In the information security system construction management cycle, which of the following behaviors is "check" What needs to be implemented in the link?

Safety management system design

Safety management system implementation

Safety management system operation monitoring

this firewallG1/0/0andG1/0/1interfaceVRRPgroup status isstandby

this firewallVGMPgroup status isActive

this firewallG1/0/0andG1/0/1interfaceVRRPgroup status isstandby

this firewallHRPThe heartbeat line interface isG1/0/0andG1/0/1

This firewall must be in preemptive state

Which of the following options are correct regarding configuring firewall security zones? (multiple choice)

The firewall has four security zones by default, and the priority of the four security zones cannot be modified

When data flows between different security zones, the security check of the device will be triggered and the corresponding security policy will be implemented

The firewall has four security zones by default, and the priority of the four security zones cannot be modified

A firewall can have up to12safe area

Firewall can create two security zones of the same priority

When data flows between different security zones, the security check of the device will be triggered and the corresponding security policy will be implemented

About the rootCACertificate, which of the following descriptions is incorrect?

signature isCAgenerated by public key encryption

The certificate subject name isCA

public key information isCA's public key

signature isCAgenerated by public key encryption

About firewall gateways forHTTPWhich of the following statements is false about the protocol'santivirus response?

Response methods include announcement and blocking

When the gateway device blocksHTTPAfter connecting, push to the clientwebpage and generatelog

Response methods include announcement and blocking

In alarm mode, the device only generates logs, which is not correct.HTTPThe files transmitted bythe protocol are processed and sent out

Blocking means that the device is disconnected from theHTTPserver connection and block filetransfer

firewallGE1/0/1andGE1/0/2mouth belongs toDMZarea, if you want to implementGE1/0/1The connected area is accessibleGE1/0/2Connected area, which of the following is correct?

needs to be configuredLocalarriveDMZsecurity policy

Interzone security policy needs to be configured

needs to be configuredDMZarrivelocalsecurity policy

In the future development trend of information security, terminal detection is an important part.Which of the following methods fall under the category of endpoint detection? (multiple choice)

Install host antivirus software

Monitor host registry modification records

Install host antivirus software

Monitor and remember external devices

Block users from accessing public search engines

Monitor host registry modification records

useiptablesWrite a rule that doesn't allow172.16.0.0/16Which of the following rules is correct?

iptables -t fielter -A INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t fielter -P INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t fielter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT

iptables -t fielter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

aboutHRPWhich of the following options is not included in the content of the master/slave configuration consistency check?

The next hop and outgoing interface of the static route

Whether the heartbeat interface with the same sequence number is configured

The next hop and outgoing interface of the static route

About NAT The configuration commands for the address pool are as follows: no-pat The meaning of the parameters is:

Do not convert destination port

When connecting in a public place Wi-FiWhich of the following actions is relatively safer?

Connection is paid by the operator Wi-FiHotspot and web browsing only

The connection is not encrypted Wi-Fihot spot

Connection is paid by the operator Wi-FiHotspot and web browsing only

connect unencrypted for free Wi-Fimake online shopping

Connection encrypted for free Wi-FiPerform online transfer operations

Which of the following is an action to be taken during the summary phase of a cybersecurity emergency response? (multiple choice)

Evaluate the implementation of emergency plans and propose follow-up improvement plans

Evaluate members of emergency response organizations

Establish a defense system and specify control measures

Evaluate the implementation of emergency plans and propose follow-up improvement plans

Judging the effectiveness of isolation measures

Evaluate members of emergency response organizations

Which of the following statements are true about port mirroring? (multiple choice)

The mirror port replicates the packets to the observing port

The observing port sends the received packets to the monitoring device

The mirror port replicates the packets to the observing port

The observing port sends the received packets to the monitoring device

The mirror port sends the received packets to the monitoring device

The observing port replicates the packets to the mirroring port

the following aboutVGMPWhich protocol description is wrong?

Status isActiveofVGMPThe group device will periodically sendhellomessage,stdandbyThe end is only responsible for monitoringhellomessage, will not respond

VGMPmultiple on the same firewallVRRPAll backup groups are added to one management group, and all backup groups are managed by the management group.VRRPbackup group

VGMPthrough the unified control ofVRRPSwitching the status of the backup group to ensure that allVRRPBackup group status is consistent

Status isActiveofVGMPThe group device will periodically sendhellomessage,stdandbyThe end is only responsible for monitoringhellomessage, will not respond

By default whenstandbyend threehelloThe message period does not receive the message sent by the peerhellomessage, it will think that the peer end is faulty, so it will switch itself toActivestate.

aboutGREEncapsulation and decapsulation, which of the following descriptions is false?

packaging process, afterGREAfter the module is encapsulated, this packet will enterIPmodule for further processing

The encapsulation process, the original data packet is passed to theTunnelDepart after the interfaceGREpackage

packaging process, afterGREAfter the module is encapsulated, this packet will enterIPmodule for further processing

The decapsulation process, the destination receivesGREAfter the message, the data packet is delivered to theTunnelDepart after the interfaceGREDecapsulation

Decapsulation process, afterGREAfter the module is decapsulated, this packet will go inIPmodule for further processing

Which of the following does not fall into the category of cybersecurity incidents?

General cybersecurity incidents

Huawei H12-711 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

existUSGOn the series firewall, configurewebAfter the redirection function is enabled, the authentication page cannot pop up. Which of the following is not the cause of the failure?

The authentication policy is not configured or the authentication policy is incorrectly configured

UnopenedwebAuthentication function

browserSSLVersion and Firewall Authentication PageSSLversion mismatch

The port number of the authentication page service is set to8887

Comment (0)

Huawei H12-711 Practice Test 2

Question

Huawei H12-711 Practice Tests

Practice Tests