aboutVRRP/VGMP/HRPWhich of the following statements is correct? (multiple choice)

VRRPResponsible for sending free messages during active/standby switchoverARPDirect traffic on the new master

VGMPResponsible for monitoring equipment failures and controlling rapid switching of equipment

HRPResponsible for data backup during dual-system hot standby operation

VRRPResponsible for sending free messages during active/standby switchoverARPDirect traffic on the new master

VGMPResponsible for monitoring equipment failures and controlling rapid switching of equipment

HRPResponsible for data backup during dual-system hot standby operation

inActivestateVGMPGroups may containstandbystateVRRPGroup

administratorPCandUSGThe firewall management port is directly connected, usingwebWhich of the following statements is correct? (multiple choice)

managePCbrowser accesshttp;//192.168.0.1

managePCofIPThe address is manually set to192.168.0.2-192.168.0.254

managePCbrowser accesshttp;//192.168.0.1

managePCofIPThe address is manually set to192.168.0.2-192.168.0.254

managePCbrowser accesshttp://192.168.1.1

will managePCThe network card is set to obtain automaticallyIPaddress

As shown in the figure below, the internal user online scene of the enterprise is as follows. The user online process includes:

User accessinternetenterhttp://1.1.1.1 3. USGPush authentication interface4. User successfully accessedhttp://1.1.1.1 ,device creationsessionsurface5 User enters correctusername and passwordThe following correct sequence of processes should:

Which of the following options is correct regarding the description of firewall hot standby? (multiple choice)

When the dual-system backup function needs to be provided in multiple areas on the firewall, it is necessary to configure multipleVRRPbackup group

require the same firewall on the sameVGMPmanagement group ownedVRRPBackup group status remains consistent

VGMPto guarantee allVRRPConsistency of backup group switching

When the dual-system backup function needs to be provided in multiple areas on the firewall, it is necessary to configure multipleVRRPbackup group

require the same firewall on the sameVGMPmanagement group ownedVRRPBackup group status remains consistent

Firewall dual-system hot backup requires session table,MACInformation such as tables and routing tables are synchronized and backed up between the master device and the slave device

VGMPto guarantee allVRRPConsistency of backup group switching

Which of the following is an encryption technique used in digital envelopes?

Asymmetric encryption algorithm

Which of the following options is correct regarding the matching conditions of a security policy?(multiple choice)

matching condition"source security zone"is an optional parameter

matching condition"period"is an optional parameter

matching condition"application"is an optional parameter

matching condition"Serve"is an optional parameter

matching condition"source security zone"is an optional parameter

matching condition"period"is an optional parameter

matching condition"application"is an optional parameter

matching condition"Serve"is an optional parameter

firewallTrustClients in the domain can log inUntrustin the domainFTPserver, but the file cannot be downloaded, which of the following can solve the problem? (multiple choice)

FTPWorks asPassivemode, modify fromTrustarriveUntrustThe zone's security policy action is Allow

existTrustandUntrustrelease betweentwenty oneThe port number

FTPWorks asportmode, modify fromTrustarriveUntrustThe zone's security policy action is Allow

FTPWorks asPassivemode, modify fromTrustarriveUntrustThe zone's security policy action is Allow

aboutTCP/IPDescription of protocol stack packet decapsulation, which of the following is correct?(multiple choice)

The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as:IP

After the application layer receives the data packet, the application layer information is stripped after parsing, and the final displayed user data is exactly the same as the data sent by the sender host

The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as:IP

transport layer (TCP) after receiving the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such asUDP

After the network layer receives the data packet, the network layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such as HTTP

After the application layer receives the data packet, the application layer information is stripped after parsing, and the final displayed user data is exactly the same as the data sent by the sender host

Which of the following is not a key technology of antivirus software?

Update virus database in real time

Which of the following options are key elements of information security precautions? (multiple choice)

Security operation and management

Security Products and Technologies

Security operation and management

Security Products and Technologies

Which of the following is not a major form of computer crime?

Personal questionnaires using a computer

Implant the Trojan horse on the target host

Personal questionnaires using a computer

Using scanning tools to collect network information without permission

in configurationGRE Tunnelinterface,DestinationThe address generally refers to which of the following parameters?

External network egressIPaddress

Local external network egressIPaddress

External network egressIPaddress

Which of the following options are application risks (multiple choice)

Database system configuration security

About disconnectTCPIn the description of the connection four-way handshake, which of the following is false?

When passive shutdown receives the firstFIN, it will send back aACK, and randomly generate the confirmation serial number.

The active closing party sends the firstFINperform an active shutdown while the other party receives thisFINexecution is closed

When passive shutdown receives the firstFIN, it will send back aACK, and randomly generate the confirmation serial number.

