Pass Your Huawei Exam with H12-711 Exam Dumps (Updated 290 Questions)
H12-711 Exam Dumps - Huawei Practice Test Questions
NEW QUESTION 32
When the IPSec VPN tunnel mode is deployed, the AH protocol is used for packet encapsulation. In the new IP packet header field, which of the following parameters does not require data integrity check?
- A. Destination IP address
- B. Source IP address
- C. Idetification
- D. TTL
Answer: D
NEW QUESTION 33
On Huawei USG series devices, the administrator wants to erase the configuration file. Which of thefollowing commands is correct?
- A. clear saved-configuration
- B. reset running-configuration
- C. reset saved-configuration
- D. reset current-configuration
Answer: C
NEW QUESTION 34
Data analysis technology is to find and -natch keywords or key ohrases in the acquired data stream or information flow, and analyze: he correlation of time. Which of the following is not an evidence analysis technique?
- A. Spam tracking technology
- B. Password deciphering, data decryption technology
- C. Document Digital Abstract Analysis Technology
- D. Techniques for discovering the connections between different evidences
Answer: A
NEW QUESTION 35
After the firewall uses the hrp standby config enable command to enable :he standby device configuration function allthe information that can be backed up can be directly configured on the standby device, and the configuration on the standby device can be synchronized to the active device.
- A. True
- B. False
Answer: A
NEW QUESTION 36
Which of the following belongs to the devices at the execution layer in the Huawei SDSec solution? 'Multiple Choice)
- A. AntiDDoS
- B. Fierhunter
- C. Router
- D. cis
Answer: A,B,C
NEW QUESTION 37
Terminal detection is an important part of the future development of informationsecurity. Which of the following methods belong to the category of terminal detection? (Multiple Choice)
- A. Prevent users from accessing public network search engines
- B. Monitorthe host registry modification record
- C. Monitor and remember the external device
- D. Install host antivirus software
Answer: B,D
NEW QUESTION 38
In the current network it has deployed other authentication system, device registration function by enabling a single point, reducing the user to re-enter the password.
What are correct about single sign-on statements? (Multiple choice)
- A. AD domain single sign-on login can be mirrored data stream synchronized manner to the firewall
- B. Although not require to enter a user password, but the authentication server needs to interact with the user password and devices used to ensure that certification through discussion
- C. AD domain single sign-on is only one deployment model
- D. device can identify the user through the authentication of the identity authentication system, user access, the device will not push authentication pages, to avoid further asked to enter a username / password
Answer: A,D
NEW QUESTION 39
Which of the following is the correct descriptionof the investigation and evidence collection?
- A. In the process of all investigation and evidence collection, there are law enforcement agencies involved.
- B. Document evidence is required in computer crime
- C. Evidence is not necessarily required during the investigation
- D. Evidence obtained by eavesdropping is also valid
Answer: A
NEW QUESTION 40
The VRRP advertisement packet of the Huawei USG firewall is a multicast packet. Therefore, each firewall in the backup group must be able to implement direct Layer 2 interworking
- A. True
- B. False
Answer: A
NEW QUESTION 41
The repair of anti-virus software only needs to be able to repair some system files that were accidentally deleted when killing the virus to prevent the system from crashing
- A. True
- B. False
Answer: A
NEW QUESTION 42
Which of the following statements about IPSec SA is true?
- A. IPSec SA is one-way
- B. Used to generate a secret algorithm
- C. IPSec SA is two-way
- D. used to generate anencryption key
Answer: A
NEW QUESTION 43
Which of the following is the analysis layer device inthe Huawei SDSec solution? r a.
- A. Firehunter
- B. switch
- C. cis
- D. Agile Controller
Answer: A
NEW QUESTION 44
Which of the following description are correct about the security policy action and security configuration file? (Multiple Choice)
- A. The security configuration file can be applied without being applied to the security policy allowed by the action.
- B. If the action of the security policy is "prohibited", the device will discard this traffic and will not perform content security check later.
- C. The security configuration file must be applied to the security policy that is allowed to take effect.
- D. If the security policy action is "Allow", the traffic will not match the security configuration file.
Answer: B,C
NEW QUESTION 45
In the environment of GRE configuration, which of the following statements are true? (Choose three.)
- A. If both ends enable the configuration of keyword verification, the keyword must be the same
- B. When the opposite end receives data packets, by identifying the protocol field value of IP header for GRE to determine whether send the data packet to GRE module for processing
- C. When the local device send data packets, by identifying the protocol field value of IP header for GRE to determine whether send the data packet to GRE module for processing
- D. In order to make the ends of the tunnel forward data packets normally, the devices of both ends are configured routing which through the Tunnel interface
Answer: A,B,D
NEW QUESTION 46
The Huawei Redundancy Protocol (HRP) is used to synchronize the main firewall configuration and connection status and other data on the backup firewall to synchronize . Whichof the following options is not in the scope of synchronization?
- A. Security policy
- B. IPS signature set
- C. NAT policy
- D. Blacklist
Answer: B
NEW QUESTION 47
When Layer 2 switches (not configured VLAN) receiving a data frame, of no match is found in the MAC address table, it will forward the data frame to all ports (including Layer 2 switches receiving port).
- A. False
- B. True
Answer: A
NEW QUESTION 48
Which of the following operations are necessary during theadministrator upgrade of the USG firewall software version? (Multiple Choice)
- A. Device factory reset
- B. Restart the device
- C. Specify the next time you start loading the software version.
- D. Upload the firewall version software
Answer: B,C,D
NEW QUESTION 49
The single-point login function of the online user, the user authenticates directly to the AD server, and the device does not interfere with the user authentication process. The AD monitoring service needs to be deployed on the USG device to monitor the authentication information of the AD server.
- A. False
- B. True
Answer: A
NEW QUESTION 50
As shown in the figure, a TCP connection is established between client A and server B Which of the following two "Tpacket numbers should be?
- A. a+1: a+1
- B. a+1: a
- C. a: a+1
- D. b+1: b
Answer: A
NEW QUESTION 51
The attacker by sending ICMP response request, and will request packet destination address set to suffer Internet radio address.
Which kind of attack does this behavior belong to?
- A. Smurf attack
- B. SYN flood attack
- C. IP spoofing attack
- D. ICMP redirect attack
Answer: A
NEW QUESTION 52
For the process of forwarding the first packet of the session between firewall domains,there are the following steps:
1. find the routing table
2. find inter-domain packet filtering rules
3. find the session table
4. find the blacklist
Which of the following is the correct order?
- A. 3->2->1->4
- B. 3->4->1->2
- C. 1->3->2->4
- D. 4->3->1->2
Answer: B
NEW QUESTION 53
......
New Real H12-711 Exam Dumps Questions: https://drive.google.com/open?id=1Eir7DAu1ky2a7GgH9hf1fbZNNGZ8PEpZ
Pass Your H12-711 Exam Easily with Accurate PDF Questions: https://www.realexamfree.com/H12-711-real-exam-dumps.html
