Regarding the statement of firewall security policy, which of the following options is false?

• A. If the security policy ispermit, the discarded packets will not be accumulated"Hits"
• B. When configuring a security policy name, the same name cannot be reused
• C. Adjust the order of security policies without saving configuration files and take effect immediately
• D. HuaweiUSGThe security policy entries of the series firewall cannot exceed128strip

Which of the following is false for a description of an intrusion detection system?.

• A. The immersion detection system can be linked with firewalls and switches, making it a powerful tool for firewalls"assistant", better and more precise control of traffic access between domains
• B. Intrusion detection system includes all hardware and software systems used for intrusion detection
• C. Once the intrusion detection system finds that there is a behavior that violates the security policy or the system has traces of being attacked, it can implement blocking operations.
• D. Intrusion detection system can collect a large amount of key information dynamically through network and computer.And can analyze and judge the current state of the entire system environment in time

Information security prevention technologies include: data encryption, identity authentication, intrusion prevention and anti-virus, etc.

• A. True
• B. False

Heartbeat message (He11o message): The two FWs send heartbeat messages to each other periodically (the default period is ( ) seconds) to check whether the peer device is alive. (fill in the blank)

1

Which of the following items belong to the information security prevention method in the dimension of operation and maintenance management?

• A. Emergency Response
• B. Safe operation
• C. The training of enterprise employees' safety awareness
• D. Disaster recovery