Verified H12-711_V3.0-ENU Dumps Q&As - H12-711_V3.0-ENU Test Engine with Correct Answers
Pass Your H12-711_V3.0-ENU Dumps as PDF Updated on 2022 With 396 Questions
NEW QUESTION 114
Regarding the actions of the security policy and the description of the security configuration file, which of the following options are correct? (Multiple choice)
- A. If the security policy action is "allow", the traffic will not match the security profile
- B. If the action of the security policy is "Forbidden", the device will discard this traffic, and no further content security checks will be performed.
- C. The security configuration file must be applied to the security policy where the action is allowed to take effect
- D. The security configuration file can take effect without being applied to the security policy where the action is allowed
Answer: B,C
NEW QUESTION 115
Which of the following is the action to be taken in the summary phase of cybersecurity emergency response? (Multiple Choice)
- A. Judging the effectiveness of isolation measures
- B. Evaluate the implementation of emergency plans and propose follow-up improvement plans
- C. Evaluate the members of the emergency response organization
- D. Establish a defense system and specify control measures
Answer: B,C
NEW QUESTION 116
ASPF (Application Specific Packet Filter) is a packet filtering technology based on the application layer and implements a special security mechanism through the server-map table.
Regarding ASPF and server-map tables, which of the following are correct? (Multiple choice)
- A. ASPF monitors the messages in the communication process
- B. ASPF dynamically allows multi-channel protocol data to pass through the server-map table
- C. The five-tuple server-map table entry implements a function similar to the session table
- D. ASPF can dynamically create server-map tables
Answer: A,B,D
NEW QUESTION 117
Which of the following options is not included in the consistency check of the HRP master and backup configuration?
- A. Whether the heartbeat interface with the same serial number is configured
- B. Authentication strategy
- C. Next hop and outgoing interface of the static route
- D. NAT policy
Answer: C
NEW QUESTION 118
Regarding Client-Initiated VPN, which of the following statements are correct? (Multiple choice)
- A. Each tunnel carries only one L2TP session and PPP connection
- B. Each tunnel carries multiple L2TP sessions and one PPP connection
- C. Each tunnel carries multiple L2TP sessions and PPP connections
- D. A tunnel is established between each access user and LNS
Answer: A,D
NEW QUESTION 119
Which of the following VPNs cannot be used in Site to-Site scenarios?
- A. L2TP VPN
- B. IPSEC VPN
- C. GRE VPN
- D. SSL VPN
Answer: D
NEW QUESTION 120
The configuration command regarding the NAT address pool is as follows:
nat address-group 1
section 0 202.202.168.10 202.202.168.20
mode no-pat
Among them, the meaning of the NO-PAT parameter is:
- A. Do not convert address
- B. Perform port multiplexing
- C. Do not convert the source port
- D. Do not convert destination ports
Answer: C
NEW QUESTION 121
When configuring user single sign-on, if the mode of querying the security log of the AD server is adopted, please sort the following authentication processes:
Answer:
Explanation:
NEW QUESTION 122
Both GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ zone. If you want to realize that the area connected by GE1/0/1 can access the area connected by GE1/0/2, which of the following is correct?
- A. No configuration required
- B. Need to configure DMZ to local security policy
- C. Need to configure the security policy from local to DMZ
- D. Need to configure inter-domain security policies
Answer: A
NEW QUESTION 123
Which of the following options are included in the encryption technology to protect data during data transmission? (Multiple choice)
- A. Controllability
- B. Source verification
- C. Integrity
- D. Confidentiality
Answer: B,C,D
NEW QUESTION 124
Which of the following is not a quintuple range?
- A. Source Mac
- B. Destination port
- C. Source IP
- D. Destination IP
Answer: A
NEW QUESTION 125
Common information security standards and regulations mainly include the national level protection system (GB), ____, the American standard TCSEC and the European Union standard IT SEC.
- A. ISO 27001
Answer: A
NEW QUESTION 126
Want to implement "anti-virus function" in the security policy, you must perform license activation.
- A. True
- B. False
Answer: A
NEW QUESTION 127
When configuring the security policy, ______ can control the flow based on the user.
- A. Services and applications
Answer: A
NEW QUESTION 128
Information security graded protection is the basic system of national information security assurance work.
- A. True
- B. False
Answer: A
NEW QUESTION 129
NAPT technology can realize a public IP address for multiple private network hosts
- A. True
- B. False
Answer: A
NEW QUESTION 130
......
Pass Huawei H12-711_V3.0-ENU Exam Info and Free Practice Test: https://certtree.2pass4sure.com/HCIA-Security/H12-711_V3.0-ENU-actual-exam-braindumps.html