최신 H12-711-ENU 무료덤프 - Huawei HCIA-Security V3.0

문제1

NAT technology can securely transmit data by encrypting data.

A. True

B. False

정답: B

문제2

In L2TP configuration for command Tunnel Name, which statements are correct? (Multiple choice)

A. used to specify the name of the peer tunnel

B. used to specify the name of the end of the tunnel

C. If do not configure the Tunnel Name, the tunnel name is the name of the local system

D. must be consistent with Tunnel Name peer configuration

정답: B,C

문제3

In practical applications, asymmetric encryption is mainly used to encrypt user data.

A. True

B. False

정답: B

문제4

Which description about disconnect the TCP connection 4 times-handshake is wrong?

A. when passive close receipt the first FIN, it will send back an ACK, and randomly generated to confirm the serial number

B. in passive close the sender after the FIN, initiative to close must send back a confirmation, and will confirm the serial number is set to receive serial number 1

C. passive closing party end need to send a file to the application, the application will close it connection and lead to send a FIN

D. initiative to shut down the sender first FIN active closed, while the other received this FIN perform passive shut down

정답: A

문제5

Regarding the relationship and role of VRRP/VGMP/HRP, which of the following statements are correct? (Multiple choice)

A. HRP is responsible for data backup during hot standby operation.

B. VGMP group in the active state may include the VRRP group in the standby state.

C. VGMP is responsible for monitoring equipment failures and controlling fast switching of equipment.

D. VRRP is responsible for sending free ARP to direct traffic to the new primary device during active/standby switchover.

정답: A,C,D

문제6

Which of the following is non-symmetric encryption algorithm?

A. DH

B. RC4

C. AES

D. 3DES

정답: A

문제7

Which of the following statements is wrong about VPN?

A. VPN technology necessarily involves encryption technology

B. Virtual private network is cheaper than dedicated line

C. VPN technology is a technology that multiplexes logical channels on actual physical lines.

D. The generation of VPN technology enables employees on business trips to remotely access internal corporate servers.

정답: A

문제8

NAPT technology can implement a public network IP address for multiple private network hosts.

A. True

B. False

정답: A

문제9

IPSec VPN technology does not support NAT traversal when encapsulating with ESP security protocol, because ESP encrypts the packet header.

A. True

B. False

정답: B

문제10

About the descriptions of windows Firewall Advanced Settings, which of the following is wrong? (Multiple choice)

A. When setting the pop-up rule, only the local port can be restricted, and the remote port cannot be restricted.

B. When setting the pop-up rule, both local ports and remote ports can be restricted.

C. When setting the stacking rule, only the local port can be restricted, and the remote port cannot be restricted.

D. When setting the stacking rule, both the local port and the remote port can be restricted.

정답: B,D

문제11

The Protocol field in the IP header identifies the protocol used by the upper layer.
Which of the following field values indicates that the upper layer protocol is UDP protocol?

A. 6

B. 11

C. 18

D. 17

정답: D

문제12

For the occurrence of network security incidents, the remote emergency response is generally adopted first. If the problem cannot be solved for the customer through remote access, after the customer confirms, it is transferred to the local emergency response process.

A. True

B. False

정답: A

문제13

Which of the following is wrong about the scanning of vulnerabilities?

A. Vulnerabilities can be avoided

B. Vulnerabilities are generally repairable

C. Vulnerabilities are security risks that can expose computers to hackers

D. The vulnerability was discovered beforehand and discovered afterwards.

정답: A

문제14

Which of the following is true about firewall security policies?

A. By default, the security policy only controls unicast packets.

B. By default, the security policy can control unicast packets, broadcast packets, and multicast packets.

C. By default, the security policy can control unicast packets and broadcast packets.

D. By default, the security policy can control multicast.

정답: A

문제15

When Firewall does dual-system hot backup networking, in order to achieve the overall status of the backup group switching, which of the following protocol technology need to be used?

A. VGMP

B. HRP

C. VRRP

D. OSPF

정답: A

문제16

Security technology has different approaches at different technical levels and areas. Which of the following devices can be used for network layer security protection? (Multiple choice)

A. Firewall

B. IPS/IDS equipment

C. Vulnerability scanning device

D. Anti-DDoS equipment

정답: A,B,D

문제17

Which of the following is not a hash algorithm?

A. SHA1

B. SHA2

C. SM1

D. MD5

정답: C

문제18

Which of the following statements are correct about Huawei routers and switches? (Multiple Choice)

A. The router can implement some security functions, and some routers can implement more security functions by adding security boards.

B. The main function of the router is to forward data. Sometimes the firewall may be a more suitable choice when the enterprise has security requirements.

C. The switch does not have security features

D. The switch has some security features, and some switches can implement more security functions by adding security boards.

정답: A,B,D

최신 H12-711-ENU 무료덤프 - Huawei HCIA-Security V3.0

우리와 연락하기

유용한 링크

최신 업데이트