H12-723 Sample Questions Answers

SACG Authentication is generally used in scenarios where a stable network performs wired admission control.

SACG Authentication is generally used in scenarios where new networks are used for wireless admission control.

SACG It is generally deployed in a bypass mode without changing the original network topology.

SACG Essentially through 802.1X Technology controls access users.

AE Server priority use)SC server.

Install AE When the server, you need to configure the main and standby SC Server IP address.

If the Lord SC After the server fails,AE The server will use the backup SC server.

host SC After the server is restored,AE Server will not switch back to master SC The server handles the business.

Set IPS work mode in the IPS global parameters for alarm

did not select the correct domain

did not configure corresponding IPS strategy

configure Firewall running mode for Firewall mode

Wired access

Wireless access

VPN Access

802.1X Access

User isolation between groups means that users in different groups cannot communicate, but internal users in the same group can communicate

Isolation within a user group means that users within the same group cannot communicate with each other.

The user isolation function is related to the same AP Layer 2 packets between all wireless users on the Internet cannot be forwarded to each other

Intra-group isolation and inter-group isolation cannot be used at the same time

Office Windows System host

For testing Linux System host

Mobile client, such as smart phone, etc

Network printer 232335

Enable Guest VLAN so that users can obtain the installation package in Guest VLAN

Configure Free-rule and web push functions on the switch to push the installation package to users.

Copy the installation packages to each other via U disk.

Installed by the administrator for each user.

Basic networking includes deploying one SM Server, one SC Server, one DB and a AE server.

AE In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SC server.

SC In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SM server.

DB In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup DB..

1-2-3-4

4-2-3-1

3-2-1-4

2-3-1-4

right

wrong

When USG device unable to connect to the Internet, you can choose local upgrade

When the USG devices can connect to the Internet, can upgrade manually and automatically

The upgrade process of abnormal will not be able to return to the original Knowledge base

You can configure the automatic save function, after saving the upgrade application control is configured as system configuration

To use Any Office The connected user performs remote assistance.

Force users to go offline.

Audit users' online and offline records.

Disable the mobile certificate account/Disable and assign roles.

1-3-5-4-2-6-7-8

1-3-5-6-7-4-8-2

1-3-2-7-6-4-5-8

1-3-2-4-8-6-5-7

Assign to user

Assigned to account

Assign to terminal IP Address range

Assigned to places

WLAN Is to adopt 80211 Technical WiFi

WLAN There are two basic architectures: FAT AP with AC+FIT AP

AC+FATAP The architecture is suitable for medium and large use scenarios

AC+FITAP Autonomous network architecture

Terminal and Agile Controller-Campus Server communication SSL encryption

Authentication fails, end users can only access resources in the pre-authentication domain

Security check passed,Agile Controller-Campus Server notification SACG Will end user's IP Address switch to isolated domain

Agile Controller-Campus Server gives SACG Carrying domain parameters in the message

Agile Controller-Campus Integrated RADIUS All functions of server and client."

Agile Controller-Campus As RADIUS On the server side, the user terminal acts as RADIUS Client.

Certified equipment(like 802. 1X switch)As RADIUS On the server side, the user terminal acts as RADIUS Client.

Agile Controller-Campus As RADIUS Server side, authentication device(like 802.1X switch)As RADIUS Client.

After the configuration is complete, the switch will automatically release the data flow to access the security controller,No need for manual configuration by the administrator.

This configuration allows users to access network resources before authentication.

After the configuration is complete, the administrator still needs to manually configure the release network segment

Only after the authentication is passed, the terminal can access 10.1.31.78 Host.

The biggest difference between the two is MAC Bypass authentication belongs to 802 1X Certification, while MAC Certification does not belong to 802 1X Certification.

If a network can connect to dumb terminals(printer,IP telephone), The text may be connected to a portable computer, please use MAC Bypass authentication:First try 802 1X Authentication, try again if authentication fails MAC Certification

If a network will only connect to dumb terminals(printer,IP telephone),please use MAC Certification in order to shorten the certification time.

MAC Authentication MAC One more bypass authentication 802 In the instrument certification process, the open time is longer than MAC The bypass authentication time is long.

TRUE

FALSE

User flow has not passed SACG.

SACG There is no release on the user stream.

SACG There is no closed state detection on it.

Agile Controller-Campus On and SACG Wrong key configuration for linkage

Configure RADIUS authentication and accounting on the RADIUS server.

Configure the Agile Controller-Campus for local data source authentication, receive the packets sent by the device, and perform authentication.

Configure RADIUS authentication and accounting on the device side. W"

Configure RADIUS authentication and authorization on the Agile Controller-Campus.

MAC Address format

Fixed username form

DHCP Option format

ARP Option format

router

switch

Firewall

IPS

Intranet users access the data center/Internet.

When traveling users access intranet resources, traveling users pass VPN Access to the intranet.

Work as a team.

Realize mutual communication between devices.

Install the operating system

Install the database

Install antivirus software

Import License

802.1X Authentication can only be initiated by the client.

802.1X Certification can only be done by certified equipment(like 802.1X switch)Initiate

8021X The client can trigger authentication through multicast or broadcast.

The authentication equipment department triggers authentication through multicast or unicast.