A Review Of Refined H12-711_V3.0 Practice Exam

NEW QUESTION 1

Which of the following attacks is not a malformed packet attack?

• A. Teardropattack
• B. Smurfattack
• C. TCPFragmentation attack
• D. ICMPUnreachable Packet Attack

Answer: D

NEW QUESTION 2

The information security level protection is to improve the overall security level of the country, and at the same time reasonably optimize the allocation of security resources, so that it can send back the greatest
security and economic benefits.

• A. True
• B. False

Answer: A

NEW QUESTION 3

The administrator wishes to clear the current session table. Which of the following commands is correct? (
)[Multiple choice]*

• A. display session table
• B. display firewall session table
• C. reset firewall session table
• D. clear firewall session table

Answer: C

NEW QUESTION 4

Which of the following options is correct regarding the description of firewall hot standby? (multiple choice)

• A. When the dual-system backup function needs to be provided in multiple areas on the firewall, it is necessary to configure multipleVRRPbackup group
• B. require the same firewall on the sameVGMPmanagement group ownedVRRPBackup group status remains consistent
• C. Firewall dual-system hot backup requires session table,MACInformation such as tables and routing tables are synchronized and backed up between the master device and the slave device
• D. VGMPto guarantee allVRRPConsistency of backup group switching

Answer: ABD

NEW QUESTION 5

Which of the following does not fall into the category of cybersecurity incidents?

• A. Major cybersecurity incident
• B. Special Cybersecurity Incident
• C. General cybersecurity incidents
• D. Major cybersecurity incident

Answer: B

NEW QUESTION 6

aboutSSL VPNdescription, which of the following is correct?

• A. Can be used without a client
• B. yesIPlayer to encrypt
• C. existNATcrossing problem
• D. No authentication required

Answer: A

NEW QUESTION 7

Which of the following options is not part of the quintuple range?

• A. sourceIP
• B. sourceMAC
• C. PurposeIP
• D. destination port

Answer: B

NEW QUESTION 8

The IDS is usually installed on the switch to detect intrusion, and at the same time, it can avoid the single point of failure affecting the normal operation of the network.

• A. True
• B. False

Answer: A

NEW QUESTION 9

aboutSSL VPNTechnology, which of the following statements is false?

• A. SSL VPNtechnology can be perfectly adapted toNATthrough the scene
• B. SSL VPNThe encryption of the technology only takes effect at the application layer
• C. SSL VPNRequires a dial-up client
• D. SSL VPNTechnology expands the reach of the enterprise's network

Answer: C

NEW QUESTION 10

Which of the following categories are included in Huawei Firewall User Management? (multiple choice)

• A. Internet user management
• B. Access user management
• C. Admin user management
• D. Device user management

Answer: ABC

NEW QUESTION 11

administratorPCandUSGThe firewall management port is directly connected, usingwebWhich of the following statements is correct? (multiple choice)

• A. managePCbrowser accesshttp;//192.168.0.1
• B. managePCofIPThe address is manually set to192.168.0.2-192.168.0.254
• C. managePCbrowser accesshttp://192.168.1.1
• D. will managePCThe network card is set to obtain automaticallyIPaddress

Answer: AB

NEW QUESTION 12

If users from the external network (where the security zone is Untrust) are allowed to access the intranet server (where the security zone is DMZ), the destination security zone selected when configuring the security policy is ______ .[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13

Network administrators can collect data to be analyzed on network devices through packet capture, port mirroring, or logs

• A. True
• B. False

Answer: A

NEW QUESTION 14

Which of the following is an action to be taken during the eradication phase in a cybersecurity emergency response? (multiple choice)

• A. Find Trojan horses, illegal authorizations, and system loopholes, and deal with them in a timely manner
• B. Revise security policies based on security incidents that occur, enable security auditing
• C. Block the behavior of the attack and reduce the impact
• D. Confirm the degree of damage caused by the security incident and report the security incident

Answer: AB

NEW QUESTION 15

DDosWhich of the following attack types is an attack?

• A. snooping scan attack
• B. Malformed Packet Attack
• C. special packet attack
• D. traffic attack

Answer: D

NEW QUESTION 16

Which of the following attacks is not a special packet attack?

• A. ICMPredirected packet attack
• B. ICMPUnreachable Packet Attack
• C. IPaddress scanning attack
• D. oversizedICMPPacket attack

Answer: C

NEW QUESTION 17
......