How Many Questions Of H12-711_V3.0 Question

NEW QUESTION 1

The firewall imports users locally, and supports importing user information from ______ format files and database dbm files to the local device.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 2

Which of the following information is encrypted during the use of digital envelopes? (multiple choice)

• A. Symmetric key
• B. User data
• C. Receiver's public key
• D. Receiver's private key

Answer: AB

NEW QUESTION 3

Common scanning attacks include: port scanning tools, vulnerability scanning tools, application scanning tools and database scanning tools, etc.

• A. True
• B. False

Answer: A

NEW QUESTION 4

Business Impact Analysis (BIA) does not include which of the following?

• A. business priority
• B. Incident handling priority
• C. impact assessment
• D. Risk Identification

Answer: C

NEW QUESTION 5

Which of the following options is notIPSec SAlogo?

• A. SPI
• B. Destination address
• C. source address
• D. Security Protocol

Answer: C

NEW QUESTION 6

Execute the command on the firewall and display the above information. Which of the following descriptions is correct? (multiple choice)

• A. this firewallVGMPgroup status isActive
• B. this firewallG1/0/1virtual interfaceIPaddress is202.38.10.2
• C. this firewallVRIDfor1ofVRRPThe priority of the backup group is100
• D. When the main deviceUSG_AWill not switch in the event of a failure

Answer: ABC

NEW QUESTION 7

Use the Ping command on the firewall to test the reachability to the server (the security zone where the server is located is the DMZ). If a security policy is configured to allow the test traffic, the source security zone is ______. [fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8

In tunnel encapsulation mode.IPSecThere is no need to have a route to the destination private network segment during configuration, because the data will be re-encapsulated to use the newIPThe header looks up the routing table.

• A. True
• B. False

Answer: B

NEW QUESTION 9

aboutIKE SA, which of the following descriptions is false?

• A. IKE SAis bidirectional
• B. IKEis based onUDPapplication layer protocol
• C. IKE SAit's forIPSec SAServices
• D. The encryption algorithm used by user data packets isIKE SADecide

Answer: D

NEW QUESTION 10

Information security prevention technologies include: data encryption, identity authentication, intrusion prevention and anti-virus, etc.

• A. True
• B. False

Answer: A

NEW QUESTION 11

In the process of digital signature, which of the following is mainly carried outHASHAlgorithms thereby verifying the integrity of data transmissions?

• A. User data
• B. Symmetric key
• C. Receiver's public key
• D. Receiver's private key

Answer: A

NEW QUESTION 12

The default policy on the firewall defaults to ( ) all traffic. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13

To configure a NAT policy in command line mode, you need to use the ( ) command in the system view to enter the NAT policy configuration view. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14

aboutVRRP/VGMP/HRPWhich of the following statements is correct? (multiple choice)

• A. VRRPResponsible for sending free messages during active/standby switchoverARPDirect traffic on the new master
• B. VGMPResponsible for monitoring equipment failures and controlling rapid switching of equipment
• C. HRPResponsible for data backup during dual-system hot standby operation
• D. inActivestateVGMPGroups may containstandbystateVRRPGroup

Answer: ABC

NEW QUESTION 15

want to implement security policy"Anti-virus function", must beLicenseactivation.

• A. True
• B. False

Answer: A

NEW QUESTION 16

Based on the HiSec solution, please drag the device on the left into the logical architecture layer on the right.[fill in the blank]

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 17

Which of the following options is correct for the description of a buffer overflow attack?(multiple choice)

• A. Buffer overflow attacks exploit the flaws of software systems in memory operations to run attack code with high operating privileges.
• B. Buffer overflow attacks have nothing to do with the vulnerabilities and architecture of the operating system.
• C. Buffer overflow attacks are one of the most common ways to attack the behavior of software systems
• D. Buffer overflow attacks are application-layer attacks.

Answer: ACD

NEW QUESTION 18

Which of the following options is correct regarding the description of firewall hot standby? (multiple choice)

• A. When the dual-system backup function needs to be provided in multiple areas on the firewall, it is necessary to configure multipleVRRPbackup group
• B. require the same firewall on the sameVGMPmanagement group ownedVRRPBackup group status remains consistent
• C. Firewall dual-system hot backup requires session table,MACInformation such as tables and routing tables are synchronized and backed up between the master device and the slave device
• D. VGMPto guarantee allVRRPConsistency of backup group switching

Answer: ABD

NEW QUESTION 19

In the architecture of PKI, ______ is the window for CA to face users, and is an extension of CA’s certificate issuance and management functions. He is responsible for accepting user’s certificate registration and revocation applications, reviewing employee identity information, and deciding Whether to submit an application to the CA to issue or revoke a digital certificate.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 20

existUSGIn the series firewalls, which of the following commands can be used to queryNATconversion result?

• A. display nat translation
• B. display firewall session table
• C. display current nat
• D. display firewall nat translation

Answer: B

NEW QUESTION 21
......