Most Recent HCIA-Security V3.0 H12-711_V3.0 Testing Software

NEW QUESTION 1

Which of the following options are the possible reasons for the problem that users cannot access network resources in the authentication-free two-way binding mode? (multiple choice)

• A. Authentication-free users and authenticated users are in the same security area
• B. Authentication-free users do not use the specifiedIP/MACaddressPC
• C. The authentication action in the authentication policy is set to"Do not acknowledge/Certification-free"
• D. Online users have reached the maximum

Answer: BD

NEW QUESTION 2

Which of the following options belong to the default security zone of Huawei Firewall? (multiple choice)

• A. Zonearea
• B. Trustarea
• C. Untrustarea
• D. Securityarea

Answer: BC

NEW QUESTION 3

Which of the following statements are true about port mirroring? (multiple choice)

• A. The mirror port replicates the packets to the observing port
• B. The observing port sends the received packets to the monitoring device
• C. The mirror port sends the received packets to the monitoring device
• D. The observing port replicates the packets to the mirroring port

Answer: AB

NEW QUESTION 4

Which of the following is not a Layer 2 VPN technology?

• A. PPTP
• B. IPsec
• C. L2TP
• D. L2F

Answer: B

NEW QUESTION 5

Which of the following options arePKIComponents of the architecture? (multiple choice)

• A. end entity
• B. Certificate Authority
• C. Certificate Registration Authority
• D. certificate store

Answer: ABCD

NEW QUESTION 6

( ) means that the computer system has defects and deficiencies in the specific matters of hardware, software, protocols or system security policies. (Chinese Standard Terminology) (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7

The IDS is usually installed on the switch to detect intrusion, and at the same time, it can avoid the single point of failure affecting the normal operation of the network.

• A. True
• B. False

Answer: A

NEW QUESTION 8

Which of the following areFTPThe standard port number of the protocol? (multiple choice)

• A. 20
• B. twenty one
• C. twenty three
• D. 80

Answer: AB

NEW QUESTION 9

Which of the following are functions of address translation technology?(multiple choice)

• A. Address translation enables internal network users (privateIPaddress) accessInternet
• B. Address translation allows many hosts on an internal LAN to share oneIPInternet address
• C. Address translation can handle encryptedIPheader
• D. Address translation can shield users on the internal network and improve the security of the internal network

Answer: ABD

NEW QUESTION 10

existUSGseries firewall, you can use. The function provides well-known application services for non-well-known ports.

• A. Port Mapping
• B. MACandIPaddress binding
• C. packet filtering
• D. Long connection

Answer: A

NEW QUESTION 11

existUSGConfigure on the system firewallNAT Server, will produceserver-mapTable, which of the following is not part of this representation?

• A. PurposeIP
• B. destination port number
• C. agreement number
• D. sourceIP

Answer: D

NEW QUESTION 12

Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13

When the FW is deployed at the network egress, if a fault occurs, it will affect the Zaonet service. to enhance the network
Reliability, need to deploy two FWs and form ______ [fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14

Which of the following statements is true about Huawei's routers and switchers??(multiple choice)

• A. Routers can implement some security functions, and some routers can implement more security functions by adding security boards
• B. The main function of the router is to forward dat
• C. When the enterprise has security requirements, sometimes a firewall may be a more suitable choice
• D. Switches have some security functions, and some switches can realize more security functions by adding security boards
• E. The switch does not have security features

Answer: ABC

NEW QUESTION 15

aboutTCP/IPDescription of protocol stack packet decapsulation, which of the following is correct? (multiple choice)

• A. The data packet is first transmitted to the data link laye
• B. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as:IP
• C. transport layer (TCP) after receiving the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such asUDP
• D. After the network layer receives the data packet, the network layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such asHTTP
• E. After the application layer receives the data packet, the application layer information is stripped after parsing, and the final displayed user data is exactly the same as the data sent by the sender host

Answer: AD

NEW QUESTION 16

What are the correct options for the following description of the basic concepts of LDAP?

• A. Directory Information Tree DIT: A collection of attributes constitutes a Directory Information Tree.
• B. Unique identifier DN, the name that uniquely identifies an entry in a directory information tree
• C. Relative Distinguished Name RDN, the name of the entry, uniquely identifies child entries of the same parent entry
• D. Attribute: The attribute describes the characteristics of the objec
• E. An attribute consists of an attribute type and one or more attribute values.

Answer: BD

NEW QUESTION 17

An employee of a company accesses the internal web server of the company through the firewall. The web page of the website can be opened by using a browser, but the reachability of the web server is tested by using the Ping command, and it shows that it is unreachable. What are the possible reasons?

• A. The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol
• B. The web server is down
• C. The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol
• D. The interface of the firewall connecting to the server is not added to the security zone

Answer: C

NEW QUESTION 18

Which of the following descriptions about the function of the iptables table is wrong?

• A. NAT table: The function of address translation.
• B. Raw table: Determines whether the packet is processed by the state tracking mechanism.
• C. Mangle table: modify security policy
• D. Filter table: Policy allowed or not allowed in the packet.

Answer: C

NEW QUESTION 19

firewallTrustClients in the domain can log inUntrustin the domainFTPserver, but the file cannot be downloaded, which of the following can solve the problem? (multiple choice)

• A. existTrustandUntrustrelease betweentwenty oneThe port number
• B. FTPWorks asportmode, modify fromTrustarriveUntrustThe zone's security policy action is Allow
• C. enabledetect ftp
• D. FTPWorks asPassivemode, modify fromTrustarriveUntrustThe zone's security policy action is Allow

Answer: CD

NEW QUESTION 20

_______ Authentication is to configure user information (including local user's user name, password and various attributes) on the network access server. The advantage is that it is fast.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 21
......