Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) - H12-731-ENU Free Exam Questions

A. Only IPsec dual-system hot backup in active/standby backup mode can be used.

B. USG A , USG_B must enable NAT traversal.

C. Only ESP and Tunnel mode encapsulation can be used.

D. USG A , USG_B and USG_C only need to configure the route of the Internet, and there is no need to configure the route between the branch intranet and the headquarters intranet in USG_A , USG_B and USG_C.

A. Attack Defense Command

B. Virtual Firewall Command

C. session table

D. Forwarding Policy Commands

E. interface configuration command

A. A browser that does not support SSL3.0 is used.

B. The certificate is within the validity period, but the system clock is wrong, and the system clock is not within the validity period.

C. When the certificate expires, the system clock is not the current time, but is configured within the certificate's validity period.

D. The system clock is correct, but the certificate has expired.

A. DDos cleaning and detection equipment must be placed in the external network interface area to ensure that attack traffic is detected first.

B. FW1 is mainly used to prevent external illegal traffic from accessing the DMZ service area and to prevent attack traffic from inside the SSL tunnel.

C. FW2 mainly prevents internal illegal traffic from accessing the DMZ service area and illegally accessing the Internet.

D. Deploy IPS devices in the DMZ area bypass. If the defense function is realized, it is necessary to pass policy routing or static routing in the DMZ area switch to allow data to pass through the IPS devices.

A. Account password security

B. Database hardening

C. Vulnerability Scan

D. Network management system reinforcement

E. OS Hardening

A. IPS or AV engine is abnormal.

B. Check whether the domain name of the security service center is correct and valid.

C. Licensee not purchased.

D. Check whether the DNS server configuration is correct and valid.

A. HWTACACS supports authorization of configuration commands, RADIUS does not support authorization of configuration commands.

B. HWTACACS encrypts the entire body of the message, and RADIUS only encrypts the password field in the authentication message.

C. RADIUS authentication and authorization are separated, and HWTACACS authentication and authorization are processed together.

D. RADIUS uses TCP protocol, network transmission is more reliable, HWTACACS uses UDP protocol.

A. TRUE

B. FALSE

A. ACL configuration error

B. IKE Phase 1 policy for IPsec is misconfigured

C. No IPsec policy configured

D. HASH algorithm mismatch

A. CC attack

B. Teardrop Attack

C. Smurf attack

D. buffer overflow

A. 802.1X Authentication

B. Portal Authentication

C. MAC Authentication

D. MAC bypass authentication