H12-723_V3.0 Sample Questions Answers

CAPWAP The data tunnelcan be used DTLS Encrypted.

DTLS Support two authentication methods:Certificate authentication(out AC,AP Already brought)with PSK Password authentication.

DTLS Encryption can guarantee AC The issued control messages will not be eavesdropped on.

Use the certificate method to carry out DTLS Negotiation, the certificate is only used to generate the key, not right AP Perform authentication.

As Agile Controller-Campus The management center is responsible for formulating the overallstrategy.

As Agile Controller-Campus The management interface is used to configure and monitor the system.

Integrated with standards RADIUS server,Porta Server, etc., responsible for linking with network access equipment to realize user-based networkaccess control Strategy.

As Agile Controller-Campus ’S security assistance server, responsible for iRadar Analysis and calculation of reported security incidents.

exist Any Office When logging in with an account for the first time, the terminal host is automatically bound to the current account, but the automatic binding process requires administrator approval

When other accounts need to be authenticated on the bound terminal host, there is no need to find the asset owner who is bound for the first time to authorize themselves.

Binding terminal hosts and accounts is onlyapplicable to terminal users through Any Office Scenarios for authentication, Not applicable Web Agent Plugins and Web The scenario where the client authenticates.

There are only consoles in the account binding terminal host, which cannot be configuredby the administrator.

Centralized deployment

Distributed deployment

Hierarchical deployment

Two-machine deployment

True

False

The access layer switch does not start EAP Transparent transmission function.

wireless 02K In the scenario, the access control device isnot equipped with a security board

AD The service controller is not added in the authentication scenario AD area.

The user account or password is incorrectly configured.

8021X Certification

SACG Certification p2-

Bypass authentication

Portal Certification

True

False

The AAA server saves information such as usernames and passwords for authentication of access users.

The Web server saves informationsuch as user names and passwords for authentication of access users.

The AAA server is used to push the Portal authentication page to the user.

The web server is used to push the Portal authentication page to the user.

Check for prohibited software licenses and sub-licensed software

Check for prohibited software

Check for prohibited software and software that must be installed

Check the software that must be installed

Basic networking includes deploying one SM Server, one SC Server, one DB and a AE server.

AE In addition to thedeployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SC server.

SC In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SM server.

DB In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup DB..

The user distribution range is large, and the access control requirements are high.

The deployment of the access control strategy is significant.

Access rights are difficult to control.

User experience technology

You can check whether there is a weak password.

You can check whether the account has joined a specific group.

It cannot be repaired automatically._

It is not possible to check whether the password length meets the requirements.

Straight forward to return authentication failure information.

Discard user information.

User 91 Information sent to AD The server performs verification.

Synchronize the database again.

Authentication

Isolation repair'

Security check

Access control

After the configuration is complete, the switch will automatically release the data flow to access the security controller,No need for manual configuration by the administrator.

This configuration allows users to access network resources before authentication.

After the configuration is complete, the administrator still needs to manually configure the release network segment

Only after the authentication is passed, the terminal can access 10.1.31.78 Host.

The control server address is 10.1.10.34

The authentication device address is 10.1.31.78

Status is"Working"Indicates that the switch and Controller Linkage is successful

current Controller The server is backup n

Portal gateway initiates Radius Challenge request message, including user name and password information

The ACL issued by the server to the access gateway is carried in the Portal protocol message

Issue policies while performing identity authentication

The Portal server needs to pass the security check result to the access gateway device

bandwidth

Forwarding priority

Authority

Strategy

True

False

SACG The equipment requires Layer 3 intercommunication with the terminal.

SACGIt is usually connected to the core switch equipment and uses policy routing to divert traffic.

SACG Support hanging on non-Huawei devices.

SACG Equipment requirements and Agile Controller-Campus Interoperability on the second floor.

Exemption from approval

Administrator approval

Receptionist approval

Self-approved by visitors