How Many Questions Of H12-711_V3.0 Exams

NEW QUESTION 1

in configurationNATDuring the process, in which of the following situations, the device will generateServer-maptable entry? (multiple choice)

• A. configuration sourceNATautomatically generated whenserver-mapentry
• B. configureNATserverAfter success, the device will automatically generateServer-mapentry
• C. configureeasy-ipwill be generated whenserver-mapentry
• D. configureNAT No-PATAfter that, the device will establish a data stream for the configured multi-channel protocolserver-mapsurface

Answer: BD

NEW QUESTION 2

The trigger modes of the built-in Portal authentication in the firewall include pre-authentication and ______ authentication[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 3

In the VGMP group state, if the device's own VGMP group priority is equal to the peer device's VGMP group priority, the device's VGMP group state is ( ). (answer in letters) (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

aboutSSL VPNdescription, which of the following is correct?

• A. Can be used without a client
• B. yesIPlayer to encrypt
• C. existNATcrossing problem
• D. No authentication required

Answer: A

NEW QUESTION 5

In the ______ view of the firewall, you can use the reboot command to restart the firewall.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6

An employee of a company accesses the internal web server of the company through the firewall, and can open the web page of the website by using a browser, but the accessibility of the web server is tested by using the Pina command, and it shows that it is unreachable. What are the possible reasons? ( )[Multiple choice]

• A. The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol
• B. The interface of the firewall connecting to the server is not added to the security zone
• C. The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol
• D. WEB server is down

Answer: A

NEW QUESTION 7

As shown in the figure, two Server Map entries are generated after configuring NAT Server. Regarding the information presented in this figure, which of the following descriptions is wrong?[Multiple choice]*
Type: Nat Server. ANY1.1.1.1[192.168.1.1]
Type: Nat Server Reverse. 192.168.1.1[1.1.1.1] ANY

• A. The second Server Map function is that when 192.168.1.1 accesses any address, the source address will be converted to 1.1.1.1 after passing through the firewall
• B. The first Server Map function is that when any address accesses 192.168.1.1, the destination IP will be converted to 1.1.1.1 after passing through the firewall.
• C. The Server Map with the Reverse logo can use the command to remove it.
• D. The two Server Map entries are static, that is, after the NAT Server is configured, the two Server Maps will be automatically generated and exist permanently.

Answer: B

NEW QUESTION 8

Which of the following options are the possible reasons for the problem that users cannot access network resources in the authentication-free two-way binding mode? (multiple choice)

• A. Authentication-free users and authenticated users are in the same security area
• B. Authentication-free users do not use the specifiedIP/MACaddressPC
• C. The authentication action in the authentication policy is set to"Do not acknowledge/Certification-free"
• D. Online users have reached the maximum

Answer: BD

NEW QUESTION 9

Which of the following descriptions about the function of the iptables table is wrong?

• A. NAT table: The function of address translation.
• B. Raw table: Determines whether the packet is processed by the state tracking mechanism.
• C. Mangle table: modify security policy
• D. Filter table: Policy allowed or not allowed in the packet.

Answer: C

NEW QUESTION 10

The reason why NAPT can realize one-to-many address translation is that the ______ is also translated when the address is translated, so multiple private addresses can share the same public address.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

Huawei's Agile-Controller products belong to _______ in the HiSec solution.[fill in the blank]

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 12

Because NAT technology can realize one-to-many address translation. So with NAT technology, there is no need to worry about insufficient IPv4 addresses.

• A. True
• B. False

Answer: A

NEW QUESTION 13

Which of the following information is encrypted during the use of digital envelopes? (multiple choice)

• A. Symmetric key
• B. User data
• C. Receiver's public key
• D. Receiver's private key

Answer: AB

NEW QUESTION 14

In practical applications, asymmetric encryption is mainly used to encrypt user data

• A. True
• B. False

Answer: B

NEW QUESTION 15

whenUSGWhich of the following logs can be viewed when the series firewall hard disk is in place? (multiple choice)

• A. Operation log
• B. business log
• C. Alarm information
• D. Threat log

Answer: ABCD

NEW QUESTION 16

If there is no hard disk installed on the firewall, when a network intrusion event is found, the event will be recorded in the () log. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 17

If we do not want to generate a reverse Server Mapi entry when configuring NAT Server, we need to add a parameter when configuring NATServerE. This parameter is ( ) (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 18
......