[Q140-Q161] Real Exam Questions H12-711 Dumps Exam Questions in here [Jan-2023]

4.1/5 - (8 votes)

Real Exam Questions H12-711 Dumps Exam Questions in here [Jan-2023]

Get Latest Jan-2023 Conduct effective penetration tests using H12-711

NEW QUESTION 140
Which of the following are in the certification area of IS027001? (Multiple choice)

Access control

Personnel safety

Vulnerability management

Business continuity management

NEW QUESTION 141
Which ofthe following types are included in Huawei firewall user management? (Multiple Choice)

Internet user management

Access user management

Administrator User Management

Device User Management

NEW QUESTION 142
Which of the following are in the certification area of ISO27001? (Multiple choice)

Access control

Personnel safety

Vulnerability management

Business continuity management

NEW QUESTION 143
Typical remote authentication modes are: (Multiple Choice)

RADIUS

Local

HWTACACS

LDP

NEW QUESTION 144
Which of the following are remote authentication methods? (Multiple choice)

RADIUS

Local

HWTACACS

LLDP

NEW QUESTION 145
Which of the following belongs to Layer 2 VPN technology?

SSL VPN

L2TP VPN

GRE VPN

IPSec VPN

NEW QUESTION 146
Through display ike sa to see the result as follows, which statements are correct? (Multiple choice)

The first stage ike sa has been successfully established

The second stage ipsec sa has been successfully established

ike is using version v1

ike is using version v2

NEW QUESTION 147
In the Client-Initiated VPN configuration, generally it is recommended to plan the address pool and the headquarters or need to of the network address for the different network or need to open proxy forwarding on the gateway device

True

False

NEW QUESTION 148
Which of the following are the same features of Windows and LINUX systems? (MultipleChoice)

Support multitasking

Support graphical interface operations

Open source system

Support multiple terminal platforms

NEW QUESTION 149
For the process of forwarding the first packet of the session between firewall domains,there are the following steps:
1. find the routing table
2. find inter-domain packet filtering rules
3. find the session table
4. find the blacklist
Which of the following is the correct order?

1->3->2->4

3->2->1->4

3->4->1->2

4->3->1->2

NEW QUESTION 150
Which of the following traffic matches the authentication policy triggers authentication?

Access device or device initiated traffic

DHCP, BGP. OSPF and LDP packets

Traffic of visitors accessing HTTP services

The first DNS packet corresponding to the HTTP service data flow

NEW QUESTION 151
Which of the following option does not belong to symmetric encryption algorithm?

DES

3DES

AES

RSA

NEW QUESTION 152
About the default security zones of USG series security firewall, which of the following statement is correct?

The default security zone can be deleted

The security level of the default security zone can be modified

The default security zone cannot be deleted, but can modify the security level

There are four default security zones

NEW QUESTION 153
Fire Trust domain FTP client wants to access an Um.rust server FTP service has allowed the client: to access the server TCP 21 port, the client in the Windows command line window can log into the FTP server, but can not download the file, what are the following solutions? (Multiple choice)

Take the Trust between Un:rust domain to allow two-way default access strategy

The ^TP works with the port mode modify the Untru3t Trust domain to allow the inbound direction between the default access strategy

Trust Untrust domain configuration is enabled detect ftp

FTP works with Passive mode modify the domain inbound direction betv/een the Untrust Trust default access policy to allow

NEW QUESTION 154
In order to obtain evidence of crime, it is necessary to master the technology of intrusion tracking. Which of the following descriptions are correct about the tracking technology? (Multiple Choice)

Packet Recording Technology marks packets on each passing router by inserting trace data into the tracked IP packets

Link test technology determines the source of the attack by testing the network link between the routers

Packet tagging technology extracts information from attack sources by recording packets on the router and then using data drilling techniques

Shallow mail behavior analysis can analyze the information such as sending IP address, sending time, sending frequency, number of recipients, shallow email headers and so on.

NEW QUESTION 155
Against Buffer overflow attacks, which description is correct?(Multiple choice)

Buffer overflow attack is use of the software system on memory operating defects, by using high operating permission to run attack code

Buffer overflow attack has nothing to do with operating system’s vulnerabilities and architecture

Buffer overflow attack is the most common method of attack software system’s behaviors

Buffer overflow attack belongs to the application layer attack behavior

NEW QUESTION 156
In the VRRP (Virtual Router Redundancy Protocol) group, the primary firewall periodically sends advertisement packets to the backup firewall. The backup firewall is only responsible for monitoring advertisement packets and will not respond.

True

False

NEW QUESTION 157
Which ofthe following are core elements ofthe IATF (InformationAssurance Technology Framework) model?
(Multiple choice)

Environment

person

Technology

Operation

NEW QUESTION 158
About the description of firewall active-standby, which of the following is correct?(Multiple Choice)

When a plurality of regions on the firewall needs to provide dual-machine backup function, you need to configure multiple VRRP backup groups on the firewall.

It requires the state of all the VRRP backup groups in the same VGMP management group on the same firewall should be consistent.

The firewall active-standby requires the information such as the session table. MAC table, routing table and so on synchronous backup between primary devices and slave devices.

VGMP is to ensureall VRRP backup groups’ consistency of switching

NEW QUESTION 159
When the IPSec VPN tunnel mode is deployed, the AH protocol is used for packet encapsulation. In the new IP packet header field, which of the following parameters does not require data integrity check?

Source IP address

Destination IP address

TTL

Idetification

NEW QUESTION 160
Which of the following is the correct descriptionof the investigation and evidence collection?

Evidence is not necessarily required during the investigation

Evidence obtained by eavesdropping is also valid

In the process of all investigation and evidence collection, there are law enforcement agencies involved.

Document evidence is required in computer crime

NEW QUESTION 161
The Huawei Redundancy Protocol (HRP) is used to synchronize the main firewall configuration and connection status and other data on the backup firewall to synchronize . Whichof the following options is not in the scope of synchronization?

Security policy

NAT policy

Blacklist

IPS signature set

Loading …