[Oct-2021] Feel Huawei H12-711 Dumps PDF Will likely be The best Option
H12-711 exam torrent Huawei study guide
NEW QUESTION 14
Security technology has different methods at different technical levels and areas. Which of the following devices can be used for network layer security protection? (Multiple choice)
- A. IPS/IDS device
- B. Vulnerability scanning device
- C. Firewall
- D. Anti-DDoS device
Answer: A,C,D
NEW QUESTION 15
When Layer 2 switches (not configured VLAN) receiving a data frame, of no match is found in the MAC address table, it will forward the data frame to all ports (including Layer 2 switches receiving port).
- A. False
- B. True
Answer: A
NEW QUESTION 16
Which of the following attacks does not belong to special packet attack?
- A. Large ICMP packet attack
- B. IP address scanning attack
- C. ICMP redirect packet attack
- D. ICMP unreachable packet attack
Answer: B
NEW QUESTION 17
When the USG series firewall hard disk is in place, which of the following logs can be viewed? (Multiple Choice)
- A. Business log
- B. Threat log
- C. Operation log
- D. Alarm information
Answer: A,B,C,D
NEW QUESTION 18
Which of the following is the correct order for event response management?
1. detection
2. report
3. relief
4. summarizing experience
5. repair
6. recovery
7. response
- A. 1-3-2-7-5-54
- B. 1-7-3-2-5-54
- C. 1-2-3-7-5-54
- D. 1-3-2-7-5-64
Answer: B
NEW QUESTION 19
Which of the following are the ways in which a PKI entity applies for a local certificate from CA? (Multiple Choice)
- A. Network application
- B. Online application
- C. Local application
- D. Offline application
Answer: B,D
NEW QUESTION 20
What port numbers may be used by FTP protocol? (Choose two.)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B,D
NEW QUESTION 21
HTTP packets are carried by UDP. and the HTTPS protocol is based on TCP three-way handshake. Therefore.
HTTPS is relatively secure, and HTTPS is recommended.
- A. False
- B. True
Answer: A
NEW QUESTION 22
Which of the following statement is wrong about NAT?
- A. Configure a NAT address poolin the source NAT technology. You can configure only one IP address in the address pool.
- B. Address Translation can follow the needs of users, providing FTP. WWW, Telnet and other services outside the LAN
- C. Some application layer protocols carry IP address information in the data, but also to modify the data in the upper layer of the IP address information when they make NAT
- D. For some non-TCP. UDP protocols (such as ICMP. PPTP), unable to do NAT.
Answer: D
NEW QUESTION 23
In the environment of GRE configuration, which of the following statements are true? (Choose three.)
- A. When the opposite end receives data packets, by identifying the protocol field value of IP header for GRE to determine whether send the data packet to GRE module for processing
- B. If both ends enable the configuration of keyword verification, the keyword must be the same
- C. When the local device send data packets, by identifying the protocol field value of IP header for GRE to determine whether send the data packet to GRE module for processing
- D. In order to make the ends of the tunnel forward data packets normally, the devices of both ends are configured routing which through the Tunnel interface
Answer: A,B,D
NEW QUESTION 24
Which of the followingare malicious programs? (Multiple choice)
- A. Worm
- B. Virus
- C. Trojan horse
- D. Vulnerabilities
Answer: A,B,C
NEW QUESTION 25
About the description of firewall active-standby, which of the following is correct? (Multiple Choice)
- A. When a plurality of regions on the firewall need to provide dual-machine backup function, you need to configure multiple VRRP backup groups on the firewall.
- B. It requires the state of all the VRRP backup groups in the same VGMP management group on the same firewall should be consistent.
- C. VGMP is to ensure all VRRP backup groups' consistency of switching
- D. The firewall active-standby requires the information such as the session table, MAC table, routing table and so on synchronous backup between primary devices and slave devices.
Answer: A,B,C
NEW QUESTION 26
A company employee account authority expires, but can still use the account to access the company server.
What are the security risks of the above scenarios? (Multiple Choice)
- A. Access security risk
- B. System security risk
- C. Physical security risk
- D. Managing security risk
Answer: A,B,D
NEW QUESTION 27
Which of the following option does not belong to symmetric encryption algorithm?
- A. AES
- B. RSA
- C. DES
- D. 3DES
Answer: B
NEW QUESTION 28
Terminal detection is an important part of the future development of informationsecurity. Which of the following methods belong to the category of terminal detection? (Multiple Choice)
- A. Install host antivirus software
- B. Monitorthe host registry modification record
- C. Monitor and remember the external device
- D. Prevent users from accessing public network search engines
Answer: A,B
NEW QUESTION 29
......
Use Valid New H12-711 Test Notes & H12-711 Valid Exam Guide: https://www.freepdfdump.top/H12-711-valid-torrent.html
H12-711 Actual Questions Answers PDF 100% Cover Real Exam Questions: https://drive.google.com/open?id=19vqkqOrsk7rqiNK2rTv2NI7jlsfPuDUp
