Which of the following is false for a description of an intrusion detection system?.

Intrusion detection system can collect a large amount of key information dynamically through network and computer.And can analyze and judge the current state of the entire system environment in time
Once the intrusion detection system finds that there is a behavior that violates the security policy or the system has traces of being attacked, it can implement blocking operations.
Intrusion detection system includes all hardware and software systems used for intrusion detection
The immersion detection system can be linked with firewalls and switches, making it a powerful tool for firewalls"assistant", better and more precise control of traffic access between domains

Answer(s): C

Which of the following options areIPSec VPNSupported encapsulation modes? (multiple choice)

Answer(s): B,C

GREThe tunnel addresses at both ends of the tunnel can be configured as addresses on different network segments

Answer(s): A

About the packet iniptablesDescription of the transfer process, which of the following options is incorrect?

When a packet enters the network card, it first goes to matchPREROUTINGchain
If the destination address of the data packet is the local machine, the system will send the data packet toINPUTchain.
If the destination address of the data packet is not the local machine, the system sends the data packet toOUTPUTchain
If the destination address of the data packet is not the local machine, the system sends the data packet toFORWARDchain.

Answer(s): C

Free H12-711_V3.0 Exam Braindumps (page: 60)