Get 100% Success with Latest Huawei Certified ICT Associate H12-711_V4.0 Exam Dumps Oct 17, 2024
The Best H12-711_V4.0 Exam Study Material and Preparation Test Question Dumps
Huawei H12-711_V4.0 (HCIA-Security V4.0) Exam is the entry-level certification that validates an individual's foundational knowledge and skills in information security. With this certification, IT professionals can build a career as a network security engineer, network administrator, security analyst, or security consultant. Moreover, the certification holder can also progress to advanced-level certifications to enhance their expertise and advance their career in the field of network security.
NEW QUESTION # 211
Which of the following is the number range of Layer 2 ACL?
- A. 3000~3999
- B. 2000~2999
- C. 4000~4999
- D. 1000~1999
Answer: C
NEW QUESTION # 212
Which of the following is a potential threat in the network?
- A. Scan
- B. Deception
- C. SQL injection
- D. Denial of service attack
Answer: A
NEW QUESTION # 213
Server-map is used to store a mapping relationship. This mapping relationship can be a data connection relationship negotiated by control data, or it can be an address mapping relationship configured in NAT, so that the external network can actively access the internal network through the firewall.
- A. True
- B. False
Answer: A
NEW QUESTION # 214
Network anti-virus technology deploys anti-virus strategies on security gateways.
- A. True
- B. False
Answer: A
NEW QUESTION # 215
As shown in the figure, what is the authentication range of the AH protocol in tunnel mode?
- A. The3
- B. The2
- C. The1
- D. The4
Answer: D
NEW QUESTION # 216
Which of the following are disadvantages of packet filtering firewalls? (Multiple Choice)
- A. Attackers can use fake addresses for deception. By setting their own host IP address to a legitimate host IP address, they can easily pass the packet filter.
- B. Static ACL rules are difficult to adapt to dynamic security requirements
- C. The connection status list is dynamically managed
- D. Software implementation limits processing speed and is vulnerable to denial of service attacks
Answer: A,B
NEW QUESTION # 217
Which of the following is not a requirement for firewall dual-machine hot backup?
- A. The interface types and numbers used are consistent
- B. The firewall hardware model is the same
- C. Firewall software versions are consistent
- D. The firewall interface IP addresses are consistent
Answer: D
NEW QUESTION # 218
Please classify the main functions of the following operating systems correctly.
Answer:
Explanation:
Content allocation - memory management
File storage space management - file management
Process Control - Processor Management
Equipment allocation - equipment management
Task and interface management - job management
NEW QUESTION # 219
The following description of IDS, which items are correct
The IDS cannot be linked to the firewall.
- A. The IDS can be upgraded flexibly and in a timely manner, and the strategic configuration operation is convenient and flexible.
- B. Mouth IDS is a fine-grained detection device, through which the live network can be monitored more accurately.
- C. With IDS, system administrators can capture traffic from critical nodes and do intelligent analysis to find anomalous and suspicious network behavior and report it to administrators.
Answer: A,B,C
NEW QUESTION # 220
Which of the following descriptions about firewall logs is incorrect?
- A. Among the log levels, Emergency is the most serious level.
- B. According to the severity or urgency of the information, logs can be divided into 8 levels. The more serious the information, the greater the log level value.
- C. Administrators can learn the security policies that traffic hits through the policy matching log, which can be used to locate faults when problems occur.
- D. Administrators can learn user behavior, search keywords, and the effectiveness of audit policy configurations through user activity logs.
Answer: B
NEW QUESTION # 221
If there are multiple levels of CAs in the PKI system, a CA hierarchy will be formed. The top-level CA is the root CA, which has a CA "self-signed" certificate.
- A. True
- B. False
Answer: A
NEW QUESTION # 222
Under normal circumstances, the email protocols we often talk about include (), POP3, and SMTP.
Answer:
Explanation:
IMAP
NEW QUESTION # 223
Which of the following options does not belong to the quintuple range?
- A. Destination IP
- B. Source MAC
- C. Destination port
- D. Source IP
Answer: B
NEW QUESTION # 224
When deploying IPsec VPN tunnel mode, use the AH protocol for packet encapsulation.
In the new IP packet header field, which of the following parameters does not require data integrity check?
- A. TTL
- B. Identification
- C. Destination IP address
- D. Source IP address
Answer: A
NEW QUESTION # 225
Regarding firewall security policy, which of the following options is incorrect?
- A. If the security policy is permit, the discarded packets will not accumulate the "number of hits"
- B. Adjust the order of security policies. There is no need to save the configuration file. It will take effect immediately.
- C. When configuring the security policy name, the same name cannot be reused
- D. The number of security policy entries for Huawei USG series firewalls cannot exceed 128.
Answer: A
NEW QUESTION # 226
The basic attributes of information security include () () availability and non-repudiation
Answer:
Explanation:
Confidentiality | Completeness
NEW QUESTION # 227
Which of the following is not an encryption algorithm in VPN?
- A. DES
- B. AES
- C. RIP
- D. 3DES
Answer: C
NEW QUESTION # 228
Regarding the description of GRE VPN tunnel configuration, which of the following options are correct? (Multiple Choice)
- A. The tunnel interface numbers of the devices at both ends must be consistent.
- B. The tunnel interface must be added to the security zone
- C. The tunnel address must be reachable at the network layer
- D. The tunnel interface must be configured with an IP address
Answer: A,B,C,D
NEW QUESTION # 229
The server can set or read the information contained in the cookie to maintain the state of the session between the user and the server.
- A. True
- B. False
Answer: A
NEW QUESTION # 230
Regarding business continuity planning, which of the following statements is correct? (Multiple Choice)
- A. Business continuity planning does not require senior company involvement during the project scope determination phase.
- B. Thinking that it is impossible to predict all possible accidents, so BCP needs to be flexible
- C. The business continuity plan does not require the involvement of senior management of the company before it is formally documented.
- D. Not all safety incidents must be reported to company executives
Answer: B,C,D
NEW QUESTION # 231
There are various security threats during the use of the server.
Which of the following options is not a server security threat?
- A. DDos attack
- B. Hacker attack
- C. Malicious programs
- D. Natural disaster
Answer: D
NEW QUESTION # 232
In the PKI certificate revocation process, the user needs to send a signed and encrypted email to R& to apply for certificate revocation.
- A. True
- B. False
Answer: A
NEW QUESTION # 233
......
Get Ready to Pass the H12-711_V4.0 exam Right Now Using Our Huawei Certified ICT Associate Exam Package: https://certtree.2pass4sure.com/Huawei-Certified-ICT-Associate/H12-711_V4.0-actual-exam-braindumps.html