Far Out H12-711_V3.0 Testing Software For HCIA-Security V3.0 Certification

NEW QUESTION 1

aboutNATAddress translation, which of the following statements is false?

• A. sourceNATconfiguration in technologyNATaddress pool, you can configure only one address poolIPaddress
• B. Address translation can be provided in the local area network according to the needs of usersFTP,WWW,Telnetand other services
• C. Some application layer protocols carry in the dataIPaddress information, make themNATWhen modifying the data in the upper layerIPAddress information
• D. for someTCP,UDPagreement (such asICMP,PPTP), cannot doNATconvert

Answer: D

NEW QUESTION 2

Which of the following security threats is an application security threat?

• A. Man-in-the-middle attack
• B. User identity is not authenticated
• C. Viruses, Trojans
• D. network intrusion

Answer: C

NEW QUESTION 3

aboutNATThe configuration commands for the address pool are as follows:no-patThe meaning of the parameters is:

• A. no address translation
• B. port multiplexing
• C. Do not translate source ports
• D. Do not convert destination port

Answer: C

NEW QUESTION 4

When configuring user single sign-on, if you use the mode of querying the AD server security log, please check the followingcertifiedProcedureEnterRow ordering:[fill in the blank]*
The AD monitor forwards the user login message to F7, and the user goes online at F7.
AD monitor through the WMI interface provided by AD server. Connect to the AD server to query the security log. Get the user login message.
accessboardrecord AD domain, AD servicedevicerecorduseHouseholdsuperiorStringinformation into the security log.
The AD monitor starts from the time when the AD single sign-on service starts, and regularly queries the security logs generated on the AD server.

• A.

Answer: 4213

NEW QUESTION 5

Because the server is a kind of computer, we can use our personal computer as a server in the enterprise.

• A. True
• B. False

Answer: B

NEW QUESTION 6

We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the () encryption algorithm to improve the encryption and decryption speed. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7

Firewall usagehrp standby config enableAfter the standby device configuration function is enabled by the command, all information that can be backed up can be configured directly on the standby device, and the configuration on the standby device can be synchronized to the active device.

• A. True
• B. False

Answer: A

NEW QUESTION 8

Evidence preservation is directly related to the legal effect of evidence. Which of the following is not an evidence preservation technique?

• A. Digital certificate technology
• B. Encryption Technology
• C. Data mining technology
• D. Digital Signature Technology

Answer: C

NEW QUESTION 9

Which of the following statements about firewalls is correct?

• A. The firewall cannot transparently access the network.
• B. Adding a firewall to the network will inevitably change the topology of the network.
• C. To avoid a single point of failure, the firewall only supports bypass deployment
• D. Depending on the usage scenario, the firewall can be deployed in a transparent mode or a three-bedroom type.

Answer: D

NEW QUESTION 10

When the FW is deployed at the network egress, if a fault occurs, the entire network service will be affected. In order to improve the reliability of the network, two FWs need to be deployed and formed ( ) (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

In which of the following scenarios does the firewall generate the Server-map table?

• A. When the firewall generates a session table, it will generate a Server-map table
• B. ASPF is deployed on the firewall and forwards the traffic of the multi-channel protocol
• C. Security policies are deployed on the firewall and traffic is released
• D. NAT Server is deployed on the firewall

Answer: BCD

NEW QUESTION 12

waiting for insurance2.0Which one of the stipulations"Spam should be detected and protected at key network nodes, and spam protection mechanisms should be upgraded and updated?

• A. Malicious code prevention
• B. communication transmission
• C. Centralized control
• D. Border Protection

Answer: A

NEW QUESTION 13

Which of the following is not a type of digital certificate?

• A. Local certificate
• B. Terminal certificate
• C. Self-signed certificate
• D. Device local certificate

Answer: D

NEW QUESTION 14

Which of the following security measures does the monitor correspond to?

• A. Intrusion Detection System
• B. Encrypted VPN
• C. Access control system
• D. Firewall

Answer: A

NEW QUESTION 15

Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc.
"and"That is to say, this policy is hit only if the information in the packet matches all fields.

• A. True
• B. False

Answer: B

NEW QUESTION 16

GREThe tunnel addresses at both ends of the tunnel can be configured as addresses on different network segments

• A. True
• B. False

Answer: A

NEW QUESTION 17
......