Improved HCIA-Security V3.0 H12-711_V3.0 Free Question

NEW QUESTION 1

In the classification of information security classified protection systems, which of the following levels define if an information system is compromised. Will it cause damage to social order and public interests? (
)[Multiple Choice Questions]

• A. The third level of security marking protection
• B. Level 4 Structural Protection
• C. Second-level system audit protection
• D. The first level of user self-protection

Answer: ABC

NEW QUESTION 2

Which of the following options are necessary for the firewall dual-system hot standby scenario?? (multiple choice)

• A. hrp enable
• B. hrp mirror session enable
• C. hrp interface interface-type interface-number
• D. hrp preempt [delay interval]

Answer: AC

NEW QUESTION 3

Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

When a network security incident occurs, investigate the intrusion behavior, virus or Trojan horse, and repair and strengthen the host. Which of the above actions belong to the work content of the network security emergency response?

• A. Recovery phase
• B. Detection stage
• C. Eradication stage
• D. Inhibition stage

Answer: D

NEW QUESTION 5

aboutL2TPThe sequence of the call establishment process in the corridor, which of the following descriptions is correct?
* 1. EstablishL2TPtunnel
* 2. EstablishPPPconnect
* 3. LNSAuthenticate the user
* 4. User access to intranet resources
* 5. EstablishL2TPconversation

• A. 1->2->3->5->4
• B. 1->5->3->2->4
• C. 2->1->5->3->4
• D. 2->3->1->5->4

Answer: B

NEW QUESTION 6

About firewall gateways forHTTPWhich of the following statements is false about the protocol's antivirus response?

• A. When the gateway device blocksHTTPAfter connecting, push to the clientwebpage and generate log
• B. Response methods include announcement and blocking
• C. In alarm mode, the device only generates logs, which is not correct.HTTPThe files transmitted by the protocol are processed and sent out
• D. Blocking means that the device is disconnected from theHTTPserver connection and block file transfer

Answer: B

NEW QUESTION 7

Digital signature technology obtains a digital signature by encrypting which of the following data?

• A. User data
• B. Receiver's public key
• C. sender's public key
• D. digital fingerprint

Answer: D

NEW QUESTION 8

( ) means that the computer system has defects and deficiencies in the specific matters of hardware, software, protocols or system security policies. (Chinese Standard Terminology) (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

Which of the following attacks is not a special packet attack?

• A. ICMPredirected packet attack
• B. ICMPUnreachable Packet Attack
• C. IPaddress scanning attack
• D. oversizedICMPPacket attack

Answer: C

NEW QUESTION 10

Which of the following options is not a private network IP address?

• A. 192.168.254.254/16
• B. 172.32.1.1/24
• C. 10.32.254.254/24
• D. 10.10.10.10/8

Answer: B

NEW QUESTION 11

Single sign-on function for Internet users, users directlyADServer authentication, the device does not interfere with the user authentication process,ADMonitoring services need to be deployed inUSGequipment, monitoringADAuthentication information of the server

• A. True
• B. False

Answer: A

NEW QUESTION 12

aboutwindowsDescription of the firewall advanced settings, which of the following options is wrong? (multiple choice)

• A. When setting the stacking rules, only the local port can be restricted, and the remote port cannot be restricted
• B. When setting the stacking rules, you can restrict both the local port and the remote port.
• C. When setting the stacking rule, only the local port can be restricted, and the remote port cannot be restricted
• D. When setting the stacking rules, you can restrict both the local port and the remote port.

Answer: BD

NEW QUESTION 13

OSPFCompareRIPThe more commonly used reason isOSPFWith device authentication function, it is more secure

• A. True
• B. False

Answer: B

NEW QUESTION 14

About firewall fragmentationWhich of the following options is correct? (multiple choice)

• A. By default, the firewall caches fragmented packets
• B. After the direct forwarding of fragmented packets is configured, the firewall will forward the fragmented packets that are not the first fragmented packets according to the interzone security policy.
• C. For fragmented packets,NATALGnot supportedSIPFragmented Packet Processing
• D. By default, aIPV4The maximum number of fragment buffers for packets is32,OneIPV6The maximum number of fragment buffers for packets is255

Answer: ACD

NEW QUESTION 15

Which of the following options is correct for the description of the rating of the level protection system in the 2.1 class protection system?

• A. Level 1: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, but will not damage national security, social order and public interests.
• B. Level 5: When the information system is damaged, it will cause particularly serious damage to national security.
• C. Level 4: When the information system is damaged, it will cause particularly serious damage to social order and public interests, or cause serious damage to national security.
• D. Level 3: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, or cause damage to social order and public interests and also cause damage to national security.

Answer: ABC

NEW QUESTION 16

Regarding the description of risk assessment, which of the following is false? ( )[Multiple choice]

• A. Risk assessment requires training in asset collection and risk assessment methods
• B. Risk assessment entails identifying threats, vulnerabilities, and scanning for security vulnerabilities.
• C. Risk assessment requires assessing risks and classifying risk levels
• D. Risk assessment requires monitoring system operation.

Answer: D

NEW QUESTION 17

Which of the following descriptions about the VGMP group is correct?

• A. The priority of VRRP in the VGMP group will change with the change of VGAMP
• B. VGMP is a protocol used to control the state of small VRRP groups
• C. The default priority of USG6000 is 65000
• D. The default priority of USG9000 is 45000

Answer: B

NEW QUESTION 18
......