Prepare H12-711 Question Answers - H12-711 Exam Dumps
Real Huawei H12-711 Exam Questions [Updated 2022]
NEW QUESTION 147
As shown in the figure, a NAT server application scenario is configured when the web configuration mode is used.
Which of the following statements are correct? (Multiple choice)
- A. When configuring NAT Server, the internal address is 200.10.10.1 and the external address is 10.1.1.2.
- B. When configuring an interzone security policy, set the source security zone to DMZ and the target security zone to Untrust.
- C. When configuring an interzone security policy, set the source security zone to Untrust and the target security zone to DMZ.
- D. When configuring NAT Server, the internal address is 10.1.1.2 and the external address is 200.10.10.1.
Answer: C,D
NEW QUESTION 148
The administrator wants to create a web configuration administrator, and set the Https device management port number to 20000, and set the administrator to the administrator level. which of the following commands are correct?
- A. Step1: web-manager enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] password cipher Admin@123
- B. Step1: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa manager-user-client001] password cipher
- C. Step1: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level 1 [USG-aaa-manager-user-client001] password cipher Admin@123
- D. Step1: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level 15 [USG-aaa-manager-user-client001] password cipher Admin@123
Answer: D
NEW QUESTION 149
Which ofthe following is the username / password for the first login ofthe USG series firewall?
- A. Username admin, password Admin@123
- B. User name admin, password Admin123
- C. User name admin, password admin
- D. User name admin, password admin@123
Answer: A
NEW QUESTION 150
After the firewall uses the hrp standby config enable command to enable the standby device configuration function, all the information that can be backed up can bedirectly configured on the standby device, and the configuration on the standby device can be synchronized to the active device.
- A. True
- B. False
Answer: A
NEW QUESTION 151
When the session authentication mode is used to trigger the firewall's built-in Portal authentication, the user does not actively perform identity authentication, advanced service access, and device push "redirect" to the authentication page.
- A. True
- B. False
Answer: A
NEW QUESTION 152
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements iscorrect about the standard of evidence identification?
- A. Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.
- B. Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to s certain extent, the court should determine that it is relevant.
- C. Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated
- D. Fairness standard refers to the evidence obtained by the legal subject through egal means, which has the evidence ability.
Answer: B
NEW QUESTION 153
Check the firewall HRP status information as follows:
HRP_S [USG_ B] display hrp state 16:90: 13 2010/11/29 The firewall's config state is : SLAVE Current state of virtual routers configured as slave GigabitEthernet0/0/0 vird 1 : slave GigabitEthernet0/0/1 vied 2 : slave Which of the following description is correct?
- A. The firewall ofHRP heartbeats interface is G0/0/0 and G0/0/1
- B. The firewall VGMP group status is Master
- C. The firewall must be in a state of preemption
- D. The firewall G0/0/0 and 0/1 GO / interface of VRRP group status is Slave
Answer: D
NEW QUESTION 154
What are the main security capability of encryption service? (Choose three.)
- A. Integrity
- B. Confidentiality
- C. Non-repudiation
- D. Scalability
Answer: A,B,C
NEW QUESTION 155
What port numbers may be used by FTP protocol? (Choose two.)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B,D
NEW QUESTION 156
Which of the following is null a itjquiiemeiil fui (bewail duuble hul standby?
- A. The firewall hardware model is consistent
- B. The firewall software version is consistent
- C. The type and number of the interface used are the same
- D. The firewall interface has the same IP address.
Answer: D
NEW QUESTION 157
When configuring NAT Server on the LSG series firewall, the server-map table will be generated. Which of the following does not belong in the table?
- A. Destination port
- B. Source IP
- C. Destination IP
- D. Agreement number
Answer: B
NEW QUESTION 158
Which ofthe following are the standard port numbers for the FTP protocol? (Multiple choice)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B,D
NEW QUESTION 159
Which of the following is the correct description of windows log event type? (Multiple Choice)
- A. A warning event is a successful operation event of an application, driver, or service.
- B. Failure audit event refers to a failed audit security login attempt, such as a failure when the user view accesses the network drive is logged as a failed audit event.
- C. Error events usually refer to the loss of function and data. For example, if a service cannot be loaded as a system boot, an error event will be generated.
- D. When the disk space is insufficient, it will be recorded as an "information event"
Answer: B,C,D
NEW QUESTION 160
Which of the following information will be encrypted during the use of digital envelopes? (Multiple Choice)
- A. User data
- B. Receiver private key
- C. Receiver public key
- D. Symmetric key
Answer: A,D
NEW QUESTION 161
The host firewall is mainly used to protect the host from attacks and intrusions from the network
- A. True
- B. False
Answer: A
NEW QUESTION 162
HRP (Huawei Redundancy Protocol) Protocol to back up the connection state of data include: (Multiple Choice)
- A. TCP/UDP sessions table
- B. the dynamic blacklist
- C. the routing table
- D. Server Map table
Answer: A,B,D
NEW QUESTION 163
In the currentnetwork it has deployed other authentication system, device registration function by enabling a single point, reducing the user to re-enter the password. What are correct about single sign-on statements?
(Multiple choice)
- A. AD domain single sign-on is only one depbyment model
- B. AD domain single sign-on login can be minored data stream synchronized manner to the firewall
- C. Device can identify the user through the authentication of the identity authentication system, user access, the device will not pis authentication pages, to avoid further asked to enter a username / password
- D. Although not requireto enter a user password, but the authentication server needs to interact with the user password and devices used to ensure that certification through discussion
Answer: B,C
NEW QUESTION 164
The attacker by sending ICMP response request, and will request packet destination address set to suffer Internet radio address. Which kind of attack does this behavior belong to9
- A. ICMP redirect attack
- B. SYN flood attack
- C. Smurf attack
- D. IP spoofing attack
Answer: C
NEW QUESTION 165
Winch of the following is the encryption technology used in digital envelopes?
- A. Asymmetric encryption algorithm
- B. Symmetric encryption algorithm
Answer: A
NEW QUESTION 166
Regarding the relationship and role of VRRPA/GMP/HRP. which of the following statements are correct?(Multiple choice)
- A. HRP is responsible for data backup during hot standby operation
- B. VGMP group in the active state may include the VRRP group in the standby state.
- C. VRRP is responsible for sending free ARP to direct traffic to the new primary device during active/standby switchover.
- D. VGMP is responsible for monitoring equipment failures and controlling fast switching of equipment.
Answer: A,C,D
NEW QUESTION 167
Which of the following are the necessary configurations of IPSec VPN? (Multiple Choice)
- A. Configure IKE SA related parameters
- B. Configuring IPSec SA related parameters
- C. Configuring IKE neighbors
- D. Configure the stream of interest
Answer: A,B,C,D
NEW QUESTION 168
Which of the following is wrong about the management of Internet users?
- A. The system has a default user group by default, which is also the system default authentication domain.
- B. Each user group can include multiple users and user groups
- C. Each user belongs to at least one user group, also can belong to multiple user groups
- D. Each user group canbelong to multiple user groups
Answer: D
NEW QUESTION 169
......
H12-711 Exam Dumps Pass with Updated 2022: https://lead2pass.testpassed.com/H12-711-pass-rate.html