Huawei HCIA-Security V3.0 - H12-711 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

The configuration commands for the NAT address pool are as follows:
nat address-group 1
section 0 202.202.168.10 202.202.168.20
mode no-pat
Of which, the meaning of no-pat parameters is:

A. Do not convert the source port B. Do not convert the destination port C. Do not do address translation D. Perform port multiplexing

Discussion 0

Correct Answer: A Vote an answer

Question 2

Which of the following is correct about firewall IPSec policy?

A. By default, IPSec policy can control multicast. B. By default, IPSec policy can control unicast packets and broadcast packets. C. By default, IPSec policy only controls unicast packets. D. By default, IPSec policy can control unicast packets, broadcast packets, and multicast packets 。

Discussion 0

Correct Answer: C Vote an answer

Question 3

According to the protection object, the firewall is divided. Windows Firewall belongs to ________.

A. Network firewall B. Stand-alone firewall C. Software firewall D. Hardware firewall

Discussion 0

Correct Answer: B Vote an answer

Question 4

Which of the following is true about the description of the firewall?

A. In order to avoid single point of failure, the firewall only supports side-by-side deployment. B. Adding a firewall to the network will inevitably change the topology of the network. C. Depending on the usage scenario, the firewall can be deployed in transparent mode or deployed in a three-bedroom mode. D. The firewall cannot transparently access the network.

Discussion 0

Correct Answer: C Vote an answer

Question 5

For the process of forwarding the first packet of the session between firewall domains, there are the following steps:
1. find the routing table
2. find inter-domain packet filtering rules
3. find the session table
4. find the blacklist
Which of the following is the correct order?

A. 3->2->1->4 B. 3->4->1->2 C. 4->3->1->2 D. 1->3->2->4

Discussion 0

Correct Answer: B Vote an answer

Question 6

Which of the following is not included in the steps of the safety assessment method?

A. Penetration test B. Data analysis C. Manual audit D. Questionnaire survey

Discussion 0

Correct Answer: B Vote an answer

Question 7

Which of the following types of attacks does the DDos attack belong to?

A. Traffic attack B. Special packet attack C. Malformed packet attack D. snooping scanning attack

Discussion 0

Correct Answer: A Vote an answer

Question 8

Which of the following is not a hash algorithm?

A. SHA1 B. SM1 C. SHA2 D. MD5

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which of the following description of firewall hot standby is correct? (Multiple choice)

A. When multiple areas of the firewall need to provide dual-system backup, you need to configure multiple VRRP backup groups on the firewall. B. VGMP is to ensure the consistency of all VRRP backup group switching. C. The status of all VRRP backup groups in the same VGMP management group on the same firewall is the same. D. The hot standby of the firewall needs to synchronize the backup between the master device and the slave device by using the session table, MAC table, and routing table.

Discussion 0

Correct Answer: A,B,C Vote an answer

Question 10

Except built-in Portal authentication, firewall also supports custom Portal authentication, when using a custom Portal authentication, no need to deploy a separate external Portal server.

A. True B. False

Discussion 0

Correct Answer: B Vote an answer