aboutNATAddress translation, which of the following statements is false?

for someTCP,UDPagreement (such asICMP,PPTP), cannot doNATconvert

sourceNATconfiguration in technologyNATaddress pool, you can configure only one address poolIPaddress

Address translation can be provided in the local area network according to the needs of usersFTP,WWW,Telnetand other services

Some application layer protocols carry in the dataIPaddress information, make themNATWhen modifying the data in the upper layerIPAddress information

for someTCP,UDPagreement (such asICMP,PPTP), cannot doNATconvert

Which of the following options is correct regarding the description of firewall hot standby? (multiple choice)

When the dual-system backup function needs to be provided in multiple areas on the firewall, it is necessary to configure multipleVRRPbackup group

require the same firewall on the sameVGMPmanagement group ownedVRRPBackup group status remains consistent

VGMPto guarantee allVRRPConsistency of backup group switching

When the dual-system backup function needs to be provided in multiple areas on the firewall, it is necessary to configure multipleVRRPbackup group

require the same firewall on the sameVGMPmanagement group ownedVRRPBackup group status remains consistent

Firewall dual-system hot backup requires session table,MACInformation such as tables and routing tables are synchronized and backed up between the master device and the slave device

VGMPto guarantee allVRRPConsistency of backup group switching

The content of intrusion detection covers all kinds of authorized and unauthorized intrusion behaviors. Which of the following behaviors does not belong to the scope of intrusion detection?

The administrator deletes the configuration by mistake

againstARPDescription of spoofing attack, which of the following is false

ARPSpoofing attacks can only be done byARPReply to achieve, can not passARPrequest fulfillment

ARPThe implementation mechanism only considers normal business interactions, and does not perform any verification on abnormal business interactions or malicious behaviors

ARPSpoofing attacks can only be done byARPReply to achieve, can not passARPrequest fulfillment

When a host sends normalARPWhen the request is made, the attacker will preemptively answer, causing the host to establish an erroneousIPandMACMapping relations

ARPStatic binding is the solutionARPA scheme of spoofing attack, mainly used in scenarios with small network scale

MACWhich of the following mechanisms are used by flood attacks? (multiple choice)

MACLimit on the number of entries

Which of the following is true about firewall security policies?

By default, the security policy only controls unicast packets.

By default, the security policy can control unicast packets and broadcast packets

By default, the security policy can control multicast

By default, the security policy only controls unicast packets.

By default, the security policy can control unicast packets, broadcast packets, and multicast packets.

Which of the following is an action to be taken during the eradication phase in a cybersecurity emergency response? (multiple choice)

Find Trojan horses, illegal authorizations, and system loopholes, and deal with them in a timely manner

Revise security policies based on security incidents that occur, enable security auditing

Find Trojan horses, illegal authorizations, and system loopholes, and deal with them in a timely manner

Revise security policies based on security incidents that occur, enable security auditing

Block the behavior of the attack and reduce the impact

Confirm the degree of damage caused by the security incident and report the security incident

DHCP SnoopingWhich of the following attacks can be prevented? (multiple choice)

DHCP ServerCounterfeiter Attack

middleman withIP/MAC spoofingattack

useoption82Phishing of fieldsDHCPlease renewal attack

DHCP ServerCounterfeiter Attack

middleman withIP/MAC spoofingattack

useoption82Phishing of fieldsDHCPlease renewal attack

Which of the following is the default backup mode for dual-system hot standby?

After the device restarts, the active and standbyFWConfiguration

which of the followingIPSec VPNnecessary configuration? (multiple choice)

configureIKE SARelated parameters

configureIPSec SARelated parameters

configureIKE SARelated parameters

configureIPSec SARelated parameters

In order to obtain criminal evidence, it is necessary to master the technology of intrusion tracking.Which of the following options are correct for the description of tracking technology? (multiple choice)

Packet logging technology through the tracedIPInsert trace data into packets to mark packets on each router mentioned

Link detection technology determines the information of the attack source by testing the network connection between routers

Shallow mail behavior analysis can achieveIPlandAnalysis of information such as address, sending time, sending frequency, number of recipients, shallow email headers, etc.

Packet logging technology through the tracedIPInsert trace data into packets to mark packets on each router mentioned

Link detection technology determines the information of the attack source by testing the network connection between routers

Packet marking technology extracts attack source information by logging packets on routers and then using data drilling techniques

Shallow mail behavior analysis can achieveIPlandAnalysis of information such as address, sending time, sending frequency, number of recipients, shallow email headers, etc.

Which of the following is false for a description of an intrusion detection system?.

Intrusion detection system includes all hardware and software systems used for intrusion detection

Intrusion detection system can collect a large amount of key information dynamically through network and computer.And can analyze and judge the current state of the entire system environment in time

Once the intrusion detection system finds that there is a behavior that violates the security policy or the system has traces of being attacked, it can implement blocking operations.

Intrusion detection system includes all hardware and software systems used for intrusion detection

The immersion detection system can be linked with firewalls and switches, making it a powerful tool for firewalls"assistant", better and more precise control of traffic access between domains

About the packet iniptablesDescription of the transfer process, which of the following options is incorrect?

If the destination address of the data packet is not the local machine, the system sends the data packet toOUTPUTchain

When a packet enters the network card, it first goes to matchPREROUTINGchain

If the destination address of the data packet is the local machine, the system will send the data packet toINPUTchain.

If the destination address of the data packet is not the local machine, the system sends the data packet toOUTPUTchain

If the destination address of the data packet is not the local machine, the system sends the data packet toFORWARDchain.

Huawei H12-711 Practice Test 6 - Free Online Exam Prep & Questions

The matching principle of the security policy is: first search for the manually configured interzone security policy, and if no match is found, the data packet will be discarded directly.

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-711 Practice Test 6

Question

Huawei H12-711 Practice Tests

Practice Tests