New H12-711_V3.0 Test Materials & Valid H12-711_V3.0 Test Engine
H12-711_V3.0 Updated Exam Dumps [2021] Practice Valid Exam Dumps Question
NEW QUESTION 204
When the firewall upgrades the signature database and virus database online through the security service center, the firewall must first be able to connect to the Internet, and secondly, the correct DNS address must be configured.
- A. True
- B. False
Answer: A
NEW QUESTION 205
Clients in the Trust zone of the firewall can log in to the FTP server in the Untrust zone, but cannot download files. Which of the following methods can solve the problem? (Multiple Choice)
- A. When FTP working mode is Passive mode, modify the security policy action from Trust to Untrust zone to allow
- B. Release 21 port number between Trust and Untrust
- C. When the FTP working mode is port mode, modify the security policy action from Trust to Untrust zone to allow
- D. Enable detect ftp
Answer: A,D
NEW QUESTION 206
As shown in the figure, when using Client-Initiated VPN to establish L2TP VPN, which of the following is the end point of PPP packets?
- A. Access users
- B. Server
- C. LNS
- D. LAC
Answer: C
NEW QUESTION 207
The digital certificate uses a third-party organization to impartiality to the public key, thereby ensuring the non-repudiation of data transmission. Therefore, only the certificate of the communicating party is required to confirm the correctness of the public key.
- A. True
- B. False
Answer: B
NEW QUESTION 208
Regarding the NAT policy processing, which of the following are correct? (Multiple choice)
- A. Server-map is processed after status detection
- B. The source NAT policy query is processed after the session is created
- C. The source NAT policy is processed after the security policy is matched
- D. Server-map is processed before the security policy is matched
Answer: A,C,D
NEW QUESTION 209
Which of the following is not used by the Detection link in the P2DR model?
- A. Real-time monitoring
- B. Alarm
- C. Detection
- D. Close service
Answer: D
NEW QUESTION 210
As shown in the figure, a TCP connection is established between client A and server B.
Which of the following should be the serial number of the "?" message in the two places in the figure?
- A. a:a+1
- B. a+1:a+1
- C. a+1:a
- D. b+1:b
Answer: B
NEW QUESTION 211
Which of the following options are included in the encryption technology to protect data during data transmission? (Multiple choice)
- A. Confidentiality
- B. Source verification
- C. Controllability
- D. Integrity
Answer: A,B,D
NEW QUESTION 212
When the FW is deployed at the network egress location, if a failure occurs, it will affect the main network business. In order to improve the reliability of the network, two FWs need to be deployed and formed ______
- A. Hot standby
Answer: A
NEW QUESTION 213
Match the following survey methods and descriptions one by one
Answer:
Explanation:
NEW QUESTION 214
Huawei's Agile-Controller product is a _____ device in the HiSec solution.
- A. Control
Answer: A
NEW QUESTION 215
Regarding the description of the preemption function managed by VGMP, which of the following is wrong?
- A. By default, the preemption delay time of the VGMP management group is 40s
- B. After the VRRP backup group is added to the VGMP management group, the original preemption function on the VRRP backup group becomes invalid
- C. By default, the preemption function of the VGMP management group is enabled
- D. Preemption means that when the original failed master device recovers from a failure, its priority will be restored, and you can regain its own status as the master
Answer: A
NEW QUESTION 216
After the company ' s network administrator has configured the dual-system hot backup, he wants to check the status of the current VGMP group, so he typed in the command to display the following information
HRP_M<FW_A>__
Role: active, peer: active
Running priority: 45000, peer: 45000
Backup channel usage: 30X
Stable time: 1 days, 13 hours, 35 minutes
Last state change information: 2020-03-2216:01:56 HRP core state changed, old_state = normal ( active ) , new_state=normal ( active ) .1ocalpriority F 4
peer_priority = 45000.
