(November 2023) Huawei H12-711_V4.0-ENU Dumps V9.02 – Key to Success with Actual Questions and Answers

1. Which of the following does not belong to Layer 2 VPN?

2. When deploying dual-machine hot backup on the firewall, which of the following protocols needs to be used to achieve overall status switching of the VRRP backup group?

3. In inter-domain packet filtering, which of the following applies to the Inboud direction?

4. Which of the following statements is correct regarding IPsec SA?

5. After enabling the GRE keepalive function, by default, the device will periodically send keepalive messages to the peer every how many seconds?

6. Regarding the description of the preemption function of VGMP management, which of the following is incorrect?

7. In the USG series firewall, you can use which of the following function to provide well-known application services for non-well-known ports?

8. Regarding the anti-virus response method of the firewall gateway for the HTTP protocol, which of the following statements is incorrect?

9. Which of the following options is not a hashing algorithm?

10. Which of the following protocols cannot be encrypted by SSL VPN?

11. The intrusion prevention system is based on which of the following for attack identification?

12. Which of the following statements about VPNs is false?

13. Which of the following technologies can hide the internal network of a private network while preventing external attacks on internal servers?

14. Regarding Internet user management, which of the following is incorrect?

15. Which of the following does not include the steps of the security assessment method?

16. Regarding the description of an intrusion detection system, which of the following is incorrect?

17. Regarding security policy configuration commands, which of the following is correct?

18. As shown in the figure, in transmission mode, which of the following positions should the AH Header be inserted into?

19. In Huawei SDSec solution, which layer of equipment does the firewall belong to?

20. Check the HRP status information of the firewall as follows:

HRP S [USG_B] display hrp stateBbs.hh010.com The firewall's config state is: StandbyCurrent state of virtual routers configured as standby: GigabitEthernet1/0/0 vrid 1: standbyGigabitEthernet1/0/1Vrid 2: standby

Based on the above information, which of the following descriptions is correct:

21. Regarding the comparison between windows and linux, which of the following statements is incorrect?

22. Which of the following protocols does not belong to the protocol type that ASPF can detect?

23. Compared with traditional five-tuple information, which of the following elements is a new element of next-generation firewall?

24. Which of the following is true regarding firewall security policies?

25. Which of the following attacks is not a malformed packet attack?

26. Which of the following descriptions of the VGMP protocol is incorrect?

27. Regarding NAT configuration, which of the following is incorrect?

28. Regarding the difference between packet filtering firewalls and application proxy firewalls, which of the following descriptions is incorrect?

29. Regarding the description of vulnerability scanning, which of the following is incorrect?

30. In which of the following stages does the L2TP protocol allocate IP addresses?

31. Which of the following descriptions about the VGMP group is correct?

32. How many bits are the keys used by DES encryption technology, and how many bits are used by 3DES encryption technology.

33. Which of the following does not include the trigger authentication method for firewall access user authentication?

34. Regarding Windows logs, which of the following descriptions is incorrect?

35. Which of the following is not a stand-alone anti-virus technology?

36. There are various security threats during the use of the server.

Which of the following options is not a server security threat?

37. Which of the following descriptions of common hashing algorithms is incorrect?

38. In IPsec VPN transmission mode, which part of the data packet is encrypted?

39. Which of the following is an "information destruction incident" in the classification of network security incidents?

40. Which of the following options is not an identifier of IPsec SA?

41. Regarding NAT technology, which of the following descriptions is correct?

42. Which of the following is the difference between Network Address Port Translation (NAPT) and Network Address Only Translation (No-PAT)?

43. Which of the following is not a symmetric encryption algorithm?

44. Which of the following descriptions of HWTACACS protocol features is incorrect?

45. When deploying IPsec VPN tunnel mode, use the AH protocol for packet encapsulation.

In the new IP packet header field, which of the following parameters does not require data integrity check?

46. Data analysis technology is to find and match keywords or key phrases in the acquired data stream or information stream, and analyze the correlation of time.

