Huawei H12-711 Dumps - The Sure Way To Pass Exam [Q117-Q138]

Rate this post

Huawei H12-711 Dumps – The Sure Way To Pass Exam

H12-711 Exam Questions (Updated 2023) 100% Real Question Answers

NO.117 Which of the following are part of the SSL VPN function? (Multiplechoice)

User authentication

Port scanning

File sharing

WEB rewriting

NO.118 In L2TP configuration for command Tunnel Name, which statements are correct? (Multiple choice)

Used to specify the name of the end of the tunnel

Usedto specify the name of the peer tunnel

Must be consistent with Tunnel Name peer configuration

If do not configure the Tunnel Name, the tunnel name is the name of the local system

NO.119 Except built-in Portal authentication, firewall also supports custom Portal authentication, when using a custom Portalauthentication, no need to deploy a separate external Portal sever.

True

False

NO.120 Which of the following is true about the description of the TCP/IP protocol stack packet decapsulation? (Multiple choice)

The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as IP.

After the transport layer (TCP) receives the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol, such as UDP, is known according to the parsing information.

After receiving the data packet, the network layer is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such as HTTP.

After the application layer receives the data packet, the application layer information is stripped after parsing, and the user data displayed at the end is exactly the same as the data sent by the sender host.

NO.121 HRP (Huawei Redundancy Protocol) Protocol to back up the connection state of data include: (Multiple Choice)

TCP/UDP sessions table

Server Map table

the dynamic blacklist

the routing table

NO.122 Which of the following description is wrong about the intrusion detection system?

The intrusion detection system can dynamically collect a large amount of key information and materials through the network and computer, and can timely analyze and judge the current state of the entire system environment.

The intrusion detection system can perform blocking operation if it finds that there is a violation of the security policy or the system has traces of being attacked.

Intrusion detection system includes all hardware and software systems for intrusion detection

The flood detection system can be linked with firewalls and switches to become a powerful “helper” of the firewall, which is better and more precise to control traffic access between domains.

NO.123 Regarding the description of the packet in the iptables transmission process, which of the following option is wrong?

When a packet enters the network card, it first matches the PREROUTING chain.

If the destination address of the packet is local, the packet will be sent to the INPUT chain.

If the destination address of the packet is not local, the system sends the packet to the OUTPUT chain.

If the destination address of the packet is not local, the system sends the packet to the FORWARD chain.

NO.124 Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc. These fields are “and ” , that is, only information in the message and all fields If you match, you can hit this strategy

True

False

NO.125 Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc. These fields are “and”, that is, only information in the packet match all fields, and then hit this policy.

True

False

NO.126 Which of the following is an action to be taken during the summary phase of the cybersecurity emergency response? (Multiple Choice)

Establish a defense system and specify control measures

Evaluate the implementation of the contingency plan and propose a follow-up improvement plan

Determine the effectiveness of the isolation measures

Evaluation of members of the emergency response organization

NO.127 Use iptables to write a rule that does not allow the network segment of 172.16.0.0/16 to access the device. Which of the following rules is correct?

iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT

iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

NO.128 Which ofthe following are core elements ofthe IATF (InformationAssurance Technology Framework) model?
(Multiple choice)

Environment

person

Technology

Operation

NO.129 In the IPSec VPN transmission mode, which part ofthe data packe: is encrypted?

Network layer and upper layer data packet

Original IP packet header

New IP packet header

Transport layer and upper layer data packet

NO.130 Regarding the relationship and role of VRRP/VGMP/HRP, which of the following statements are correct? (Multiple choice)

VRRP is responsible for sending free ARP to direct traffic to the new primary device during active/standby switchover.

VGMP is responsible for monitoring equipment failures and controlling fast switching of equipment.

HRP is responsible for data backup during hot standby operation.

VGMP group in the active state may include the VRRP group in the standby state.

NO.131 Use ip tables to write a rule that does not allow the network segment of 172.16.0.0/16 to access the devise.
Which of the following rules is correct?

Iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP

Iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP

Iptables -t filter -P INPUT -s 172.1G.0.0/1G -p all -j ACCEPT

iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

NO.132 The tunnel addresses at both ends ofthe GRE tunnel can be configured as addresses of different network segments.

True

False

NO.133 Which of the following guarantees “should detect and protect spam at critical network nodes and maintain upgrades and updates of the spam protection mechanism” in security 2.0?

Malicious code prevention

Communication transmission

Centralized control

Border protection

NO.134 Which of the following is the analysis layer device in the Huawei SDSec solution?

CIS

Agile Controller

switch

Firehunter

NO.135 In the information security system construction management cycle, which of the following actions is required to be implemented in the “check’ link?

Safety management system design

Implementation of the safety management system

Risk assessment

Safety managementsystem operation monitoring

NO.136 VPN tunnel technology refers to through encryption algorithm (such as DES, 3DE5) to achieve data transmitted in the network will not be intercepted.

True

False

NO.137 Which of the following is an action to be taken during the eradication phase of the cyber security emergency response? (Multiple Choice)

Find sick Trojans, illegal authorization, systemvulnerabilities, and deal with it in time

Revise the security policy based on the security incident that occurred, enable security auditing

Block the behavior ofthe attack, reduce the scope of influence

Confirm the damage caused by security incidents and report security incidents

NO.138 Which of the following addresses can be used for web management address of USG product? (Choose three.)

Interface Address

Sub-interface address

Slave IP address of the interface

AUX interface address

Loading …

Pass Huawei H12-711 Exam Quickly With PrepAwayPDF: https://www.prepawaypdf.com/Huawei/H12-711-practice-exam-dumps.html

Mar-2022 Realistic H13-611_V4.5-ENU Exam Dumps with Accurate & Updated Questions [Q48-Q62]
H13-811_V3.0 Exam Dumps Pass with Updated Mar-2022 Tests Dumps [Q17-Q33]
[Q179-Q200] Use Real H12-931-ENU – 100% Cover Real Exam Questions [May-2022]
Updated Huawei H13-611_V4.5-ENU Dumps – Check Free H13-611_V4.5-ENU Exam Dumps (2023) [Q138-Q153]

Huawei H12-711 Dumps – The Sure Way To Pass Exam [Q117-Q138]

admin

Leave a Reply Cancel reply

Related posts:

admin

You might also like

Leave a Reply Cancel reply