H12-721無料問題集「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network)」

質問 1

In order to ensure the normal forwarding of large service traffic, a company's network administrator uses two firewalls to implement hot standby. As shown in the figure, when the configuration is complete, it is found that when firewall A fails, a serious packet loss occurs in the data flow that is being transmitted before the fault, but the newly transmitted data flow can work normally after the fault.

What are the possible causes of this phenomenon?

（A）HRP track is not enabled on the firewall upstream and downstream interfaces

（B）The session fast backup function is not configured on the USG. If the path is inconsistent, packets cannot be forwarded normally

（C）HRP preemption time configured on the firewall is smaller than the OSPF convergence time

（D）The function of adjusting the OSPF COST value according to the HRP status is not configured

正解：B 解答を投票する

質問 2

Digital certificates are used for identity authentication in IPSec VPN. If the IKE v1 main mode is used for negotiation, the certificate is verified in messages 5 and 6.

（A）False

（B）True

正解：B 解答を投票する

質問 3

As shown in the figure, the remote user uses the Web proxy to access the intranet resources. Which of the following options is wrong for the Web proxy analysis? (Multiple options)

（A）The web proxy is implemented using the web link.

（B）After the remote user establishes an HTTP session with the FW virtual gateway, it then establishes an HTTPS session with the Web Server.

（C）If you want to implement the Web proxy function, the remote user must first establish an HTTPS session with the FW virtual gateway.

（D）The implementation of the web link has an encryption function, which can ensure remote users secure access to intranet resources.

正解：B、D 解答を投票する

質問 4

In the overall flow of bandwidth management, traffic first matches the bandwidth policy, and after the bandwidth policy shunting, it enters the corresponding bandwidth channel for processing.
Which of the following are the processing flow of bandwidth channel? (Multiple Choice)

（A）Limit the number of connections for the business.

（B）Drop traffic that exceeds the predefined maximum bandwidth.

（C）Mark the priority of traffic as the basis for subsequent queue scheduling

（D）Drop traffic that exceeds the predefined interface bandwidth

正解：A、B、C 解答を投票する

質問 5

About Radius certification process, there are the following steps:
1. The Radius client in the network device receives the username and password and sends an authentication request to the Radius server.
2. When the user logs in to a network device such as the USG, the user name and password will be sent to the Radius client.
3. After the Radius server receives a valid request, it completes the authentication and returns the required user authorization information to the Radius client.
Which of the following order is correct?

（A）2-3-1

（B）3-2-1

（C）2-1-3

（D）1-2-3

正解：C 解答を投票する

質問 6

When the performance difference between servers is large, which of the following algorithms can be used for load balancing?

（A）Weighted polling algorithm

（B）The minimum connection algorithm

（C）Source IP hash algorithm

（D）Simple polling algorithm

正解：A 解答を投票する

質問 7

When traffic is finally sent from the outgoing interface, it is limited by the bandwidth of the outgoing interface. If the traffic is greater than the outbound interface bandwidth, which of the following will be used to do queue scheduling for traffic to ensure that high-priority packets are sent preferentially?

（A）QoS

（B）Forwarding priority

（C）Bandwidth policy matching order

（D）Remark DSCP priority

正解：B 解答を投票する

質問 8

Users use SSL VPN to access intranet resources and use server authentication to authenticate users. In order to distinguish corporate users in different regions and establish different user domains for users in different regions. When a user use SSL VPN authentication, the authentication prompts that the password is incorrect.
Which of the following are the possible causes of this failure? (Multiple choices)

（A）The user entered the wrong user name and password.

（B）The administrator has configured the wrong user domain.

（C）The user domain was not entered when the user entered the user name.

（D）The username and password do not exist.

正解：A、B、C 解答を投票する

質問 9

Which of the following is wrong about IKE DPD?

（A）Periodic DPD detection mode: If the current IPSec packet received by the remote end has exceeded the DPD idle time, the local end actively sends DPD request packet to the peer end.

（B）Periodically send DPD packets between IKE peers.

（C）Used for the detection of IKE neighbor state.

（D）The on-demand detection mode of DPD only sends an inquiry before the encrypted packet is sent and when the duration of the last IPSec packet received from the peer has exceeded the DPD idle time.

正解：B 解答を投票する

質問 10

On the main panel of the Huawei USG6300 firewall, there is a fixed management interface GigabitEthernet 0/0/0 for device management.

（A）False

（B）True

正解：B 解答を投票する

質問 11

Which of the following statements is wrong about firewall bandwidth policy?

（A）For maximum bandwidth and the number of connections limit, the sub-policy cannot be greater than the parent policy.

（B）If bandwidth management and source NAT are used at the same time, specify the address before conversion when configuring source address/region matching conditions for bandwidth policy.

（C）In the same set of parent-child policies, the same bandwidth channel cannot be referenced.

（D）If bandwidth management and source NAT are used at the same time, specify the address after conversion when configuring source address/region matching conditions for the bandwidth policy.

正解：D 解答を投票する

質問 12

SSL VPN adopts the B/S architecture design. The remote user terminal does not need to install additional client software. Directly using a Web browser can safe and fast access to corporate intranet resources.

（A）FALSE

（B）TRUE

正解：B 解答を投票する

質問 13

What algorithm can be used for session maintenance?

（A）Simple Round-Robin algorithm

（B）The minimum connection algorithm

（C）Source IP hash algorithm

（D）Weighted Round-Robin algorithm

正解：C 解答を投票する

質問 14

After a new virtual system is created on the firewall, the virtual system does not have any security zone. The administrator needs to plan the configuration by self.

（A）FALSE

（B）TRUE

正解：A 解答を投票する

H12-721 無料問題集「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network)」

弊社を連絡する

関連リンク

トップ試験