1. Which of the following descriptions about firewall bandwidth policies is correct?

2. Which of the following is not a matching condition for policy routing?

3. Which of the following descriptions about the difference between web link and web rewriting is incorrect?

4. Which of the following commands can display the IPSec SA negotiation results and IPSec policy configuration information?

5. Which of the following tools is commonly used for port scanning during penetration testing?

6. After NAT traversal is enabled, when a NAT device is detected between two gateways, the ESP message will be encapsulated in a UDP header. Which of the following is the source and destination port number of the UDP header?

7. Which of the following parameters cannot be configured in the bandwidth channel of the firewall?

8. Which of the following is not a parameter that needs to be configured for the IKE security proposal? (Multiple choice)

9. Which of the following attacks uses return timeout messages with a TTL of 0 to spy on the structure of the target network?

10. Firewall application behavior control technology cannot control which of the following application behaviors?

11. Which of the following descriptions of the file filtering process is correct?

12. Which of the following DDoS attack types can be prevented by current limiting technology?

13. In order to prevent internal employees from making inappropriate remarks on the Internet, which of the following content security filtering technologies can be deployed on fire prevention training 9

14. In IPSec, if the Security ACL does not match the actual data flow to be protected, which of the following consequences will occur?

15. Which of the following is the correct user name format for a firewall virtual system?

16. Which of the following descriptions of the AH and ESP protocols is correct?

17. Which of the following descriptions of source detection technology is incorrect?

18. Which of the following descriptions about firewall session persistence is incorrect?

19. Which of the following descriptions of health examinations is incorrect?

20. In SSL VPN, the firewall performs access authorization and access control based on which of the following dimensions?

21. The entire IPSec protocol framework contains multiple protocols. Which of the following protocols does not belong to the IPSec protocol framework?

22. If the IPSec security protocols supported by both peers are inconsistent, which of the following consequences will result?

23. ESP (Encapsulating Security Payload) is a protocol of IPSec that is used to provide confidentiality and anti-replay services for IP, including confidentiality of data packet content and limited traffic confidentiality. Which of the following is the protocol number of ESP?

24. Which of the following descriptions of Web rewriting in Web proxies is incorrect?

25. IKEv1 negotiation phase 1 supports two negotiation modes. How many bidirectional exchanges does the main mode include?

26. Which of the following does not belong to the single packet attack type?

27. Which of the following is not a malformed message attack?

28. In a virtual system, which of the following ownership relationships is recorded in the traffic diversion table?

29. Which of the following is the correct ordering of Huawei's intrusion prevention feature configuration process?

30. The business form of an enterprise is complex, and multiple protocols are used to communicate between modules. In order to ensure the security of communication data and prevent third parties from stealing key data information, which of the following communication protocols should be avoided as much as possible?

31. Which of the following is a signature included in the intrusion prevention signature database?

32. Which of the following descriptions of black box testing in penetration testing is incorrect?

33. When configuring the Portal page push policy on iMaster NCE-Campus, which of the following is not supported as a matching condition?