Home / Huawei / H12-731_V2.0

Huawei H12-731_V2.0 Practice Test - Questions Answers, Page 25

Question list

List of questions

Question 241

(0)

Which of the following health check descriptions is correct? (Selection)

Question 242

(0)

The following description of the IPv6 stateless address DAD check, which one is wrong? (single selection).

Question 243

(0)

The following describes the authentication method and authentication domain relationship for Internet users single sign-on What are the correct ones? (multiple selection).

Question 244

(0)

The following description of security protection, which one is correct?(single selection)

Question 245

(0)

By default, two subnets of the same VPC network deployed in different physical resource pools cannot access each other.

Question 246

(0)

Digital certificates can ensure the credibility of the public key of the communicating partner in the process of data transmission.

Question 247

(0)

Which of the following implementation elements is a multi-choice that can be controlled throughout cloud operations).

Question 248

(0)

At this time, there is no defense against C&C attacks that use TLS for encryption

Question 249

(0)

The following describes user authentication Which ones are correct? (multiple selection).

Question 250

(0)

One of the reasons why traditional passive defense does not protect against APT attacks is that traditional defense methods cannot correlate and analyze threats.

Question 241

Which of the following health check descriptions is correct? (Selection)

You do not need to configure a security policy to allow health check packets.

The outbound interface of the probe message does not need to be fixed

After specifying the junction of the link health check The outgoing interface of the health probe packet can be consistent with the incoming interface of the response packet.

When configuring the protocol and port of the health check, check whether the corresponding protocol and port are enabled on the peer side.

Show Answer Comment (0)

Question 242

The following description of the IPv6 stateless address DAD check, which one is wrong? (single selection).

IPv6 duplicate address detection technology is similar to free ARP in IPv4 Used to detect duplicate IPv4 host addresses when the address is divided into IE or when the host is connected to the network.

The test address enables broadcast communication.

The node sends a Neighbor Request (NS) packet to the test address it will use If you receive a Neighbor Notification (NA) message from another site then proves that the address has already been used.

When the interface is configured as an IPv6 address , DAD is used to detect whether the IPv6 address to be used is unique within the local link.

Show Answer Comment (0)

Question 243

The following describes the authentication method and authentication domain relationship for Internet users single sign-on What are the correct ones? (multiple selection).

The firewall participates in the authentication process of single sign-on users, so authentication configuration can be performed in the authentication domain.

If no other authentication domain exists on the server, the default authentication domain is online.

Single sign-on in progress Firewalls can also be bound to users based on IP/MAC addresses Identify the authentication domain to which the local user belongs

Single sign-on users need to be online on the firewall Policy control based on user Therefore, the single sign-on user must also belong to a certain authentication domain.

Show Answer Comment (0)

Question 244

The following description of security protection, which one is correct?(single selection)

The packets received by the Ethernet interface cannot be bound to the corresponding relationship between the source IP address and the MAC address

When FW is deployed behind a NAT device, there may be a large amount of traffic accessing different destination ports with the same source IP address In this scenario, you cannot enable port scanning and attack prevention.

ASPF function will not affect device performance.

When FW works in transparent mode You can enable IP spoofing attack prevention.

Show Answer Comment (0)

Question 245

By default, two subnets of the same VPC network deployed in different physical resource pools cannot access each other.

TRUE

FALSE

Show Answer Comment (0)

Question 246

Digital certificates can ensure the credibility of the public key of the communicating partner in the process of data transmission.

TRUE

FALSE

Show Answer Comment (0)

Question 247

Which of the following implementation elements is a multi-choice that can be controlled throughout cloud operations).

Security policy deployment

Account authority management

Risks can be identified

The operation can be audited

Show Answer Comment (0)

Question 248

At this time, there is no defense against C&C attacks that use TLS for encryption

TRUE

FALSE

Show Answer Comment (0)

Question 249

The following describes user authentication Which ones are correct? (multiple selection).

Users whose security policies are allowed but whose identity authentication is not passed cannot access resources normally

If the user is a MAC address single-item bound user Other users can also use this MAC address to log in normally.

Users with two-way iP/MAC binding can obtain dynamic IP address o through DHCP

Configure two-way binding of MAC addresses for a user to be exempt from authentication? If there are three layers of device elbows between the user and FW, the user can go online normally

Show Answer Comment (0)

Question 250

One of the reasons why traditional passive defense does not protect against APT attacks is that traditional defense methods cannot correlate and analyze threats.

TRUE

FALSE

Show Answer Comment (0)

Total 276 questions