The passive closing party needs to pass an end-of-file to the application, the application closes its connection, and causes the sending of an end-of-fileFIN

Sent on passive shutdown sideFINAfter that, the active closing party must send back an acknowledgment and set the acknowledgment sequence number to the received sequence number plus1

aboutClient-Initiated VPN, which of the following statements is true? (multiple choice)

each access user andLNSestablish a tunnel between

Each tunnel carries only oneL2TPsession andPPPconnect

each access user andLNSestablish a tunnel between

Each tunnel carries only oneL2TPsession andPPPconnect

Each tunnel carries multipleL2TPsession andPPPconnect

Each tunnel carries multipleL2TPsession and aPPPconnect

Regarding the firewall security policy statement, which of the following options is false?

If the security policypermit, the discarded packets will not be accumulated"Hits"

When configuring a security policy name, the same name cannot be reused

Adjust the order of security policies without saving configuration files and take effect immediately

HuaweiUSGThe number of security policy entries for the series firewall cannot exceed128strip

Which of the following isUSGUser name for the first login of the series firewall/password?

usernameadmin passwordAdmin@123

usernameadmin passwordadmin@123

aboutClient-InitializedofL2TP VPN, which of the following statements is false?

Remote users do not need to installVPNClient software

remote user accessInternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request

;NSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password

LNSAssign private keys to remote usersIPaddress

Remote users do not need to installVPNClient software

Which of the following options are the possible reasons for the problem that users cannot access network resources in the authentication-free two-way binding mode? (multiple choice)

Authentication-free users do not use the specifiedIP/MACaddressPC

Online users have reached the maximum

Authentication-free users and authenticated users are in the same security area

Authentication-free users do not use the specifiedIP/MACaddressPC

The authentication action in the authentication policy is set to"Do not acknowledge/Certificationfree"

Online users have reached the maximum

ASPF(Application Specific Packet Filter) is a packet filtering technology based on the application layer and is passed throughserver-mapTables implement special security mechanisms. aboutASPFandserver-mapWhich of the following statements is correct? (multiple choice)

ASPFMonitor messages during communication

ASPFcan be created dynamicallyserver-mapsurface

ASPFpass throughserver-mapTable implementation dynamically allows multi-channel protocol data to pass through

ASPFMonitor messages during communication

ASPFcan be created dynamicallyserver-mapsurface

ASPFpass throughserver-mapTable implementation dynamically allows multi-channel protocol data to pass through

Quintupleserver-mapThe table entry implements a similar function to the session table

Which of the following are functions of address translation technology?(multiple choice)

Address translation enables internal network users (privateIPaddress) accessInternet

Address translation allows many hosts on an internal LAN to share oneIPInternet address

Address translation can shield users on the internal network and improve the security of the internal network

Address translation enables internal network users (privateIPaddress) accessInternet

Address translation allows many hosts on an internal LAN to share oneIPInternet address

Address translation can handle encryptedIPheader

Address translation can shield users on the internal network and improve the security of the internal network

aboutNATAddress translation, which of the following statements is europium false??

for some non-TCP,UDPprotocol (such asICMP,PPTP), cannot doNATconvert

sourceNATconfiguration in technologyNATaddress pool, you can configure only one address poolIPaddress

Address translation can be provided in the local area network according to the needs of usersFTP,WWW,Telnetand other services

Some application layer protocols carry in the dataIPaddress information, make themNATWhen modifying the data in the upper layerIPAddress information

for some non-TCP,UDPprotocol (such asICMP,PPTP), cannot doNATconvert

aboutVRRP/VGMP/HRPWhich of the following statements is correct? (multiple choice)

VRRPResponsible for sending free messages during active/standby switchoverARPDirect traffic to the new master

VGMPResponsible for monitoring equipment failures and controlling rapid switching of equipment

HRPResponsible for data backup during dual-system hot standby operation

VRRPResponsible for sending free messages during active/standby switchoverARPDirect traffic to the new master

VGMPResponsible for monitoring equipment failures and controlling rapid switching of equipment

HRPResponsible for data backup during dual-system hot standby operation

inActivestateVGMPGroups may containStandbystateVRRPGroup

Huawei H12-711 Practice Test 3 - Free Online Exam Prep & Questions

Question 1 / 40

Which of the following statements are true about single sign-on? (multiple choice)

The device can identify the user who has passed the authentication of the identity authentication system

AD There is only one deployment mode for domain single sign-on

Although there is no need to enter the user password, the authentication server needs to interact with the user password and the device to ensure that the authentication is passed.

AD Domain single sign-on can be synchronized to the firewall by mirroring the login data stream

Comment (0)

Huawei H12-711 Practice Test 3

Question

Huawei H12-711 Practice Tests

Practice Tests