Home / Huawei / H12-711

Huawei H12-711 Practice Test - Questions Answers, Page 45

Question list

List of questions

Question 441

(0)

What are the correct options for the following description of the basic concepts of LDAP?

Question 442

(0)

Which of the following statements about OSPF is correct?

Question 443

(0)

Which of the following statements about the PKI life cycle is correct?

Question 444

(0)

Regarding the description of the GRE VPN tunnel configuration, which of the following options are correct?

Question 445

(0)

Which of the following NAT technologies can implement a public network address to provide source address translation for multiple private network addresses?

Question 446

(0)

Which of the following security threats are terminal security threats? (multiple choice)

Question 447

(0)

Which of the following options are available for IPSec VPN peer authentication?

Question 448

(0)

Which of the following options is correct for the description of the rating of the level protection system in the 2.0 class protection system?

Question 449

(0)

Which of the following descriptions about the DNS protocol is correct?

Question 450

(0)

Which of the following items belong to the information security prevention method in the dimension of operation and maintenance management?

Related questions

Which of the following options is correct for the description of the rating of the level protection system in the 2.0 class protection system?

Which of the following VPNs cannot be used in a Site to-Site scenario? ( )[Multiple choice]*

The digital certificate fairs the public key through a third-party organization, thereby ensuring the non-repudiation of data transmission. Therefore, to confirm the correctness of the public key, only the certificate of the communicating party is required.

Which of the following options are correct regarding the description of Windows log event types? (multiple choice)

Company network administrator allocation. After the dual-system hot backup is set, run the command to check VRRP and other information, and get the following information HRP_M<FWA> Gigabi tEtherneto/0/3 Virtual Router 1 State: Master Virtual IP: 10.3.0.3 Master IP: 10.3.0.1 PriorityRun: 120 PriorityConfig:100 MasterPriority: 120 Preempt: YESDelay Time: 0 s TimerRun: 60s TimerConfig: 60s Auth type: NONE Virtual MAC: 0000-5e00-0101 Check TIL: YES Config type:vgmp Vrrp Backup-torward: disabled Create time:2020-03-17 17:35:54 UTC+08:02 Last change time: 2020-03-22 16:01:56 UTC+08:02 Ask him to type the view command in the blank space is ____ [fill in the blank]*

The information security level protection is to improve the overall security level of the country, and at the same time reasonably optimize the allocation of security resources, so that it can send back the greatest security and economic benefits.

Which of the following options is correct regarding the description of firewall hot standby? (multiple choice)

Evidence identification needs to address the verification of the integrity of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the criteria for identification of evidence?

When the company network administrator configures dual-system hot backup, (fill in the blank) configure the status of VRRP backup group l as Active, and configure the virtual IP address as 10.1.1.1/24 <sysname>system-view [sysname] interface GigabitEthernet 0/0/1 [sysname-GigabitEthernet0/0/l] ( ), the command to be typed in the blank is (please fill in the complete command in all lowercase)

To configure a NAT policy in command line mode, you need to use the ( ) command in the system view to enter the NAT policy configuration view. (fill in the blank)

Question 441

What are the correct options for the following description of the basic concepts of LDAP?

Directory Information Tree DIT: A collection of attributes constitutes a Directory Information Tree.

Unique identifier DN, the name that uniquely identifies an entry in a directory information tree

Relative Distinguished Name RDN, the name of the entry, uniquely identifies child entries of the same parent entry

Attribute: The attribute describes the characteristics of the object. An attribute consists of an attribute type and one or more attribute values.

Show Answer Comment (0)

Question 442

Which of the following statements about OSPF is correct?

Distance Vector Protocol

Good scalability

No loops

Support authentication

Show Answer Comment (0)

Question 443

Which of the following statements about the PKI life cycle is correct?

Certificate renewal: When the certificate expires and the key is leaked, the PKI entity must replace the certificate. The purpose of renewal can be achieved by re-applying, or it can be automatically renewed using SCEP or CPv2 protocol.

Certificate download: The PKI entity downloads the issued certificate to the RA server through SCEP or CIPvz protocol, or through DAP.HIITP or out-of-band mode, download the issued certificate.

Certificate issuance: When a PKI entity applies for a local certificate from a CA, if there is an RA, the RA will first review the identity information of the PKI entity. After the verification is passed, the RA will send the application information to the CA.

Certificate application: certificate application, namely certificate registration, is a PKI entity introducing itself to the CA and obtaining a certificate

Show Answer Comment (0)

Question 444

Regarding the description of the GRE VPN tunnel configuration, which of the following options are correct?

The tunnel interface numbers of the devices at both ends must be the same

The tunnel address must ensure that the network layer is reachable

The tunnel interface must be configured with an IP address

The tunnel interface must be added to the security zone

Show Answer Comment (0)

Question 445

Which of the following NAT technologies can implement a public network address to provide source address translation for multiple private network addresses?

NAT Server

Easy-ip

NAT No-PAT

NAPT

Show Answer Comment (0)

Question 446

Which of the following security threats are terminal security threats? (multiple choice)

man-in-the-middle attack

There is a vulnerability in the server

User identity is not verified

Users use weak passwords

Show Answer Comment (0)

Question 447

Which of the following options are available for IPSec VPN peer authentication?

Digital signature

Digital certificate

Digital envelope

asymmetric key

Show Answer Comment (0)

Question 448

Which of the following options is correct for the description of the rating of the level protection system in the 2.0 class protection system?

Level 1: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, but will not damage national security, social order and public interests.

Level 5: When the information system is damaged, it will cause particularly serious damage to national security.

Level 4: When the information system is damaged, it will cause particularly serious damage to social order and public interests, or cause serious damage to national security.

Level 3: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, or cause damage to social order and public interests and also cause damage to national security.

Show Answer Comment (0)

Question 449

Which of the following descriptions about the DNS protocol is correct?

There are four types of servers in the DNS domain name resolution system: root server, top-level domain name server, recursive server and cache server.

The DNS protocol port number is 53

DNS protocol transport layer can use either TCP or UDP

If the DNS cache server does not have the domain name resolution cache to be queried, it will directly query the top-level domain name server

Show Answer Comment (0)