The Improve Guide To H12-711_V3.0 Braindump

NEW QUESTION 1

An employee of a company accesses the internal web server of the company through the firewall. The web page of the website can be opened by using a browser, but the reachability of the web server is tested by using the Ping command, and it shows that it is unreachable. What are the possible reasons?

• A. The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol
• B. The web server is down
• C. The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol
• D. The interface of the firewall connecting to the server is not added to the security zone

Answer: C

NEW QUESTION 2

On the surface, threats such as viruses, loopholes, and Trojan horses are the causes of information security incidents, but at the root, information security incidents are also closely related to people and the information system itself.

• A. True
• B. False

Answer: A

NEW QUESTION 3

at HuaweiSDSecIn the solution, which of the following options belong to the device of the executive layer? (multiple choice)

• A. CIS
• B. Fierhunter
• C. router
• D. AntiDDoS

Answer: BCD

NEW QUESTION 4

When the firewall upgrades the signature database and virus database online through the security service center, the firewall is required to be able to connect to the Internet first, and theDNSaddress

• A. True
• B. False

Answer: A

NEW QUESTION 5

Which of the following options are key elements of information security precautions? (multiple choice)

• A. asset Management
• B. Security operation and management
• C. Security Products and Technologies
• D. personnel

Answer: ABCD

NEW QUESTION 6

Digital certificate technology solves the problem that the public key owner cannot be determined in digital signature technology

• A. True
• B. False

Answer: A

NEW QUESTION 7

There are three types of frame forwarding behaviors: flooding, ( ), and discarding. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8

______ is a flaw in the specific implementation of hardware, software, protocols, or system security policies that could enable an attacker to gain unauthorized access or compromise a system.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

Personal information leakage is the destruction of the _______ characteristics of information.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 10

SNMPWhat versions of the protocol are there? (multiple choice)

• A. SNMPv1
• B. SNMPv2b
• C. SNMPv2c
• D. SNMPv3

Answer: ACD

NEW QUESTION 11

When the user uses the session authentication method to trigger the firewall built-inPortalDuring authentication, users do not actively perform identity authentication, advanced service access, and device push"redirect"to the certification page

• A. True
• B. False

Answer: A

NEW QUESTION 12

Which of the following is not part of a digital certificate?

• A. public key
• B. private key
• C. Validity period
• D. Issuer

Answer: B

NEW QUESTION 13

Which of the following is an action to be taken during the eradication phase in a cybersecurity emergency response? (multiple choice)

• A. Find Trojan horses, illegal authorizations, and system loopholes, and deal with them in a timely manner
• B. Revise security policies based on security incidents that occur, enable security auditing
• C. Block the behavior of the attack and reduce the impact
• D. Confirm the degree of damage caused by the security incident and report the security incident

Answer: AB

NEW QUESTION 14

Which of the following statements about OSPF is correct?

• A. Distance Vector Protocol
• B. Good scalability
• C. No loops
• D. Support authentication

Answer: BCD

NEW QUESTION 15

Which of the following options is correct regarding the description of firewall hot standby? (multiple choice)

• A. When the dual-system backup function needs to be provided in multiple areas on the firewall, it is necessary to configure multipleVRRPbackup group
• B. require the same firewall on the sameVGMPmanagement group ownedVRRPBackup group status remains consistent
• C. Firewall dual-system hot backup requires session table,MACInformation such as tables and routing tables are synchronized and backed up between the master device and the slave device
• D. VGMPto guarantee allVRRPConsistency of backup group switching

Answer: ABD

NEW QUESTION 16

As shown in the figure, the clientAand serverBestablished betweenTCPconnection, two places in the figure"?"The message sequence number should be which of the following?

• A. a+1:a
• B. a:a+1
• C. b+1:b
• D. a+1:a+1

Answer: D

NEW QUESTION 17

Regarding the ServerMap table generated by NAT No-PAT, which of the following descriptions is correct

• A. The function of the Server Map generated by NAT No-PAT is equivalent to the security polic
• B. That is, the packets matching the Server Map table can pass through the firewall directly without matching the security policy.
• C. There are two Server Maps generated by NAT No-PAT by defaul
• D. One is a reverse Server Map table, which is mainly used for address translation without additional configuration of NAT and security policies when external network users actively access the private network user
• E. to access.
• F. The Server Map generated by NAT No-PAT is static, that is, after NAT No-PAT is configured, the Server Map table is automatically generated and exists permanently.
• G. There are two Server Maps generated by NAT No-PAT by default, one is a forward Server Map table

Answer: C

NEW QUESTION 18
......