Pass Huawei H12-721 With Actual4Dumps Exam Dumps - Updated on Aug-2022
Fully Updated H12-721 Dumps - 100% Same Q&A In Your Real Exam
Huawei H12-721 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION 26
The default interval for sending VGMP hello packets is 1 second. That is, when the hello packet sent by the peer is not received within the range of three hello packets, the peer is considered to be faulty. Master status.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 27
The server health check mechanism is enabled on the USG firewall of an enterprise to detect the running status of the back-end real server (the three servers are Server A, Server B, and Server C). When the USG fails to receive the response from Server B multiple times. When the message is received, Server B will be disabled and the traffic will be distributed to other servers according to the configured policy.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 28
An administrator views the status information and IPsec Debug information as follows:
What is the most likely reason for failure?
- A. The end ike remote name and peer ike name does not match
- B. The end ipsec proposal and peer ipsec proposal does not match
- C. The end ike ike peer strategies and policies do not match
- D. The end of the Security acl or does not match the peer Security acl
Answer: D
NEW QUESTION 29
After a new virtual system is created on the firewall, the virtual system does not have any security zone. The administrator needs to plan the configuration by self.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 30
A user wants to limit the maximum bandwidth of the 192.168.1.0/24 network segment to 500 M, and limit all IP addresses in the network segment to maintain 1 M bandwidth. Which of the following configurations can fulfill this requirement? (Multiple choices)
- A. Configure per-IP traffic limiting to limit the guaranteed bandwidth of all IP addresses on the 192.168.1.0/24 network segment to 1 M.
- B. Configure the per-IP traffic limit. Set the maximum bandwidth of the host on the 5219.168.1.0/ network segment to 500 M.
- C. Configure the overall traffic limit to limit the maximum bandwidth of the 192.168.1.0/24 network segment to 500 M.
- D. Configure overall traffic limiting to limit the maximum bandwidth of the 192.168.1.0/24 network segment to 500 M.
Answer: A,C
NEW QUESTION 31
Three FTP servers are configured with load balancing on a USG firewall. The address and weights of the three real servers are 10.1.1.3/24 (weight 16), 10.1.1.4/24 (weight 32),
1 0.1.1.5 / 24 (weight 16), while the virtual server address is 202.152.26.123/24. A host address with the IP address 202.152.26.3/24 initiates access to the FTP server.
On the firewall running the display firewall session table command detection configuration, which of the following situations illustrate the successful implementation of load balancing?
- A. <USG> display firewall session table
Current total sessions: 3
ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.3:21
ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.4:21
ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.5:21 - B. <USG> display firewall session table
Current total sessions: 1
ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 - C. <USG> display firewall session table
Current total sessions: 1
ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.4:21 - D. <USG> display firewall session table
Current total sessions: 3
ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 [10.1.1.3:21] ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 [10.1.1.4:21] ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 [10.1.1.5:21]
Answer: D
NEW QUESTION 32
USG device can be factory reset by holding down the Reset button for 1-3 seconds to recover the console password.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 33
Under standby scene.USG hot standby, the service interface to work in three, down the line connecting the router through an administrator to view, USG_A state has been switched to HRP_M [USG_A], USG_B state has also HRP_M [USG_B] most What are the possible reasons? (choose two answers)
- A. no Hrp enable
- B. No configuration session fast backup
- C. heartbeat connectivity problems
- D. HRP using the wrong channel interface
Answer: C,D
NEW QUESTION 34
In the firewall DDoS attack defense technology, the data packet of the session table is not defended. If the data packet of the session has been established, it is directly released.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 35
When traffic is finally sent from the outgoing interface, it is limited by the bandwidth of the outgoing interface. If the traffic is greater than the outbound interface bandwidth, which of the following will be used to do queue scheduling for traffic to ensure that high-priority packets are sent preferentially?
- A. Bandwidth policy matching order
- B. Remark DSCP priority
- C. QoS
- D. Forwarding priority
Answer: D
NEW QUESTION 36
When using Radius server to authenticate users, (topology diagram shown below) we not only need to ensure that the user name and password for the account exists on the Radius server, a firewall must be configured on a user name and password.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 37
Which of the following statements about VRRP and VGMP packets are correct? (Choose 2 answers)
- A. VGMP groups use VGMP Hello packets for mutual communication.
- B. VGMP groups use VRRP packets for mutual communication.
- C. VGMP groups use VGMP packets to communicate with VRRP groups.
- D. VGMP groups use VGMP Hello packets to communicate with VRRP groups.
Answer: A,C
NEW QUESTION 38
HWTACACS encrypts only part of the password, but with RADIUS the entire packet is encrypted.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 39
In the IKE v1 negotiation, which of the following statements is wrong about the difference between the aggressive mode and the main mode?
- A. The main mode negotiation message has 6 and the aggressive mode has 3.
- B. The main mode does not support NAT traversal in the pre-shared key mode, but aggressive mode support.
- C. In the NAT traversal scenario, the peer ID cannot use an IP address.
- D. The main mode encrypts the exchange information of identity information, while the aggressive mode does not encrypt the identity information.
Answer: C
NEW QUESTION 40
An administrator using the following command to view the state of device components
Slot3 board is status abnormal, what are the possible causes? (Choose three answers)
- A. The backplane or damaged pins on the motherboard, such as incorrect installation lead pin board tilt.
- B. The device does not support this interface cards.
- C. The ADSL phone line is faulty.
- D. The Interface Card is damaged.
Answer: A,B,D
NEW QUESTION 41
112. The ESP only verifies the IP payload and can perform NAT traversal, but the ESP encrypts the Layer 4 port information and causes the PAT function to be unusable. This problem can be solved by using the IPSec transparent NAT function, which encapsulates the ESP packet in the UDP header and comes with the necessary port information to make the PAT work normally.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 42
USG dual-machine hot standby must meet certain conditions and can be used below. What are the following statements correct?
- A. major and backup equipment must have the same product model
- B. The interface IP of the active and standby devices must be the same.
- C. The primary device must be configured, and the standby device does not require any configuration.
- D. The software version of the active and standby devices must be the same.
Answer: A,D
NEW QUESTION 43
When making hot standby switch, USG Series Firewall service port will send gratuitous ARP scene there. Which deployment mode is used? (Choose two answers)
- A. Routing Switch Mode +
- B. exchange mode + router
- C. exchange mode + switch
- D. routing mode + router
Answer: A,D
NEW QUESTION 44
When using the Radius server to authenticate users, you need to configure the corresponding username and password on both the Radius server and the firewall.
- A. True
- B. False
Answer: B
NEW QUESTION 45
A network is shown below.
A dial customer cannot establish a connection via a VPN client PC and USG (LNS) l2tp vpn. What are valid reasons for this failure? (Choose three answers)
- A. PPP authentication fails, PPP authentication mode set on the client PC and LNS inconsistent.
- B. Client PC can not obtain an IP address assigned to it from the LNS.
- C. L2TP tunnel authentication failed.
- D. LNS tunnel tunnel name change is inconsistent with the client name.
Answer: A,B,C
NEW QUESTION 46
......
Latest H12-721 Exam Dumps - Valid and Updated Dumps: https://www.actual4dumps.com/H12-721-study-material.html