H12-711_V4.0無料問題集「Huawei HCIA-Security V4.0」

質問 1

Which of the following descriptions about firewall logs is incorrect?

（A）Administrators can learn user behavior, search keywords, and the effectiveness of audit policy configurations through user activity logs.

（B）Administrators can learn the security policies that traffic hits through the policy matching log, which can be used to locate faults when problems occur.

（C）According to the severity or urgency of the information, logs can be divided into 8 levels. The more serious the information, the greater the log level value.

（D）Among the log levels, Emergency is the most serious level.

正解：C 解答を投票する

質問 2

In PKI, if you manually replace the CA and local certificate, please first ensure that the CA and local certificate are not used by the business.

（A）False

（B）True

正解：B 解答を投票する

質問 3

Which of the following is not a system requirement for configuring dual-machine hot standby?

（A）FW models must be the same

（B）FW hard disk configuration must be the same

（C）FW board types must be the same

（D）FW software versions must be the same

正解：B 解答を投票する

質問 4

Which of the following options are application risks? (Multiple Choice)

（A）Database system configuration security

（B）WEB service security

（C）Internet virus

（D）Email Security

正解：A、B、C、D 解答を投票する

質問 5

Firewalls can control access behaviors in and out of the network and protect specific networks from attacks by "untrusted" networks. This is achieved through () technology.

正解：

security policy

質問 6

In the PKI certificate revocation process, the user needs to send a signed and encrypted email to R& to apply for certificate revocation.

（A）False

（B）True

正解：B 解答を投票する

質問 7

The firewall executes the command and displays the above information. Which of the following descriptions is correct? (Multiple Choice)

（A）The status of this firewall VGMP group is Active

（B）The virtual IP address of the G1/0/1 interface of this firewall is 202.38.10.2

（C）When the active device USG_A fails, there will be no switchover.

（D）The VRRP backup group with VRID 1 on this firewall has a priority of 100

正解：A、D 解答を投票する

質問 8

Which of the following is not a common transmission route for worm viruses?

（A）USB flash drive

（B）Network sharing

（C）Backdoor program

（D）Email

正解：C 解答を投票する

質問 9

When configuring NAT Server on the USG series firewall, a server-map table will be generated.
Which of the following does not belong to the content of this performance?

（A）Destination port number

（B）Destination IP

（C）Agreement number

（D）Source IP

正解：D 解答を投票する

質問 10

Firewall intrusion prevention signatures are divided into two categories, predefined signatures and custom signatures.

（A）False

（B）True

正解：B 解答を投票する

質問 11

Host firewall is mainly used to protect the host from attacks and intrusions from the network.

（A）False

（B）True

正解：B 解答を投票する

質問 12

Which of the following items are advantages of NAT? (Multiple Choice)

（A）The address translation process is transparent to users

（B）Save IP addresses

（C）More convenient for monitoring and management

（D）Provide privacy protection for intranet users

正解：A、B、D 解答を投票する

質問 13

Which of the following configurations can implement the NAT ALG function?

（A）nat alg protocol

（B）detect protocol

（C）nat protocol

（D）alg protocol

正解：B 解答を投票する

質問 14

The firewall considers that data flow within the same security zone does not pose security risks and does not require the implementation of any security policy.

（A）False

（B）True

正解：A 解答を投票する

質問 15

After the dual-machine hot standby configuration is completed, you can execute the display hrp state command to view the dual-machine hot standby status, including local and peer device roles, priorities, heartbeat interface bandwidth usage, etc.

（A）False

（B）True

正解：B 解答を投票する

H12-711_V4.0 無料問題集「Huawei HCIA-Security V4.0」

弊社を連絡する

関連リンク

トップ試験