A Review Of Verified H12-711_V3.0 Braindump

NEW QUESTION 1

We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the () encryption algorithm to improve the encryption and decryption speed. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 2

The initial priority of the USG9500VGMP group is related to which of the following factors ( )? *

• A. interface bandwidth
• B. VRRP priority
• C. Number of daughter cards on the interface board
• D. The number of CPUs on the D service board

Answer: CD

NEW QUESTION 3

Which of the following statements about the patch is incorrect?

• A. A patch is a small program made by the original author of the software for a discovered vulnerability
• B. Not patching does not affect the operation of the system, so whether patching is irrelevant or not.
• C. Patches are generally updated continuously.
• D. Computer users should download and install the latest patches in a timely manner to protect their systems

Answer: B

NEW QUESTION 4

IPSec VPNs use pre-shared keys, ( ) and digital envelopes to authenticate peers. (fill in the blank) digital

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 5

When configuring a security policy, a security policy can refer to an address set or configure multiple purposesIPaddress.

• A. True
• B. False

Answer: A

NEW QUESTION 6

Which of the following is false for a description of an intrusion detection system?.

• A. Intrusion detection system can collect a large amount of key information dynamically through network and computer.And can analyze and judge the current state of the entire system environment in time
• B. Once the intrusion detection system finds that there is a behavior that violates the security policy or the system has traces of being attacked, it can implement blocking operations.
• C. Intrusion detection system includes all hardware and software systems used for intrusion detection
• D. The immersion detection system can be linked with firewalls and switches, making it a powerful tool for firewalls"assistant", better and more precise control of traffic access between domains

Answer: C

NEW QUESTION 7

Single sign-on function for Internet users, users directlyADServer authentication, the device does not interfere with the user authentication process,ADMonitoring services need to be deployed inUSGequipment, monitoringADAuthentication information of the server

• A. True
• B. False

Answer: A

NEW QUESTION 8

Applying for special funds for emergency response and purchasing emergency response software and hardware equipment belong to the work content of which stage of the network's complete emergency response?

• A. preparation stage
• B. Inhibition stage
• C. response phase
• D. recovery phase

Answer: A

NEW QUESTION 9

Regarding the NAT policy processing flow, which of the following options are correct? ( )*

• A. Server-map is processed before the security policy is matched
• B. Source NAT policy is processed after security policy match
• C. Source NAT policy queries are processed after the session is created
• D. Server-map is processed after state detection

Answer: ABD

NEW QUESTION 10

aboutwindowsFirewall description, which of the following options are correct? (multiple choice)

• A. windowsThe firewall can only allow or prohibit preset programs or functions and programs installed on the system, and cannot customize the release rules according to the protocol or port number.
• B. windowsThe firewall can not only allow or prohibit preset programs or functions and programs installed on the system, but also support its own custom release rules based on protocols or port numbers.
• C. If you are settingwindowsDuring the firewall process, the Internet cannot be accesse
• D. You can use the restore default function to quickly restore the firewall to its initial state.
• E. windows the firewall can also change the notification rules in a closed state

Answer: BC

NEW QUESTION 11

In the Linux system, which of the following is the command to query the P address information? ( )[Multiple choice]*

• A. ifconfig)
• B. display ip interface brief
• C. ipconfig
• D. display ip

Answer: A

NEW QUESTION 12

Which of the following NAT technologies is a destination NAT technology?

• A. Easy-ip
• B. NAT No-PAT
• C. NAPT
• D. NAT Server

Answer: D

NEW QUESTION 13

Social engineering is a means of harm such as deception, harm, etc., through psychological traps such as psychological weaknesses, instinctive reactions, curiosity, trust, and greed of victims.

• A. True
• B. False

Answer: A

NEW QUESTION 14

Understanding engineering principles belongs to ( ) the category of security awareness training in information security prevention. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

NATThe technology can realize the secure transmission of data by encrypting the data.

• A. True
• B. False

Answer: B

NEW QUESTION 16

Regarding NAT technology. Which of the following descriptions is false?

• A. In Huawei firewalls, source NAT technology refers to the translation of the source address in the IP header of the connection that initiates the connection.
• B. In the Huawei firewall, Easy IP directly uses the public network address of the interface as the translated address, and does not need to configure a NAT address pool.
• C. In Huawei firewalls, the NAT No-PAT technology needs to be implemented by configuring a NAT address pool.
• D. In Huawei firewalls, the only NAT technology with port translation is NAPT.

Answer: D

NEW QUESTION 17

Which of the following is network address port translation (NAPT) and only translate network addresses (No-PAT) difference?

• A. go throughNo-PATAfter conversion, for external network users, all packets come from the sameIPaddress
• B. No-PATOnly supports protocol port translation at the transport layer
• C. NAPTOnly supports protocol address translation at the network layer
• D. No-PATSupports protocol address translation at the network layer

Answer: D

NEW QUESTION 18

After the firewall detects an intrusion, the administrator can view the intrusion log information in the firewall business log or ( ) log. (fill in the blank

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 19

firewallGE1/0/1andGE1/0/2mouth belongs toDMZarea, if you want to implementGE1/0/1The connected area is accessibleGE1/0/2Connected area, which of the following is correct?

• A. needs to be configuredlocalarriveDMZsecurity policy
• B. No configuration required
• C. Interzone security policy needs to be configured
• D. needs to be configuredDMZarrivelocalsecurity policy

Answer: B

NEW QUESTION 20

Digital signature is to generate digital fingerprint by using hash algorithm, so as to ensure the integrity of data transmission

• A. True
• B. False

Answer: A

NEW QUESTION 21
......