Configuration:
hello interval: 1000ms
preempt: 60s
mirror configuration: off
mirror session: on
track trunk member: on
auto-sync configuration: on
auto-sync connection-status: on
adjust ospf cost: on
adjust ospfv3-cost: on
adjust bgp-cost: on
nat resource: off
Detail information:
Gigabit Ethernet 0/0/1: up
Gigabit Ethernet 0/0/3: up
ospf-cost: +0
Then the command he typed in the blank is________.
- A. display hrp state verbose
Answer: A
NEW QUESTION 217
Please match the following information security risks with information security incidents one by one.
Answer:
Explanation:
NEW QUESTION 218
If there is a practical change in the company structure, it is necessary to re-test whether the business continuity plan is feasible.
- A. True
- B. False
Answer: A
NEW QUESTION 219
Which of the following information is not the backup content included in the status information backup in dual-system hot backup?
- A. Routing table
- B. NAPT related entries
- C. IPSEC tunnel
- D. IPv4 Session Table
Answer: A
NEW QUESTION 220
Which of the following is the encryption technology used in the digital envelope?
- A. Symmetric encryption algorithm
- B. Hashing algorithm
- C. Asymmetric encryption algorithm
- D. Stream encryption algorithm
Answer: C
NEW QUESTION 221
In the Linux system, if the user wants to enter the tmp folder in the root directory, the command that needs to be entered is ________/tmp. [Fill in the blanks]
- A. cd
Answer: A
NEW QUESTION 222
Use the Ping command on the firewall to test the reachability of the server (the security zone where the server is located is the DMZ). If the security policy is configured to allow the test traffic, the source security zone is ______.
- A. local
Answer: A
NEW QUESTION 223
ASPF (Application Specific Packet Filter) is a packet filtering technology based on the application layer and implements a special security mechanism through the server-map table.
Regarding ASPF and server-map tables, which of the following are correct? (Multiple choice)
- A. The five-tuple server-map table entry implements a function similar to the session table
- B. ASPF monitors the messages in the communication process
- C. ASPF dynamically allows multi-channel protocol data to pass through the server-map table
- D. ASPF can dynamically create server-map tables
Answer: B,C,D
NEW QUESTION 224
Regarding the business continuity plan, which of the following statements is correct? (Multiple choice)
- A. The business continuity plan does not require the participation of the company's senior management during the project scope stage
- B. Not all safety incidents must be reported to the company's senior management
- C. The business continuity plan does not require the participation of the company's senior management before it is formally documented
- D. All possible accidents are thought not to be predicted, so BCP needs to be flexible
Answer: B,C,D
NEW QUESTION 225
Which of the following attacks can DHCP Snooping prevent? (Multiple choice)
- A. IP spoofing attack
- B. Fake DHCP lease renewal packet attack using option82 field
- C. DHCP Server counterfeit attack
- D. middleman and IP/MAC spoofing attacks
Answer: B,C,D
NEW QUESTION 226
In which of the following scenarios does the firewall generate a server map table? (Multiple choice)
- A. Security policies are deployed on the firewall and traffic is released
- B. ASPF is deployed on the firewall and the traffic of the multi-channel protocol is forwarded
- C. NAT Server is deployed on the firewall
- D. If the firewall generates a session table, it will generate a Server-map table
Answer: B,C
NEW QUESTION 227
What is the warning level for major cybersecurity incidents that occur?
- A. Orange warning
- B. Red warning
- C. Blue warning
- D. Yellow warning
Answer: A
NEW QUESTION 228
Which of the following sequence for incident response management is correct?
1 Detection 2 Report 3 Mitigation 4 Summarize experience 5 Repair 6 Recovery 7 Response
- A. 1-2-3-7-6-5-4
- B. 1-3-2-7-5-6-4
- C. 1-3-2-7-6-5-4
- D. 1-7-3-2-6-5-4
Answer: D
NEW QUESTION 229
......
H12-711_V3.0 Sample with Accurate & Updated Questions: https://www.examboosts.com/Huawei/H12-711_V3.0-practice-exam-dumps.html
H12-711_V3.0 Exam Info and Free Practice Test | ExamBoosts: https://drive.google.com/open?id=1Zenj_WxyqzJmvcBJIgM8F0DU1_t8JbcO