2022 Latest H12-711_V3.0 Exam Dumps Recently Updated 466 Questions
Huawei H12-711_V3.0 Real 2022 Braindumps Mock Exam Dumps
NEW QUESTION 41
Which of the following attacks is not a malformed message attack?
- A. Teardrop attack
- B. Smurf attack
- C. ICMP unreachable packet attack
- D. TCP Fragmentation Attack
Answer: C
NEW QUESTION 42
Which types of the following can the encryption technology be divided into? (Multiple Choice)
- A. Data encryption
- B. Fingerprint encryption
- C. Symmetrical encryption
- D. Fractional symmetric encryption
Answer: C,D
NEW QUESTION 43
In the TCP/P protocol core, which of the following protocols works at the application layer? ( )[Multiple choice]*
- A. ICMP
- B. RIP
- C. ARP
- D. IGMP
Answer: B
NEW QUESTION 44
When configuring the security policy, ______ can control the flow based on the user.
- A. Services and applications
Answer: A
NEW QUESTION 45
Which of the following options is not a sign of IPSec SA?
- A. Destination address
- B. Source address
- C. SPI
- D. Security protocol
Answer: B
NEW QUESTION 46
We should choose the encryption algorithm according to our own characteristics. When we need to encrypt a large amount of data, it is recommended to use the _____ encryption algorithm to improve the speed of encryption and decryption.
- A. Symmetry
Answer: A
NEW QUESTION 47
Which of the following information is not the backup content included in the status information backup in dual-system hot backup?
- A. Routing table
- B. IPv4 Session Table
- C. NAPT related entries
- D. IPSEC tunnel
Answer: A
NEW QUESTION 48
Regarding the firewall security zone, which of the following statements are correct? (Multiple Choice)
- A. A firewall can have 12 security zones at most
- B. When data flow occurs between different security zones, the security check of the device is triggered, and the corresponding security policy is implemented.
- C. The firewall has four security zones by default, and the four security zone priorities do not support modification.
- D. Firewall can create two security areas of the same priority
Answer: B,C
NEW QUESTION 49
in deploymentIPSec VPN, which of the following is the main application scenario of tunnel mode?
- A. Between the host and the security gateway
- B. between security gateways
- C. between host and host
- D. between host and server
Answer: B
NEW QUESTION 50
Which of the following is used in digital signature technology to encrypt digital fingerprints?
- A. Receiver's public key
- B. sender's public key
- C. Receiver's private key
- D. sender private key
Answer: D
NEW QUESTION 51
Both GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ zone. If you want to realize that the area connected by GE1/0/1 can access the area connected by GE1/0/2, which of the following is correct?
- A. No configuration required
- B. Need to configure inter-domain security policies
- C. Need to configure the security policy from local to DMZ
- D. Need to configure DMZ to local security policy
Answer: A
NEW QUESTION 52
Regarding the description of the preemption function managed by VGMP, which of the following is wrong?
- A. After the VRRP backup group is added to the VGMP management group, the original preemption function on the VRRP backup group becomes invalid
- B. By default, the preemption delay time of the VGMP management group is 40s
- C. By default, the preemption function of the VGMP management group is enabled
- D. Preemption means that when the original failed master device recovers from a failure, its priority will be restored, and you can regain its own status as the master
Answer: B
NEW QUESTION 53
_______ is a defect in the specific implementation of hardware, software, and protocol or system security strategy, which can enable an attacker to access or destroy the system without authorization.
- A. Vulnerabilities
Answer: A
NEW QUESTION 54
The trigger modes of the built-in Portal authentication in the firewall include pre-authentication and ____ authentication[fill in the blank]*
Answer:
Explanation:
session
NEW QUESTION 55
Which of the following are not common application scenarios of digital certificates?
- A. SSL VPN
- B. HTTPS
- C. IPSEC VPN
- D. FTP
Answer: D
NEW QUESTION 56
Please sort the following project implementation steps from the start of the project.
Answer:
Explanation:
NEW QUESTION 57
Which of the following is the encryption technology used in the digital envelope?
- A. Asymmetric encryption algorithm
- B. Streaming algorithm
- C. Hashing algorithm
- D. Symmetric encryption algorithm
Answer: A
NEW QUESTION 58
Which protocols below can guarantee the confidentiality of data transmission? (Multiple Choice)
- A. HTTPS
- B. FTP
- C. Telnet
- D. SSH
Answer: A,D
NEW QUESTION 59
When the company's network administrator is performing dual-system hot backup, due to the possibility of inconsistent round-trip paths, if he wants to enable the session fast backup function, the command that needs to be entered is ______[fill in the blank]*
Answer:
Explanation:
hrp mirror session enable
NEW QUESTION 60
Which of the following protocols is not a protocol type that ASPF can detect? ( )[Multiple choice]*
- A. PPTP
- B. FTP
- C. MSTP
- D. DNS
Answer: C
NEW QUESTION 61
Usually we divide servers into two categories: general-purpose servers and functional servers. Which of the following options meets this classification standard?
- A. By use
- B. By Architecture
- C. By shape
- D. By application level
Answer: A
NEW QUESTION 62
In the Linux system, which of the following commands is used to query IP address information?
- A. display ip interface brief
- B. ipconfig
- C. ifconfig
- D. display ip
Answer: C
NEW QUESTION 63
......
Verified H12-711_V3.0 Exam Dumps Q&As - Provide H12-711_V3.0 with Correct Answers: https://torrentpdf.exam4tests.com/H12-711_V3.0-pdf-braindumps.html