Far Out HCIA-Security V3.0 H12-711_V3.0 Braindump

NEW QUESTION 1

As shown in the figure, aNAT serverapplication scenarios, when usingwebWhen this configuration is performed in the configuration mode. Which of the following statements are correct? (multiple choice)

• A. When configuring the interzone security policy, you need to set the source security zone toUntrust, the target security area isDMZ
• B. configureNATServer, the internal address is10.1.1.2, the external address is200.10.10.1
• C. When configuring the interzone security policy, set the source security zone toDMZ, the target security area isUntrust
• D. configureNATServer, the internal address is200.10.10.1, the external address is10.1.1.2

Answer: AB

NEW QUESTION 2

In the process of digital signature, which of the following is mainly carried outHASHAlgorithms thereby verifying the integrity of data transmissions?

• A. User data
• B. Symmetric key
• C. Receiver's public key
• D. Receiver's private key

Answer: A

NEW QUESTION 3

existUSGConfigure on the system firewallNAT Server, will produceserver-mapTable, which of the following is not part of this representation?

• A. PurposeIP
• B. destination port number
• C. agreement number
• D. sourceIP

Answer: D

NEW QUESTION 4

at HuaweiSDSecIn the solution, which of the following is an analysis layer device?

• A. CIS
• B. Agile Controller
• C. switch
• D. Firehunter

Answer: D

NEW QUESTION 5

Ways to use a computer to store information about criminal activity that is not a computer crime

• A. True
• B. False

Answer: B

NEW QUESTION 6

IPSec VPNs use pre-shared keys, ( ) and digital envelopes to authenticate peers. (fill in the blank) digital

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7

Which of the following options belong to the default security zone of Huawei Firewall? (multiple choice)

• A. Zonearea
• B. Trustarea
• C. Untrustarea
• D. Securityarea

Answer: BC

NEW QUESTION 8

Understanding engineering principles belongs to ( ) the category of security awareness training in information security prevention. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

Which of the following is not a common application scenario of digital certificates? ( )[Multiple choice]*

• A. FTP
• B. HTTPS
• C. IPSEC VPN
• D. SSL VPN

Answer: A

NEW QUESTION 10

Which of the following options are available inwindowsDo you do it in the advanced settings of the firewall? (multiple choice)

• A. Restore defaults
• B. Change notification rules
• C. Set up connection security rules
• D. Set up inbound and outbound rules

Answer: ABCD

NEW QUESTION 11

Which of the following options isGREagreement number?

• A. 46
• B. 47
• C. 89
• D. 50

Answer: B

NEW QUESTION 12

A company's employee account has expired, but the account can still be used to access the company's server. Which security risks do the above scenarios belong to? (multiple choice)

• A. Manage security risks
• B. access security risk
• C. system security risk
• D. physical security risk

Answer: ABC

NEW QUESTION 13

aboutAHandESPSecurity protocol, which of the following options is true? (multiple choice)

• A. AHCan provide encryption and authentication functions
• B. ESPCan provide encryption and authentication functions
• C. AH The protocol number is51
• D. ESPThe protocol number is51

Answer: BC

NEW QUESTION 14

A digital envelope refers to the data obtained by the sender using the receiver's ______ to encrypt the symmetric key[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

There are two ways for a PKI entity to apply for a local certificate from a CA: ( ). (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16

some applications such asOracleFor database applications, the firewall session connection is interrupted due to no data flow transmission for a long time, resulting in service interruption. Which of the following is the optimal solution?

• A. Configure a long-term connection for a service
• B. turn onASPFFeatures
• C. Optimize security policies
• D. Enable shard cache

Answer: A

NEW QUESTION 17
......