the file is corrupted. At this time, the file can be released or blocked according to business requirements.
• C.When the number of the file compressed layers is greater than the configured maximum number of uncompressed layers, the firewall cannot filter the file.
• D.When the file extension does not match, if the action is "Allow" or "Alert", file filtering, content filtering, and anti-virus detection are performed according to the file type.

Comment: *

Name: *

Email: *

Verification: *

When the Anti DDoS system finds the attack flow, the state will redirect the attack flow to the cleaning device.
After the cleaning device is cleaned, it will flow back.
Note to the original link, which of the following options does not belong to the method of re-injection?

• A.BGP back-annotation
• B.GRE back note:
• C.MPLS LSP back injection
• D.Policy routing back annotation,

Comment: *

Name: *

Email: *

Verification: *