Home / Huawei / H12-711

Huawei H12-711 Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

Which of the following options are correct regarding configuring firewall security zones? (multiple choice)

Question 52

(0)

certificates, self-signed certificates, etc.

Question 53

(0)

Which of the following attacks is not a cyber attack?

Question 54

(0)

About the rootCACertificate, which of the following descriptions is incorrect?

Question 55

(0)

Which of the following configurations can achieveNAT ALGFeatures?

Question 56

(0)

About firewall gateways forHTTPWhich of the following statements is false about the protocol'santivirus response?

Question 57

(0)

Which of the following does not belong toUSGUser authentication method in firewall?

Question 58

(0)

firewallGE1/0/1andGE1/0/2mouth belongs toDMZarea, if you want to implementGE1/0/1The connected area is accessibleGE1/0/2Connected area, which of the following is correct?

Question 59

(0)

For the process of forwarding session header packets between firewall domains, there are the following steps: 1, look up the routing table 2, find the inter-domain packet filtering rules 3, looku

Question 60

(0)

The administrator wants to be clear about the current session table. Which of the following commands is correct?

Related questions

Which of the following options is correct for the description of the rating of the level protection system in the 2.0 class protection system?

Which of the following VPNs cannot be used in a Site to-Site scenario? ( )[Multiple choice]*

The digital certificate fairs the public key through a third-party organization, thereby ensuring the non-repudiation of data transmission. Therefore, to confirm the correctness of the public key, only the certificate of the communicating party is required.

Which of the following options are correct regarding the description of Windows log event types? (multiple choice)

Company network administrator allocation. After the dual-system hot backup is set, run the command to check VRRP and other information, and get the following information HRP_M<FWA> Gigabi tEtherneto/0/3 Virtual Router 1 State: Master Virtual IP: 10.3.0.3 Master IP: 10.3.0.1 PriorityRun: 120 PriorityConfig:100 MasterPriority: 120 Preempt: YESDelay Time: 0 s TimerRun: 60s TimerConfig: 60s Auth type: NONE Virtual MAC: 0000-5e00-0101 Check TIL: YES Config type:vgmp Vrrp Backup-torward: disabled Create time:2020-03-17 17:35:54 UTC+08:02 Last change time: 2020-03-22 16:01:56 UTC+08:02 Ask him to type the view command in the blank space is ____ [fill in the blank]*

The information security level protection is to improve the overall security level of the country, and at the same time reasonably optimize the allocation of security resources, so that it can send back the greatest security and economic benefits.

Which of the following options is correct regarding the description of firewall hot standby? (multiple choice)

Evidence identification needs to address the verification of the integrity of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the criteria for identification of evidence?

When the company network administrator configures dual-system hot backup, (fill in the blank) configure the status of VRRP backup group l as Active, and configure the virtual IP address as 10.1.1.1/24 <sysname>system-view [sysname] interface GigabitEthernet 0/0/1 [sysname-GigabitEthernet0/0/l] ( ), the command to be typed in the blank is (please fill in the complete command in all lowercase)

To configure a NAT policy in command line mode, you need to use the ( ) command in the system view to enter the NAT policy configuration view. (fill in the blank)

Question 51

Which of the following options are correct regarding configuring firewall security zones? (multiple choice)

The firewall has four security zones by default, and the priority of the four security zones cannot be modified

A firewall can have up to12safe area

Firewall can create two security zones of the same priority

When data flows between different security zones, the security check of the device will be triggered and the corresponding security policy will be implemented

Show Answer Comment (0)

Question 52

certificates, self-signed certificates, etc.

True

False

Show Answer Comment (0)

Question 53

Which of the following attacks is not a cyber attack?

IP spoofing attack

SmurfI attack

MAC address spoofing attack

ICMP attack

Show Answer Comment (0)

Question 54

About the rootCACertificate, which of the following descriptions is incorrect?

Issuer isCA

The certificate subject name isCA

public key information isCA's public key

signature isCAgenerated by public key encryption

Show Answer Comment (0)

Question 55

Which of the following configurations can achieveNAT ALGFeatures?

nat alg protocol

alg protocol

nat protocol

detect protocol

Show Answer Comment (0)

Question 56

About firewall gateways forHTTPWhich of the following statements is false about the protocol'santivirus response?

When the gateway device blocksHTTPAfter connecting, push to the clientwebpage and generatelog

Response methods include announcement and blocking

In alarm mode, the device only generates logs, which is not correct.HTTPThe files transmitted bythe protocol are processed and sent out

Blocking means that the device is disconnected from theHTTPserver connection and block filetransfer

Show Answer Comment (0)

Question 57

Which of the following does not belong toUSGUser authentication method in firewall?

Certification-free

Password authentication

Fingerprint authentication

Show Answer Comment (0)

Question 58

firewallGE1/0/1andGE1/0/2mouth belongs toDMZarea, if you want to implementGE1/0/1The connected area is accessibleGE1/0/2Connected area, which of the following is correct?

needs to be configuredLocalarriveDMZsecurity policy

No configuration required

Interzone security policy needs to be configured

needs to be configuredDMZarrivelocalsecurity policy

Show Answer Comment (0)