HCNA Huawei Certified Network Associate - Constructing Basic Security Network (HCNA-CBSN) (HC-711) Free Practice Test

Question 1

SVN can be achieved only allows users to access remote enterprise networkcannotaccess the Internet and local area networks.

A. False

B. True

Correct Answer: B

Question 2

Stateful inspection firewall can detect TCP protocol,butcannotdetect UDP, since UDP is a connectionless protocol face.

A. False

B. True

Correct Answer: A

Question 3

Symmetric encryption algorithm encryption key and decryption key are the same.

A. False

B. True

Correct Answer: B

Question 4

Firewall trust untrust domain client wants to access the ftp server services,has allowed clients to access the server tcp 21 port,but only log in to the server, butcannotdownload the file,the following solutions are possible:(Choose three)

A. FTP works when port mode,modify untrust trust between domains inbound direction to permit the default access policy

B. Untrust domain repair the trust between the two-way access policy to allow default

C. Enable detect ftp between trust untrust domain configuration

D. FTP works when passive mode,modify untrust trust between domains inbound direction to permit the default access policy

Correct Answer: A,B,C

Question 5

What are Web proxy implementations?(Choose two)

A. Web Forwarding

B. Web rewritten

C. Web pass-through

D. Web-link

Correct Answer: B,D

Question 6

Which of the following types of Ethernet switch ports,after the data flow out of the port may also carry VLAN identification?(Choose two)

A. Access Port

B. Hybrid port

C. Trunk port

D. Switch port

Correct Answer: B,C

Question 7

In tunnel mode, AH security protocol,which of the following new IP packet header fields without data integrity check?

A. Source IP address

B. The source IP address and destination IP address

C. TTL

D. Destination IP address

Correct Answer: C

Question 8

SVN3000 virtual gateway,which can be accessed using the IP address,and can be accessed using the domain name which of the following types?

A. Exclusive type

B. Manual type

C. Share -based

D. Fixed

Correct Answer: A

Question 9

SVN3000 support functions are not included?

A. WEB push

B. Network expansion

C. Port Forwarding

D. File Sharing

Correct Answer: A

Question 10

LAC is to achieve the established L2TP VPN tunnel by what means?(Choose two)

A. Domain name

B. ACL

C. User Account

D. Routing Table

Correct Answer: A,C

Question 11

For firewall access control process : 1,2 routing table lookup,find interzone packet filtering rules 3,4 session table lookup,find the blacklist,the correct order?

A. 4-3-1-2

B. 1-3-2-4

C. 3-4-1-2

D. 3-2-1-4

Correct Answer: A

Question 12

The following types of firewall packet processing speed is the fastest non-first?

A. Packet filtering firewall

B. Proxy Firewall

C. Stateful inspection firewall

D. Software firewalls

Correct Answer: C

Question 13

IKE negotiation mode include?(Choose two)

A. Transfer mode

B. Aggressive Mode

C. Fast mode

D. Master Mode

Correct Answer: B,D

Question 14

In the transmission mode IPSec applications,the following data packets which area may be subject to encryption security?

A. Transport layer and upper layer packets

B. Original IP packet header

C. The network layer and the upper layer packets

D. The new IP packet header

Correct Answer: A

Welcome to TestSimulate

Huawei HCNA Huawei Certified Network Associate - Constructing Basic Security Network (HCNA-CBSN) (HC-711) Free Practice Test