H12-721-ENU無料問題集「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network)」

質問 1

Regard to server load balancing technology, the commands executed on the firewall and the output obtained are as follows:

Which is correct about the following statement?

（A）The load balancing strategy use weighted polling algorithm.

（B）The load balancing policy enables the service health check function. The detection packets are TCP packets.

（C）The real servers of the load balancing strategy are all forced unavailable.

（D）The load balancing strategy use weighted minimum connection algorithm.

正解：A 解答を投票する

質問 2

The two FWs are interconnected by IPSec. The display ike sa is executed in FW_A. The result is shown as following. Which of the following statements are correct? (Multiple Choices)

（A）SA between firewalls has been successfully established

（B）SA between firewalls have not been established successfully

（C）FW_A is the initiator of IKE secure channel negotiation

（D）FW_B is the initiator of IKE security channel negotiation

正解：A、C 解答を投票する

質問 3

After a new virtual system is created on the firewall, the virtual system does not have any security zone. The administrator needs to plan the configuration by self.

（A）FALSE

（B）TRUE

正解：A 解答を投票する

質問 4

A firewall device can create multiple virtual gateways. Each virtual gateway is independent and does not affect each other. Administrators can configure their own users, resources, and policies under the virtual gateway for independent management.

（A）FALSE

（B）TRUE

正解：B 解答を投票する

質問 5

HWTACACS can only encrypt the password part, while Radius protocol can encrypt message body except Radius message header.

（A）False

（B）True

正解：A 解答を投票する

質問 6

If you use the policy template and sub-policy to configure the IPsec policy, the firewall will apply policy template, then apply sub-policy.

（A）FALSE

（B）TRUE

正解：A 解答を投票する

質問 7

Which of the following statements is wrong about firewall bandwidth policy?

（A）For maximum bandwidth and the number of connections limit, the sub-policy cannot be greater than the parent policy.

（B）If bandwidth management and source NAT are used at the same time, specify the address before conversion when configuring source address/region matching conditions for bandwidth policy.

（C）In the same set of parent-child policies, the same bandwidth channel cannot be referenced.

（D）If bandwidth management and source NAT are used at the same time, specify the address after conversion when configuring source address/region matching conditions for the bandwidth policy.

正解：D 解答を投票する

質問 8

Which of the following is the possible cause of the failure?

（A）The user is not assigned to the Web proxy resources.

（B）The route between the gateway and intranet server is unreachable.

（C）The security policy does not allow traffic from the external network to the intranet server.

（D）SSL VPN is deployed on the firewall next to the one-arm deployment. You need to use NAT to map the private address of the SSL VPN gateway to public network address. The address mapping is incorrect.

正解：A 解答を投票する

質問 9

The administrator has enabled the virtual system function on the Huawei USG6000 product and created the only virtual system vaysa. If a user belonging to vsysa wants to access a server in the root system, in the virtual system vsysa routing table, which interface is the outcoming interface?

（A）virtual-if0

（B）virtual-if1

（C）vlan-if1

（D）vlan-if0

正解：A 解答を投票する

質問 10

There are three physical interfaces in the Link-Group group. When any of these interfaces fails, which of the following statements is correct? (Multiple Choice)

（A）If any interface in the group fails, the system sets the status of other interfaces in the group to Down.

（B）If any interface in the group fails, the status of other interfaces in the group does not change.

（C）After some interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

（D）After all the interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

正解：A、D 解答を投票する

質問 11

IP-Link sends a probe packet to the specified IP address. By default, if three probes fail, the link to this IP address is considered to be faulty.

（A）False

（B）True

正解：B 解答を投票する

質問 12

Which of the following options is correct for the configuration of a VPN interface bound to a VPN instance?

（A）ip binding vpn-id

（B）ip binding vpn-id vpn-instance-name

（C）ip binding vpn-instance vpn-id

（D）ip binding vpn-instance vpn-instance-name

正解：D 解答を投票する

質問 13

Which of the following options is correct about the configuration command for the firewall to enable virtualization?

（A）vsys

（B）vsys enable

（C）vsys name enable

（D）vsys-view enable

正解：B 解答を投票する

質問 14

In the headquarters-branch IPsec VPN network, when the headquarters is configured, when the headquarters adopts the IPSec policy template, which of the following are mandatory items? (Multiple choice)

（A）ipsec policy-template template-name sec-number

（B）policy enable

（C）ipsec policy policy-name sec-number isakmp template template-name

（D）proposal proposal-name

正解：A、C、D 解答を投票する

H12-721-ENU 無料問題集「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network)」

弊社を連絡する

関連リンク

トップ試験