Execute the command on the firewall and display the above information. Which of the following descriptions is correct? (multiple choice)

this firewallVGMPgroup status isActive

this firewallG1/0/1virtual interfaceIPaddress is202.38.10.2

this firewallVRIDfor1ofVRRPThe priority of the backup group is100

this firewallVGMPgroup status isActive

this firewallG1/0/1virtual interfaceIPaddress is202.38.10.2

this firewallVRIDfor1ofVRRPThe priority of the backup group is100

When the main deviceUSG_AWill not switch in the event of a failure

Which of the following is network address port translation (NAPT) and only translate network addresses (No-PAT) difference?

No-PATSupports protocol address translation at the network layer

go throughNo-PATAfter conversion, for external network users, all packets come from the sameIPaddress

No-PATOnly supports protocol port translation at the transport layer

NAPTOnly supports protocol address translation at the network layer

No-PATSupports protocol address translation at the network layer

Which of the following options is correct for the description of a buffer overflow attack?(multiple choice)

Buffer overflow attacks exploit the flaws of software systems in memory operations to run attack code with high operating privileges

Buffer overflow attacks are one of the most common ways to attack the behavior of software systems

Buffer overflow attacks are application-layer attacks

Buffer overflow attacks exploit the flaws of software systems in memory operations to run attack code with high operating privileges

Buffer overflow attacks have nothing to do with the vulnerabilities and architecture of the operating system

Buffer overflow attacks are one of the most common ways to attack the behavior of software systems

Buffer overflow attacks are application-layer attacks

Which of the following is not the business scope of the National Internet Emergency Response Center?

Cooperate with other institutions to provide training services

Emergency handling of security incidents

Warning and notification of security incidents

Provide security evaluation services for government departments, enterprises and institutions

Cooperate with other institutions to provide training services

Which of the following options belong to international organizations related to the standardization of information security? (multiple choice)

International Organization for Standardization(ISO)International Organization for Standardization

International Electrotechnical Commission(IEC) International Electrotechnical Commission

International Telecommunication Union(ITU)ITU

International Organization for Standardization(ISO)International Organization for Standardization

International Electrotechnical Commission(IEC) International Electrotechnical Commission

International Telecommunication Union(ITU)ITU

Wi-Fi Alliance Wi-Fialliance organization

In order to obtain criminal evidence, it is necessary to master the technology of intrusion tracking.Which of the following options are correct for the description of tracking technology? (multiple choice)

Packet logging technology through the tracedIPInsert trace data into packets to mark packets on each router they pass through

Link testing technology determines the information of the attack source by testing the network link between routers

Shallow mail behavior analysis can achieveIPAnalysis of addresses, sent time, sending frequency, number of recipients, shallow email headers, and more.

Packet logging technology through the tracedIPInsert trace data into packets to mark packets on each router they pass through

Link testing technology determines the information of the attack source by testing the network link between routers

Packet marking technology extracts attack source information by logging packets on routers and then using data drilling techniques

Shallow mail behavior analysis can achieveIPAnalysis of addresses, sent time, sending frequency, number of recipients, shallow email headers, and more.

In the classification of the information security level protection system, which of the following levels define that if the information system is destroyed, it will cause damage to social order and public interests? (multiple choice)

first levelUser self-protection level

second levelSystem Audit Protection Level

third levelSafety Mark Protection

fourth level structured protection

first levelUser self-protection level

second levelSystem Audit Protection Level

third levelSafety Mark Protection

fourth level structured protection

Control actions of firewall inter-domain forwarding security policypermitanddeny, which of the following options are correct? (multiple choice)

The actions of the firewall's default security policy are:deny

The packet matches the interzone security policydenyThe packet is discarded immediately after the action, and other interzone security policies will not continue to be executed.

Even if the packet matches the security policypermitaction, and may not necessarily be forwarded by the firewall

The actions of the firewall's default security policy are:deny

The packet matches the interzone security policydenyThe packet is discarded immediately after the action, and other interzone security policies will not continue to be executed.

