Regarding the description of the security zone in the Agile Controller-Campus, which of the following options are correct? (multiple choice)

• A.The service domain is the area that provides security services for the corporate intranet. This area is generally composed of systems that provide security services such as antivirus servers, patch management servers, and terminal security servers.
• B.The network domain is the most concerned security protection area of various enterprises, and it carries the important and core information assets of the enterprise.
• C.The business domain is a platform for the heavy load of business flows. According to the needs of the enterprise, security technology is used to logically divide the business to realize the security of the network.
• D.The user domain is generally composed of various terminal users. The terminals in this area have the characteristics of large numbers, wide distribution, and strong mobility.

Comment: *

Name: *

Email: *

Verification: *

The terminal host access control function does not take effect. The following information is displayed on SACG:
<FW> display right-manager role-id rule
Advanced ACL 3099 , 5 rules , not bingding with vpn-instance
Ad's step is 1
rule 1000 permit ip (1280 times matched)
rule 1001 permit ip destination 172.18.11.2210 (581 times matched)
rule 1002 permit ip destination 172.18.11.223 0 (77 times matched)
rule 1003 permit ip destination 172.19.0.0 0.0.255.255 (355 times matched) rule 1004 deny ip (507759 times matched) Which of the following statements is correct?

• A.End-host traffic is blocked by the default ACL.
• B.172.18.11.223 is the post domain server.
• C.Open the escape route.
• D.172.18.11.221 is the server that isolates the domain.

Comment: *

Name: *

Email: *

Verification: *

Agile Controller-Campus The system can manage the software installed on the terminal, define the black and white list of software, and assist the terminal to install necessary software and uninstall the software that is not allowed to be installed by linking with the access control equipment,Regarding the definition of black and white lists, which of the following statements is correct?

• A.Check for prohibited software and software that must be installed
• B.Check for prohibited software licenses and sub-licensed software
• C.Check the software that must be installed
• D.Check for prohibited software

Comment: *

Name: *

Email: *

Verification: *

Regarding the way SACG devices connect to the network, which of the following descriptions are correct?
(multiple choice)

• A.SACG It is usually connected to the core switch equipment and uses policy routing to divert traffic.
• B.SACG The equipment requires Layer 3 intercommunication with the terminal.
• C.SACG Equipment requirements and Agile Controller-Campus Interoperability on the second floor.
• D.SACG Support hanging on non-Huawei devices.

Comment: *

Name: *

Email: *

Verification: *

A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)

• A.Connect to the terminal on the device to open 802.1X Function.
• B.The aggregation layer device is not configured RADIUS Certification template.
• C.Agile Controller-Campus The switch is not added on NAS equipment.
• D.The Layer 2 link is used between the access device and the aggregation device, and it is not turned on
  802 Instrument transparent transmission function

Comment: *

Name: *

Email: *

Verification: *