Which of the following descriptions about the function of the iptables table is wrong?

Mangle table: modify security policy

NAT table: The function of address translation.

Raw table: Determines whether the packet is processed by the state tracking mechanism.

Mangle table: modify security policy

Filter table: Policy allowed or not allowed in the packet.

Which of the following is an "information sabotage incident" in the classification of network security incidents?

Internet Scanning for plagiarism

Regarding NAT technology. Which of the following descriptions is false?

In Huawei firewalls, the only NAT technology with port translation is NAPT.

In Huawei firewalls, source NAT technology refers to the translation of the source address in the IP header of the connection that initiates the connection.

In the Huawei firewall, Easy IP directly uses the public network address of the interface as the translated address, and does not need to configure a NAT address pool.

In Huawei firewalls, the NAT No-PAT technology needs to be implemented by configuring a NAT address pool.

In Huawei firewalls, the only NAT technology with port translation is NAPT.

Regarding NAT technology, which of the following descriptions is correct?

NAT can hide more intranet IP addresses

The internal network server of the NAT network cannot be accessed by external network users.Therefore, if a server that needs to provide external services is deployed, be sure to assign an independent public network address to the server.

NAT reduces the difficulty of network monitoring

NAT technology can only achieve one-to-one address conversion, but cannot achieve address multiplexing

NAT can hide more intranet IP addresses

Which of the following descriptions about the characteristics of the HWTACACS protocol is wrong?

Separation of Authentication and Authorization

In addition to the standard HWTACACS header. Encrypt all the message body

Suitable for conducting security controls.

Information security precautions include both management and technical measures. Which of the following measures is not a precautionary method for information security technology?

Information security training for employees

Scan the server for vulnerabilities

Turn on the anti-virus function on the firewall

Regarding the ServerMap table generated by NAT No-PAT, which of the following descriptions is correct

The Server Map generated by NAT No-PAT is static, that is, after NAT No-PAT is configured, the Server Map table is automatically generated and exists permanently.

The function of the Server Map generated by NAT No-PAT is equivalent to the security policy. That is, the packets matching the Server Map table can pass through the firewall directly without matching the security policy.

There are two Server Maps generated by NAT No-PAT by default. One is a reverse Server Map table, which is mainly used for address translation without additional configuration of NAT and security policies when external network users actively access the private network users. to access.

The Server Map generated by NAT No-PAT is static, that is, after NAT No-PAT is configured, the Server Map table is automatically generated and exists permanently.

There are two Server Maps generated by NAT No-PAT by default, one is a forward Server Map table

Which of the following descriptions about symmetric encryption technology is wrong?

High efficiency and simple algorithm.

Suitable for encrypting large amounts of data.

Which of the following security threats is an application security threat?

User identity is not authenticated

Which of the following descriptions about the VGMP group is correct?

VGMP is a protocol used to control the state of small VRRP groups

The priority of VRRP in the VGMP group will change with the change of VGAMP

VGMP is a protocol used to control the state of small VRRP groups

The default priority of USG6000 is 65000

The default priority of USG9000 is 45000

As shown, the USG firewall NAT configuration is as follows:

When the IP address of the FTP Server host is changed to 1.11.3. Client A host can still access the FTP Server more

When FTP Server1 responds to Client A, it is converted to the address 1.1.1.5 in Address Ground 1

Source NAT configuration, only for intranet users (10.1.1.0/24) to access the external network for translation

When the IP address of the FTP Server host is changed to 1.11.3. Client A host can still access the FTP Server more

Client A accesses FTP Server 1.1.1.1, and the destination address is converted to 10.1.1.2. The source address remains unchanged

Which of the following descriptions of the firewall log is wrong?

The ebug log level indicates that it is general information about the normal operation of the device, and the user does not need to pay attention

The log level Emergency is the most severe level

Alert log level indicates a major abnormality of the device, requiring immediate action

According to the severity level or urgency of the information. The log can be divided into 8 levels.The more serious the information, the greater the log level value.

The ebug log level indicates that it is general information about the normal operation of the device, and the user does not need to pay attention

Which of the following stages has the development of information security gone through? (multiple choice)

Communication confidentiality stage

Regarding the description of the firewall security zone and interface relationship, which of the following options is correct? (multiple choice)

Different interfaces of the firewall can belong to different security zones

Different interfaces of the firewall can belong to the same security zone

The firewall allows the same physical interface to belong to two different security zones (subinterfaces are not considered)

There are two security zones with exactly the same security level in the firewall

Different interfaces of the firewall can belong to different security zones

Different interfaces of the firewall can belong to the same security zone

In which of the following scenarios does the firewall generate the Server-map table?

ASPF is deployed on the firewall and forwards the traffic of the multi-channel protocol

Security policies are deployed on the firewall and traffic is released

NAT Server is deployed on the firewall

When the firewall generates a session table, it will generate a Server-map table

ASPF is deployed on the firewall and forwards the traffic of the multi-channel protocol

Security policies are deployed on the firewall and traffic is released

NAT Server is deployed on the firewall

Huawei H12-711 Practice Test 11 - Free Online Exam Prep & Questions

When an access user uses Client-InitiatedVPN to establish a tunnel with the LNS, how many PPP connections can one tunnel carry?

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-711 Practice Test 11

Question

Huawei H12-711 Practice Tests

Practice Tests