The Best Huawei H12-711 Study Guides and Dumps of 2023
Top Huawei H12-711 Exam Audio Study Guide! Practice Questions Edition
To pass the Huawei H12-711 (HCIA-Security V3.0) Certification Exam, candidates must possess a strong foundation in network security concepts and technologies. They should be familiar with the latest security threats and vulnerabilities and be able to design and implement security solutions to mitigate those risks. HCIA-Security V3.0 certification exam comprises multiple-choice questions, and candidates must score at least 60% to pass the exam. Upon passing the exam, candidates will receive a valuable certification that demonstrates their expertise in network security and enhances their professional credibility.
NEW QUESTION # 173
What are the classification of USG firewall user authentication? (Choose three.)
- A. the fingerprint authentication
- B. no authentication
- C. password authentication
- D. single sign-on (sso)
Answer: B,C,D
Explanation:
Explanation/Reference:
NEW QUESTION # 174
Which of the following is wrong about the management of Internet users?
- A. The system has a default user group by default, which is also the system default authentication domain.
- B. Each user belongs to at least one user group, also can belong to multiple user groups
- C. Each user group can belong to multiple user groups
- D. Each user group can include multiple users and user groups
Answer: C
NEW QUESTION # 175
Antivirus software and host firewall have the same effect
- A. True
- B. False
Answer: B
NEW QUESTION # 176
Terminal detection is an important part of the future development of informationsecurity. Which of the following methods belong to the category of terminal detection? (Multiple Choice)
- A. Monitorthe host registry modification record
- B. Monitor and remember the external device
- C. Install host antivirus software
- D. Prevent users from accessing public network search engines
Answer: A,C
NEW QUESTION # 177
Which of the following description is wrong aoout the intrusion detection system?
- A. The intrusion detection system can perform blocking operation if it finds that there is a violation of the security policy or the system has traces of being attacked.
- B. The intrusion detection system can dynamically collect a large amount of key information 3nd materials through the network and computer, and can timely analyze and judge the current state of the entire system environment.
- C. Intrusion detection system includes all hardware and software systems for intrusion detection
- D. The flood detection system can be linked with firewalls and switches to become a powerfu 'helper' of the firewall, which is better and more precise to control traffic access between domains.
Answer: C
NEW QUESTION # 178
In the VRRP (Virtual Router Redundancy Protocol) group, the primary firewall periodically sends advertisement packets to the backup firewall. The backup firewall is only responsible for monitoring advertisement packets and will not respond.
- A. True
- B. False
Answer: A
NEW QUESTION # 179
In a Firewall hot standby configuration, HRP key configuration includes which of the following? (Choose three.)
- A. Enable HRP backup
hrp enable - B. Preemption delay
hrp preempt [delay interval] - C. Specifies the heartbeat port
hrp interface interface-type interface-number - D. Enabling fast backup session summary
hrp mirror session enable
Answer: A,C,D
NEW QUESTION # 180
Which of the following description about the group management for VGMP is wrong?
- A. Periodically sends Hello packets between VGMP of master/slave firewall
- B. Master/slave status change of VRRP backup group needs to notify its VGMP management group
- C. master/slave devices exchange packets to understand each other through the heartbeat line, and backup the related commands and status information
- D. Theinterface type and number of two firewalls heartbeat port may be different, as long as they can communicate with each other
Answer: D
NEW QUESTION # 181
The vulnerability that has not been discovered is the 0 day vulnerability
- A. True
- B. False
Answer: B
NEW QUESTION # 182
Which of the following statements are correct about thebusiness continuity plan? (Multiple Choice)
- A. Not all security incidents must be reported to company executives
- B. Business continuity plan does not require high-level participation of the company before forming a formal document
- C. Business continuity plan rines nnt require high-level participation Nfthe Company in determining the project scope phase
- D. BCP needs flexibility because it cannot predict all possible accidents
Answer: A,D
NEW QUESTION # 183
Which of the followingdescription about the VGMP protocol is wrong?
- A. By default, when three HELLO packet cycle of Standby end does not receive HELLO packets which are sent from the opposite end, the opposite end will be considered a failure, which will switch itself to the Active state
- B. VGMP add multiple VRRP backup groups on the same firewall to a management group, uniformly manage all the VRRP group by management group.
- C. State of VGMP group is active, which will periodically send HELLO packets to the opposite end.
Stdandby end only monitors the HELLO packets, which will not respond - D. VGMP ensure that all VRRP backup groups state are the same througha unified control of the switching of each VRRP backup group state
Answer: C
NEW QUESTION # 184
What are common hash algorithms? (Choose two.)
