A fully updated 2022 H12-723 Exam Dumps exam guide from training expert DumpsFree
Provides complete coverage of every objective on exam and exam preparation H12-723
NEW QUESTION 43
Which of the following is correct for the isolation domain role?
- A. Isolation domain refers to the area where the terminal host can access before being authenticated, such as DNS server, external authentication source, service controller (SC) and service manager (SM) are located.
- B. Isolation domain refers to the area where end users can access after passing authentication and security authentication, such as ERP system, financial system and database system are located.
- C. End users can access the isolation domain regardless of identity authentication
- D. Isolation domain is an area that allows access when an end user passes identity authentication but fails security authentication, such as the patch server and virus database server.
Answer: D
NEW QUESTION 44
Identity authentication determines whether to allow access by identifying the identity of the access device or user.
- A. right
- B. wrong
Answer: A
NEW QUESTION 45
Hardware in useSACG At the time of certification,SACG After the configuration is completed, you can seeSACG andAgile Agile Controller-Campus The linkage is successful, but the user authentication fails. This phenomenon may be caused by the following reasons? (Multiple choice)
- A. SACG There is no closed state detection on it.
- B. Agile Controller-Campus On and SACG Wrong key configuration for linkage
- C. SACG There is no release on the user stream.
- D. User flow has not passed SACG.
Answer: A,C
NEW QUESTION 46
Which of the following options is right PKI The sequence description of the work process is correct?
1. PKI Entity direction CA ask CA Certificate. .
2. PKI Entity received CA After the certificate, install CA Certificate.
3. CA receive PKI Entity CA When requesting a certificate, add your own CA Certificate reply to PKI entity.
4. PKI Entity direction CA Send a certificate registration request message.
5. PKI When the entities communicate with each other, they need to obtain and install the local certificate of the opposite entity.
6. PKI Entity received CA The certificate information sent.
7. PKI After the entity installs the local certificate of the opposite entity,Verify the validity of the local certificate of the peer entity. When the certificate is valid,PC The public key of the certificate is used for encrypted communication between entities.
8. CA receive PKI The entity's certificate registration request message.
- A. 1-3-5-6-7-4-8-2
- B. 1-3-2-7-6-4-5-8
- C. 1-3-2-4-8-6-5-7
- D. 1-3-5-4-2-6-7-8
Answer: C
NEW QUESTION 47
The user accesses the network through network access device. The third-party RADIUS server authenticates and authorizes the user.
Which of the following is incorrect about this certification process?
- A. Configure RADIUS authentication and accounting on the device.
- B. Configure RADIUS authentication and authorization on Agile Controller-Campus.
- C. Configure Agile Controller-Campus as local data source authentication, receive the packets which sent by the device, and perform authentication.
- D. Configure RADIUS authentication and accounting on RADIUS server.
Answer: C
NEW QUESTION 48
Use Agile Controller-Campus for guest management. Users can obtain the application account in multiple ways, but does not include which of the following?
- A. SMS
- B. E-mail
- C. Voicemail
- D. Web printing
Answer: C
NEW QUESTION 49
The access control server is the implementer of the corporate security policy, responsible for implementing the corresponding access control in accordance with the security policy formulated by the customer's network(Allow, deny, leave or restrict).
- A. right
- B. wrong
Answer: B
NEW QUESTION 50
Which of the following options is not a scenario supported by Free Mobility?
- A. Intranet users access the data center/Internet.
- B. Work as a team.
- C. When traveling users access intranet resources, traveling users pass VPN Access to the intranet.
- D. Realize mutual communication between devices.
Answer: D
NEW QUESTION 51
Regarding MAC authentication and MAC bypass authentication, which of the following descriptions are correct? (multiple choice)
- A. MAC Authentication MAC One more bypass authentication 802 In the instrument certification process, the open time is longer than MAC The bypass authentication time is long.
- B. If a network can connect to dumb terminals(printer,IP telephone), The text may be connected to a portable computer, please use MAC Bypass authentication:First try 802 1X Authentication, try again if authentication fails MAC Certification
- C. If a network will only connect to dumb terminals(printer,IP telephone),please use MAC Certification in order to shorten the certification time.
- D. The biggest difference between the two is MAC Bypass authentication belongs to 802 1X Certification, while MAC Certification does not belong to 802 1X Certification.
Answer: B,C,D
NEW QUESTION 52
After the Agile Controller-Campus is installed successfully, how can you check whether SM and SC components start normally? (Multiple choices)
- A. After logging in SM, choose Resources> Users> User Management and create a new common account. Open the https://SC server IP:8447/newauth in browser and use the account created in the previous step. If the login succeeds, the SC component is normal.
