H12-711 by Huawei Actual Free Exam Q&As

Question 1

Which of the following is true about the description of the TCP/IP protocol stack packet decapsulation? (Multiple choice)

A. The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as IP. B. After receiving the data packet, the network layer is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such as HTTP. C. After the transport layer (TCP) receives the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol, such as UDP, is known according to the parsing information. D. After the application layer receives the data packet, the application layer information is stripped after parsing, and the user data displayed at the end is exactly the same as the data sent by the sender host.

Discussion 0

Correct Answer: A,D Vote an answer

Question 2

Which of the following is not included in the Corporate Impact Analysis (BIA)?

A. Business priority B. Impact assessment C. Risk identification D. Accident handling priority

Discussion 0

Correct Answer: B Vote an answer

Question 3

Which of the following descriptions about the action and security profile of the security policy are correct? (Multiple choice)

A. If the action of the security policy is "prohibited", the device will discard this traffic, and then no content security check will be performed. B. If the security policy action is "Allow", the traffic will not match the security profile. C. The security profile must be applied to the security policy that is allowed to take effect. D. The security profile may not be applied to the security policy that the action is allowed and take effect.

Discussion 0

Correct Answer: A,C Vote an answer

Question 4

Which of the following description about the group management for VGMP is wrong?

A. master/slave devices exchange packets to understand each other through the heartbeat line, and backup the related commands and status information B. Master/slave status change of VRRP backup group needs to notify its VGMP management group C. The interface type and number of two firewalls heartbeat port may be different, as long as they can communicate with each other D. Periodically sends Hello packets between VGMP of master/slave firewall

Discussion 0

Correct Answer: C Vote an answer

Question 5

When the firewall hard disk is in place, which of the following is correct description for the firewall log?

A. The administrator can advertise the content log to view the detection and defense records of network threats. B. The administrator knows the user's behavior, the keywords explored, and the effectiveness of the audit policy configuration through the user activity log. C. The administrator can learn the security policy of the traffic hit through the policy hit log, and use it for fault location when the problem occurs. D. The administrator can use the threat log to understand the user's security risk behavior and the reason for being alarmed or blocked.

Discussion 0

Correct Answer: C Vote an answer

Question 6

Which of the following types are included in Huawei firewall user management? (Multiple Choice)

A. Administrator User Management B. Internet user management C. Access user management D. Device User Management

Discussion 0

Correct Answer: A,B,C Vote an answer

Question 7

Because the server is a kind of computer, we can use our pc in the enterprise as our server.

A. False B. True

Discussion 0

Correct Answer: A Vote an answer

Question 8

W hich of the following are the characteristics of a symmetric encryption algorithm? (Multiple choice)

A. Key distribution is not secure B. Key distribution security is high C. Confidential speed is slow D. Fast encryption

Discussion 0

Correct Answer: A,D Vote an answer

Question 9

The attacker by sending ICMP response request, and will request packet destination address set to suffer Internet radio address.
Which kind of attack does this behavior belong to?

A. Smurf attack B. ICMP redirect attack C. IP spoofing attack D. SYN flood attack

Discussion 0

Correct Answer: A Vote an answer

Question 10

Which configuration is correct to implement NAT ALG function?

A. nat protocol B. nat alg protocol C. detect protocol D. alg protocol

Discussion 0

Correct Answer: C Vote an answer

Question 11

Which of the following is not a hash algorithm?

A. SM1 B. MD5 C. SHA1 D. SHA2

Discussion 0

Correct Answer: A Vote an answer

Question 12

Which of the following is not a requirement for firewall double hot standby?

A. The type and number of the interface used are the same. B. The firewall hardware model is consistent C. The firewall software version is consistent D. The firewall interface has the same IP address.

Discussion 0

Correct Answer: D Vote an answer

Question 13

Which of the following are correct about configuring the firewall security zone? (Multiple Choice)

A. Firewall can have 12 security zones at most. B. The firewall can create two security zones of the same priority C. When data flows between different security zones, the device security check is triggered and the corresponding security policy is implemented. D. The firewall has four security zones by default, and the four security zone priorities do not support modification.

Discussion 0

Correct Answer: C,D Vote an answer

Question 14

Which of the following are the necessary configurations of IPSec VPN? (Multiple Choice)

A. Configure IKE SA related parameters B. Configuring IKE neighbors C. Configuring IPSec SA related parameters D. Configure the stream of interest

Discussion 0

Correct Answer: A,B,C,D Vote an answer

Question 15

Regarding the HRP master and backup configuration consistency check content, which of the following is not included?

A. Next hop and outbound interface of static route B. Authentication Policy C. Is the heartbeat interface configured with the same serial number? D. NAT policy

Discussion 0

Correct Answer: A Vote an answer

Huawei HCIA-Security V3.0 - H12-711 Exam Practice Test