Nuevo HCIP-Security-CTSS V3.0 H12-723_V3.0-Enu Guía de estudio para garantía del 100%

1. After the user is authenticated successfully, which of the following actions can be performed on the user on the Agile Controller-Campus? (Multiple Choice)

2. Which of the following options is correct for describing the effect of each role in the Portal authentication system?

3. The standard 802.1X client that comes with the Web client and the operating system only has the function of identity authentication, and does not support the execution of inspection-type policies and monitoring-type policies. Any Office client supports all inspection-type policies and monitoring-type policies.

4. Which of the following network security threats exist only in WLAN networks?

5. Mobile smartphone and tablet users establish an IPSec encrypted tunnel with AE through the Any Office client. After passing the authentication and compliance check, they can access the enterprise business.

6. All components of Agile Controller-Campus support Windows system and Linux system.

7. The traditional access authority control strategy is implemented through ACI or VLAN, which cannot be decoupled from the IP address, and the maintenance workload is heavy when the IP address changes. The agile network can achieve decoupling from IP addresses because of the introduction of the concept of security groups.

8. Which of the following options are correct for the description of MAC authentication and MAC bypass authentication? (Multiple Choice)

9. Typical application scenarios of terminal security include: desktop management, illegal outreach and computer peripheral management.

10. Which of the following methods can be used for enterprise terminal security to be protected?

11. For the description of the account blacklist, which of the following options is incorrect?

12. Free Mobility determines access rights and QoS policies according to the 5W1H conditions of user access. For 5W1H, which of the following descriptions are correct? (Multiple Choice)

13. In the WLAN network with the WIDS function enabled, which of the following statements are correct regarding the determination of illegal devices? (Multiple Choice)

14. When configuring the antivirus software policy, if you set the "Violation Level of Antivirus Software Required for Not Installed or Not Running" to "Normal", and check the "Prohibit access to the network if serious violations occur" option.

When a user uses Any office for authentication and the authentication is passed, but the security check shows that the anti-virus software is not enabled, can the user access the network?

15. When allocating various services according to the user group, account and terminal IP address range, if the same service (except the announcement service) is allocated to the user group, account and terminal IP address range, the business assigned to the highest priority will take effect.

Which of the following is true about the order of priority?

16. The administrator issues notices to users in the form of announcements, such as the latest software and patch installation notices, etc. Which of the following options for announcements is false?

17. The CA receives the certificate registration request message from the PKI entity.

18. Regarding the deployment scenarios of hardware SACG certification, which of the following descriptions are correct? (Multiple Choice)

19. Which of the following options is the main function of the SC component in Agile Controller-Campus?

20. The terminal uses Portal authentication to access the network, but cannot jump to the authentication page. The possible reasons do not include which of the following options?

21. In Portal authentication, which of the following parameters must be configured on the switch? (Multiple Choice)

22. A network uses Portal authentication, and the user finds that there is no place to enter the username/password in the pushed Web page when accessing.

This failure may be caused by which of the following reasons?

23. When managing guest accounts, you need to create a guest account policy and set the account creation method. For the account creation method, which of the following descriptions is wrong?

24. When the Agile Controller-Campus acts as a RADIUS server for authentication, what ports need to be configured for authentication on the admission control device?

25. When using local guest account authentication, Portal authentication is usually used to push the authentication page to the guest.

Before user authentication, when the admission control device receives the HTTP request sent by the user for a resource other than the Portal server authentication URL, how does the admission control device handle it?

26. When using the test-aaa command on the access control device to test the connectivity with the Radius server, the running result shows a timeout, which may be caused by incorrect account or password configuration.

27. Which of the following options is not a challenge posed by mobile office?

28. Identity authentication determines whether to allow access by identifying the identity of the access device or user.

29. When deploying wired 802.1X authentication, if the admission control device is deployed at the aggregation layer, this deployment method has the characteristics of high security performance, many management devices, and complex management.

30. Regarding the use of user isolation technology in a WLAN networking environment, which of the following statements is false?

31. In the Windows environment, after the Agile Controller-Campus is successfully installed, how to manually start the Management Center (MC)? (Multiple Choices)

32. The terminal automatically connects to the enterprise Wi-Fi.

33. Site refers to the terminal environment when the end user uses the AC-Campus to access the controlled network for office work.

Which of the following options is correct about the site?

34. 1. Which of the following options describe the 802.1X access process correctly? (Multiple Choice)

35. Which of the following options describes the SACG launch process incorrectly?

36. In an agile network, users may need to access servers such as DNS, DHCP, and Portal before authentication. When the traffic of the user accessing the server passes through the firewall, the firewall queries the Agile controller-campus server for information about the agile security group corresponding to the traffic. Since the user has not passed the authentication at this time, the Agile controller-campus server will inform the firewall that the user belongs to the "Unknown Agile Security Group (Unknown)", which will cause the user's traffic to match the "Unknown Agile Security Group (Unknown)" before the firewall refreshes the user's identity.

As a result, the correct permissions cannot be obtained immediately after the user authentication is passed. How to solve this problem?

37. The multi-level defense system is mainly reflected in the network level and the system level. Which of the following options are used for the security defense at the network level? (Multiple Choice)

38. MAC authentication means that in the 802.1X authentication environment, when the terminal does not respond to the 802.1X authentication request from the access control device after accessing the network, the access control device automatically obtains the terminal's MAC address and sends it as a credential for accessing the network to the RADIUS server for verification.

39. The products and systems provided by BYOD solutions cover many fields such as terminal, network, security, application, and management, including: serialized BYOD equipment, wireless network system, network access security, VPN gateway, terminal security client software, Authentication system, mobile device management (MDM), mobile eSpace UC, etc.

40. It is difficult for a single traditional network strategy to cope with the current complex situations such as user diversification, location diversification, terminal diversification, application diversification, and insecure experience.