
Valid H12-723-ENU Exam Q&A PDF H12-723-ENU Dump is Ready (Updated 175 Questions)
Exam Questions and Answers for H12-723-ENU Study Guide
NEW QUESTION 92
Which of the following descriptions is correct regarding the strategy for checking screen saver settings?
- A. You can check whether the terminal has screen saver enabled.
- B. Screensaver settings do not automatically repair
- C. Only Windows operating systems are supported.
- D. You can check whether the screen saver password is enabled
Answer: A,D
NEW QUESTION 93
Which of the following devices is suitable for MAC authentication access network?
- A. Network printer
- B. Mobile clients, such as smart phones, etc.
- C. Linux system host for testing
- D. Windows System Host for Office
Answer: A
NEW QUESTION 94
The SACG query right-manager information as follows, which are correct? (Multiple choices)
[USG] display right-manager server-group
17:35:21 2017/7/14
Server group state: Enable
Server number:1
Server ip address Port State Master
1.1.1.2 3288 active Y
2.1.1.1 3288 active N
- A. The linkage between SACG and the controller is successful.
- B. The main controller IP address is 2.1.1.1.
- C. The main controller IP address is 1.1.1.2.
- D. The collaboration between SACG and IP address 2.1.1.1 was unsuccessful.
Answer: A,C
NEW QUESTION 95
A network adopts 802.1X to authenticate access users. The admission control device is deployed at the convergence layer. After the deployment is complete, the test-aaa command is used successfully on the admission control device, but the user can't access the network.
Which of the following may be the cause of the fault? (Multiple choices)
- A. Layer 2 links are used between access devices and aggregation devices. The 802.1X transparent transmission function is not enabled.
- B. RADIUS authentication template is not configured on the aggregation layer device.
- C. The 802.1X function is not enabled on the port on the access device.
- D. The switch is not added to Agile Controller-Campus as NAS device.
Answer: A,C
NEW QUESTION 96
Which of the following are correct about each role in the Portal authentication architecture? (Multiple choices)
- A. AAA server stores user name and password for authentication of access users.
- B. AAA server is used to push Portal authentication page to users.
- C. Web server is used to push Portal authentication page to users.
- D. web server stores user name and password for authentication of access users.
Answer: A,B
NEW QUESTION 97
A company has a large number of mobile office employees who need to deploy a mobile office system to manage employees. The company employs more than 2,000 people and its work areas are distributed throughout the country. What kind of deployment method is used to facilitate management?
- A. Distributed deployment
- B. Both centralized and distributed deployments
- C. Centralized deployment
- D. Hierarchical deployment
Answer: A
NEW QUESTION 98
Which of the following is true about software SACG and hardware SACG?
- A. Software SACG use Any Office for admission control.
- B. Hardware SACG use Any Office for admission control.
- C. Hardware SACG save costs compared to software SACG.
- D. Hardware SACG is more secure.
Answer: A
NEW QUESTION 99
Which of the following belong to the third-party server account? (Multiple choices)
- A. Mobile certificate account
- B. AD account
- C. Guest account
- D. Anonymous account
Answer: A,B
NEW QUESTION 100
MAC authentication means that in 802.1X authentication environment, when the terminal does not respond to 802.1X authentication request from the access control device after accessing the network, the access control device automatically obtains MAC address of the terminal and sends it to RADIUS server as a certificate for accessing the network.
- A. False
- B. True
Answer: A
NEW QUESTION 101
When all services are allocated according to the user group, account number and terminal IP address range, if the same service is assigned to the user group, account number and terminal IP address range (except the announcement service), the business assigned by the highest priority will take effect.
About the order of priorities, which of the following is correct?
- A. User Group> Terminal IP Address Range> Account
- B. Account> User Group> Terminal IP Address Range
- C. Terminal IP Address Range> Account> User Group
- D. Account> Terminal IP Address Range> User Group
Answer: D
NEW QUESTION 102
The MDM technology architecture of AnyOffice mobile office system is broadly divided into three parts: Security SDK, Android MDM and iOS MDM. Which of the following is wrong of these three parts?
- A. The iOS system has its own MDM protocol, which involves remote message push, remote control commands, terminal configuration delivery and policy control. Any Office Mobile Office System adds some MDM features to its own base on iOS MDM protocol.
- B. The security SDK can also integrate third-party applications and obtain corresponding security capabilities after integration.
- C. The security SDK provides basic local data encryption, network transmission data encryption and L4VPN capabilities to the entire Any Office mobile office system.
- D. The functions that Android MDM can implement include remote message push, remote control commands, terminal configuration delivery and policy control.
