100% Real & Accurate H12-711_V3.0 Questions and Answers with Free and Fast Updates [Q178-Q199]

Posted byadminOctober 21, 2022Leave a Comment on 100% Real & Accurate H12-711_V3.0 Questions and Answers with Free and Fast Updates [Q178-Q199]

Rate this post

100% Real & Accurate H12-711_V3.0 Questions and Answers with Free and Fast Updates

Get Unlimited Access to H12-711_V3.0 Certification Exam Cert Guide

NEW QUESTION 178
Which of the following attacks is not a malformed packet attack?

Teardropattack

Smurfattack

TCPFragmentation attack

ICMPUnreachable Packet Attack

NEW QUESTION 179
In the configuration of L2TP, for the command Tunnel Name, which of the following statements are correct? (Multiple choice)

Used to specify the local tunnel name

Used to specify the tunnel name of the opposite end

Tunnel Nnames on both ends must be consistent

If Tunnel Name is not configured, the tunnel name is the local system name

NEW QUESTION 180
In information security prevention, commonly used security products are firewalls,Anti-DDosequipment andIPS/IDSequipment

True

False

NEW QUESTION 181
In the USG series firewall, which of the following commands can be used to query the NAT conversion result?

display nat translation

display firewall session table

display current nat

display firewall nat translation

NEW QUESTION 182
A company’s employee account has expired, but the account can still be used to access the company’s server.
Which security risks do the above scenarios belong to? (multiple choice)

Manage security risks

access security risk

system security risk

physical security risk

NEW QUESTION 183
The protocol field in the IP header identifies the protocol used by the upper layer. Which of the following field values indicates that the upper layer protocol is the UDP protocol?

NEW QUESTION 184
When deploying IPSec VPN, which of the following is the main application scenario of tunnel mode?

Between host and host

Between the host and the security gateway

Between security gateways

Between host and server

NEW QUESTION 185
Regarding the security policy configuration command, which of the following is correct?
#
security-policy
rule name rule1
source-zone trust
destination-zone untrust
source-address 10.1.0.0 0.0.255.255
service icmp
action deny
#

Prohibit ICMP packets from the trust zone to the untrust zone and the destination address is 10.1.10.10 host

Prohibit ICMP packets from all hosts that access the untrust zone from the trust zone and the destination address is the 10.1.0.0/16 network segment

Prohibit all host ICMP packets from the trust zone to the untrust zone and the source address is 10.1.0.0/16 network segment

Prohibit all host ICMP packets from the trust zone to the untrust zone and the source address is 10.2.10.10

NEW QUESTION 186
When the company’s network administrator is performing dual-system hot backup, due to the possibility of inconsistent round-trip paths, if he wants to enable the session fast backup function, the command that needs to be entered is ______[fill in the blank]*

hrp mirror session enable

NEW QUESTION 187
The default authentication domain of the USG6000 series firewall is the ______ domain.

default

NEW QUESTION 188
Which of the following options belong to the certification field of ISO27001? (Multiple choice)

Access control

Personnel safety

Vulnerability management

Business continuity management

NEW QUESTION 189
Which of the following options are malicious programs? (Multiple choice)

Trojan Horse

Vulnerabilities

Worms

Viruses

NEW QUESTION 190
About the rootCACertificate, which of the following descriptions is incorrect?

Issuer isCA

The certificate subject name isCA

public key information isCA’s public key

signature isCAgenerated by public key encryption

NEW QUESTION 191
In a stateful inspection firewall, when the stateful inspection mechanism is turned on, when the second packet (SYN+ACK) of the three-way handshake arrives at the firewall, if there is no corresponding session table on the firewall, which of the following descriptions is correct?

The firewall does not create a session table, but allows packets to pass

If the firewall security policy allows packets to pass, create a session table

Packets must not pass through the firewall

The message must pass through the firewall and establish a session

NEW QUESTION 192
Which of the following options are the key elements of information security protection? (Multiple Choice)

Asset management

Safe operation and maintenance and management

Security products and technologies

Personnel

NEW QUESTION 193
The repair of anti-virus software only needs to repair some system files that were accidentally deleted when scanning and killing viruses to prevent the system from crashing

True

False

NEW QUESTION 194
When NAT Server is configured on the USG system firewall, a server-map table will be generated. Which of the following is not included in the table?

Destination IP

Destination port number

Protocol number

Source IP

NEW QUESTION 195
Company network administrator allocation. After the dual-system hot backup is set, run the command to check VRRP and other information, and get the following information HRP_M<FWA> Gigabi tEtherneto/0/3 Virtual Router 1 State: Master Virtual IP: 10.3.0.3 Master IP: 10.3.0.1 PriorityRun: 120 PriorityConfig:100 MasterPriority: 120 Preempt: YESDelay Time: 0 s TimerRun: 60s TimerConfig: 60s Auth type: NONE Virtual MAC: 0000-5e00-0101 Check TIL: YES Config type:vgmp Vrrp Backup-torward: disabled Create time:2020-03-17 17:35:54 UTC08:02 Last change time: 2020-03-22 16:01:56 UTC08:02 Ask him to type the view command in the blank space is ____
[fill in the blank]*

display vrrp

NEW QUESTION 196
Common scanning attacks include: port scanning tools, vulnerability scanning tools, application scanning tools and database scanning tools, etc.

True

False

NEW QUESTION 197
Information security prevention technologies include: data encryption, identity authentication, intrusion prevention and anti-virus, etc.

True

False

NEW QUESTION 198
Digital certificates can be divided into local certificates,CAcertificates, root certificates, self-signed certificates, etc.

True

False

NEW QUESTION 199
When IPSec VPN uses transport mode to encapsulate packets, which of the following is not in the certification scope of the ESP security protocol?

ESP Header

IP Header

ESP Iail

ICP Header

Loading …