Huawei H12-731_V2.0 Exam With Confidence Using Practice Dumps

TCP port scanning uses the three-way handshake feature

The purpose of port scanning is to determine what kind of services are enabled on the peer host, so as to find an entry for intrusion.

When the scanner sends a Syn message If the peer does not reply, the peer port is down.

For UDP port scanning It is to determine whether the port is open by sending a UDP data packet to the peer with a specific port number and observing whether the ICMP port is unreachable packet.

In the technical vulnerability point, identify the vulnerable point of the application system From the audit mechanism Audit storage and access control policies. Data integrity Identification Password protection and other aspects for identification.

Vulnerability identification is also called vulnerability identification, and weakness is the existence of capital itself If there is no corresponding threat, the weakness itself will not cause damage to capital.

Vulnerability points are divided into two types: technical vulnerabilities and management vulnerabilities. The management vulnerability identification image is only for the management part of the organization

The severity of the technical vulnerability of an asset is affected by the organization's management vulnerability. Therefore, the vulnerability of assets should also be assigned with reference to the severity of technical management and organizational management vulnerabilities.

Even for safety training, the focus will be different for different departments.

In terms of training content For senior executives, training on information security strategies and information security laws and regulations is required.

For grassroots employees, some safety technology training should be emphasized.

In terms of training method For most employees, just one induction training is not enough attention, and frequent email campaigns are needed to raise awareness of information security