H12-711_V4.0-ENU 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Regarding IKE SA, which of the following descriptions is incorrect?
A. IKE SA is two-way
B. IKE is an application layer protocol based on UDP
C. IKE SA serves IPsec SA
D. The encryption algorithm used in user data packets is determined by IKE SA.

正解: D

Question No : 2
When a network security incident occurs, investigate intrusions, viruses or Trojans, and patch and strengthen the host.
Which stage of network security emergency response does the above action belong to?

A.Recovery phase
B.Detection phase
C.Eradication phase
D.Inhibition stage

正解:

Question No : 3
When configuring a GRE Tunnel interface, the Destination address generally refers to which of the following parameters?

A.Local tunnel interface IP address
B.Local external network export IP address
C.Peer's external network egress IP address
D.Peer tunnel interface IP address

正解:

Question No : 4
If there is an incident of foreign criminals using the Internet to steal our country’s national secrets, what kind of early warning will the country activate?

A.Orange Alert
B.Yellow Alert
C.Blue Alert
D.Red Alert

正解:

Question No : 5
Electronic evidence preservation is directly related to the legal validity of evidence. Only preservation that complies with legal procedures can ensure its authenticity and reliability. Which of the following is not an evidence preservation technology?

A.Encryption technology
B.Digital certificate technology
C.Digital signature technology
D.Message mark tracking technology

正解:

Question No : 6
Vulnerabilities, also called vulnerabilities, refer to defects and deficiencies in computer systems in specific matters of hardware, software, protocols, or system security policies.
Which of the following descriptions of vulnerability characteristics is incorrect?

A.A vulnerability is a security risk that exposes computers to hacker attacks.
B.The vulnerability can be exploited remotely.
C.The vulnerability cannot be patched
D.Vulnerabilities are unknown beforehand and discovered afterward.

正解:

Question No : 7
Some applications, such as Oracle database applications, have no data flow transmission for a long time, causing the firewall session connection to be interrupted, resulting in business interruption. Which of the following is the optimal solution?

A.Configure a long connection for a certain business
B.Enable ASPF function
C.Optimize security policies
D.Enable shard caching

正解:

Question No : 8
Intrusion prevention equipment can effectively defend against which of the following attacks?

A.Transport layer
B.Application layer
C.Network layer
D.Physical layer

正解:

Question No : 9
What is the agreement number of the AH agreement?

A.50
B.51
C.55
D.52

正解:

Question No : 10
Which of the following measures can prevent IP spoofing attacks?

A.Filter specific ports on the border firewall
B.Set up a route to a specific IP on the border firewall
C.Deploy target IP address filtering on the border router
D.Source IP address filtering on the border firewall

正解:

Question No : 11
Which of the following types of firewalls has the highest processing efficiency when processing non-first packet data flows?

A.Proxy firewall
B.Packet filtering firewall
C.Stateful Monitoring Firewall
D.Software firewall

正解:

Question No : 12
When the company network administrator configures dual-machine hot backup, configure the status of VRRP backup group 1 as Active, and configure the virtual IP address as 10.1.1.1/24, then the command that needs to be typed in the blank space is?

A.rule name c Source-zone untrust Destination-zone trust Destination-address 202.106.1.132 Action permit
B.rule name d Source-zone untrust Destination-zone trust Destination-address 10.10.1.132 Action permit
C.security-policy Rule name a Source-zone untrust Source-address 202.106.1.132 Action permit
D.rule name b Source-zone untrust Destination-zone trust Source-address 10.10.1.1 32 Action permit

正解:

Question No : 13
As shown in the figure, when using the Client - Initiated VPN method to establish an L2TP VPN, which of the following is the destination of the PPP packet?

A.Access users
B.LNS
C.LAC
D.Server

正解:

Question No : 14
Which of the following options is not a certificate saving file format supported by USG6000 series devices?

A.PKCS#12
B.DER
C.PEM
D.PKCS#

正解:

Question No : 15
The administrator connects to the firewall through the G1/0/0 interface (the interface has been added to the Trust zone). If the administrator is allowed to log in to the firewall through G1/0/0 for configuration management, how should the administrator configure the traffic allowed in the security policy? direction?

A.Allow traffic from Trust Zone to Untrust Zone
B.Allow traffic from Trust Zone to Local Zone
C.Release traffic from Local Zone to Local Zone
D.Allow traffic from Trust Zone to Trust Zone

正解:

Huawei H12-711_V4.0-ENU 問題練習