Dependable H12-711_V4.0 Exam Dumps to Become Huawei Certified [Q20-Q43]

QUESTION 20
The following description of the AH protocol in IPSec VPN, which one is wrong?

QUESTION 21
The trigger modes of the built-in Portal authentication in the firewall include pre-authentication and ____ authentication[fill in the blank]*

QUESTION 22
As shown in the figure, nat server global202.106.1.1 inside10.10.1.1 is configured on the firewall. Which of the following is the correct configuration for interzone rules? ( )[Multiple choice]*

QUESTION 23
IPSec VPN uses an asymmetric algorithm to calculate the ___ key to encrypt data packets.[fill in the blank]

QUESTION 24
As shown, in transmission mode, which of the following locations should the AH header be inserted in?

QUESTION 25
As shown in the figure, the process of AD single sign-on (querying the security log mode of AD server), please match the corresponding operation process.

QUESTION 26
An engineer needs to back up the firewall configuration. Now he wants to use a command to view all the current configurations of the firewall. May I ask the command he uses is ____[fill in the blank]*

QUESTION 27
As shown in the figure, the administrator needs to test the network quality of the 20.0.0/24 CIDR block to the 40.0.0/24 CIDR block on Device B, and the device needs to send large packets for a long time to test the network connectivity and stability.

QUESTION 28
What type of ACL does ACL number 3001 correspond to?

QUESTION 29
Which of the following is not the default security zone of the firewall ( )[Multiple choice]*

QUESTION 30
Which of the following descriptions about the heartbeat interface is wrong ( )?[Multiple choice]*

QUESTION 31
Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution. 1. Inhibition stage, 2. recovery phase, 3. Detection stage, 4. eradication phase[fill in the blank]*

QUESTION 32
Which of the following protocols is a file transfer protocol?

QUESTION 33
IKE SA is a one-way logical connection, and only one IKE SA needs to be established between two peers.

QUESTION 34
In the Linux system, which of the following is the command to query the P address information? ( )[Multiple choice]*

QUESTION 35
The initial priority of the USG9500VGMP group is related to which of the following factors ( )? *

QUESTION 36
What are the correct entries in the following description of firewall security zones?

QUESTION 37
Please match the following information security risks to information security incidents one by one.[fill in the blank]* physical security risk Enterprise server permissions are loosely set Information Security Management Risk Infected Panda Burning Incense Information Access Risk Fire destroyed equipment in computer room application risk Talk to people about leaking company secrets

QUESTION 38
Please order the following steps in the PKI life cycle correctly, 1. Issued, 2. storage, 3. Update, 4. verify[fill in the blank]*

QUESTION 39
In the authentication policy of the firewall, _____ allows the user to not need to enter the user name and password, but can obtain the corresponding relationship between the user and the IP, so as to carry out policy management based on the user[fill in the blank]*

QUESTION 40
Which of the following is the correct sequence for incident response management
1. Detection 2 Report 3 Mitigation 4 Lessons learned 5 Fix 6 Recovery 7 Response

QUESTION 41
The RADIUS protocol specifies how to pass user information, billing information, authentication and billing results between the NAS and the RADIUS server, and the RADIUS server is responsible for receiving the user’s connection request, completing the authentication, and returning the result to the NAS.

QUESTION 42
SSL VPN is a VPN technology that realizes remote secure access through SSL protocol. Which of the following software must be installed when using SSL VPN?

QUESTION 43
Which of the following is not an encryption algorithm in a VPN?