Online H12-711 Test Brain Dump Question and Test Engine [Q20-Q38]

4.5/5 - (4 votes)

Online H12-711 Test Brain Dump Question and Test Engine

Real Huawei H12-711 Exam Dumps with Correct 290 Questions and Answers

NO.20 Regarding the description of the vulnerability scanning, which of the following is wrong?

Vulnerability scanning is a technology based on network remote monitoring of target network or host security performance vulnerability, which can be used for simulated attack experiments and security audits.

Vulnerability scanning is used to detect whether there is a vulnerability in the target host system.
Generally, the target host is scanned for specific vulnerabilities.

Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks.

Vulnerability scanning can be done based onthe results of ping scan results and port scan

NO.21 What are the classification of USG firewall user authentication? (Choose three.)

no authentication

password authentication

single sign-on (sso)

the fingerprint authentication

Explanation/Reference:

NO.22 In the USG series firewall, which of the following commands can be used to query the NAT translation result?

display nat translation

display firewall session table

display current nat

display firewall nat translation

NO.23 IPSEC VPN technology does not support NAT traversal when encapsulated in ESP security protocol because ESP encrypts the packet header.

True

False

NO.24 Which of the following description is wrong about the Internet users and VPN access user authentication?

The Internet user andthe VPN access user share data, and the users attribute check (user status, account expiration time, etc.) also takes effect on the VPN access.

The local authentication or server authentication process is basically the same for the Internet users. The authentication is performed on the user through the authentication domain.

After the VPN user accesses the network, it can access the network resources of the enterprise headquarters. The firewall can control the accessible network resources based on theuser name.

After the VPN access user passes the authentication, it will be online on the user online list.

NO.25 Which of the following desciipliuri uf firewall hul standby is cuie? (multiple choice)

When multiple areas of the firewall need to provide dual-system backup, you need to configure multiple VRRP backup groups on the firewall.

The status of all VRRP backup groups in the same VGMP management group on the same firewall is the same

The hot standby of the firewall needs to synchronize the backup between the master device and the slave device by using the session table. MAC table, and routing table.

VCMP i3 to ensure the consistency of all VRRPbackup group switching

NO.26 Which of the following is not included in the Corporate Impact Analysis (BIA)?

Business priority

Accident handling priority

Impact assessment

Risk identification

NO.27 In the IPSec VPN transmission mode, which part ofthe data packe: is encrypted?

Network layer and upper layer data packet

Original IP packet header

New IP packet header

Transport layer and upper layer data packet

NO.28 Which of the following are the same features of Windows and LINUX systems? (MultipleChoice)

Support multitasking

Support graphical interface operations

Open source system

Support multiple terminal platforms

NO.29 Which of the following are correct regarding the matching conditions of the security policy? (Multiple choice)

“The source security zone” is an optional parameter in the matching condition.

“Time period” in the matching condition is an optional parameter

“Apply” in the matching condition is an optional parameter

“Service” is an optional parameter in the matching condition

NO.30 Which of the following is not the scope of business of the National Internet Emergency Center?

Emergency handling of security incidents

Early warning notification of security incidents

Providing security evaluation services for government departments, enterprises and institutions

Cooperate with other agencies to provide training services

NO.31 Which of the following are the versions of the SNMP protocol? (Multiple choice)

SNMPv1

SNMPv2b

SNMPv2c

SNMPv3

NO.32 If the administrator uses ‘he default authentication domain to authenticate a user, you onlyneed to enter a user name when the user logs, if administrators use the newly created authentication domain to authenticate the user, the user will need to enter login “username @ Certified domain name”

True

False

NO.33 In the information security system construction management cycle, which of the following actions is required to be implemented in the “check’ link?

Safety management system design

Implementation of the safety management system

Risk assessment

Safety managementsystem operation monitoring

NO.34 Security technology has different approaches at different technical levels and areas. Which of the following devices can be used for network layer security protection? (Multiple choice)

Vulnerability scanning device

Firewall

Anti-DDoS equipment

IPS/IDS equipment

NO.35 Through display ike sa to see the result as follows, which statements are correct? (Multiple choice)

The first stage ike sa has been successfully established

The second stage ipsec sa has been successfully established

ike is using version v1

ike is using version v2

NO.36 Which of the following can be supported by Policy Center access control? (Choose three.)

Hardware SACG (hardware security access control gateway)

802.1X

ARP control

Software SACG (host firewall)

NO.37 Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements iscorrect about the standard of evidence identification?

Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to s certain extent, the court should determine that it is relevant.

Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated

Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.

Fairness standard refers to the evidence obtained by the legal subject through egal means, which has the evidence ability.

NO.38 Which of the following statement is wong about L2TP VPN?

Applicable to business employees dialing access to the intranet

Will not encrypt the data

Can be used in conjunction with IPsec VPN

Belongs to Layer 3 VPN technology

Loading …