The Update Guide To H12-711 Test Questions

NEW QUESTION 1
Which of the following information will be encrypted during the use of digital envelopes? (Multiple Choice)

• A. Symmetric key
• B. User data
• C. Receiver public key
• D. Receiver private key

Answer: AB

NEW QUESTION 2
Which of the following are part of the SSL VPN function? (Multiplechoice)

• A. User authentication
• B. Port scanning
• C. File sharing
• D. WEB rewriting

Answer: AC

NEW QUESTION 3
Regarding the AH and ESP security protocols, which ofthe following options is correct? (Multiple Choice)

• A. AH can provide encryption and verification functions
• B. ESP can provide encryption and verification functions
• C. The agreement number of AH is 51.
• D. The agreement number of ESP is51.

Answer: BC

NEW QUESTION 4
Winch of the following is the encryption technology used in digital envelopes?

• A. Symmetric encryption algorithm
• B. Asymmetric encryption algorithm

Answer: B

NEW QUESTION 5
The administrator wants to create a web configuration administrator, and set the Https device management port number to 20000, and set the administrator to the administrator level, which of the following commands are correct?

• A. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level 15 [USG-aaa- manager-user-client001] password cipher Admin@123
• B. Stepl: web-manager enable port 20000 Step2. AAA View [USG] aaa [USG aaa] manager-user clientO01 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] password cipher Admin@123
• C. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa manager-user-client001] password cipher
• D. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level 1 [USG-aaa- manager-user-client001] password cipher Admin@123

Answer: A

NEW QUESTION 6
Which of the following attacks can DHCP Snooping prevent? (Multiple Choice)

• A. DHCP Server counterfeiter attack
• B. Intermediaries and IP/MAC spoofing attacks
• C. IP spoofing attack
• D. Counterfeit DHCP lease renewal packet attack using option82 field

Answer: ABCD

NEW QUESTION 7
The GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ. If the area connected to GE1/0/1 can accessthe area connected to GE1/0/2, which of the following is correct?

• A. Need to configure local to DMZ security policy
• B. No need to do any configuration
• C. Need to configure an interzone security policy
• D. Need to configure DMZ to local security policy

Answer: B

NEW QUESTION 8
The world's first worm "Morris worm" made people realize that as people become more dependent on computers, the possibility of computer networks being attacked increases, and it is necessary to establish a comprehensive emergency response system.

• A. True
• B. False

Answer: A

NEW QUESTION 9
Through display ike sa to see the result as follows, which statements are correct? (Multiple choice)

• A. The first stage ike sa has been successfully established
• B. The second stage ipsec sa has been successfully established
• C. ike is using version v1
• D. ike is using version v2

Answer: AC

NEW QUESTION 10
Digital signatures are used to generate digital fingerprints by using a hashing algorithm to ensure the integrity of data transmission

• A. True
• B. False

Answer: A

NEW QUESTION 11
Which of the following are in the certification area of IS027001? (Multiple choice)

• A. Access control
• B. Personnel safety
• C. Vulnerability management
• D. Business continuity management

Answer: ABCD

NEW QUESTION 12
Manual auditing is asupplement to tool evaluation. It does not require any software to be installed on the target system being evaluated, and has no effect on the operation and status of the target system. Which of the following options does not include manual auditing?

• A. Manual detection of the host operating system
• B. Manual inspection of the database
• C. Manual inspection of network equipment
• D. Manual inspection of the administrator's operation of the equipment process

Answer: D

NEW QUESTION 13
Which of the following are the necessary configurations of IPSec VPN? (Multiple Choice)

• A. Configuring IKE neighbors
• B. Configure IKE SA related parameters
• C. Configuring IPSec SA related parameters
• D. Configure the stream of interest

Answer: ABCD

NEW QUESTION 14
Which of the following iscorrect about firewall IPSec policy?

