GB0-510-ENU 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Which of the following statements about the HWTACACS protocol and the RADIUS protocol is correct? (Multiple choice)

A.Both HWTACACS and RADIUS support the authorized use of device configuration commands.
B.RADIUS only encrypts the password field in the authentication message.
C.HWTACACS encrypts the entire message body.
D.HWTACACS uses TCP transmission, while RADUISR uses UD

正解:

Question No : 2
Regarding the conversion from inter-domain policies to security policies, which of the following statements is correct? (Multiple choice)

A.Packet filtering policies have higher priority than security policies.
B.Security policies and object policies can coexist.
C.When using the new version, it is recommended to convert the object strategy to an inter-domain strategy.
D.Security policies and inter-domain policies can coexist.

正解:

Question No : 3
What does AAA certification mainly include? (Multiple choice)

A.Billing (Accounting)
B.Authorization
C.Authentication
D.Access

正解:

Question No : 4
The security policy acceleration function is disabled, which will increase the time for rule matching and connection establishment, and will also consume a lot of system CPU resources.

A.True
B.False

正解:

Question No : 5
The types of ACL (Access Control List) include ( ). (Multiple choice)

A.Seven-layer ACL
B.Layer 2 ACL
C.Advanced ACL
D.Basic ACL

正解:

Question No : 6
The NAT static mode of NAT can achieve the reuse of public network addresses, effectively solving the problem of IPv4 address shortage.

A.True
B.False

正解:

Question No : 7
The memory allocation mechanism of session management allocates a large block of memory each time. This block of memory is only reclaimed when all sessions in this large block of memory have aged out. Therefore, although we see the number of sessions increase or decrease, the memory utilization does not increase significantly.

A.True
B.False

正解:

Question No : 8
If an interface is configured with both IPSec and NAT, which of the following descriptions are correct?

A.The interface strategy cannot be matched correctly.
B.Because NAT has a higher priority than IPsec in the packet processing flow, traffic that should go through IPsec cannot normally pass through the IPsec tunnel.
C.The two do not affect each other.
D.Because NAT has a lower priority than IPsec in the packet processing flow, traffic that should go through IPsec can normally go through the IPsec tunnel.

正解:

Question No : 9
Which of the following descriptions of firewall functionality is incorrect?

A.Firewalls are capable of enforcing security policies.
B.Firewalls can generate audit logs.
C.Firewalls can limit the exposure of an organization's security posture.
D.Firewalls can protect against viruses.

正解:

Question No : 10
An IPS (Intrusion Prevention System) is a product based on ( ), and its attack identification is based on ( ) matching.

A.Application layer, feature library
B.Network layer, protocols
C.Application layer, protocol
D.Network layer, feature library

正解:

Question No : 11
What are the website filtering functions of the H3C SecPath firewall? (Multiple choice)

A.Website URL Filtering
B.URL parameters
C.Java blocking
D.ActiveX blocking

正解:

Question No : 12
Regarding the packet processing flow on the inbound interface of a NAT device, which of the following descriptions are correct?

A.Randomly match NAT and security policies
B.NAT occurs before the security policy; that is, NAT is matched first, then the security policy is matched.
C.Security policy precedes NAT; that is, security policy is matched first, then NAT is matched.
D.Process according to the priority of NAT policy and security policy.

正解:

Question No : 13
Which of the following statements about firewall performance metrics is incorrect? (Multiple choice)

A.The higher the latency, the faster the firewall processes the data.
B.Throughput needs to be tested with data packets of different sizes and traffic from different directions, and the average value should be taken.
C.The lower the number of concurrent connections, the more users can be allowed to access the internet simultaneously within a given period of time.
D.The fewer new connections established, the stronger the resistance to attacks.

正解:

Question No : 14
Regarding the SecPath firewall, which of the following statements is correct?

A.The firewall can only be upgraded via command line.
B.The default username/password for firewall web login is h3c/h3c.
C.The default login IP address for the waterproof wall is 192.168.0.1
D.Firewall inter-domain policies can only be configured via a web page.

正解:

Question No : 15
In the H3C SecPath firewall, which of the following attacks must be used in conjunction with a dynamic blacklist? (Multiple choice)

A.WinNuke attack
B.Land Scan Attack
C.Address scanning attack
D.Smurf attack
E.Port scanning attack

正解:

H3C GB0-510-ENU 問題練習