Top Tips Of Up To The Minute H12-711_V3.0 Actual Exam

NEW QUESTION 1

We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the ______ encryption algorithm to improve the encryption and decryption speed.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 2

Security technology has different methods in different technical levels and fields. Which of the following devices can be used for network layer security? (multiple choice)

• A. Vulnerability Scanning Device
• B. firewall
• C. Anti-DDoSequipment
• D. IPS/IDSequipment

Answer: BCD

NEW QUESTION 3

The world's first worm-"Morris Worm"Make people realize that with the deepening of people's dependence on computers, the possibility of computer network being attacked is also increasing, and it is necessary to establish a sound emergency response system

• A. True
• B. False

Answer: A

NEW QUESTION 4

Which of the following options belong to international organizations related to the standardization of information security? (multiple choice)

• A. International Organization for Standardization(ISO)International Organization for Standardization
• B. International Electrotechnical Commission(IEC) International Electrotechnical Commission
• C. International Telecommunication Union(ITU)ITU
• D. Wi-Fi Alliance Wi-Fialliance organization

Answer: ABC

NEW QUESTION 5

Please sort from large to small according to the table processing priority of iptables.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6

aboutClient-InitializedofL2TP VPN, which of the following statements is false?

• A. remote user accessInternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request
• B. ;NSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password
• C. LNSAssign private keys to remote usersIPaddress
• D. Remote users do not need to installVPNClient software

Answer: D

NEW QUESTION 7

The trigger modes of the Portali authentication built in the firewall include pre-authentication and ( ) authentication. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8

When connecting in a public placeWi-FiWhich of the following actions is relatively safer?

• A. The connection is not encryptedWi-Fihot spot
• B. Connection is paid by the operatorWi-FiHotspot and web browsing only
• C. connect unencrypted for freeWi-Fimake online shopping
• D. Connection encrypted for freeWi-FiPerform online transfer operations

Answer: B

NEW QUESTION 9

IPSEC VPNtechnology adoptionESPSecurity protocol encapsulation is not supportedNATcross becauseESPThe header of the message is encrypted

• A. True
• B. False

Answer: B

NEW QUESTION 10

For the process of forwarding session header packets between firewall domains, there are the following steps:
* 1, look up the routing table
* 2, find the inter-domain packet filtering rules
* 3, lookup session table
* 4, find the blacklist
Which of the following is in the correct order?

• A. 1->3->2->4
• B. 3->2->1->4
• C. 3->4->1->2
• D. 4->3->1->2

Answer: C

NEW QUESTION 11

Which of the following options is correct regarding the actions of the security policy and the description of the security profile? (multiple choice)

• A. If the action of the security policy is"prohibit", the device will discard this traffic, and will not perform content security checks in the future.
• B. The security profile can take effect even if the action is allowed under the security policy
• C. The security profile must be applied under the security policy whose action is allowed to take effect
• D. If the security policy action is"allow", the traffic will not match the security profile

Answer: AC

NEW QUESTION 12

About intrusion prevention systems (IPS), which of the following is false?

• A. IDSThe device needs to be linked with the firewall to block intrusion
• B. IPSThe device cannot be deployed in bypass mode in the network
• C. IPSDevices can be connected in series at the network boundary and deployed online
• D. IPSOnce the device detects intrusion behavior, it can achieve real-time blocking

Answer: B

NEW QUESTION 13

After the company network administrator configures the dual-system hot backup, he wants to check the status of the current VGMP group, so he typed the command and displayed the following information
HRP_M<FW_A>_
Role: active, peer: active
Running priority:45000, peer:45000
Backup channel1 usage: 30x
Stab1 e time: 1days, 13 hours, 35 minutes
Last state change information: 2020-03-22 16:01:56 HRP core state changed, old_state=normal (active), new_state=normal
(active).local priority F 4 peer_priority 45000. Configuration:
hello interval: 1000ms preempt: 60s
mirror configuration:off mirror session:on
track trunk member:on auto-sync configuration:on
auto-sync connection- status:on adjust ospf cost:on
adjust ospfv3-cost:on adjust bgp-cost:on nat resource: off
Detail information on: Gigabi tEthernet0/0/1:up Gigabi tEthernet0/0/3:up ospf-cost: +0
then the command he typed in the blank is[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14

firewallGE1/0/1andGE1/0/2mouth belongs toDMZarea, if you want to implementGE1/0/1The connected area is accessibleGE1/0/2Connected area, which of the following is correct?

• A. needs to be configuredlocalarriveDMZsecurity policy
• B. No configuration required
• C. Interzone security policy needs to be configured
• D. needs to be configuredDMZarrivelocalsecurity policy

Answer: B

NEW QUESTION 15

Which of the following is true about the difference between pre-incident prevention strategies and post-incident recovery strategies? (multiple choice)

• A. Prevention strategies focus on minimizing the likelihood of an accident before a story occur
• B. Recovery strategies focus on minimizing the impact and damage to the business after an incident
• C. The role of pre-disaster prevention strategies does not include minimizing economic and reputational losses caused by accidents
• D. Recovery strategies are used to improve business high availability
• E. A recovery strategy is part of a business continuity plan

Answer: ACD

NEW QUESTION 16

Please match the following information security risks to information security incidents one by one.[fill in the blank]*
physical security riskEnterprise server permissions are loosely set Information Security Management RiskInfected Panda Burning Incense Information Access RiskFire destroyed equipment in computer room application riskTalk to people about leaking company secrets

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 17

Which of the following descriptions about digital fingerprints in digital signatures is wrong? ( )[Multiple choice]*

• A. It is the data obtained by the sender after calculating the plaintext information through the HASH algorithm.
• B. The receiver will use the sender's public key to calculate the generated data fingerprint and compare it with the received digital fingerprint.
• C. Digital fingerprints are also known as information digests.
• D. The receiver needs to use the sender's public key to unlock the digital signature to obtain the digital fingerprint.

Answer: C

NEW QUESTION 18
......