Huawei HCIA-Security V3.0 - H12-711 Free Exam Questions

A. Personnel safety

B. Access control

C. Vulnerability management

D. Business continuity management

A. Configure a long business connection

B. Configure default session aging time

C. Turn fragment cache

D. Optimization of packet filtering rules

A. No authentication required

B. There is a NAT traversal problem

C. Can be used without a client

D. May encrypt to IP layer

A. False

B. True

A. Local

B. RADIUS

C. HWTACACS

D. LLDP

A. De-encapsulation Process: After the destination receives GRE packets, transmitting the data packets through looking up the routing to the Tunnel interfaces to trigger GRE encapsulation.

B. De-encapsulation Process: After GRE module de-encapsulation, the data packets will enter the IP module for further processing.

C. Encapsulation Process: After GRE module packaging, the data packet will enter the IP module for further processing

D. Encapsulation Process: The original data packets transmit the data packets through looking up routing to the Tunnel interface to trigger GRE encapsulation.

A. No patching does not affect the operation of the system, so it is irrelevant whether to patch or not.

B. Patch is a small program made by the original author of the software for the discovered vulnerability.

C. Patches are generally updated.

D. Computer users should download and install new patches to protect their systems in a timely manner

A. Configure a NAT address pool in the source NAT technology. You can configure only one IP address in the address pool.

B. Some application layer protocols carry IP address information in the data, but also to modify the data in the upper layer of the IP address information when they make NAT

C. For some non-TCP, UDP protocols (such as ICMP, PPTP), unable to do NAT.

D. Address Translation can follow the needs of users, providing FTP, WWW, Telnet and other services outside the LAN

A. False

B. True

A. Online users have reached a large value

B. The authentication-free user does not use the PC with the specified IP/MAC address.

C. The authentication-free user and the authenticated user are in the same security zone.

D. The authentication action in the authentication policy is set to "No credit / free authentication"

A. ike is using version v2

B. The second stage ipsec sa has been successfully established

C. ike is using version v1

D. The first stage ike sa has been successfully established

A. International Electrotechnical Commission (IEC)

B. International Organization for Standardization (ISO)

C. International Telecommunication Union (ITU)

D. Wi-Fi Alliance

A. By default, the security policy can control unicast packets and broadcast packets.

B. By default, the security policy can control multicast.

C. By default, the security policy can control unicast packets, broadcast packets, and multicast packets.

D. By default, the security policy only controls unicast packets.