H12-723_V3.0 HCIP-Security-CTSS V3.0 Questions and Answers

Short message

E-mail

Web Print

Voicemail

As Agile Controller-Campus The management center is responsible for formulating the overall strategy.

As Agile Controller-Campus The management interface is used to configure and monitor the system.

Integrated with standards RADIUS server,Porta Server, etc., responsible for linking with network access equipment to realize user-based network access control Strategy.

As Agile Controller-Campus ’S security assistance server, responsible for iRadar Analysis and calculation of reported security incidents.

The business management plane focuses on administrators, authentication servers, and policy servers.

The network equipment plane focuses on user terminals and static resources.

The user plane focuses on authentication points and policy enforcement points.

The business free mobility logic architecture includes a management subsystem, an authentication and authorization subsystem, and a business strategy subsystem.

Authentication

Isolation repair'

Security check

Access control

The control server address is 10.1.10.34

The authentication device address is 10.1.31.78

Status is"Working"Indicates that the switch and Controller Linkage is successful

current Controller The server is backup n

Check for prohibited software licenses and sub-licensed software

Check for prohibited software

Check for prohibited software and software that must be installed

Check the software that must be installed

True

False

True

False

When configuring the policy template, you can inherit the parent template and modify the parent template policy

Only the strategy in the strategy template can be used, and the administrator cannot customize the strategy.

You can assign a policy template to a certain network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of the number is: account > department

True

False

True

False

exist Any Office When logging in with an account for the first time, the terminal host is automatically bound to the current account, but the automatic binding process requires administrator approval

When other accounts need to be authenticated on the bound terminal host, there is no need to find the asset owner who is bound for the first time to authorize themselves.

Binding terminal hosts and accounts is only applicable to terminal users through Any Office Scenarios for authentication, Not applicable Web Agent Plugins and Web The scenario where the client authenticates.

There are only consoles in the account binding terminal host, which cannot be configured by the administrator.

After the configuration is complete, the switch will automatically release the data flow to access the security controller,No need for manual configuration by the administrator.

This configuration allows users to access network resources before authentication.

After the configuration is complete, the administrator still needs to manually configure the release network segment

Only after the authentication is passed, the terminal can access 10.1.31.78 Host.

Discard message

URL Address redirected to Portal Authentication page

Direct travel

Send authentication information to authentication server

all Ad-hoc The device will be directly judged as an illegal device

Not this AC Access AP Is illegal AP

Not this AC Access STA Is illegal STA

Not this AC Access STA,Also need to check access AP Does it contain law

Portal gateway initiates Radius Challenge request message, including user name and password information

The ACL issued by the server to the access gateway is carried in the Portal protocol message

Issue policies while performing identity authentication

The Portal server needs to pass the security check result to the access gateway device

True

False

SACG and IP Address is 2.1.1.1 The server linkage is unsuccessful.

SACG The linkage with the controller is successful.

main controller IP address is 1.1.1.2.

main controller IP address is 2.1.1.1.

True

False

MAC authentication does not require users to install any client software.

The user name format used by MAC authentication is only one of MAC address user name format.

MAC authentication actually uses 802 1X authentication method.

MAC bypass authentication solves the situation of both 802.1x client authentication and MAC authentication in the same network environment.

Deployment Management Center MC Time, support HA, Provide based on Keepalived Technical HA Active/standby switchover.

Deploy Business Manager SM Time, support HA, Provide based on Keepalived Technical HA Active/standby switchover.

Deploy business controller 3SC Time, support HA, Provide a backup solution in resource pool mode, which needs to be deployed N+1 indivual SC

Deploy the database DB Time, support HA use SQL Server Database mirroring technology requires the deployment of master DB+Mirroring DB+witness DB.

Asset management can register assets automatically or manually.

Enable the automatic asset registration mode, the asset registration process does not require end users to participate.

Automatic registration of assets is suitable for situations where the asset number is automatically maintained by the business manager.

Manually registering assets means that the administrator I Way to create an asset record on the business manager, and put the asset number in Any Office Enter it to complete the asset registration

process.

User use portal Page for authentication

Users follow WeChat for authentication.

User use IAC Client authentication

User use Pota At the first certification,RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache,RAIUS The server directly searches the cache for the terminal's MAC The address is discussed.

Checking strategies are mainly used to check some static settings of the terminal, such as whether the screen saver is set, whether the antivirus software is installed; whether there is illegal Outreach etc. z00

Monitoring strategies are mainly used for real-time monitoring of events that occur in the system, such as whether anti-virus software is installed and whether PPPOE dial-up access is used Network, etc.-Once an incident is detected, some control can be taken.

The security check strategy only includes two types of end-host check-type strategies and end-user behavior check-type strategies.

Terminal host security management is mainly implemented by inspection strategies, and end user behavior management is mainly implemented by monitoring strategies.

The access layer switch does not start EAP Transparent transmission function.

wireless 02K In the scenario, the access control device is not equipped with a security board

AD The service controller is not added in the authentication scenario AD area.

The user account or password is incorrectly configured.

Centralized deployment

Distributed deployment

Hierarchical deployment

Two-machine deployment

Isolation domain refers to the area that the terminal host can access before passing the identity authentication, such as DNS server, external authentication source, business controller (SC)c The area where the service manager (SM) is located.

Isolation domain refers to the area that is allowed to be accessed when the terminal user passes the identity authentication but fails the security authentication, such as patch server, virus database server. The area where the server is located.

Isolation domain refers to the area that terminal users can access after passing identity authentication and security authentication, such as ERP system, financial system database system. The area where you are.

End users can access the isolated domain regardless of whether they pass identity authentication.

The AAA server saves information such as usernames and passwords for authentication of access users.

The Web server saves information such as user names and passwords for authentication of access users.

The AAA server is used to push the Portal authentication page to the user.

The web server is used to push the Portal authentication page to the user.

True

False

Portal The certification process is only used in Web Certification

Server for a terminal Portal Certification will only give one Portal Device sends authentication message

Switch received Portal Online message, will give Radius Server send Radius Certification request

Portal The authentication message will not carry the result of the security check

Server layer

Network device layer

Access control layer

User access layer

Common_ user Users can access Internet www H.

VIP Users can access Internet w H.

VIP Can visit Mail Server H.

Common user Users can access Mail_ Sever resource.

True

False

You can check whether the screen saver is enabled on the terminal

You can check whether the screen saver password is enabled

Only supports Windows operating system

Screen saver settings cannot be automatically repaired

True

False

bandwidth

Forwarding priority

Authority

Strategy

hardware SACG use Any Office Perform admission control.

software SACG use Any Office Perform admission control.

hardware SACG Than software SACG cut costs.

hardware SACG The security is higher.

access mode

Normal mode

Mixed mode

Monitoring mode

Brute force

Crowd attack

DoS Denial of service attack

Weak IV attack

True

False

Access control

safety certificate

Authentication

System Management

User flow has not passed SACG.

SACG There is no release on the user stream.

SACG There is no closed state detection on it.

Agile Controller-Campus On and SACG Wrong key configuration for linkage

PADIUS Used on the client and 802.1X Information such as user names and passwords are passed between switches.

PADIUS Used in 802.1X Switch and AAA Information such as user name and password are passed between servers.

PADIUS Used for Portal Server pushes to users Web page.

PADIUS Used for server to SACG Security policy issued by the device

True

False

True

False

True

False

True

False