H12-711_V4.0

H12-711_V4.0 practice questions, page 2 of 11, with answer review and explanations.

Question 6

SQL injection is a security risk that occurs when the content entered by a user is transferred to a server and directly injected into the SQL code for execution.

  1. TRUE
  2. FALSE

Question 7

Which of the following parameters can be used as conditions for setting whitelist rules in antivirus protection? (Choose all that apply.)

  1. URL
  2. IP address segment
  3. Single IP address
  4. Domain name

Question 8

Which type of attack does fingerprint learning defend against?

  1. GRE flood
  2. SYN flood
  3. UDP flood
  4. ICMP flood

Question 9

Which of the following statements is incorrect about the characteristics of the TCP/IP protocol stack?

  1. The difference between the TCP/IP model and the OSI reference model is that the TCP/IP model combines the presentation layer and session layer into the application layer.
  2. When the device encapsulates data, the TCP/IP protocol stack sets a data check mechanism at each layer.
  3. When sending data, a device adds a specific protocol header to the data according to the TCP/IP model. This action is called encapsulation.
  4. When receiving data, the device removes the protocol header according to the TCP/IP model and analyzes the payload information. This action is called decapsulation.

Question 10

DDoS attacks use zombie hosts to send a large number of malicious attack packets to a target. These attack packets congest network links and exhaust system resources, preventing the target from providing services for legitimate users.

  1. TRUE
  2. FALSE