Answer: B
NEW QUESTION 103
Which of the following is true about WLAN?
- A. AC + FAT AP architecture for medium and large-scale use scenarios
- B. WLAN is WiFi use 802.11 technology
- C. WLAN has two basic architectures: Fat AP and AC+FIT AP
- D. AC + Fit AP is also called autonomous network architecture
Answer: C
NEW QUESTION 104
The following configuration is to configure authentication commands on two admission control devices A and B.
Which of the following are correct for the analysis of configuration commands? (Multiple selection)
[A] dot1x enable
[A] interface gigabitethernet 1/0/1
[A-GigabitEthernet1/0/1] dot1x enable
[A-GigabitEthernet1/0/1] dot1x mac-bypass
[B] mac-authen
[B] interface gigabitethernet 1/0/1
[B-GigabitEthernet1/0/1] mac-authen
- A. The GE1/0/1 port on Device B can access both PC and dumb terminal devices.
- B. The GE1/0/1 port on device A can access both PC and dumb terminal devices.
- C. MAC bypass authentication is configured on device B.
- D. MAC bypass authentication is configured on device A.
Answer: B,D
NEW QUESTION 105
Create CAPWAP between AP and AC, establish CAPWAP tunnel negotiates with AP and AC. In this process, CAPWAP tunnel use DTLS to encrypt and transmit UDP packets.
Which encryption methods are supported by DTLS?
- A. AES encryption
- B. Certificate Encryption
- C. PSK encryption
- D. Plaintext encryption
Answer: B,C
NEW QUESTION 106
Which of the following options can't trigger MAC authentication?
- A. DHCP packets
- B. ICMP packets
- C. ARP packets
- D. DHCPv6 packets
Answer: B
NEW QUESTION 107
For the application scenario of centralized deployment and distributed deployment of Agile Controller-Campus, which of the following are correct? (Multiple choices)
- A. If most of the end users are concentrated in one area, a few end users work in branch and centralized deployment is recommended.
- B. If end users are geographically dispersed, it is recommended to use centralized deployment solution.
- C. If end users are geographically dispersed, it is recommended to use distributed deployment solution.
- D. If most of the end users are concentrated in one area, a few end users work in branch and distributed deployment is recommended.
Answer: A,C
NEW QUESTION 108
Which of the following is wrong about account blacklist?
- A. If manually locked account is deleted from the list, the account lock is released.
- B. For automatically locked an account, if the number of wrong passwords entered during end user authentication exceeds the limited time, the account is automatically locked.
- C. Automatic account lockout and manual account lockout can't be enabled at the same time.
- D. For manually locking an account, the administrator needs to manually add the account to the locked account list.
Answer: C
NEW QUESTION 109
The visitor management process includes page customization, account application, user authentication, auditing and logout. After the user successfully applies for an account, the user needs to distribute the account to the user. Which stage of the account distribution?
- A. Page customization phase
- B. Account application stage
- C. User authentication stage
- D. Audit and cancellation stages
Answer: B
NEW QUESTION 110
Which of the following descriptions is wrong for the basic principle of user access security?
- A. The terminal device selects the resource to be accessed according to the result of the status check
- B. The terminal device directly interacts with the security policy server. The terminal reports its own status information, including the virus database version, operating system version and patch version installed on the terminal.
- C. The security policy server checks the terminal status information. For terminal devices that do not meet enterprise security standards, the security policy server re-issues authorization information to the access device.
- D. When terminal device accesses the network, it first authenticates the user through the access device, and the access device cooperates with the authentication server to complete the user identity authentication.
Answer: A
NEW QUESTION 111
When an administrator accesse network for an account assigned to guest, which of the following audit action not included in that an administrator can perform on the visitor?
- A. Visitors logging off and on
- B. Send warning message to user
- C. Account Deactivation/Reset Password
- D. Force users to go offline
Answer: B
NEW QUESTION 112
The service will determine the access right and QoS policy according to 5W1H condition of user access. Which of the following statements is correct for 5W1H? (Multiple choices)
- A. What, determine the access device (PC, iOS, etc.)
- B. Who, determine the attribution of access equipment (company standard, BYOD, etc.)
- C. Whose, determine the identity of the access person (employees, visitors, etc.)
- D. How to determine the access method (wired, wireless, etc.).
Answer: A,D
NEW QUESTION 113
An account can belong to more than one role, that is, one user may serve multiple roles.
- A. True
- B. False
Answer: A
NEW QUESTION 114
......
Certification dumps - HCNP-Security H12-723-ENU guides - 100% valid: https://www.dumpexams.com/H12-723-ENU-real-answers.html