Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which of the following statement is correct about VRRP packet?

A. The destination address of VRRP packet is 224.0.0.18 B. VRRP packets are unicast packets C. VRRP uses UDP packets D. VRRP uses TCP packets

Discussion 0

Correct Answer: A Vote an answer

Question 2

In the networking environment of dual-system hot backup and IP-Link linkage (as shown in the following figure), in the configuration of the active firewall, which of the following is the configuration for the linkage between IP-Link and hot standby?

A. IP-Link check enable B. hrp track IP-Link 1 C. hrp track IP-Link 1 enable D. hrp mirror IP-Link 1

Discussion 0

Correct Answer: B Vote an answer

Question 3

About the configuration command in the smart routing, which statement of the following is correct? (Multiple Choice)
#
multi-interface
mode priority-of-link-quality
priority-of-link-quality parameter delay jitter loss
priority-of-link-quality protocol tcp-simple
add interface GigabitEthernet1/0/1
add interface GigabitEthernet1/0/2

A. Parameter of link quality detection has the delay, jitter, and packet loss rate B. Use the TCP protocol to detect C. Selected 3 links for sharing D. Use the way of bandwidth-based load sharing

Discussion 0

Correct Answer: A,B Vote an answer

Question 4

There are three physical interfaces in the Link-Group group. When any of these interfaces fails, which of the following statements is correct? (Multiple Choice)

A. If any interface in the group fails, the status of other interfaces in the group does not change. B. After all the interfaces in the group are restored to normal, the interface status in the entire group is set to Up again. C. After some interfaces in the group are restored to normal, the interface status in the entire group is set to Up again. D. If any interface in the group fails, the system sets the status of other interfaces in the group to Down.

Discussion 0

Correct Answer: B,D Vote an answer

Question 5

Which of the following VPN encapsulation protocols that do not provide encryption? (Multiple choices)

A. L2TP B. ESP C. GRE D. AH

Discussion 0

Correct Answer: A,C,D Vote an answer

Question 6

When configuring the IPSec VPN certificate authentication mode, if you select "RSA signature" authentication, need to configure which of the following steps?

A. Create local and public private key pair B. Upload local certificate C. Upload CA certificate D. Upload the peer device certificate

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 7

On the main panel of the Huawei USG6300 firewall, there is a fixed management interface GigabitEthernet 0/0/0 for device management.

A. True B. False

Discussion 0

Correct Answer: A Vote an answer

Question 8

Which of the following options is not required when configuring server load balancing?

A. Virtual server address B. Load balancing algorithm C. Service health check D. Real server address

Discussion 0

Correct Answer: C Vote an answer

Question 9

If you use SSL VPN to provide file sharing, all files in the shared directory are visible to end users.
Which of the following descriptions is correct for the configuration of the file share path?

A. The format of the NFS type resource is: //IP address (host name)/dir1/dir2/shared folder. The NFS type resource path can only have one-level shared folder directory. B. The format of the SMB type resource is: //IP address (host name)/shared folder. The SMB type resource path can be a multi-level shared folder directory. C. Select SMB for file sharing resources under Linux. D. Select SMB for file sharing resources under Windows.

Discussion 0

Correct Answer: D Vote an answer

Question 10

Which of the following is the role of Message5 and Message6 in the primary mode negotiation of IKE v1?

A. Negotiating IPSec SA B. Negotiation proposal set C. Run the DH algorithm D. Doing mutual authentication

Discussion 0

Correct Answer: D Vote an answer

Question 11

Which of the following device can detect unknown malicious files transmitted on the network in a virtual environment?

A. WAF B. FireHunter C. eSight D. LogCenter

Discussion 0

Correct Answer: B Vote an answer

Question 12

SSL VPN adopts the B/S architecture design. The remote user terminal does not need to install additional client software. Directly using a Web browser can safe and fast access to corporate intranet resources.

A. FALSE B. TRUE

Discussion 0

Correct Answer: B Vote an answer