• A. By default, IPSec policy can control unicast packets and broadcast packets.
• B. By default, IPSec policy can control multicast.
• C. By defaul
• D. IPSec policy only controls unicast packets.
• E. By default, IPSec policy can control unicast packets, broadcast packets, and multicast packets °

Answer: C

NEW QUESTION 15
Which of the following statements are correct about thebusiness continuity plan? (Multiple Choice)

• A. Business continuity plan rines nnt require high-level participation Nfthe Company in determining the project scope phase
• B. BCP needs flexibility because it cannot predict all possible accidents
• C. Business continuity plan does not require high-level participation of the company before forming a formal document
• D. Not all security incidents must be reported to company executives

Answer: BD

NEW QUESTION 16
The vulnerability that has not been discovered is the 0 day vulnerability

• A. True
• B. False

Answer: B

NEW QUESTION 17
In L2TP configuration for command Tunnel Name, which statements are correct? (Multiple choice)

• A. Used to specify the name of the end of the tunnel
• B. Usedto specify the name of the peer tunnel
• C. Must be consistent with Tunnel Name peer configuration
• D. If do not configure the Tunnel Name, the tunnel name is the name of the local system

Answer: AD

NEW QUESTION 18
When configuring NAT Server on the LSG series firewall, the server-map table will be generated. Which of the following does not belong in the table?

• A. Destination IP
• B. Destination port
• C. Agreement number
• D. Source IP

Answer: D

NEW QUESTION 19
Which of the following io true about the description of the firewall?

• A. The firewall cannot transparently access the network.
• B. Adding a firewall to the network will inevitably change the :opology of the network.
• C. In order to avoid single point of faiur
• D. the firewall only supports side-by-side deplcyment.
• E. Depending on the usage scenario, the firewall can be deployed in transparent moce or deployed in a three bedroom mode.

Answer: D

NEW QUESTION 20
Which of the following description is wrong about the Internet users and VPN access user authentication?

• A. The Internet user andthe VPN access user share data, and the users attribute check (user status, account expiration time, etc.) also takes effect on the VPN access.
• B. The local authentication or server authentication process is basically the same for the Internet user
• C. The authentication is performed on the user through the authentication domain.
• D. After the VPN user accesses the network, it can access the network resources of the enterprise headquarter
• E. The firewall can control the accessible network resources based on theuser name.
• F. After the VPN access user passes the authentication, it will be online on the user online list.

Answer: D

NEW QUESTION 21
Which of the following behaviors is relatively safer when connecting to Wi-Fi in public places?

• A. Connect Wi-Fi hotspots that are not encrypted
• B. Connect to the paid Wi-Fi hotspot provided by the operator and only browse the web
• C. Connect unencrypted free Wi-Fi for online shopping
• D. Connect encrypted freeWi-Fi for online transfer operations

Answer: B

NEW QUESTION 22
Regarding the comparison between windows and Linux, which of the following statements is wrong?

• A. Getting started with Linux is more difficult and requires some learning and guidance.
• B. Windows can be compatible with most software playing most games
• C. Linux is open source code, you can do what you want.
• D. windows is open source, you can do what you want.

Answer: D

NEW QUESTION 23
What are the advantages of address translation techniques included? (Multiple choice)

• A. Address conversion can make internal network users (private IPaddress) easy access to the Internet
• B. Many host address conversion can make the internal LAN to share an IP address on the Internet
• C. Address conversion that can handle the IP header of encryption
• D. Address conversion can block internal network users,improve the safety of internal network

Answer: ABD

NEW QUESTION 24
Which of the following descriptions is wrong about IKE SA?

• A. IKE SA is two-way
• B. IKE is a UDP-based application layer protocol
• C. IKE SA for IPSec SA services
• D. The encryption algorithm used by user data packets is determined by IKE SA.

Answer: D

NEW QUESTION 25
ASPF (Application Specific Packet Filter) is apacket filtering technology based on the application layer, and implements a special security mechanism through the server-map table. Which of the following statements about the ASPF and server-map tables are correct? (Multiple Choice)

• A. ASPF monitors messages during communication
• B. ASPF can dynamically create a server-map
• C. ASPF dynamically allows multi-channel protocol data to pass through the server-map table.
• D. The quintuple server-map entry implements a similar function to the session table.

Answer: ABC

NEW QUESTION 26
IPSec VPN uses an asymmetric encryption algorithm toencrypt the transmitted data

• A. True
• B. False

Answer: B

NEW QUESTION 27
......