- A. SHA-1
- B. MD5
- C. DES
- D. AES
Answer: A,B
NEW QUESTION # 185
Which of the following statements are correct about Huawei routers and switches? (Multiple Choice)
- A. The switch has some security features, and some switches can implement more security functions by adding security boards.
- B. The switch does not have security features
- C. The main function of the router is to forward data. Sometimes the firewall may bea more suitable choice when the enterprise has security requirements.
- D. The router can implement some security functions, and some routers can implement more security functions by adding security boards.
Answer: A,C,D
NEW QUESTION # 186
Which of the following statement is wong about L2TP VPN?
- A. Belongs to Layer 3 VPN technology
- B. Can be used in conjunction with IPsec VPN
- C. Applicable to business employees dialing access to the intranet
- D. Will not encrypt the data
Answer: A
NEW QUESTION # 187
OSPF is more commonly used than RIP because OSPF has device authentication and is more secure.
- A. True
- B. False
Answer: B
NEW QUESTION # 188
Which of the following description is wrong about the Internet users and VPN access user authentication?
- A. The Internet user andthe VPN access user share data, and the users attribute check (user status, account expiration time, etc.) also takes effect on the VPN access.
- B. After the VPN access user passes the authentication, it will be online on the user online list.
- C. After the VPN user accesses the network, it can access the network resources of the enterprise headquarters. The firewall can control the accessible network resources based on theuser name.
- D. The local authentication or server authentication process is basically the same for the Internet users. The authentication is performed on the user through the authentication domain.
Answer: B
NEW QUESTION # 189
Against IP Spoofing, which of the following description is wrong?
- A. After IP spoofing attack is successful, the attacker can use forged any IP address to imitate legitimate host to access to critical information
- B. The hosts based on IP address's trust relationship can login directly without entering password verification
- C. An attacker would need to disguise the source IP addresses as trusted hosts, and send the data segment with the SYN flag request for connection
- D. IP spoofing is to use the hosts' normal trust relationship based on the IP address to launch it
Answer: A
NEW QUESTION # 190
When the firewall hard disk is in place, which of the following is correct description for the firewall log?
- A. The administrator can advertise the content log to view the detection and defense records of network threats.
- B. The administrator can learn the security policy of the traffic hit through the policy hit log. And use it for fault location when the problem occurs.
- C. The administrator knows the user's behavior, the keywords explored, and the effectiveness of the audit policy configuration through the user activity log.
- D. The administrator can use the threat logto understand the user's security risk behavior and the reason for being alarmed or blocked.
Answer: B
NEW QUESTION # 191
Which of the following options can be used in the advanced settings of Windows Firewall? (Multiple choice)
- A. Change notification rules
- B. Set connection security rules
- C. Restore defaults
- D. Set out inbound rules
Answer: A,B,C,D
NEW QUESTION # 192
Which of the following are correct regarding the matching conditions of the security policy? (Multiple choice)
- A. "Apply" in the matching condition is an optional parameter
- B. "The source security zone" is an optional parameter in the matching condition.
- C. "Service" is an optional parameter in the matching condition
- D. "Time period" in the matching condition is an optional parameter
Answer: A,B,C,D
NEW QUESTION # 193
Which of the following is the encryption technology used in digital envelopes?
- A. Hash algorithm
- B. Symmetric encryption algorithm
- C. Stream encryption algorithm
- D. Asymmetric encryption algorithm
Answer: D
NEW QUESTION # 194
Through display ike sa to see the result as follows, which statements are correct? (Multiple choice)
- A. The second stage ipsec sa has been successfully established
- B. ike is using version v1
- C. ike is using version v2
- D. The first stage ike sa has been successfully established
Answer: B,D
NEW QUESTION # 195
Which of the following is the analysis layer device in the Huawei SDSec solution?
- A. CIS
- B. Agile Controller
- C. switch
- D. Firehunter
Answer: D
NEW QUESTION # 196
Regarding SSL VPNtechnology, which of the following options is wrong?
- A. SSL VPN technology encryption only takes effect on the application layer
- B. SSL VPN requires a dial-up client
- C. SSL VPN technology extends the network scope of the enterprise
- D. SSL VPN technology can be perfectly applied to NAT traversal scenarios
Answer: B
NEW QUESTION # 197
Which of the following is the GRE protocol number?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 198
......
Valid H12-711 Exam Updates - 2023 Study Guide: https://ucertify.examprepaway.com/Huawei/braindumps.H12-711.ete.file.html