Replace H12-711_V3.0 Testing Bible For HCIA-Security V3.0 Certification

NEW QUESTION 1

In a stateful inspection firewall, when the stateful inspection mechanism is enabled, the second packet of the three-way handshake (SYN+ACK) when reaching the firewall, which of the following descriptions is correct if there is no corresponding session table on the firewall?

• A. The firewall does not create a session table, but allows packets to pass through
• B. If the firewall security policy allows packets to pass, create a session table
• C. Packets must not pass through the firewall
• D. Packets must pass through the firewall and establish a session

Answer: C

NEW QUESTION 2

NATThe technology can realize the secure transmission of data by encrypting the data.

• A. True
• B. False

Answer: B

NEW QUESTION 3

at HuaweiUSGOn a series device, the administrator wants to wipe the configuration file, which of the following commands is correct?

• A. clear saved-configuration
• B. reset saved-configuration
• C. reset current-configuration
• D. reset running-configuration

Answer: B

NEW QUESTION 4

As shown, the USG firewall NAT configuration is as follows:

• A. When FTP Server1 responds to Client A, it is converted to the address 1.1.1.5 in Address Ground 1
• B. Source NAT configuration, only for intranet users (10.1.1.0/24) to access the external network for translation
• C. When the IP address of the FTP Server host is changed to 1.11.3. Client A host can still access the FTP Server more
• D. Client A accesses FTP Server 1.1.1.1, and the destination address is converted to 10.1.1.2. The source address remains unchanged

Answer: C

NEW QUESTION 5

The attacker sends a SYN message with the same source address and destination address, or the source address is the loopback address to the target host (the source port and destination port are the same, causing the attacker to send a SYN-AKY message to its own address) What kind of attack is this behavior black? ()[Multiple choice]*

• A. Smurf attack
• B. SYN Flood Attack
• C. TCP Spoofing Attack
• D. Land attack

Answer: D

NEW QUESTION 6

whenUSGWhich of the following logs can be viewed when the series firewall hard disk is in place? (multiple choice)

• A. Operation log
• B. business log
• C. Alarm information
• D. Threat log

Answer: ABCD

NEW QUESTION 7

aboutTCP/IPDescription of protocol stack packet decapsulation, which of the following is correct? (multiple choice)

• A. The data packet is first transmitted to the data link laye
• B. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as:IP
• C. transport layer (TCP) after receiving the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such asUDP
• D. After the network layer receives the data packet, the network layer information is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such asHTTP
• E. After the application layer receives the data packet, the application layer information is stripped after parsing, and the final displayed user data is exactly the same as the data sent by the sender host

Answer: AD

NEW QUESTION 8

The steps of the security assessment method do not include which of the following?

• A. Manual audit
• B. Penetration testing
• C. Questionnaire
• D. data analysis

Answer: D

NEW QUESTION 9

After the company network administrator configures the dual-system hot backup, he wants to check the status of the current VGMP group, so he typed the command and displayed the following information
HRP_M<FW_A>_
Role: active, peer: active
Running priority:45000, peer:45000
Backup channel1 usage: 30x
Stab1 e time: 1days, 13 hours, 35 minutes
Last state change information: 2020-03-22 16:01:56 HRP core state changed, old_state=normal (active), new_state=normal
(active).local priority F 4 peer_priority 45000. Configuration:
hello interval: 1000ms preempt: 60s
mirror configuration:off mirror session:on
track trunk member:on auto-sync configuration:on
auto-sync connection- status:on adjust ospf cost:on
adjust ospfv3-cost:on adjust bgp-cost:on nat resource: off
Detail information on: Gigabi tEthernet0/0/1:up Gigabi tEthernet0/0/3:up ospf-cost: +0
then the command he typed in the blank is[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 10

Which of the following options can bewindowsDo you do it in the advanced settings of the firewall? (multiple choice)

• A. Restore defaults
• B. Change notification rules
• C. Set up connection security rules
• D. Set up inbound and outbound rules

Answer: CD

NEW QUESTION 11

An employee of a company accesses the internal web server of the company through the firewall. The web page of the website can be opened by using a browser, but the reachability of the web server is tested by using the Ping command, and it shows that it is unreachable. What are the possible reasons?

• A. The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol
• B. The web server is down
• C. The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol
• D. The interface of the firewall connecting to the server is not added to the security zone

Answer: C

NEW QUESTION 12

Which of the following attacks is not a cyber attack?

• A. IP spoofing attack
• B. SmurfI attack
• C. MAC address spoofing attack
• D. ICMP attack

Answer: C

NEW QUESTION 13

On the surface, threats such as viruses, loopholes, and Trojan horses are the causes of information security incidents, but at the root, information security incidents are also closely related to people and the information system itself.

• A. True
• B. False

Answer: A

NEW QUESTION 14

Which of the following is not a key technology of antivirus software?

• A. Shelling technology
• B. self protection
• C. format the disk
• D. Update virus database in real time

Answer: C

NEW QUESTION 15

GREThe tunnel addresses at both ends of the tunnel can be configured as addresses on different network segments

• A. True
• B. False

Answer: A

NEW QUESTION 16

againstIPspoofing attack (IP Spoofing), which of the following is an error?

• A. IPSpoofing attacks are based onIPaddress trust relationship to initiate
• B. IPAfter a successful spoofing attack, the attacker can use forged arbitraryIPThe address impersonates a legitimate host to access key information
• C. The attacker needs to put the sourceIPlandaddress masquerading as a trusted host and sendSYNmarkNote the data segment request connection
• D. based onIPThe hosts in the trust relationship of the addresses can log in directly without entering password authentication.

Answer: C

NEW QUESTION 17
......