HCIP-Security V4.0 (H12-725_V4.0) Free Practice Test

Question 1

Which of the following statements are true about SYN scanning attacks?(Select All that Apply)

A. When the scanner sends a SYN packet, a SYN-ACK response indicates an open port.

B. When the scanner sends a SYN packet, if the peer end responds with a SYN-ACK packet, the scanner then responds with an ACK packet to complete the three-way handshake.

C. When the scanner sends a SYN packet, an RST response indicates a closed port.

D. If the peer end does not respond to the SYN packet sent by the scanner, the peer host does not exist, or filtering is performed on the network or host.

Correct Answer: A,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which of the following is not a process for remote users to access intranet resources through SSL VPN?

A. Access accounting

B. User login

C. User authentication

D. Resource access

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

The figure shows the PBR-based injection scenario. Which of the following statements are true about this scenario?(Select All that Apply)

A. Router1 is a traffic-diversion router.

B. A traffic-diversion channel is established between 10GE1/0/1 of Router1 and 10GE2/0/1 of the cleaning device.

C. The cleaning device injects traffic from different Zones to different interfaces (10GE1/0/2 and 10GE1/0
/3) of Router1 based on PBR.

D. After the injected traffic reaches Router1, Router1 forwards the traffic to Router2 or Router3 based on its forwarding mechanism. Finally, the traffic reaches different Zones.

Correct Answer: A,B,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Predefined URL categories on Huawei firewalls reside in the URL category database delivered with the device and do not need to be manually loaded.

A. FALSE

B. TRUE

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

IPsec VPN does not support encapsulation of non-IP unicast packets.

A. FALSE

B. TRUE

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

*In the data filtering profile on the firewall, keyword group "Keyword" is invoked in the upload direction of HTTP applications, the action is block, and the keyword group is invoked in the security policy. Given this, if the regular expression "b.d" is configured in the keyword group "Keyword," which of the following texts can be posted by internal employees on the forum?

A. abroad

B. bad

C. boring

D. beside

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

In the figure, enterprise A and enterprise B need to communicate securely, and an IPsec tunnel is established between firewall A and firewall B. Which of the following security protocols and encapsulation modes can meet the requirements of this scenario?

A. AH+ESP; transport mode

B. AH; tunnel mode

C. ESP; transport mode

D. ESP; tunnel mode

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Huawei HCIP-Security V4.0 (H12-725_V4.0) Free Practice Test