[2022] H12-711 PDF Questions - Perfect Prospect To Go With TrainingDumps Practice Exam
Huawei H12-711 Pdf Questions - Outstanding Practice To your Exam
NEW QUESTION 112
Manual auditing is asupplement to tool evaluation. It does not require any software to be installed on the target system being evaluated, and has no effect on the operation and status of the target system. Which of the following options does not include manual auditing?
- A. Manual detection of the host operating system
- B. Manual inspection of network equipment
- C. Manual inspection of the administrator's operation of the equipment process
- D. Manual inspection of the database
Answer: C
NEW QUESTION 113
Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc. These fields are "and", that is, only information in the packet match all fields, and then hit this policy.
- A. False
- B. True
Answer: A
NEW QUESTION 114
Use iptables to write a rule that does not allow the network segment of 172.16.0.0/16 to access the device. Which of the following rules is correct?
- A. iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT
- B. iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP
- C. iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP
- D. iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT
Answer: C
NEW QUESTION 115
Which of the following are correct regarding the matching conditions of the security policy? (Multiple choice)
- A. 'The source security zone' is an optional parameter in the matehing condition.
- B. "Apply" in the matching condition is an optional parameter
- C. "Service" is an optional parameter in the matching condition
- D. "Time period"in the matching condition is an optional parameter
Answer: A,B,C,D
NEW QUESTION 116
UDP port scanning means that the attacker sends a zero-byte UDP packet to a specific port of the target host.
If the port is open, it will return an ICMP port reachable data packet
- A. False
- B. True
Answer: A
NEW QUESTION 117
IPSec VPN uses an asymmetric encryption algorithm to encrypt the transmitted data
- A. False
- B. True
Answer: A
NEW QUESTION 118
ASPF (Application Specific Packet Filter) is a kind of packet filtering based on the application layer, it checks the application layer protocol information and monitor the connection state of the application layer protocol. ASPF by Server Map table achieves a special security mechanism.
Which statement about ASPF and Server map table are correct? (Multiple choice)
- A. quintuple server-map entries achieve a similar functionality with session table
- B. ASPF monitors the packets in the process of communication
- C. ASPF through server map table realize dynamic to allow multi-channel protocol data to pass
- D. ASPF dynamically create and delete filtering rules
Answer: B,C,D
NEW QUESTION 119
Which of the following attacks is not aspecial packet attack?
- A. ICMP unreachable packet attack
- B. IP address scanning attack
- C. Large ICMP packet attack
- D. ICMP redirect packet attack
Answer: B
NEW QUESTION 120
There ere various security threats in the use of the server. Which of the following options is not a server securitythreat?
- A. Natural disasters
- B. DDos attack
- C. Malicious programs
- D. Hacking
Answer: A
NEW QUESTION 121
When the sesson authentication mode is used to trigger the firewall's built-in Portal aithentication. the user does not actively perform identity authentication, advanced service access, and device push "redirect" to the authentication page? .. ' * '
- A. True
- B. False
Answer: A
NEW QUESTION 122
The administrator wants to create a web configuration administrator, and set the Https device management port number to 20000, and set the administrator to the administrator level, which of the following commands are correct?
- A. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level
1 [USG-aaa- manager-user-client001] password cipher Admin@123 - B. Stepl: web-manager enable port 20000 Step2. AAA View [USG] aaa [USG aaa] manager-user clientO01 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] password cipher Admin@123
- C. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa manager-user-client001] password cipher
- D. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level
15 [USG-aaa- manager-user-client001] password cipher Admin@123
Answer: D
NEW QUESTION 123
Terminal security access control can support? (Choose three.)
- A. Software SACG (host firewall)
- B. SACG hardware (hardware security access control gateway)
- C. 802.1X
- D. ARP control
Answer: A,B,C
Explanation:
Explanation/Reference:
NEW QUESTION 124
Under the tunnel encapsulation mode. IPSec configuration does not need to have a route to thedestination private network segment, because the data will be re-encapsulated using the new IP header to find the routing table.
- A. False
- B. True
Answer: A
NEW QUESTION 125
Which of the following are remote authentication methods? (Multiple choice)
- A. Local
- B. RADIUS
- C. LLDP
- D. HWTACACS
Answer: B,D
NEW QUESTION 126
Which of the following is the default backup method for double hot standby?
- A. Session fast backup
- B. Manual batch backup
- C. Configuration of the active and standby FWs after the device is restarted
- D. Automatic backup
Answer: D
NEW QUESTION 127
Common scanning attacks include: port scanning tools, vulnerability scanning tools, application scanning tools, database scanning tools, etc
- A. True
- B. False
Answer: A
NEW QUESTION 128
Regarding the description of Windows Firewall, which of the following options are correct? (Multiple Choice)
- A. If you are unable to access the Internet during the process of setting up the Windows Firewall, you can use the Restore Defaults feature to quickly restore the firewall to its initial state.
- B. Windows Firewall can only allow or prohibit preset programs or functions and programs installed on the system, and cannot customize the release rules according to the protocol or port number.
- C. Windows Firewall not only allowsor prohibits preset programs or functions and programs installed on the system, but also can customize the release rules according to the protocol or port number.
- D. Windows Firewall can also change notification rules when it is off.
Answer: A,C,D
NEW QUESTION 129
Which of the following addresses can be used for web management address of USG product? (Choose three.)
- A. Interface Address
- B. AUX interface address
- C. Sub-interface address
- D. Slave IP address of the interface
Answer: A,C,D
Explanation:
Explanation/Reference:
NEW QUESTION 130
......
Online Questions - Outstanding Practice To your H12-711 Exam: https://www.trainingdumps.com/H12-711_exam-valid-dumps.html
Practice To H12-711 - TrainingDumps Remarkable Practice On your HCIA-Security V3.0 Exam: https://drive.google.com/open?id=1pHPcvIHwuSspPqNtu4yDXtzF0VcGZvuN
