Pass Your Huawei Exam with H12-711_V3.0 Exam Dumps (Updated 396 Questions)
H12-711_V3.0 Exam Dumps - Huawei Practice Test Questions
NEW QUESTION 192
Regarding the security policy configuration command, which of the following is correct?
#
security-policy
rule name rule1
source-zone trust
destination-zone untrust
source-address 10.1.0.0 0.0.255.255
service icmp
action deny
#
- A. Prohibit ICMP packets from all hosts that access the untrust zone from the trust zone and the destination address is the 10.1.0.0/16 network segment
- B. Prohibit ICMP packets from the trust zone to the untrust zone and the destination address is 10.1.10.10 host
- C. Prohibit all host ICMP packets from the trust zone to the untrust zone and the source address is 10.2.10.10
- D. Prohibit all host ICMP packets from the trust zone to the untrust zone and the source address is 10.1.0.0/16 network segment
Answer: D
NEW QUESTION 193
Gratuitous ARP can be used to detect if _____address conflicts, and it can also refresh the MAC address table of the switch.
- A. IP
Answer: A
NEW QUESTION 194
Some applications such as Oracle Database Applications, has no data streaming for a long time, so that the firewall session connection is interrupted, resulting in business interruption, which of the following is the optimal solution?
- A. Configure a long connection for one business
- B. Optimize safety strategy
- C. Open the ASPF function
- D. Open Split Cache
Answer: A
NEW QUESTION 195
The preservation of electronic evidence is directly related to the legal effect of evidence. The authenticity and reliability of the preservation in accordance with legal procedures can be guaranteed. Which of the following is not an evidence preservation technology?
- A. Digital certificate technology
- B. Encryption technology
- C. Digital signature technology
- D. Message mark tracking technology
Answer: D
NEW QUESTION 196
Regarding L2TP VPN, which of the following is wrong?
- A. Data will not be encrypted
- B. Applicable for employees on business trips to dial-up access to the intranet
- C. Can be used in conjunction with IPsec VPN
- D. Belongs to the three-tier VPN technology
Answer: D
NEW QUESTION 197
Under normal circumstances, the email protocols we often talk about include _____, POP3, SMTP
- A. IMAP
Answer: A
NEW QUESTION 198
Which of the following is a remote authentication method? (Multiple Choice)
- A. Local
- B. RADIUS
- C. LLDP
- D. HWTACACS
Answer: B,D
NEW QUESTION 199
Because the server is a kind of computer, we can use our personal computer as a server in the enterprise.
- A. True
- B. False
Answer: B
NEW QUESTION 200
On Huawei USG series devices, the administrator wants to erase the configuration file. Which of the following commands is correct?
- A. clear saved-configuration
- B. reset saved-configuration
- C. reset current-configuration
- D. reset running-configuration
Answer: B
NEW QUESTION 201
In information security protection, commonly used security products include firewalls, Anti-DDos equipment, and IPS/IDS equipment
- A. True
- B. False
Answer: A
NEW QUESTION 202
HTTP packets are carried by UDP, and the HTTPS protocol is based on the TCP three-way handshake, so HTTPS is more secure, and HTTPS is more recommended.
- A. True
- B. False
Answer: B
NEW QUESTION 203
For the description of buffer overflow attacks, which of the following options are correct? (Multiple choice)
- A. Buffer overflow attacks have nothing to do with the vulnerabilities and architecture of the operating system.
- B. Buffer overflow attack is one of the common methods in the behavior of attacking software systems
- C. Buffer overflow attacks exploit the flaws of the software system's memory operations to run attack codes with high operating privileges.
- D. Buffer overflow attacks are application layer attacks.
Answer: B,C,D
NEW QUESTION 204
After an engineer configures the NAT-Server, in order to check the Server-map generated after the configuration, he needs to use the ________ command to query the Server-map.
- A. display firewall server-map
Answer: A
NEW QUESTION 205
The single sign-on function of Internet users, the user directly authenticates to the AD server, the device does not interfere with the user authentication process, the AD monitoring service needs to be deployed in the USG device to monitor the authentication information of the AD server.
- A. True
- B. False
Answer: A
NEW QUESTION 206
Which of the following options is not a passive means of obtaining information?
- A. Collect logs
- B. Port mirroring
- C. Port scan
- D. Capture
Answer: D
NEW QUESTION 207
Which of the following is not a file format for saving certificates supported by USG6000 series devices?
- A. PKCS#12
- B. PKCS#
- C. DER
- D. PEM
Answer: B
NEW QUESTION 208
Regarding the NAT configuration statement, which of the following is wrong?
- A. Configure source NAT in transparent mode, the firewall does not support easy-ip mode
- B. The IP address in the address pool can overlap with the public IP address of the NAT server
- C. When there are VoIP services in the network, NAT ALG is not required to be configured
- D. The firewall does not support NAPT conversion of ESP and AH packets
Answer: B
NEW QUESTION 209
Regarding the relationship and function of VRRP/VGMP/HRP, which of the following statements is correct? (Multiple choice)
- A. HRP is responsible for data backup during the dual-system hot backup operation
- B. VRRP is responsible for sending gratuitous ARP to direct the traffic to the new master device when the master device is switched.
- C. A VGMP group in the Active state may contain a VRRP group in the Standby state
- D. VGMP is responsible for monitoring equipment failures and controlling the fast switching of equipment
Answer: A,B,D
NEW QUESTION 210
In the configuration of L2TP, for the command Tunnel Name, which of the following statements are correct? (Multiple choice)
- A. Tunnel Nnames on both ends must be consistent
- B. Used to specify the tunnel name of the opposite end
- C. Used to specify the local tunnel name
- D. If Tunnel Name is not configured, the tunnel name is the local system name
Answer: C,D
NEW QUESTION 211
......
New Real H12-711_V3.0 Exam Dumps Questions: https://drive.google.com/open?id=1cGasgOVhderf2K0ogcu1PG1BgSjuUSd7
Pass Your H12-711_V3.0 Exam Easily with Accurate PDF Questions: https://www.actual4dumps.com/H12-711_V3.0-study-material.html