Pass H12-711 Exam – Real Test Engine PDF with 290 Questions [Q103-Q123]

Rate this post

Pass H12-711 Exam – Real Test Engine PDF with 290 Questions

Get New H12-711 Certification Practice Test Questions Exam Dumps

Huawei H12-711 (HCIA-Security V3.0) Certification Exam is a comprehensive exam that covers all aspects of network security. H12-711 exam consists of multiple-choice questions that test the candidate’s knowledge and understanding of network security concepts. H12-711 exam is designed to assess the candidate’s ability to apply their knowledge to real-world scenarios and solve complex problems related to network security.

QUESTION 103
Which ofthe following optionsis the correct sequence ofthe four phases ofthe Information Security Management System (ISMS)?

Plan->Check->Do->Action

Check->Plan->Do->Action

Plan->Do->Check->Action

Plan->Check->Action->Do

QUESTION 104
Which of the following is the analysis layer device in the Huawei SDSec solution?

CIS

Agile Controller

switch

Firehunter

QUESTION 105
Which of the following descriptions about windows logs is wrong?

The system log is used to record the events generated by the operating system components, including the crash of the driver, system components and application software, and data

Windows server 2008 system logs stored in the Application.evtx

The application log contains events logged by the application or system program, mainly recording events in the running of the program.

Windows seiver 2008 security lug is sluied in security.evtx

QUESTION 106
Which of the following statements are correct about the differences between pre-accident prevention strategies and post-accident recovery strategies? (Multiple Choice)

The prevention strategy focuses on minimizing the likelihood of an accident before the story occurs. The recovery strategy focuses on minimizing the impact and loss on the company after the accident

The role of pre-disaster prevention strategies does not include minimizing economic, reputational, and other losses caused by accidents.

Recovery strategy is used to improve business high availability

Recovery strategy is part of the business continuity plan

QUESTION 107
When the NAT server is configured on the USG system firewall, a server-map table is generated. Which of the following does not belong to the content in the performance?

Destination IP

Destination port number

Protocol number

Source IP

QUESTION 108
Which of the following description is wrong about the Internet users and VPN access user authentication?

The Internet user andthe VPN access user share data, and the users attribute check (user status, account expiration time, etc.) also takes effect on the VPN access.

The local authentication or server authentication process is basically the same for the Internet users. The authentication is performed on the user through the authentication domain.

After the VPN user accesses the network, it can access the network resources of the enterprise headquarters. The firewall can control the accessible network resources based on theuser name.

After the VPN access user passes the authentication, it will be online on the user online list.

QUESTION 109
Both A and B communicate data. If an asymmetric encryption algorithm is used for encryption, when A sends data to B.
Which of the following keys will be used for data encryption?

A public key

A private key

public key

B private key

QUESTION 110
Which of the following descriptions of the firewall fragment cache function are correct? (Multiple choice)

By default, the firewall caches fragmented packets.

After the fragmented packet is directly forwarded, the firewall forwards the fragment according to the interzone security policy if it is not the fragmented packet of the first packet.

For fragmented packets, NAT ALG does not support the processing of SIP fragmen:ed packets.

By default, the number of largefragment caches of an IPV4 packet is 32, and the number of large fragmentation buffers of an IPV6 packet is 255

QUESTION 111
About the description about the preemption function of VGMP management, which of the following statements is?wrong?

By default, the preemption function of the VGMP management group is enabled.

By default, the preemption delay of the VGMP management group is 40s.

Preemption means that when the faulty primary device recovers, its priority will be restored.At this time, it can regain its own state.

After the VRRP backup group is added to the VGMP management group, the original preemption function on the VRRP backup group is invalid.

QUESTION 112
Which types of encryption technology can be divided into? (Multiple Choice)

Symmetric encryption

Asymmetric encryption

Fingerprint encryption

Data encryption

QUESTION 113
Which of the following options can be used in the advanced settings of Windows Firewall? (Multiple choice)

Restore defaults

Change notification rules

Set connection security rules

Set out inbound rules

QUESTION 114
In the VRRP (Virtual Router Redundancy Protocol) group, the primary firewall periodically sends advertisement packets to the backup firewall. The backup firewall is only responsible for monitoring advertisement packets and will not respond.

True

False

QUESTION 115
Which of the following descriptions is wrong about the root CA certificate?

The issuer is CA

The certificate subject name isCA.

Public key information is the public key ofthe CA

Signature is generated by CA public key encryption

QUESTION 116
The GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ. If the area connected to GE1/0/1 can accessthe area connected to GE1/0/2, which of the following is correct?

Need to configure local to DMZ security policy

No need to do any configuration

Need to configure an interzone security policy

Need to configure DMZ to local security policy

QUESTION 117
Which of the following descriptions about the action and security profile of the security policy are correct? (Multiple choice)

If the action of the security policy is “prohibited”, the device will discard this traffic, and then no content security check will be performed.

The security profile may not be applied to the security policy that the action is allowed and take effect.

The security profile must be applied to the security policy that is allowed to take effect.

If the security policy action is “Allow”, the traffic will not match the security profile.

QUESTION 118
The attacker by sending ICMP response request, and will request packet destination address set to suffer Internet radio address.
Which kind of attack does this behavior belong to?

IP spoofing attack

Smurf attack

ICMP redirect attack

SYN flood attack

QUESTION 119
Which of the following descriptions about the action and security profile of the security policy are correct?
(Multiple choice)

If the action of the security policy is “prohibited”, the device willdiscard this traffic, and then no content security check will be performed.

The security profile may know: be applied to the security policy tfat the action is allowed and take effect.

The security profile must be applied to the security policy thats allowed to take effect.

If the security policy action is “Allow”, the traffic will not match the security profile.

QUESTION 120
Which of the following is not included in the steps of the safety assessment method?

Manual audit

Penetration test

Questionnaire survey

Data analysis

QUESTION 121
As shown in the figure, a TCP connection is established between client A and server B Which of the following two “Tpacket numbers should be?

a+1: a

a: a+1

b+1: b

a+1: a+1

QUESTION 122
Intrusion Prevention System (IPS) is a defense system that can block in real time when an intrusion is discovered

True

False

QUESTION 123
When the session authentication mode is used to trigger the firewall’s built-in Portal authentication, the user does not actively perform identity authentication, advanced service access, and device push “redirect” to the authentication page.

True

False

Loading …

Huawei H12-711 (HCIA-Security V3.0) Exam is essential for those who want to secure the future of their IT career. HCIA-Security V3.0 certification exam validates the knowledge and skills of IT professionals in network security management and protection against threats. As a result, becoming HCIA-Security certified transforms candidates into cybersecurity professionals fully equipped with the expertise to protect IT networks against external threats.

H12-711 Exam Dumps – PDF Questions and Testing Engine: https://www.examstorrent.com/H12-711-exam-dumps-torrent.html