Even if the packet matches the security policypermitaction, and may not necessarily be forwarded by the firewall

Whether the packet matches the security policypermitaction, ordenyaction, will go toUTMmodule handling

in deploymentIPSec VPN, which of the following is the main application scenario of tunnel mode?

Between the host and the security gateway

Which of the following statements is true about business continuity plans? (multiple choice)

I thought it was impossible to predict all possible accidents, soBCPFlexibility is required

The business continuity plan does not require senior company involvement during the scoping phase of the project

I thought it was impossible to predict all possible accidents, soBCPFlexibility is required

The business continuity plan does not require senior company involvement until it is formally documented

Not all security incidents must be reported to company executives

In the classification of information security classified protection systems, which of the following levels define if an information system is compromised. Will it cause damage to social order and public interests? ( )[Multiple Choice Questions]

The third level of security marking protection

Second-level system audit protection

The third level of security marking protection

Second-level system audit protection

The first level of user self-protection

Regarding the NAT policy processing flow, which of the following options are correct? ( )*

Server-map is processed before the security policy is matched

Source NAT policy is processed after security policy match

Server-map is processed after state detection

Server-map is processed before the security policy is matched

Source NAT policy is processed after security policy match

Source NAT policy queries are processed after the session is created

Server-map is processed after state detection

_____ Mode: Two devices, one master and one backup. Under normal circumstances, service traffic is handled by the active device. When the active device fails, the standby device replaces the active device to process service traffic to ensure that services are not interrupted.[fill in the blank]*

Dual-system hot standby active/standby backup

If internal employees access the Internet through the firewall and find that they cannot connect to the Internet normally, what viewing commands can be used on the firewall to troubleshoot the interface, security zone, security policy and routing table? (Write any viewing command, requiring: the words on the command line must be complete and correct to score, and cannot be omitted or abbreviated)[fill in the blank]* (

display zone display current-configuration|display ip routing-table|display security-polic rule all|display ip interface brief)

An employee of a company accesses the internal web server of the company through the firewall, and can open the web page of the website by using a browser, but the accessibility of the web server is tested by using the Pina command, and it shows that it is unreachable. What are the possible reasons? ( )[Multiple choice]

The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol

The interface of the firewall connecting to the server is not added to the security zone

The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol

As shown in the figure, two Server Map entries are generated after configuring NAT Server. Regarding the information presented in this figure, which of the following descriptions is wrong?[Multiple choice]* Type: Nat Server. ANY?1.1.1.1 [192.168.1.1] Type: Nat Server Reverse. 192.168.1.1[1.1.1.1] ?ANY

The first Server Map function is that when any address accesses 192.168.1.1, the destination IP will be converted to 1.1.1.1 after passing through the firewall.

The second Server Map function is that when 192.168.1.1 accesses any address, the source address will be converted to 1.1.1.1 after passing through the firewall

The first Server Map function is that when any address accesses 192.168.1.1, the destination IP will be converted to 1.1.1.1 after passing through the firewall.

The Server Map with the Reverse logo can use the command to remove it.

The two Server Map entries are static, that is, after the NAT Server is configured, the two Server Maps will be automatically generated and exist permanently.

Huawei H12-711 Practice Test 8 - Free Online Exam Prep & Questions

Question 1 / 40

ASPF (Application specific Packet Filter)It is a packet filtering technology based on the application layer, andserver-mapTables implement special security mechanisms. aboutASPFandservermapWhich of the following statements is correct? (multiple choice)

ASPFMonitor messages during communication

ASPFcan be created dynamicallyserver-map

ASPFpass throughserver-mapTable implementation dynamically allows multi-channel protocol data to pass through

Quintupleserver-mapThe table entry implements a similar function to the session table

Comment (0)

Huawei H12-711 Practice Test 8

Question

Huawei H12-711 Practice Tests

Practice Tests