QUESTION 14
Which of the following options are correct about the NAT policy processing flow? (Multiple Choice)

QUESTION 15
In practical applications, asymmetric encryption is mainly used to encrypt user data

QUESTION 16
Fire Trust domain FTP client wants to access an Um.rust server FTP service has allowed the client: to access the server TCP 21 port, the client in the Windows command line window can log into the FTP server, but can not download the file, what are the following solutions? (Multiple choice)

QUESTION 17
Which of the following information will be encrypted during the use of digital envelopes? (Multiple Choice)

QUESTION 18
Which of the following are correct about configuring the firewall security zone?(Multiple Choice)

QUESTION 19
In the IPSec VPN transmission mode, which part of the data packet is encrypted?

QUESTION 20
Which of the following options belong to theencapsulation mode supported by IPSec VPN? (Multiple Choice)

QUESTION 21
Which of the following is not the scope of business of the National Internet Emergency Center?

QUESTION 22
The host firewall is mainly used to protect the host from attacks and intrusions from the network

QUESTION 23
IPSec VPN uses an asymmetric encryption algorithm to encrypt the transmitted data

QUESTION 24
Against IP Spoofing, which of the following description is wrong?

QUESTION 25
The scene of internal users access the internet as shown, the subscriber lineprocesses are:
1. After authentication, USG allow the connection
2. The user input http://1.1.1.1 to access Internet
3. USG push authentication interface. User =? Password =?
4. The user successfully accessed http://1.1.1.1, equipment create Session table.
5. User input User = Password = *** which the following procedure is correct?

QUESTION 26
Using a computer to store information about criminal activity is not a computer crime.

QUESTION 27
The single-point login function of the online user, the user authenticates directly to the AD server, and the device does not interfere with the user authentication process. The AD monitoring service needs to be deployed on the USG device to monitor the authentication information of the AD server.

QUESTION 28
Which of the following guarantees “should detect and protect spam at critical network nodes and maintain upgrades and updates of the spam protection mechanism” in security 2.0?

QUESTION 29
Device destruction attacks are generally not easy to cause information leakage, but usually cause network communication services to be interrupted.