- B. Open https://SC server IP:8443 in browser and enter the account admin and the default password Changeme123. If the login succeeds, the SC component is normal.
- C. Open https://SM server IP:8943 in browser and enter the account admin and the default password Changeme123. If the login succeeds, the SM component is normal.
- D. After logging in SC, choose Resources> Users> User Management and create a new common account. Open the https://SM server IP:8447/newauth in browser. If the account created in the previous step can be successfully logged in, the SM component is normal.
Answer: A,C
NEW QUESTION 53
Configuring WLAN device detection can realize the monitoring of the entire network, but you need to set the working mode of the AP first, which of the following options are.
What is the working mode of AP? (multiple choice)
- A. Mixed mode
- B. access mode
- C. Normal mode
- D. Monitoring mode
Answer: C,D
NEW QUESTION 54
Web Standards that come with the client and operating system 8021 The instrument client only has the function of identity authentication: It does not support the execution of inspection strategies and monitoring strategies. Any Office The client supports all inspection strategies and monitoring strategies.
- A. right
- B. wrong
Answer: A
NEW QUESTION 55
Which of the following network security technologies are part of the user access security in WLAN wireless access scenario? (Multiple choices)
- A. AP certification
- B. User access authentication
- C. Data encryption
- D. Link authentication
Answer: B,C,D
NEW QUESTION 56
MAC bypass authentication means that the access control device automatically obtains MAC address after the terminal is connected to the network, and sends the certificate of the access network to RADIUS server for verification.
- A. True
- B. False
Answer: B
NEW QUESTION 57
If you deploy Free Mobility, in the logic architecture of Free Mobility, which of the following options should be concerned by the administrator?
- A. Is the strategy automatically deployed?
- B. Does the strategy deployment target a single user?
- C. Does the strategy deployment target a single department?
- D. Choose the appropriate policy control point and user authentication point
Answer: D
NEW QUESTION 58
Which of the following descriptions are correct regarding the strategy of checking account security? (Multiple choices)
- A. Can't check whether the password length meets the requirements.
- B. You can check if there is a weak password.
- C. You can check whether the account has joined a specific group.
- D. Can't repaired automatically.
Answer: B,C
NEW QUESTION 59
In the terminal security management, the black and white list mode is used to check the terminal host software installation status. Which of the following situations is a compliant behavior?
- A. The terminal host installs all the software in the whitelist, and also installs some of the software in the blacklist.
- B. The terminal host installs part of the software in the whitelist, but does not install the software in the blacklist.
- C. The terminal host installs all the software in the whitelist, but does not install the software in the blacklist.
- D. The terminal host does not install the software in the whitelist, nor the software in the blacklist.
Answer: C
NEW QUESTION 60
About the hardware SACG Certification deployment scenarios, which of the following descriptions are correct? (Multiple choice)
- A. SACG Essentially through 802.1X Technology controls access users.
- B. SACG It is generally deployed in a bypass mode without changing the original network topology.
- C. SACG Authentication is generally used in scenarios where new networks are used for wireless admission control.
- D. SACG Authentication is generally used in scenarios where a stable network performs wired admission control.
Answer: B,D
NEW QUESTION 61
Which of the following options belongs to MC prioritized pail Authentication application scenarios?
- A. User use portal Page for authentication
- B. Users follow WeChat for authentication.
- C. User use IAC Client authentication
- D. User use Pota At the first certification,RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache,RAIUS The server directly searches the cache for the terminal's MAC The address is discussed.
Answer: D
NEW QUESTION 62
Terminal security access technology does not include which of the following options?
- A. System Management
- B. safety certificate
- C. Access control
- D. Authentication
Answer: A
NEW QUESTION 63
The following configuration is in A with B The authentication commands are configured on the two admission control devices. For the analysis of the following configuration commands, which ones are correct? (Multiple choice)
- A. B What is configured on the device is MAC Bypass authentication o
- B. A On the device 2GE1/01 Can access PC Can also access dumb terminal equipment
- C. A What is configured on the device is MAC Bypass authentication
- D. B On the device GE1/0/1 Can access PC It can also access dumb terminal equipment. Upper
Answer: B,C
NEW QUESTION 64
Regarding the identity authentication method and authentication type, which of the following descriptions is correct?
- A. User passed Agent The method can support three authentication types: local authentication, digital certificate authentication and system authentication.
- B. User passed web Agent The method can support two authentication types: digital certificate authentication and system authentication.
- C. User passed web The method can support two authentication types: local authentication and digital certificate authentication.
- D. User passed web Agent The method can support two authentication types: digital certificate authentication and local authentication.
Answer: A
NEW QUESTION 65
......
Tested Material Used To H12-723: https://dumpstorrent.dumpsfree.com/H12-723-valid-exam.html