Latest [Dec 27, 2021] Real Huawei H12-711 Exam Dumps Questions
H12-711 Dumps To Pass HCNA-Security Exam in One Day (Updated 290 Questions)
NEW QUESTION 82
Which of the following descriptions of the firewall fragment cache function are correct? (Multiple choice)
- A. By default, the number of large fragment caches of an IPV4 packet is 32, and the number of large fragmentation buffers of an IPV6 packet is 255.
- B. After the fragmented packet is directly forwarded, the firewall forwards the fragment according to the interzone security policy if it is not the fragmented packet of the first packet.
- C. By default, the firewall caches fragmented packets.
- D. For fragmented packets, NAT ALG does not support the processing of SIP fragmented packets.
Answer: A,C,D
NEW QUESTION 83
There ere various security threats in the use of the server. Which of the following options is not a server securitythreat?
- A. DDos attack
- B. Hacking
- C. Natural disasters
- D. Malicious programs
Answer: C
NEW QUESTION 84
Which of the following descriptions is wrong about IKE SA?
- A. IKE SA is two-way
- B. The encryption algorithm used by user data packets is determined by IKE SA.
- C. IKE SA for IPSec SA services
- D. IKE is a UDP-based application layer protocol
Answer: B
NEW QUESTION 85
Which of the following is null a itjquiiemeiil fui (bewail duuble hul standby?
- A. The firewall hardware model is consistent
- B. The type and number of the interface used are the same
- C. The firewall interface has the same IP address.
- D. The firewall software version is consistent
Answer: C
NEW QUESTION 86
The VRRP advertisement packet of the Huawei USG firewall is a multicast packet. Therefore, each firewall in the backup group must be able to implement direct Layer 2 interworking
- A. True
- B. False
Answer: A
NEW QUESTION 87
Regarding the description of the packet in the iptables transmission process, which of the following option is wrong?
- A. If the destination address of the packet is local, the packet will be sent to the INPUT chain.
- B. When a packet enters the network card, it first matches the PREROUTING chain.
- C. If the destination address of the packet is not local, the system sends the packet to the OUTPUT chain.
- D. If the destination address of the packet is not local, the system sends the packet to the FORWARD chain.
Answer: C
NEW QUESTION 88
Which of the following is true about the sequencing of the PKI work process?
1. The communication terminal applies for CA certificate.
2. PKI replies to CA certificate
3. Obtain each other's certificate and verify the validity
4. Communication terminal installs local certificate
5. PKI issues a local certificate
6. The communication terminal applies for a local certificate
7. Communication terminal installs CA certificate
8. Communicate with each other
- A. 1-2-7-6-5-4-3-8
- B. 1-2-6-5-7-4-3-8
- C. 6-5-4-1-2-7-3-8
- D. 6-5-4-3-1-2-7-8
Answer: A
NEW QUESTION 89
What are common hash algorithms? (Choose two.)
- A. SHA-1
- B. AES
- C. DES
- D. MD5
Answer: A,D
NEW QUESTION 90
Winch of the following is the encryption technology used in digital envelopes?
- A. Symmetric encryption algorithm
- B. Asymmetric encryption algorithm
Answer: B
NEW QUESTION 91
Execute the command on the firewall and display the following information. which of the following description is correct? (Multiple Choice) HRP_A [USG_A] display vrrp interfaceGigabitEthernet 0/0/1 GigabitEthernet0/0/1 | Virtual Router 1 VRRP Group: Active state: Active Virtual IP: 202.38.10.1 Virtual MAC: 0000-5e00-0101 Primary IP: 202.38.10.2 PriorityRun: 100 PriorityConfig: 100 MasterPriority: 100 Preempt: YES Delay Time: 10
- A. Will not switch when the primary device fails
- B. This firewall VRID is 1 the VRRP priority to backup group 100
- C. This firewall G1 / 0/1 virtual interface IP address 202.30.10.2
- D. The status of this firewall VGMP group is Active.
Answer: B,D
NEW QUESTION 92
Which of the following is not included in the steps of tie safety assessment method?
- A. Questionnaire survey
- B. Penetration test
- C. Data analysis
- D. Manualaudit
Answer: C
NEW QUESTION 93
Using a computer to store information about criminal activity is not a comouter crime
- A. True
- B. False
Answer: B
NEW QUESTION 94
VPN tunnel technology refers to through encryption algorithm (such as DES, 3DE5) to achieve data transmitted in the network will not be intercepted.
- A. True
- B. False
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 95
Which types of encryption technology can be divided into? (Multiple Choice)
- A. Fingerprint encryption
- B. Asymmetric encryption
- C. Symmetric encryption
- D. Data encryption
Answer: B,C
NEW QUESTION 96
Firewall update signature database and Virus database online throjgh security servicecenter, requires the firewall can connect to the Internet first, and then need to configure the correct DNS addresses.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 97
The Protocol field in the IP header identifies the protocol used by the upper layer. Which of the following field values indicates that the upper layer protocol is UDP protocol?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 98
As shown in the figure, a TCP connection is established between client A and server
B. Which of the following two "?" packet numbers should be?
- A. b+1: b
- B. a: a+1
- C. a+1: a
- D. a+1: a+1
Answer: D
NEW QUESTION 99
Which of the following descriptions of the firewall fragment cache function are correct? (Multiple choice)
- A. For fragmented packets, NAT ALG does not support the processing of SIP fragmen:ed packets.
- B. By default, the number of largefragment caches of an IPV4 packet is 32, and the number of large fragmentation buffers of an IPV6 packet is 255
- C. After the fragmented packet is directly forwarded, the firewall forwards the fragment according to the interzone security policy if it is not the fragmented packet of the first packet.
- D. By default, the firewall caches fragmented packets.
Answer: A,B,D
NEW QUESTION 100
......
H12-711 Exam Brain Dumps - Study Notes and Theory: https://www.testpdf.com/H12-711-exam-braindumps.html
100% Guaranteed Results H12-711 Unlimited 290 Questions: https://drive.google.com/open?id=1jgw3wJWk6YZzR3rCqemNolrBov9BoNlS
