About firewall fragmentationWhich of the following options is correct? (multiple choice)

By default, the firewall caches fragmented packets

For fragmented packets,NATALGnot supportedSIPFragmented Packet Processing

By default, aIPV4The maximum number of fragment buffers for packets is32,OneIPV6The maximum number of fragment buffers for packets is255

By default, the firewall caches fragmented packets

After the direct forwarding of fragmented packets is configured, the firewall will forward the fragmented packets that are not the first fragmented packets according to the interzone security policy.

For fragmented packets,NATALGnot supportedSIPFragmented Packet Processing

By default, aIPV4The maximum number of fragment buffers for packets is32,OneIPV6The maximum number of fragment buffers for packets is255

aboutVGMPDescription of the managed preemption function, which of the following is false?

By default,VGMPThe preemption delay time of the management group is40s

By default,VGMPThe preemption function of the management group is enabled

By default,VGMPThe preemption delay time of the management group is40s

Preemption means that when the original faulty master device recovers, its priority will be restored. At this time, it can preempt its own state as the master device again.

whenVRRPBackup group added toVGMPAfter managing the group,VRRPThe original preemption function on the backup group fails

existIPSec VPNIn the transmission mode, which part of the encrypted data packet is?

Transport layer and upper layer data packets

Network layer and upper layer data packets

Transport layer and upper layer data packets

aboutwindowslog, which of the following descriptions is false?

windows server 2008The system logs are stored inApplication.evtxmiddle

System logs are used to record events generated by operating system components, mainly including crashes of drivers, system components and application software, and data

windows server 2008The system logs are stored inApplication.evtxmiddle

The application log contains events recorded by applications or system programs, mainly recording program operation events

windows server 2008The security log is stored insecurity.evtxmiddle

againstIPspoofing attack (IP Spoofing), which of the following is an error?

The attacker needs to put the sourceIPlandaddress masquerading as a trusted host and sendSYNmarkNote the data segment request connection

IPSpoofing attacks are based onIPaddress trust relationship to initiate

IPAfter a successful spoofing attack, the attacker can use forged arbitraryIPThe address impersonates a legitimate host to access key information

The attacker needs to put the sourceIPlandaddress masquerading as a trusted host and sendSYNmarkNote the data segment request connection

based onIPThe hosts in the trust relationship of the addresses can log in directly without entering password authentication.

existUSGIn the series firewalls, which of the following commands can be used to queryNATconversion result?

display firewall nat translation

Which of the following is an encryption technique used in digital envelopes?

Asymmetric encryption algorithm

aboutIPSec SA, which of the following statements is correct?

Used to generate encryption keys

Used to generate secret algorithms

In a stateful inspection firewall, when the stateful inspection mechanism is enabled, the second packet of the three-way handshake (SYN+ACK) when reaching the firewall, which of the following descriptions is correct if there is no corresponding session table on the firewall?

Packets must not pass through the firewall

The firewall does not create a session table, but allows packets to pass through

If the firewall security policy allows packets to pass, create a session table

Packets must not pass through the firewall

Packets must pass through the firewall and establish a session

As shown in the figure, aNAT serverapplication scenarios, when usingwebWhen this configuration is performed in the configuration mode. Which of the following statements are correct? (multiple choice)

When configuring the interzone security policy, you need to set the source security zone toUntrust, the target security area isDMZ

configureNATServer, the internal address is10.1.1.2, the external address is200.10.10.1

When configuring the interzone security policy, you need to set the source security zone toUntrust, the target security area isDMZ

configureNATServer, the internal address is10.1.1.2, the external address is200.10.10.1

When configuring the interzone security policy, set the source security zone toDMZ, the target security area isUntrust

configureNATServer, the internal address is200.10.10.1, the external address is10.1.1.2

existL2TPconfiguration, for the commandTunnel Name, which of the following statements is true?(multiple choice)

Used to specify the tunnel name of the local end

If not configuredTunnel Name, the tunnel name is the local system name

Used to specify the tunnel name of the local end

Used to specify the tunnel name of the peer

both endsTunnel Nnamemust be consistent

If not configuredTunnel Name, the tunnel name is the local system name

aboutwindowsDescription of the firewall advanced settings, which of the following options is wrong?(multiple choice)

When setting the stacking rules, you can restrict both the local port and the remote port.

When setting the stacking rules, only the local port can be restricted, and the remote port cannot be restricted

When setting the stacking rules, you can restrict both the local port and the remote port.

When setting the stacking rule, only the local port can be restricted, and the remote port cannot be restricted

When setting the stacking rules, you can restrict both the local port and the remote port.

aboutVGMPIn a description of group management, which of the following is false?

The interface types and numbers of the heartbeat ports of the two firewalls can be different, as long as the Layer 2 interoperability can be guaranteed.

VRRPbackup group master/All standby status changes need to be notified to theVGMPmanagement group

The interface types and numbers of the heartbeat ports of the two firewalls can be different, as long as the Layer 2 interoperability can be guaranteed.

Active and standby firewallsVGMPtimed starthellomessage

The active and standby devices learn about the status of each other through the exchange of heartbeat messages, and back up related commands and status information.

aboutIKE SA, which of the following descriptions is false?

The encryption algorithm used by user data packets isIKE SADecide

IKEis based onUDPapplication layer protocol

The encryption algorithm used by user data packets isIKE SADecide

Huawei H12-711 Practice Test 5 - Free Online Exam Prep & Questions

After a cyber-attack event occurs, set up an isolation area, summarize data, and estimate losses according to the plan. Which of the above actions belong to the work content of the cyber security emergency response?

preparation stage

detection stage

Inhibition stage

recovery phase

Comment (0)

Huawei H12-711 Practice Test 5

Question

Huawei H12-711 Practice Tests

Practice Tests