HCIA-Security V3.0 (H12-711_V3.0-ENU) Free Practice Test

Question 1

Which of the following statements is true about Huawei's routers and switchers??(multiple choice)

A. The switch does not have security features

B. Switches have some security functions, and some switches can realize more security functions by adding security boards

C. The main function of the router is to forward data. When the enterprise has security requirements, sometimes a firewall may be a more suitable choice

D. Routers can implement some security functions, and some routers can implement more security functions by adding security boards

Correct Answer: B,C,D

Question 2

As shown, the USG firewall NAT configuration is as follows:

A. When the IP address of the FTP Server host is changed to 1.11.3. Client A host can still access the FTP Server more

B. Source NAT configuration, only for intranet users (10.1.1.0/24) to access the external network for translation

C. When FTP Server1 responds to Client A, it is converted to the address 1.1.1.5 in Address Ground 1

D. Client A accesses FTP Server 1.1.1.1, and the destination address is converted to 10.1.1.2. The source address remains unchanged

Correct Answer: A

Question 3

Intrusion Prevention System (IPS) is a defense system that can block in real time when an intrusion is detected

A. False

B. True

Correct Answer: B

Question 4

Heartbeat message (He11o message): The two FWs send heartbeat messages to each other periodically (the default period is ( ) seconds) to check whether the peer device is alive. (fill in the blank)

Correct Answer:

1

Question 5

in deploymentIPSec VPN, which of the following is the main application scenario of tunnel mode?

A. Between the host and the security gateway

B. between host and server

C. between security gateways

D. between host and host

Correct Answer: C

Question 6

Which of the following statements are true about single sign-on? (multiple choice)

A. AD Domain single sign-on can be synchronized to the firewall by mirroring the login data stream

B. Although there is no need to enter the user password, the authentication server needs to interact with the user password and the device to ensure that the authentication is passed.

C. The device can identify the user who has passed the authentication of the identity authentication system

D. AD There is only one deployment mode for domain single sign-on

Correct Answer: A,C

Question 7

An employee of a company accesses the internal web server of the company through the firewall, and can open the web page of the website by using a browser, but the accessibility of the web server is tested by using the Pina command, and it shows that it is unreachable. What are the possible reasons? ( )[Multiple choice]

A. WEB server is down

B. The interface of the firewall connecting to the server is not added to the security zone

C. The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol

D. The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol

Correct Answer: C

Question 8

IPSec VPN uses an asymmetric algorithm to calculate the ___ key to encrypt data packets.[fill in the blank]

Correct Answer:

symmetry

Question 9

want to implement security policy"Anti-virus function", must beLicenseactivation.

A. False

B. True

Correct Answer: B

Question 10

some applications such asOracleFor database applications, the firewall session connection is interrupted due to no data flow transmission for a long time, resulting in service interruption. Which of the following is the optimal solution?

A. turn onASPFFeatures

B. Configure a long-term connection for a service

C. Enable shard cache

D. Optimize security policies

Correct Answer: B

Welcome to TestSimulate

Huawei HCIA-Security V3.0 (H12-711_V3.0-ENU) Free Practice Test