Common Network Security Threats and Threat Prevention

What this chapter covers

Common Network Security Threats and Threat Prevention is 5% of the Huawei HCIA-Security H12-711 exam. It covers the threats an enterprise network faces and how to cope with them in four areas: the communication network, the zone border, the computing environment and the security management center.

Questions are single-answer, multiple-answer without a stated count, true/false, drag and drop and typed fill-in-the-blank, often "Which of the following statements is true?". Many describe a threat and ask which area it belongs to, or which device or measure counters it, sometimes with a firewall topology figure.

It has 5 outline topics, and one page covers them.

How the topics fit together

The four areas follow the "one center with triple protection" idea of MLPS 2.0. Three areas are protected layers that traffic passes through, and the management center watches and controls all of them.

Learn one or two typical threats and one or two typical defenses per area. Questions test the match between them more than any single product.

How to use these pages

Each topic page has the same shape, so you can skim for what you need.

• What it is: the idea in plain words.
• How it works: the mechanism, with tables and examples.
• What to remember for the exam: the facts to memorize.
• Common mistakes: the classic traps.
• Check yourself: three questions to test your understanding.

For each threat on the page, name its area and a defense before reading on. The exam often gives a threat and asks which solution fits.