Refined HUAWEI H12-711_V3.0 Free Practice Exam Online

NEW QUESTION 1

Which of the following options is NOTwindowsOS log type?

• A. business log
• B. application log
• C. Security log
• D. System log

Answer: A

NEW QUESTION 2

In order to obtain criminal evidence, it is necessary to master the technology of intrusion tracking. Which of the following options are correct for the description of tracking technology? (multiple choice)

• A. Packet logging technology through the tracedIPInsert trace data into packets to mark packets on each router mentioned
• B. Link detection technology determines the information of the attack source by testing the network connection between routers
• C. Packet marking technology extracts attack source information by logging packets on routers and then using data drilling techniques
• D. Shallow mail behavior analysis can achieveIPlandAnalysis of information such as address, sending time, sending frequency, number of recipients, shallow email headers, etc.

Answer: ABD

NEW QUESTION 3

Use the Ping command on the firewall to test the reachability to the server (the security zone where the server is located is the DMZ). If a security policy is configured to allow the test traffic, the source security zone is ______. [fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

Which of the following are the main implementations of gateway antivirus? (multiple choice)

• A. Proxy scan method
• B. Stream scan method
• C. Packet killing method
• D. File killing method

Answer: AB

NEW QUESTION 5

aboutIKE SA, which of the following descriptions is false?

• A. IKE SAis bidirectional
• B. IKEis based onUDPapplication layer protocol
• C. IKE SAit's forIPSec SAServices
• D. The encryption algorithm used by user data packets isIKE SADecide

Answer: D

NEW QUESTION 6

Which of the following is used in digital signature technology to encrypt digital fingerprints?

• A. sender's public key
• B. sender private key
• C. Receiver's public key
• D. Receiver's private key

Answer: B

NEW QUESTION 7

In the classification of the information security level protection system, which of the following levels define that if the information system is destroyed, it will cause damage to social order and public interests? (multiple choice)

• A. first levelUser self-protection level
• B. second levelSystem Audit Protection Level
• C. third levelSafety Mark Protection
• D. fourth level structured protection

Answer: ABCD

NEW QUESTION 8

Which of the following are HRP(Huawei Redundancy Protocol) protocol can back up state information? (multiple choice)

• A. session table
• B. ServerMapentry
• C. Dynamic blacklist
• D. routing table

Answer: ABC

NEW QUESTION 9

Which of the following options arePKIentity orientationCAHow to apply for a local certificate? (multiple choice)

• A. Online Application
• B. local application
• C. online application
• D. Apply offline

Answer: AD

NEW QUESTION 10

Which of the following is not part of a digital certificate?

• A. public key
• B. private key
• C. Validity period
• D. Issuer

Answer: B

NEW QUESTION 11

Which of the following descriptions of the firewall log is wrong?

• A. The log level Emergency is the most severe level
• B. Alert log level indicates a major abnormality of the device, requiring immediate action
• C. According to the severity level or urgency of the informatio
• D. The log can be divided into 8 level
• E. Themore serious the information, the greater the log level value.
• F. The ebug log level indicates that it is general information about the normal operation of the device, and the user does not need to pay attention

Answer: D

NEW QUESTION 12

Digital certificates can be divided into local certificates,CACertificates, root certificates, self-signed certificates, etc.

• A. True
• B. False

Answer: A

NEW QUESTION 13

aboutClient-InitializedofL2TP VPN, which of the following statements is false?

• A. remote user accessInternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request
• B. ;NSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password
• C. LNSAssign private keys to remote usersIPaddress
• D. Remote users do not need to installVPNClient software

Answer: D

NEW QUESTION 14

Multiple different ( ) cannot be added to the same interface on the firewall at the same time (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

firewallGE1/0/1andGE1/0/2mouth belongs toDMZarea, if you want to implementGE1/0/1The connected area is accessibleGE1/0/2Connected area, which of the following is correct?

• A. needs to be configuredLocalarriveDMZsecurity policy
• B. No configuration required
• C. Interzone security policy needs to be configured
• D. needs to be configuredDMZarrivelocalsecurity policy

Answer: B

NEW QUESTION 16

Antivirus software and host firewalls work the same way.

• A. True
• B. False

Answer: B

NEW QUESTION 17
......