[UPDATED Aug-2022] Best Value Available Preparation Guide for H12-711_V3.0-ENU Exam [Q279-Q301]

Posted byadminAugust 5, 2022Leave a Comment on [UPDATED Aug-2022] Best Value Available Preparation Guide for H12-711_V3.0-ENU Exam [Q279-Q301]

Rate this post

[UPDATED Aug-2022] Best Value Available Preparation Guide for H12-711_V3.0-ENU Exam

1 Full H12-711_V3.0-ENU Practice Test and 466 Unique Questions, Get it Now!

NO.279 The matching principle of the security policy is: first search for the manually configured interzone security policy, and if no match is found, the data packet will be discarded directly.

True

False

NO.280 Which of the following statements about firewalls is correct?

The firewall cannot transparently access the network.

Adding a firewall to the network will inevitably change the topology of the network.

To avoid a single point of failure, the firewall only supports bypass deployment

Depending on the usage scenario, the firewall can be deployed in a transparent mode or a three-bedroom type.

NO.281 Which of the following SSLVPN functions can and can only access all TCP resources?

Network expansion

Port Forwarding

web proxy

file sharing

NO.282 aboutNATAddress translation, which of the following statements is europium false??

sourceNATconfiguration in technologyNATaddress pool, you can configure only one address poolIPaddress

Address translation can be provided in the local area network according to the needs of usersFTP,WWW,Telnetand other services

Some application layer protocols carry in the dataIPaddress information, make themNATWhen modifying the data in the upper layerIPAddress information

for some non-TCP,UDPprotocol (such asICMP,PPTP), cannot doNATconvert

NO.283 As shown in the figure below, the internal user online scene of the enterprise is as follows. The user online process includes:
1. certified,USGallow connection
2.
User accessinternetenterhttp://1.1.1.1 3. USGPush authentication interface
4.
User successfully accessedhttp://1.1.1.1 ,device creationsessionsurface5 User enters correct username and password The following correct sequence of processes should:

2->5->3->1->4

2->3->5->1->4

2->1->3->5->4

2->3->1->5->4

NO.284 Please match the whole worm virus attack process and attack description.

NO.285 Which of the following is not a stand-alone anti-virus technology?

Install anti-virus software

Configure anti-virus technology on the network firewall

Use virus detection tools

Patch the system

NO.286 Which of the following is not a hash algorithm?

MD5

SHA1

SM1

SHA2

NO.287 Which of the following is not a symmetric encryption algorithm?

DES

3DES

AES

RSA

NO.288 Which of the following descriptions about the main implementation of single sign-on is wrong? ( )[Multiple choice]*

Accept PC message mode

Query the AD server security log mode

Query the syslog server mode

Firewall monitors AD authentication packets

NO.289 UDP port scanning means that the attacker sends a zero-byte length UDP packet to a specific port of the target host. If the port is open, an ICMP port reachability data packet will be returned.

True

False

NO.290 After a network intrusion event occurs, according to the plan to obtain the identity of the intrusion, the source of the attack and other information, and block the intrusion behavior, which links in the PDRR network security model do the above actions belong to? (Multiple choice)

Protection link

Testing link

Response link

Recovery link

NO.291 About firewall gateways forHTTPWhich of the following statements is false about the protocol’s antivirus response?

When the gateway device blocksHTTPAfter connecting, push to the clientwebpage and generate log

Response methods include announcement and blocking

In alarm mode, the device only generates logs, which is not correct.HTTPThe files transmitted by the protocol are processed and sent out

Blocking means that the device is disconnected from theHTTPserver connection and block file transfer

NO.292 aboutVGMPDescription of the managed preemption function, which of the following is false?

By default,VGMPThe preemption function of the management group is enabled

By default,VGMPThe preemption delay time of the management group is40s

Preemption means that when the original faulty master device recovers, its priority will be restored. At this time, it can preempt its own state as the master device again.

whenVRRPBackup group added toVGMPAfter managing the group,VRRPThe original preemption function on the backup group fails

NO.293 An engineer needs to back up the firewall configuration. Now he wants to use one command to view all the current configuration of the firewall. What command does he use?

display current-configuration

NO.294 Which of the following options are key elements of information security precautions? (multiple choice)

asset Management

Security operation and management

Security Products and Technologies

personnel

NO.295 In the classification of the information security level protection system, which of the following levels define that if the information system is destroyed, it will cause damage to social order and public interests? (multiple choice)

first level
User self-protection level

second level
System Audit Protection Level

third level
Safety Mark Protection

fourth level
structured protection

NO.296 Regarding the business continuity plan, which of the following statements is correct? (Multiple choice)

The business continuity plan does not require the participation of the company’s senior management during the project scope stage

All possible accidents are thought not to be predicted, so BCP needs to be flexible

The business continuity plan does not require the participation of the company’s senior management before it is formally documented

Not all safety incidents must be reported to the company’s senior management

NO.297 Which of the following options are harmful to traffic-based attacks? (Multiple choices)

The network is down

Server down

Data is stolen

The webpage has been tampered with

NO.298 Which of the following options is not a private network IP address?

192.168.254.254/16

172.32.1.1/24

10.32.254.254/24

10.10.10.10/8

NO.299 Which of the following options are the possible reasons for the problem that users cannot access network resources in the authentication-free two-way binding mode? (multiple choice)

Authentication-free users and authenticated users are in the same security area

Authentication-free users do not use the specifiedIP/MACaddressPC

The authentication action in the authentication policy is set to”Do not acknowledge/Certification-free”

Online users have reached the maximum

NO.300 Regarding NAT address conversion, which of the following statements is wrong?

Configure the NAT address pool in the source NAT technology, you can configure only one IP address in the address pool

Address conversion can provide FTP, WWW, Telnet and other services outside the local area network according to the needs of users

Some application layer protocols carry IP address information in the data, and when NAT is performed on them, the IP address information in the upper layer data must be modified

For some TCP and UDP protocols (such as ICMP, PPTP), NAT conversion is not possible

NO.301 Please order the following steps in the PKI life cycle correctly, 1. Issued, 2. storage, 3. Update, 4. verify[fill in the blank]*

1243

Loading …