The Secret Of HUAWEI H12-711_V3.0 Sample Question

NEW QUESTION 1

An employee of a company accesses the internal web server of the company through the firewall. The web page of the website can be opened by using a browser, but the reachability of the web server is tested by using the Ping command, and it shows that it is unreachable. What are the possible reasons?

• A. The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol
• B. The web server is down
• C. The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol
• D. The interface of the firewall connecting to the server is not added to the security zone

Answer: C

NEW QUESTION 2

In the future development trend of information security, terminal detection is an important part. Which of the following methods fall under the category of endpoint detection? (multiple choice)

• A. Install host antivirus software
• B. Monitor and remember external devices
• C. Block users from accessing public search engines
• D. Monitor host registry modification records

Answer: AD

NEW QUESTION 3

As shown in the figure, the clientAand serverBestablished betweenTCPconnection, two places in the figure"?"The message sequence number should be which of the following?

• A. a+1:a
• B. a:a+1
• C. b+1:b
• D. a+1:a+1

Answer: D

NEW QUESTION 4

Which of the following is not a common application scenario of digital certificates? ( )[Multiple choice]*

• A. FTP
• B. HTTPS
• C. IPSEC VPN
• D. SSL VPN

Answer: A

NEW QUESTION 5

aboutSSL VPNdescription, which of the following is correct?

• A. Can be used without a client
• B. yesIPlayer to encrypt
• C. existNATcrossing problem
• D. No authentication required

Answer: A

NEW QUESTION 6

HRP(Huawei Redundancy Protocol) protocol, which is used to synchronize data such as key configuration and connection status of the firewall to the standby firewall, which of the following options does not belong to the scope of synchronization?

• A. security strategy
• B. NATStrategy
• C. blacklist
• D. IPSSignature set

Answer: D

NEW QUESTION 7

Which of the following options is not a private network IP address?

• A. 192.168.254.254/16
• B. 172.32.1.1/24
• C. 10.32.254.254/24
• D. 10.10.10.10/8

Answer: B

NEW QUESTION 8

Which of the following descriptions about the heartbeat interface is wrong ( )?[Multiple choice]*

• A. It is recommended to configure at least two heartbeat interface
• B. - One heartbeat interface is used as the master, and the other heartbeat interface is used as the backup.
• C. The interface MTU value is greater than 1500 and cannot be used as a heartbeat interface
• D. The connection method of the heartbeat interface can be directly connected, or it can be connected through a switch or router
• E. MGMT interface (Gigabi tEtherneto/0/0) cannot be used as heartbeat interface

Answer: B

NEW QUESTION 9

Digital envelope technology means that the sender uses the receiver's public key to encrypt the data and then sends the ciphertext to the receiver.

• A. True
• B. False

Answer: A

NEW QUESTION 10

The digital certificate fairs the public key through a third-party organization, thereby ensuring the
non-repudiation of data transmission. Therefore, to confirm the correctness of the public key, only the certificate of the communicating party is required.

• A. True
• B. False

Answer: B

NEW QUESTION 11

Applying for special funds for emergency response and purchasing emergency response software and hardware equipment belong to the work content of which stage of the network's complete emergency response?

• A. preparation stage
• B. Inhibition stage
• C. response phase
• D. recovery phase

Answer: A

NEW QUESTION 12

Regarding the description of the firewall security zone and interface relationship, which of the following options is correct? (multiple choice)

• A. The firewall allows the same physical interface to belong to two different security zones (sub-interfaces are not considered)
• B. There are two security zones with exactly the same security level in the firewall
• C. Different interfaces of the firewall can belong to different security zones
• D. Different interfaces of the firewall can belong to the same security zone

Answer: CD

NEW QUESTION 13

HTTPmessage usageUDPcarry, andHTTPSprotocol based onTCPthree-way handshake, soHTTPSSafer and more recommendedHTTPS.

• A. True
• B. False

Answer: B

NEW QUESTION 14

In a stateful inspection firewall, when the stateful inspection mechanism is enabled, the second packet of the three-way handshake (SYN+ACK) when reaching the firewall, which of the following descriptions is correct if there is no corresponding session table on the firewall?

• A. The firewall does not create a session table, but allows packets to pass through
• B. If the firewall security policy allows packets to pass, create a session table
• C. Packets must not pass through the firewall
• D. Packets must pass through the firewall and establish a session

Answer: C

NEW QUESTION 15

To configure a NAT policy in command line mode, you need to use the ( ) command in the system view to enter the NAT policy configuration view. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16

Which of the following attacks is not a special packet attack?

• A. ICMPredirected packet attack
• B. ICMPUnreachable Packet Attack
• C. IPaddress scanning attack
• D. oversizedICMPPacket attack

Answer: C

NEW QUESTION 17

Which of the following options is correct regarding the actions of the security policy and the description of the security profile? (multiple choice)

• A. If the action of the security policy is"prohibit", the device will discard this traffic, and will not perform content security checks in the future.
• B. The security profile can take effect even if the action is allowed under the security policy
• C. The security profile must be applied under the security policy whose action is allowed to take effect
• D. If the security policy action is"allow", the traffic will not match the security profile

Answer: AC

NEW QUESTION 18

IPSec VPNAn asymmetric encryption algorithm is used to encrypt the transmitted data

• A. True
• B. False

Answer: B

NEW QUESTION 19
......