Free HCIA-Security V4.0 Exam H12-711_V4.0 Exam Practice Test

Compared with the software architecture of C/S, B/S does not need to install a browser, and users are more flexible and convenient to use.

• TRUE
• FALSE

Which of the following descriptions about the main implementation of single sign-on is wrong? ( )[Multiple choice]*

• Accept PC message mode
• Query the AD server security log mode
• Query the syslog server mode
• Firewall monitors AD authentication packets

The network environment is becoming more and more complex, and network security incidents occur frequently. While accelerating the construction of informatization, enterprises must not only resist external attacks, but also prevent internal management personnel from being involved in data leakage and operation and maintenance accidents due to operational errors and other issues. Which of the following options might reduce operational risk?

• According to the administrator configuration, the O&M user corresponds to the background resource account, and restricts the unauthorized use of the account. mouth Based on the password security policy, the O&M security audit system automatically modifies the password of the background resource account at regular intervals.
• Each system is independently operated, maintained and managed, and the access process is not audited and monitored.
• Oral Each department system is independently authenticated and uses a single static password for authentication.

Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?

• Hold a summary meeting of the project in the information security management stage
• Determine risk disposal measures and implement rectification plans
• Determine risk tolerance and risk appetite
• System integration and information security management system document preparation

In cases where some configurations alter existing session table entries and want them to take effect immediately, you can regenerate the session table by clearing the session table information. All session table information can be cleared by executing the _____firewall session table command.

• reset
• set

When using passive mode to establish an FTP connection, the control channel uses port 20 and the data channel uses port 21. ( )[Multiple choice]*

• True
• False

Both digital envelopes and digital signatures guarantee data security and verify the origin of data.

• TRUE
• FALSE

The RADIUS protocol specifies how to pass user information, billing information, authentication and billing results between the NAS and the RADIUS server, and the RADIUS server is responsible for receiving the user's connection request, completing the authentication, and returning the result to the NAS.

• TRUE
• FALSE

What is correct about the following description of device management in the operating system?

• The main task of port device management is to complete the I/O requests made by users and classify I/O devices for users.
• Whenever a process makes an I/O request to the system, as long as it is secure, the device allocator will assign the device to the process according to a certain policy.
• Device management can virtualize a physical device into multiple logical devices through virtualization technology, providing multiple user processes to use.
• In order to alleviate the problem of speed mismatch between CPU and I/O devices and improve the parallelism of CPU and I/O devices, in modern operating systems, almost all I/O devices are exchanging numbers with processors Buffers are used at all times.

An engineer needs to back up the firewall configuration. Now he wants to use a command to view all the current configurations of the firewall. May I ask the command he uses is ____[fill in the blank]*

• display current-configuration
• current-configuration