Which of the following statements about the PKI life cycle is correct?

Certificate renewal: When the certificate expires and the key is leaked, the PKI entity must replace the certificate. The purpose of renewal can be achieved by re-applying, or it can be automatically renewed using SCEP or CPv2 protocol.

Certificate download: The PKI entity downloads the issued certificate to the RA server through SCEP or CIPvz protocol, or through DAP.HIITP or out-of-band mode, download the issued certificate.

Certificate issuance: When a PKI entity applies for a local certificate from a CA, if there is an RA, the RA will first review the identity information of the PKI entity. After the verification is passed, the RA will send the application information to the CA.

Certificate application: certificate application, namely certificate registration, is a PKI entity introducing itself to the CA and obtaining a certificate

Certificate renewal: When the certificate expires and the key is leaked, the PKI entity must replace the certificate. The purpose of renewal can be achieved by re-applying, or it can be automatically renewed using SCEP or CPv2 protocol.

Certificate download: The PKI entity downloads the issued certificate to the RA server through SCEP or CIPvz protocol, or through DAP.HIITP or out-of-band mode, download the issued certificate.

Certificate issuance: When a PKI entity applies for a local certificate from a CA, if there is an RA, the RA will first review the identity information of the PKI entity. After the verification is passed, the RA will send the application information to the CA.

Certificate application: certificate application, namely certificate registration, is a PKI entity introducing itself to the CA and obtaining a certificate

Regarding the description of the GRE VPN tunnel configuration, which of the following options are correct?

The tunnel interface numbers of the devices at both ends must be the same

The tunnel address must ensure that the network layer is reachable

The tunnel interface must be configured with an IP address

The tunnel interface must be added to the security zone

The tunnel interface numbers of the devices at both ends must be the same

The tunnel address must ensure that the network layer is reachable

The tunnel interface must be configured with an IP address

The tunnel interface must be added to the security zone

Which of the following security threats are terminal security threats? (multiple choice)

There is a vulnerability in the server

Which of the following options is correct for the description of the rating of the level protection system in the 2.0 class protection system?

Level 1: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, but will not damage national security, social order and public interests.

Level 5: When the information system is damaged, it will cause particularly serious damage to national security.

Level 4: When the information system is damaged, it will cause particularly serious damage to social order and public interests, or cause serious damage to national security.

Level 1: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, but will not damage national security, social order and public interests.

Level 5: When the information system is damaged, it will cause particularly serious damage to national security.

Level 4: When the information system is damaged, it will cause particularly serious damage to social order and public interests, or cause serious damage to national security.

Level 3: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, or cause damage to social order and public interests and also cause damage to national security.

Which of the following descriptions about the DNS protocol is correct?

There are four types of servers in the DNS domain name resolution system: root server, top-level domain name server, recursive server and cache server.

The DNS protocol port number is 53

If the DNS cache server does not have the domain name resolution cache to be queried, it will directly query the top-level domain name server

There are four types of servers in the DNS domain name resolution system: root server, top-level domain name server, recursive server and cache server.

The DNS protocol port number is 53

DNS protocol transport layer can use either TCP or UDP

If the DNS cache server does not have the domain name resolution cache to be queried, it will directly query the top-level domain name server

Which of the following items belong to the information security prevention method in the dimension of operation and maintenance management?

The training of enterprise employees' safety awareness

There are two ways for a PKI entity to apply for a local certificate from a CA: ( ). (fill in the blank)

Online application and offline import

Huawei H12-711 Practice Test 12 - Free Online Exam Prep & Questions

What are the correct options for the following description of the basic concepts of LDAP?

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-711 Practice Test 12

Question

Huawei H12-711 Practice Tests

Practice Tests