[Jul-2022] H12-723 Dumps PDF - H12-723 Real Exam Questions Answers [Q40-Q59] : Actual Test Materials : http://blog.actualtests4sure.com

NO.40 In the Agile Controller-Campus admission control technology framework, regarding the description of RADIUS, which of the following options is correct?

PADIUS Used on the client and 802.1X Information such as user names and passwords are passed between switches.

PADIUS Used in 802.1X Switch and AAA Information such as user name and password are passed between servers.

PADIUS Used for Portal Server pushes to users Web page.

PADIUS Used for server to SACG Security policy issued by the device

NO.41 Which deployment mode does Agile Controller-Campus not support?

Centralized deployment

Distributed deployment

Hierarchical deployment

Two-machine deployment

NO.42 Regarding CAPWAP encryption, which of the following statements is wrong?

CAPWAP data tunnels can be encrypted use DTLS.

DTLS supports two authentication methods: certificate authentication (factory AC, AP has been carried) and PSK password authentication.

DTLS encryption can ensure that the control message delivered by AC is not eavesdropped.

DTLS negotiation is performed by use certificate. The certificate is only used to generate the key and does not authenticate AP.

NO.43 In the WLAN wireless access scenario, which of the following network security technologies belong to user access security? (Multiple choice)

AP Certification

Link authentication

User access authentication

data encryption

NO.44 After the user authentication succeeds, which of the following actions can be performed on the user on Agile Controller-Campus?

Remote assistance for users access the Any Office.

Force users to go offline.

Audit users’ online and offline records.

Disable/disable the move certificate account and assign roles.

NO.45 When the test-aaa command is used on the access control device to test the connectivity to the Radius server, the operation result is displayed successfully. However, the user cannot access the device normally. Possible reasons do not include the following options:

The access layer switch does not enable EAP transparent transmission.

In the wireless 802.1X scenario, no security profile is configured on the access control device.

The service controller does not join AD domain in AD authentication scenario.

The user account or password is wrong configured.

NO.46 Location refers to the end user’s use AC-Campus The terminal environment when accessing the controlled network office. Which of the following options is correct for the description of the place?

Different places can have different security policies.

The location has nothing to do with safety.

There can only be one place in the company.

Place and location have nothing to do.

NO.47 In some scenarios, an anonymous account can be used for authentication. What are the correct descriptions of the following options for the anonymous account?? (Multiple choice)

The use of anonymous accounts for authentication is based on the premise of trusting the other party, and the authentication agency does not need the other party to provide identity information to provide services to the other party.

Agile Controller-Campus Need to be manually created”~anonymous”account number.

By default, the access control and policy of anonymous accounts cannot be performed. 1 Operations such as invoking patch templates and software distribution.

Administrators cannot delete anonymous accounts”~anonymous*.

NO.48 Business entourage function of Agile Controller can direct traffic to the security center based on services and improve the utilization of physical devices.

True

False

NO.49 Regarding the strategy for checking the screensaver settings, which of the following descriptions are correct?
(Multiple choice)

You can check whether the screen saver is enabled on the terminal

You can check whether the screen saver password is enabled

Only supports Windows operating system

Screen saver settings cannot be automatically repaired

NO.50 A network adopts 802.1X to authenticate access users. The admission control device is deployed at the convergence layer. After the deployment is complete, the test-aaa command is used successfully on the admission control device, but the user can’t access the network.
Which of the following may be the cause of the fault? (Multiple choices)

RADIUS authentication template is not configured on the aggregation layer device.

The switch is not added to Agile Controller-Campus as NAS device.

The 802.1X function is not enabled on the port on the access device.

Layer 2 links are used between access devices and aggregation devices. The 802.1X transparent transmission function is not enabled.

NO.51 Regarding the definition of WIPS/WIDS, which of the following statements is correct?

WIDS is a wireless intrusion prevention system

WIPS is wireless intrusion detection system

WIDS is wireless intrusion countermeasure system

WIPS is wireless intrusion prevention system

NO.52 Portal At the time of certification, pass Web After the browser enters the account password for authentication, it prompts”Authenticating..”The status lasts for a long time before it shows that the authentication is successful. Which of the following reasons may cause this phenomenon?

Multiple Agile Controller The same terminal IP Address added Portal”Access terminal IP Address list”,Some of them Agile Controller The server and the terminal cannot communicate normally.

Portal The template is configured with an incorrect password.

Agile Controller-Campus There are too many authorization rules on the “It takes a lot of time to find
835

Insufficient curtains of the terminal equipment result in a relatively large delay.

NO.53 If the deployment business is accompanied, in logical architecture, which of the following is administrator concern?

The policy if it is automatically deployed?

Choose the right policy control point and user authentication point

Policy deployment if it is for single user

Policy deployment if it is for single department?

NO.54 Agile Controller-Campus The product architecture includes three levels. Which of the following options does not belong to the product architecture level?

Server layer

Network device layer

Access control layer

User access layer

NO.55 Policy template is collection of several policy. To audit the security status of different terminal hosts and the behavior of end users, administrators need to customize different policy templates for protecting and managing terminal hosts.
Which of the following are correct regarding the policy template? (Multiple choices)

When configure policy template, you can inherit the parent template and modify the parent template policy.

Only policy in the policy template can be used. Administrators can’t customize the policy.

You can assign policy template to a network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of departments and accounts is: account > department.

NO.56 In 802.1X authentication, if the authentication point is at the aggregation layer switch, which special configurations are required in addition to the conventional configurations such as RADIUS, AAA and 802.1X?

The 802.1X function needs to be enabled on both aggregation layer and access layer switch.

The access layer switch needs to configure transparent transmission of 802.1X packets.

The aggregation layer switch needs to configure transparent transmission of 802.1X packets.

No special configuration is required.

NO.57 Which of the following is not supported by the business?

Intranet users access the data center/Internet.

When traveling user accesses the intranet resources, the traveling user accesses the intranet through VPN.

Teamwork office.

Implement communication between devices.

NO.58 Which of the following statement is correct IDS and IPS?

IDS only supports Inline online deployment

IPS deployed as a bypass mode is similar to the function of ID

the core technology of IPS is deep packet inspection and bypass inspection

With the IPS does not need to deploy a firewall and IDS

NO.59 After the announcement is configured, Agile Controller-Campus system can’t assign the announcement to which of the following objects?

Assigned to the user

Assigned to the account

Assigned to the terminal IP address range

Assign to a place