Get New 2022 Valid Practice HCIA-Security H12-711_V3.0-ENU Q&A – Testing Engine [Q203-Q226]

Rate this post

Get New 2022 Valid Practice HCIA-Security H12-711_V3.0-ENU Q&A – Testing Engine

H12-711_V3.0-ENU Dumps PDF – 100% Passing Guarantee

Q203. aboutClient-InitializedofL2TP VPN, which of the following statements is false?

remote user accessInternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request

;NSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password

LNSAssign private keys to remote usersIPaddress

Remote users do not need to installVPNClient software

Q204. The HRP (Huawei Redundancy Protocol) protocol is used to synchronize the key configuration and connection status of the firewall to the standby firewall. Which of the following options does not belong to the scope of synchronization?

Security strategy

NAT strategy

Blacklist

IPS signature set

Q205. SNMPWhat versions of the protocol are there? (multiple choice)

SNMPv1

SNMPv2b

SNMPv2c

SNMPv3

Q206. About firewall gateways forHTTPWhich of the following statements is false about the protocol’s antivirus response?

When the gateway device blocksHTTPAfter connecting, push to the clientwebpage and generate log

Response methods include announcement and blocking

In alarm mode, the device only generates logs, which is not correct.HTTPThe files transmitted by the protocol are processed and sent out

Blocking means that the device is disconnected from theHTTPserver connection and block file transfer

Q207. When the company’s network administrator is performing dual-system hot backup, due to the possibility of inconsistent round-trip paths, if he wants to enable the session fast backup function, the command that needs to be entered is ______[fill in the blank]*

Q208. Which of the following options are key elements of information security precautions? (multiple choice)

asset Management

Security operation and management

Security Products and Technologies

personnel

Q209. Which of the following statements is true about business continuity plans? (multiple choice)

The business continuity plan does not require senior company involvement during the scoping phase of the project

Because all possible accidents cannot be predicted,BCPFlexibility is required

The business continuity plan does not require senior company involvement until it is formally documented

Not all security incidents must be reported to company executives

Q210. Which of the following is not the business scope of the National Internet Emergency Response Center?

Emergency handling of security incidents

Warning and notification of security incidents

Provide security evaluation services for government departments, enterprises and institutions

Cooperate with other institutions to provide training services

Q211. Data Analysis Technology is to find, match keywords or key phrases, and analyze the correlation of time in data streams or information streams that have been obtained.
Which of the following does not belong to evidence analysis technology?

Password decipherment, data decryption technology

File Digital Summary Analysis Technology

Exploring the technology of the connection between different evidence

Spam tracking technology

Q212. Regarding the command to view the number of security policy matches, which of the following is correct?

display firewall sesstion table

display security-policy all

display security-policy count

count security-policy hit

Q213. Which item is correct about SSL VPN?

Can be used without the client

Can encrypt the IP layer

There is a NAT crossing problem

No authentication

Q214. Regarding the order of the PKI work process, which of the following is correct?
1. The communication terminal applies for the CA certificate
2. PKI reply to CA certificate
3. Obtain each other’s certificates and verify the validity
4. Install the local certificate on the communication end
5. PKI issues local certificates
6. The correspondent applies for a local certificate
7. Install the CA certificate on the communication end
8. Communicate with each other

1-2-6-5-7-4-3-8

1-2-7-6-5-4-3-8

6-5-4-1-2-7-3-8

6-5-4-3-1-2-7-8

Q215. Which of the following options are the possible reasons for the problem that users cannot access network resources in the authentication-free two-way binding mode? (multiple choice)

Authentication-free users and authenticated users are in the same security area

Authentication-free users do not use the specifiedIP/MACaddressPC

The authentication action in the authentication policy is set to”Do not acknowledge/Certification-free”

Online users have reached the maximum

Q216. The attacker sends a SYN message with the same source address and destination address, or the source address is the loopback address to the target host (the source port and destination port are the same, causing the attacker to send a SYN-AKY message to its own address) What kind of attack is this behavior black? ( )[Multiple choice]*

Smurf attack

SYN Flood Attack

TCP Spoofing Attack

Land attack

Q217. Which of the following are functions of address translation technology? (Multiple choice)

Address translation can enable internal network users (private IP addresses) to access the Internet

Address translation can make many hosts in the internal LAN share an IP address to surf the Internet

Address translation can handle encrypted IP headers

Address translation can shield users on the internal network and improve the security of the internal network

Q218. Check the HRP status information of the firewall as follows:
HRP_S[USG_B] display hrp state
The firewall’s config state is: Standby
Current state of virtual routers configured as standby:
GigabitEthernet1/0/0 vrid 1: standby
GigabitEthernet1/0/1 vrid 2: standby
According to the above information, which of the following description is correct?

This firewall VGMP group status is Active

The VRRP group status of this firewall G1/0/0 and G1/0/1 interface is standby

This firewall’s HRP heartbeat interface is G1/0/0 and G1/0/1

This firewall must be in a preemptive state

Q219. Which of the following descriptions about the heartbeat interface is wrong ( )?[Multiple choice]*

It is recommended to configure at least two heartbeat interfaces. – One heartbeat interface is used as the master, and the other heartbeat interface is used as the backup.

The interface MTU value is greater than 1500 and cannot be used as a heartbeat interface

The connection method of the heartbeat interface can be directly connected, or it can be connected through a switch or router

MGMT interface (Gigabi tEtherneto/0/0) cannot be used as heartbeat interface

Q220. When using the passive mode to establish an FTP connection, use port 20 for the control channel and port 21 for the data channel.

True

False

Q221. aboutNATThe configuration commands for the address pool are as follows:no-patThe meaning of the parameters is:

no address translation

port multiplexing

Do not translate source ports

Do not convert destination port

Q222. Which of the following attacks is not a malformed message attack?

Teardrop attack

Smurf attack

TCP Fragmentation Attack

ICMP unreachable packet attack

Q223. In the USG series firewall, you can use the ______ function to provide a well-known application service for the non-knowledge port.

Port mapping

Mac and IP address binding

Packing filter

Long connection

Q224. Which of the following descriptions about digital fingerprints in digital signatures is wrong? ( )[Multiple choice]*

It is the data obtained by the sender after calculating the plaintext information through the HASH algorithm.

The receiver will use the sender’s public key to calculate the generated data fingerprint and compare it with the received digital fingerprint.

Digital fingerprints are also known as information digests.

The receiver needs to use the sender’s public key to unlock the digital signature to obtain the digital fingerprint.

Q225. The preservation of electronic evidence is directly related to the legal validity of the evidence. Only when the preservation conforms to legal procedures, can its authenticity and reliability be guaranteed. Which of the following is not an evidence preservation technology?

Encryption Technology

digital certificate technology

digital signature technology

Packet Tag Tracking Technology

Q226. If internal employees access the Internet through a firewall and find that they cannot connect to the Internet normally, which view commands can be used on the firewall to troubleshoot the interface state security zone, security policy, and routing table? (Write any view command, require: command line The words must be complete and correct to score, and cannot be omitted or abbreviated)

display ip routing-table display zone