HCIA-Security V4.0 (H12-711_V4.0) Free Practice Test

Question 1

Which of the following statements are incorrect about the differences between routers and Layer 2 switches?

A. By default, switches can isolate collision domains but not broadcast domains.

B. By default, routers can isolate broadcast domains but not collision domains.

C. Switches flood broadcast packets.

D. Routers forward broadcast packets.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

As shown in the figure, the process of AD single sign-on (querying the security log mode of AD server), please match the corresponding operation process.

Correct Answer:

Question 3

Which of the following protocols is a multichannel protocol?

A. The Telnet

B. FTP

C. THE HITP

D. The SSH

Correct Answer: B

Question 4

Which of the following attacks can be detected through intrusion prevention?

A. Injection attack

B. Buffer overflow attack

C. Trojan horse

D. Directory traversal

Correct Answer: A,B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which of the following is the numbering range of Layer 2 ACLs?

A. The 1000~1999

B. @2000~2999

C. The 3000~3999

D. The 4000~4999

Correct Answer: C

Question 6

At what layer does packet filtering technology in the firewall filter packets?

A. Data link layer

B. Transport layer

C. Network layer

D. Physical layer

Correct Answer: C

Question 7

A VRRP group has three states: Initialize, Master, and Backup.

A. FALSE

B. TRUE

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which of the following are the default zones of Huawei firewalls?

A. DMZ

B. Trust

C. Local

D. Untrust

Correct Answer: A,B,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

The following description of investigation and evidence collection, which one is correct

A. Documentary evidence is required in computer crime.

B. Evidence is not necessarily required in the course of the investigation.

C. Evidence obtained by wiretapping is also valid.

D. In all investigation and evidence collection, it is best to have law enforcement agencies involved.

Correct Answer: D

Question 10

Regarding the characteristics of the routing table, which of the following items is described correctly

A. Port In the global routing table, there is at most one next hop to the same destination CIDR block.

B. There may be multiple next hops in the global routing table to the same destination.

C. Port When a packet matches multiple entries in the routing table, it is forwarded according to the longest mask.

D. Port When a packet matches multiple entries in the routing table, it is forwarded based on the route entry with the largest metric.

Correct Answer: B,C

Question 11

What type of ACL does ACL number 3001 correspond to?

A. interface ACL

B. Advanced ACLs

C. Basic ACL

D. Layer 2 ACL

Correct Answer: B

Question 12

As shown, in transmission mode, which of the following locations should the AH header be inserted in?

A. 4

B. 3

C. 1

D. 2

Correct Answer: D

Question 13

ARP man-in-the-middle attacks are a type of spoofing attack technique.

A. FALSE

B. TRUE

Correct Answer: B

Welcome to TestSimulate

Huawei HCIA-Security V4.0 (H12-711_V4.0) Free Practice Test