Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721-ENU FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

A firewall device can create multiple virtual gateways. Each virtual gateway is independent and does not affect each other. Administrators can configure their own users, resources, and policies under the virtual gateway for independent management.

A. FALSE B. TRUE

Discussion 0

Correct Answer: B Vote an answer

Question 2

The server health detection mechanism is enabled on the USG firewall of an enterprise to detect the running status of three real servers (Server A, Server B, and Server C) at the back end. When the USG fails to receive any response packet from Server B.
At this point, the use of Server e is forbidden and traffic is distributed to other servers according to the configured policy.

A. True B. False

Discussion 0

Correct Answer: A Vote an answer

Question 3

Each bandwidth policy that references a bandwidth channel is individually constrained by the bandwidth channel, that is, the traffic that meets the matching conditions of the bandwidth policy, and the maximum bandwidth resource is exclusive.
Which of the following options is a reference to this type of bandwidth channel?

A. Dynamic sharing B. Exclusive strategy C. Strategy Sharing D. Bandwidth reuse

Discussion 0

Correct Answer: B Vote an answer

Question 4

On the USG6000 firewall, load balancing is configured for three FTP servers. The addresses and weights of the three real servers are 10.1.1.3/24 (weight 16), 10.1.1.4/24 (weight 32), and 10.1.1.5/24 respectively. (weight 16), the virtual server address is 202.152.26.123/24. A PC with host address 202.152.26.3/24 initiates an access to the FTF server.Run the display firewall session table command on the firewall. Which of the following conditions indicates successful implementation of the load balancing function?

A. <USG> display firewall session table Current total sessions: 1 ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21 B. <USG> display firewall session table Current total sessions: 3 ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21 [10.1.1.3:21] ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21 [10.1.1.4:21] ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21 [10.1.1.5:21] C. <USG> display firewall session table Current total sessions: 1 ftp VPN: public --> public 202.152.26.3:3327 --> 10.1.1.4:21 D. <USG> display firewall session table Current total sessions: 3 ftp VPN: public --> public 202.152.26.3:3327 -->10.1.1.3:21 ftp VPN: public --> public 202.152.26.3:3327 -->10.1.1.4:21 ftp VPN: public --> public 202.152.26.3:3327 -->10.1.1.5:21

Discussion 0

Correct Answer: B Vote an answer

Question 5

IPSec tunnel can use GRE over IPSec to propagate multicast packets.

A. True B. False

Discussion 0

Correct Answer: A Vote an answer

Question 6

When the IP-Link group is configured to send detection packets, the interval is set to be larger, which reduces the CPU load on the device. However, the sensitivity of the link detection is reduced.

A. True B. False

Discussion 0

Correct Answer: A Vote an answer

Question 7

Huawei UMA products can be deployed in a logically concatenated manner. Which of the following statements is true about the logical mode of this deployment?

A. Logical Mode: Person -> Master Account -> Authorization -> Slave Account -> Target System. B. Logical Mode: Person -> Slave Account -> Authorization -> Master Account -> Target system. C. Logical Mode: Target System -> Slave Account -> Authorization -> Master Account -> Person. D. Logical Mode: Authorization -> Slave Account -> Person -> Master Account -> Target System.

Discussion 0

Correct Answer: A Vote an answer

Question 8

The hot standby networking shown as the following picture, in the figure, the gateway address of PC1 should be the interface IP address of the master device, that is, 10.100.10.2/24.

A. True B. False

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which of the following options are correct regarding the matching order of the bandwidth policy? (Multiple choices)

A. Matching according to the ID number in ascending order B. For multi-level policy, the traffic first matches the child policy and then matches parent policy. C. Matching from the top to the bottom in the order of the interface D. For multi-level policy, the traffic first matches the parent policy and then matches child policy

Discussion 0

Correct Answer: C,D Vote an answer

Question 10

Which of the following statement about IKE is the correct? (Multiple choice)

A. IPSec has two negotiation modes to establish security associations. One is manual and the other is automatic IKE negotiation (isakmp). B. The aggressive mode of IKE v1 can choose to find the corresponding authentication key and finally complete the negotiation according to the IP address or Name of the negotiation initiator. C. The NA7 traversal function deletes the UDP port number verification process during IKE negotiation and implements the discovery function of the NAT gateway device in the VPN tunnel. If the NAT gateway device is found, UDP encapsulation will be used in the subsequent IPSec data transmission. D. IKE security mechanisms include DH Diffie-Hellman exchange and key distribution, Perfect Forward Secrecy PFS, and SHA1 encryption algorithms.

Discussion 0

Correct Answer: A,B,C Vote an answer