Which of the following is correct about the order of the file filtering technology process?
(1) Security policy application is permit
(2) Protocol decoding
(3) File Type Identification
(4) Application identification
(5) File Filtering

• A.(1) (3) (2) (4) (5)
• B.(1) (2) (3) (4) (5)
• C.(1) (4) (2) (3) (5)
• D.(1) (2) (4) (3) (5)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is correct about special packets attack?

• A.Attacks on special control packets do not have the ability to detect network structures. Only scanning-type attacks can detect the network.
• B.The special control packets attack is a potential attack and does not have direct destruction.
• C.The attacker probes the network structure by sending special control packets to launch real attack.
• D.Attacks on special control packets can only use ICMP to construct attack packets.

Comment: *

Name: *

Email: *

Verification: *

The status code in the HTTP response message describes the type of response message. There are many possible values.
Which of the following status codes indicates that the resource requested by the client does not exist?

• A.200
• B.503
• C.404
• D.400

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is wrong about the content filtering configuration of Huawei USG6000?

• A.Mail filtering will not take effect until the mail filtering configuration file is invoked with the security policy enabled.
• B.When IMAP message is detected, if it is determined to be illegal, the response action of the firewall only support sending alarm information and does not block the message.
• C.When POP3 message is detected, if it is determined to be illegal, the response action of the firewall only support sending alarm information and does not block the message.
• D.The size of attachments is limited to single attachment, not to the total size of all attachments.

Comment: *

Name: *

Email: *

Verification: *

For SYN flood attacks, TCP source authentication and TCP proxy can be used for defense.
Which of the following description is correct?

• A.TCP source authentication has the same restriction on the path of packets, so the application is not as common as TCP proxy.
• B.After the TCP source authentication passes the source authentication of the client, it is added to the whitelist. Then the SYN packet of this source still needs to be verified.
• C.During the TCP proxy process, the firewall proxies and responds to every SYN packet received and maintains half-connection. Therefore, when the traffic of the SYN packet is heavy, the firewall requires very high performance.
• D.TCP proxy means that the firewall is deployed between the client and the server. When the client sends an SYII packet to the server through the firewall, the firewall instead of the server establishes a three-way handshake with the client. Generally used for scenarios where the path of the packet is inconsistent.

Comment: *

Name: *

Email: *

Verification: *