Avant-garde H12-711_V3.0 Exams For HCIA-Security V3.0 Certification

NEW QUESTION 1

Which of the following is not a major form of computer crime?

• A. Implant the Trojan horse on the target host
• B. Hacking the target host
• C. Personal questionnaires using a computer
• D. Using scanning tools to collect network information without permission

Answer: C

NEW QUESTION 2

If there is a practical change in the company structure, it is necessary to re-test whether the business continuity plan is feasible

• A. True
• B. False

Answer: A

NEW QUESTION 3

The attacker sendsICMPAnswer the request and set the destination address of the request packet as the broadcast address of the victim network. What kind of attack is this behavior?

• A. IPspoofing attack
• B. Smurfattack
• C. ICMPredirect attack
• D. SYN floodattack

Answer: B

NEW QUESTION 4

Usually we divide servers into two categories: general-purpose servers and functional servers. Which of the following options meets this classification standard?

• A. By application level
• B. By use
• C. By shape
• D. By Architecture

Answer: B

NEW QUESTION 5

Which of the following is true about the difference between pre-incident prevention strategies and post-incident recovery strategies? (multiple choice)

• A. Prevention strategies focus on minimizing the likelihood of an accident before a story occur
• B. Recovery strategies focus on minimizing the impact and damage to the business after an incident
• C. The role of pre-disaster prevention strategies does not include minimizing economic and reputational losses caused by accidents
• D. Recovery strategies are used to improve business high availability
• E. A recovery strategy is part of a business continuity plan

Answer: ACD

NEW QUESTION 6

We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the ______ encryption algorithm to improve the encryption and decryption speed.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7

( ) Can block discovered network intrusions in real time. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8

Which of the following attacks is not a malformed packet attack?

• A. Teardropattack
• B. Smurfattack
• C. TCPFragmentation attack
• D. ICMPUnreachable Packet Attack

Answer: D

NEW QUESTION 9

In which of the following scenarios does the firewall generate the Server map table? ( )

• A. NAT Server is deployed on the firewall
• B. ASPF is deployed on the firewall and forwards the traffic of the multi-channel protocol
• C. When the firewall generates a session table, it will generate a Server-map table
• D. Security policies are deployed on the firewall and traffic is released

Answer: AB

NEW QUESTION 10

IPSec VPNs use pre-shared keys, ( ) and digital envelopes to authenticate peers. (fill in the blank) digital

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

In USG6000E, the initial priority of VGMP is ( ) (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 12

Which of the following information is not the backup content included in the status information backup in the dual-system hot backup? ( )[Multiple choice]*

• A. IPSEC tunnel
• B. NAPT related table items
• C. IPv4 session table
• D. Routing table

Answer: D

NEW QUESTION 13

Which of the following is an action to be taken during the eradication phase in a cybersecurity emergency response? (multiple choice)

• A. Find Trojan horses, illegal authorizations, and system loopholes, and deal with them in a timely manner
• B. Revise security policies based on security incidents that occur, enable security auditing
• C. Block the behavior of the attack and reduce the impact
• D. Confirm the degree of damage caused by the security incident and report the security incident

Answer: AB

NEW QUESTION 14

Which of the following descriptions about digital fingerprints in digital signatures is wrong? ( )[Multiple choice]*

• A. It is the data obtained by the sender after calculating the plaintext information through the HASH algorithm.
• B. The receiver will use the sender's public key to calculate the generated data fingerprint and compare it with the received digital fingerprint.
• C. Digital fingerprints are also known as information digests.
• D. The receiver needs to use the sender's public key to unlock the digital signature to obtain the digital fingerprint.

Answer: C

NEW QUESTION 15

The method of collecting information by port scanning using scanning tools belongs to the means of ( ) analysis. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16

aboutNATConfiguration statement, which of the following is false?

• A. Configure sources in transparent modeNAT, the firewall does not supporteasy-ipWay
• B. in the address poolIPaddress can beNATserverpublic networkIPaddress overlap
• C. in the networkVoIPWhen doing business, no configuration is requiredNATALG
• D. Firewall does not supportESPandAHmessageNAPTconvert

Answer: D

NEW QUESTION 17
......