Which of the following is not an evidence analysis technique?

47. Regarding SSL VPN technology, which of the following statements is incorrect?

48. Usually we divide servers into two categories: general servers and functional servers. Which of the following options meets this classification standard?

49. When IPsec VPN uses transport mode to encapsulate packets, which of the following is not within the certification scope of the ESP security protocol?

50. Which of the following descriptions of digital fingerprints in digital signatures is incorrect?

51. Which of the following is the username/password for the first login of the USG series firewall?

52. Which of the following is not an asymmetric encryption algorithm?

53. What is the port number of the SMTP protocol?

54. Which of the following options does not belong to the log type of the Windows operating system?

55. Which of the following is not part of the digital certificate?

56. Regarding NAT technology, which of the following descriptions is incorrect?

57. Which of the following configurations can implement the NAT ALG function?

58. Bank A is a rural commercial bank that mainly provides financial services to users such as residents and rural industrial and commercial households within the jurisdiction of this province.

Currently, Bank A’s network needs to undergo a Class A Guarantee Assessment. Which of the following Class A Guarantee ratings is applicable to Bank A?

59. In the TCP/IP protocol stack, which of the following protocols works at the application layer?

60. Which of the following information is not included in the backup content of status information backup in dual-system hot backup?

61. Which of the following attacks is not a special message attack?

62. The attacker sends a SYN message with the same source address and destination address, or the source address is a loopback address, to the target host (the source port and destination port are the same), causing the attacker to send a SYN-ACK message to its own address.

What kind of attack does this behavior belong to?

63. Which of the following is not the default security zone of the firewall?

64. As shown in the figure, there are two Server Map entries generated after configuring NAT Server. Regarding the information presented in the figure, which of the following descriptions is incorrect?

*Type: Nat Server. ANY→1.1.1.1[192.168.1.1] Type: Nat Server Reverse. 192.168.1.1[1.1.1.1] →ANY

65. Which of the following options belongs to Layer 2 VPN technology?

66. The administrator connects to the firewall through the G1/0/0 interface (the interface has been added to the Trust zone). If the administrator is allowed to log in to the firewall through G1/0/0 for configuration management, how should the administrator configure the traffic allowed in the security policy? direction?

67. Which of the following options is not a certificate saving file format supported by USG6000 series devices?

68. As shown in the figure, when using the Client - Initiated VPN method to establish an L2TP VPN, which of the following is the destination of the PPP packet?

69. When the company network administrator configures dual-machine hot backup, configure the status of VRRP backup group 1 as Active, and configure the virtual IP address as 10.1.1.1/24, then the command that needs to be typed in the blank space is?

70. Which of the following types of firewalls has the highest processing efficiency when processing non-first packet data flows?

71. Which of the following measures can prevent IP spoofing attacks?

72. What is the agreement number of the AH agreement?

73. Intrusion prevention equipment can effectively defend against which of the following attacks?

74. Some applications, such as Oracle database applications, have no data flow transmission for a long time, causing the firewall session connection to be interrupted, resulting in business interruption. Which of the following is the optimal solution?

75. Vulnerabilities, also called vulnerabilities, refer to defects and deficiencies in computer systems in specific matters of hardware, software, protocols, or system security policies.

Which of the following descriptions of vulnerability characteristics is incorrect?

76. Electronic evidence preservation is directly related to the legal validity of evidence. Only preservation that complies with legal procedures can ensure its authenticity and reliability. Which of the following is not an evidence preservation technology?

77. If there is an incident of foreign criminals using the Internet to steal our country’s national secrets, what kind of early warning will the country activate?

78. When configuring a GRE Tunnel interface, the Destination address generally refers to which of the following parameters?

79. When a network security incident occurs, investigate intrusions, viruses or Trojans, and patch and strengthen the host.

Which stage of network security emergency response does the above action belong to?

80. Regarding IKE SA, which of the following descriptions is incorrect?