(2024) H12-711 Dumps and Practice Test (290 Questions) [Q129-Q152]

ExamBoosts January 29, 2024 H12-711 > Huawei 0

Rate this post

(2024) H12-711 Dumps and Practice Test (290 Questions)

Guide (New 2024) Actual Huawei H12-711 Exam Questions

Huawei H12-711 (HCIA-Security V3.0) certification exam is a comprehensive exam that covers all aspects of network security. It is designed to test the candidate’s ability to apply their knowledge of network security to real-world scenarios. H12-711 exam is computer-based and consists of multiple-choice questions. H12-711 exam is designed to be challenging and requires a high level of preparation.

Huawei H12-711 (HCIA-Security V3.0) exam is a certification exam designed to test the skills and knowledge of network security professionals. H12-711 exam is intended to assess the candidate’s ability to configure, implement, and maintain security solutions for small and medium-sized networks. HCIA-Security V3.0 certification is an essential requirement for anyone who wants to pursue a career in network security or enhance their existing knowledge in the field.

NEW QUESTION 129
NAPTtechnology can implement a public network IP address for multiple private network hosts

True

False

NEW QUESTION 130
HTTP packets are carried by UDP. and the HTTPS protocol is based on TCP three-way handshake. Therefore.
HTTPS is relatively secure, and HTTPS is recommended.

True

False

NEW QUESTION 131
Caesar Code is primarily used to encrypt data by using a stick of a specific specification

True

False

NEW QUESTION 132
For the description of ARP spoofing attacks, which the following statements is wrong?

The ARP implementation mechanism only considers the normal interaction of the service and does not verify any abnormal business interactions or malicious behaviors.

ARP spoofing attacks can only be implemented through ARP replies and cannot be implemented throughARP requests

When a host sends a normal ARP request, the attacker will respond preemptively, causing the host to establish an incorrect IP and MAC mapping relationship.

ARP static binding is a solution to ARP spoofing attacks. It is mainly applied to scenarios where the network size is small.

NEW QUESTION 133
Which of the following is wrong about the scanning of vulnerabilities?

The vulnerability was discovered beforehand and discovered afterwards

Vulnerabilities are generally repairable

Vulnerabilities are security risks that can expose computers to hackers

Vulnerabilities can be avoided

NEW QUESTION 134
Which of the following is correct about the description of SSL VPN?

Can be used without a client

may IP encrypt layer

There is a NAT traversal problem

No authentication required

NEW QUESTION 135
Which of the following statement is wrong about L2TP VPN?

Applicable to business employees dialing access to the intranet

Will not encrypt the data

Can be used in conjunction with IPsec VPN

Belongs to Layer 3 VPN technology

NEW QUESTION 136
On the USG series firewalls, the default security policy does not support modification

True

False

NEW QUESTION 137
According to the protection object, the firewall is divided. Windows Firewall belongs to ________.

Software firewall

Hardware firewall

Stand-alone firewall

Network firewall

NEW QUESTION 138
When configuring NAT Server on the LSG series firewall, the server-map table will be generated. Which of the following does not belong in the table?

Destination IP

Destination port

Agreement number

Source IP

NEW QUESTION 139
HRP (Huawei Redundancy Protocol) Protocol to backup the connection state of data include: (Multiple Choice)

TCP/UDP sessions table

Ser/er Map table

the dynamic blacklist

the routing table

NEW QUESTION 140
As shown in the figure, a NAT server application scenario isconfigured when the web configuration mode is used

Which of the following statements are correct”? (Multiple choice)

When configuring an interzone secunty policy, set the source security zone to Untrust and the target security zone to DMZ

When configuring NAT Server, the internal address is 10 1.1 2 and the external address is 200.10.10.1.

When configuring an interzone secunty policy, set the source security zone to DMZ and the target secunty zone to Untrust.

When configuring NAT Server, the internal address is 200.10.10.1 and the external address is 10.1.1.2.

NEW QUESTION 141
According to the management specifications, the network security system and equipment are regularly checked, the patches are upgraded, and the network security emergency response drill is organized. Which of the following belongs to the MPDRR network security modes of the above actions?

Protection link

Testing link

Response link

Management link

NEW QUESTION 142
As shown in the figure, a TCP connection is established between client A and server B Which of the following two “Tpacket numbers should be?

a+1: a

a: a+1

b+1: b

a+1: a+1

NEW QUESTION 143
In the USG series firewall, you can use the______function to provide well-known application services for non-known ports.

Port mapping

MAC and IP address binding

Packet filtering

Long connection

NEW QUESTION 144
According to the protection object, the firewall is divided. Windows Firewall belongs to

Software firewall

Hardware firewall

Stand-alone firewall

Network firewall

NEW QUESTION 145
Which types of encryption technology can be divided into? (Multiple Choice)

Symmetric encryption

Asymmetric encryption

Fingerprint encryption

Data encryption

NEW QUESTION 146
The world’s first worm “Morris worm” made people realize that as people become more dependent on computers, the possibility of computer networks being attacked increases, and it is necessary to establish a comprehensive emergency response system.

True

False

NEW QUESTION 147
Which of the following are the same features of Windows and LINUX systems? (MultipleChoice)

Support multitasking

Support graphical interface operations

Open source system

Support multiple terminal platforms

NEW QUESTION 148
Which of the following attacks is not a malformed message attack?

Teardrop attack

Smurf attack

TCP fragment attack

ICMP unreachable packet attack

NEW QUESTION 149
When the session authentication mode is used to trigger the firewall’s built-in Portal authentication, the user does not actively perform identity authentication, advanced service access, and device push “redirect” to the authentication page.

True

False

NEW QUESTION 150
Which of the following is the default backup method for double hot standby?

Automatic backup

Manual batch backup

Session fast backup

Configuration of the active and standby FWs after the device is restarted

NEW QUESTION 151
VPN tunnel technology refers to through encryption algorithm (such as DES, 3DE5) to achieve data transmitted in the network will not be intercepted.

True

False

NEW QUESTION 152
Which of the following descriptions about windows logs is wrong?

The system log is used to record the events generated by the operating system components, including the crash of the driver, system components and application software, and data

Windows server 2008 system logs stored in the Application.evtx

The application log contains events logged by the application or system program, mainly recording events in the running of the program.

Windows seiver 2008 security lug is sluied in security.evtx

Loading …