최신 H12-711_V4.0 무료덤프 - Huawei HCIA-Security V4.0

문제1

Which of the following is not a requirement for firewall dual-machine hot backup?

A. The firewall interface IP addresses are consistent

B. The firewall hardware model is the same

C. Firewall software versions are consistent

D. The interface types and numbers used are consistent

정답: A

문제2

Which of the following protocols are file transfer protocols? (Multiple Choice)

A. HTTP

B. FTP

C. POP3

D. NFS

정답: A,B,C,D

문제3

When forwarding unicast data, the Layer 2 switch needs to decapsulate the Layer 3 header of the message before forwarding it.

A. True

B. False

정답: B

문제4

When deploying IPsec VPN tunnel mode, use the AH protocol for packet encapsulation.
In the new IP packet header field, which of the following parameters does not require data integrity check?

A. Identification

B. Destination IP address

C. TTL

D. Source IP address

정답: C

문제5

Which of the following does not include the steps of the security assessment method?

A. Penetration testing

B. Data analysis

C. Questionnaire survey

D. Manual audit

정답: B

문제6

Digital envelope refers to the data obtained after the sender uses the receiver's () to encrypt the symmetric key

정답:

Public key

문제7

Which of the following traffic will not trigger authentication even if it matches the authentication policy? (Multiple Choice)

A. Traffic accessing the device

B. Traffic of users accessing HTTP services

C. OSPF

D. LDP

정답: A,C,D

문제8

Through business logs, what activities of users can the administrator view? (Multiple Choice)

A. User's IP address

B. Online duration

C. Login time

D. Password change

정답: A,B,C

문제9

Which of the following is not a feature of GRE VPN?

A. Ensures the safe transmission of user business data on the Internet

B. Solve the problem of message transmission across heterogeneous networks

C. Expand the working range of networks with limited hop count

D. Ability to encapsulate multicast messages

정답: A

문제10

Which of the following descriptions about SSL VPN usage restrictions are correct? (Multiple Choice)

A. When logging in to the SSL VPN gateway through a browser for the first time, you need to install the Activex control according to the browser prompts.

B. The number of concurrent SSL VPN users is not controlled by the license.

C. When SSL VPN uses RADIUS server authentication, the user name configured on the RADIUS server supports the @ symbol.

D. After loading or replacing the license, the device will delete the configuration of the maximum number of concurrent users, and the administrator needs to reconfigure it.

정답: A,C,D

문제11

Which of the following items are characteristics of LDAP? (Multiple Choice)

A. Distributed data storage to support data

B. Optimize queries and read data faster

C. Organize data in directory format

D. Provide a unified access point to the outside world

정답: A,B,C,D

문제12

Regarding the description of Windows log event types, which options are correct? (Multiple Choice)

A. A warning event is an event that indicates a successful operation of an application, driver, or service.

B. When there is insufficient disk space, it will be recorded as an "information event"

C. Failed audit events refer to failed audit security login attempts. For example, when a user fails to access a network drive, it will be recorded as a failed audit event.

D. False events typically refer to loss of functionality and data. For example, if a service cannot be loaded as a system boot, an error event will be generated.

정답: C,D

문제13

Information security prevention technologies include : data encryption, identity authentication, intrusion prevention, anti-virus, etc.

A. True

B. False

정답: B

문제14

When users in the external network access the internal server, use the two-way NAT function to simultaneously convert the source and destination addresses of the packets, which can avoid setting up a gateway on the internal server and simplify configuration.

A. True

B. False

정답: A

문제15

Even if the DHCP message matches the firewall authentication policy, authentication will not be triggered.

A. True

B. False

정답: B

문제16

Due to changes in user identity, user public key, or user business suspension, users need to revoke their digital certificates, that is, cancel the binding relationship between the public key and user identity information. In PKI, CA mainly uses CCSP protocol and () protocol to revoke certificates.

정답:

CRL

문제17

In the MPS 2.0, which item stipulates that "spam should be detected and protected at key network nodes, and the upgrade and update of the spam protection mechanism should be maintained"?

A. Border protection

B. Communication transmission

C. Centralized management and control

D. Malicious code prevention

정답: D

문제18

SMTP is a Simple Mail Transfer Protocol that provides Internet email services.
What is the SMTP port number?

A. 80

B. 25

C. 21

D. 23

정답: B

문제19

Which of the following information is not included in the DHCP binding table?

A. VLAN ID

B. Port number

C. IP address

D. MAC address

정답: B

최신 H12-711_V4.0 무료덤프 - Huawei HCIA-Security V4.0

우리와 연락하기

유용한 링크

최신 업데이트