How Many Questions Of H12-711_V3.0 Question

NEW QUESTION 1

In the construction of information security system, it is necessary to accurately describe the relationship between important aspects of security and system behavior through security models.

• A. True
• B. False

Answer: B

NEW QUESTION 2

Which of the following options are available for IPSec VPN peer authentication?

• A. Digital signature
• B. Digital certificate
• C. Digital envelope
• D. asymmetric key

Answer: ABC

NEW QUESTION 3

Gratuitous ARP can be used to detect whether the ______ address conflicts, and it can also refresh the switch MAC address table.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

aboutGREEncapsulation and decapsulation, which of the following descriptions is false?

• A. The encapsulation process, the original data packet is passed to theTunnelDepart after the interfaceGREpackage
• B. packaging process, afterGREAfter the module is encapsulated, this packet will enterIPmodule forfurther processing
• C. The decapsulation process, the destination receivesGREAfter the message, the data packet is delivered to theTunnelDepart after the interfaceGREDecapsulation
• D. Decapsulation process, afterGREAfter the module is decapsulated, this packet will go inIPmodule for further processing

Answer: B

NEW QUESTION 5

Which of the following VPNs cannot be used in a Site to-Site scenario? ( )[Multiple choice]*

• A. GRE VPN
• B. L2TP VPN
• C. SSL VPN
• D. IPSEC VPN

Answer: C

NEW QUESTION 6

Which of the following descriptions about the function of the iptables table is wrong?

• A. NAT table: The function of address translation.
• B. Raw table: Determines whether the packet is processed by the state tracking mechanism.
• C. Mangle table: modify security policy
• D. Filter table: Policy allowed or not allowed in the packet.

Answer: C

NEW QUESTION 7

When configuring user single sign-on, use the receivePCIn message mode, the authentication process has the following steps:
* 1. visitorPCExecute the login script and send the user login information toADmonitor
* 2. Firewall extracts user andIPAdd the correspondence to the online user table
* 3. ADmonitor connected toADThe server queries the login user information and forwards the queried user information to the firewall
* 4. visitor loginADarea,ADThe server returns a login success message to the user and issues the login script. Which of the following is the correct order?

• A. 1-2-3-4
• B. 4-1-3-2
• C. 3-2-1-4
• D. 1-4-3-2

Answer: B

NEW QUESTION 8

in the administratorUSGWhich of the following operations are required during the firewall software version upgrade? (multiple choice)

• A. Upload firewall version software
• B. Restart the device
• C. Factory reset the device
• D. Specify the software version to be loaded on the next boot

Answer: ABD

NEW QUESTION 9

In the security assessment method, the purpose of security scanning is to scan the target system with scanning analysis and assessment tools in order to find relevant vulnerabilities and prepare for attacks.

• A. True
• B. False

Answer: B

NEW QUESTION 10

In digital signature technology, we usually encrypt the digital fingerprint with the sender's ( ). (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

Digital signature is to generate digital fingerprint by using hash algorithm, so as to ensure the integrity of data transmission

• A. True
• B. False

Answer: A

NEW QUESTION 12

When the FW is deployed at the network egress, if a fault occurs, it will affect the Zaonet service. to enhance the network
Reliability, need to deploy two FWs and form ______ [fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13

aboutClient-InitializedofL2TP VPN, which of the following statements is false?

• A. remote user accessinternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request
• B. LNSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password
• C. LNSAssign private keys to remote usersIPaddress
• D. Remote users do not need to installVPNclient software

Answer: D

NEW QUESTION 14

The matching principle of the security policy is: first search for the manually configured interzone security policy, and if no match is found, the data packet will be discarded directly.

• A. True
• B. False

Answer: A

NEW QUESTION 15

Digital envelope technology means that the sender uses the receiver's public key to encrypt the data and then sends the ciphertext to the receiver.

• A. True
• B. False

Answer: A

NEW QUESTION 16

UDPA port scan is when an attacker sends a zero byte lengthUDPmessage to a specific port of the target host, if the port is open, it will return aICMPPort reachable data packets.

• A. True
• B. False

Answer: B

NEW QUESTION 17
......