H12-711 PDF Pass Leader, H12-711 Latest Real Test
Valid H12-711 Test Answers & H12-711 Exam PDF
NEW QUESTION 122
Firewall update signature database and Virus database online throjgh security servicecenter, requires the firewall can connect to the Internet first, and then need to configure the correct DNS addresses.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 123
The administrator wants to create a web configuration administrator, and set the Https device management port number to 20000, and set the administrator to the administrator level, which of the following commands are correct?
- A. Stepl: web-manager enable port 20000 Step2. AAA View [USG] aaa [USG aaa] manager-user clientO01 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] password cipher Admin@123
- B. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level
1 [USG-aaa- manager-user-client001] password cipher Admin@123 - C. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa manager-user-client001] password cipher
- D. Stepl: web-manager security enable port 20000 Step2: AAA View [USG] aaa [USG aaa] manager-user client001 [USG-aaa-manager-user-client001] service-type web [USG-aaa-manager-user-client001] level
15 [USG-aaa- manager-user-client001] password cipher Admin@123
Answer: D
NEW QUESTION 124
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements iscorrect about the standard of evidence identification?
- A. Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.
- B. Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to s certain extent, the court should determine that it is relevant.
- C. Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated
- D. Fairness standard refers to the evidence obtained by the legal subject through egal means, which has the evidence ability.
Answer: B
NEW QUESTION 125
Which ofthe following optionsis the correct sequence ofthe four phases ofthe Information Security Management System (ISMS)?
- A. Check->Plan->Do->Action
- B. Plan->Check->Do->Action
- C. Plan->Check->Action->Do
- D. Plan->Do->Check->Action
Answer: D
NEW QUESTION 126
Which of the following guarantees "should detect and protect spam at critical network nodes and maintain upgrades and updates of the spam protection mechanism" in security 2.0?
- A. Centralized control
- B. Communication transmission
- C. Border protection
- D. Malicious code prevention
Answer: D
NEW QUESTION 127
Which of the following statements about IPSec SA is true?
- A. IPSec SA is one-way
- B. Used to generate a secret algorithm
- C. used to generate anencryption key
- D. IPSec SA is two-way
Answer: A
NEW QUESTION 128
Classify servers based on the shape, what types of the following can be divided into? (Multiple choice)
- A. X86 server
- B. Rack server
- C. Blade server
- D. Tower server
Answer: B,C,D
NEW QUESTION 129
HTTP packets are carried by UDP. and the HTTPS protocol is based on TCP three-way handshake. Therefore.
HTTPS is relatively secure, and HTTPS is recommended.
- A. True
- B. False
Answer: B
NEW QUESTION 130
In the GRE configuration environment, which of the following interface or IP address is the local GRE device configuration of the end private network route required to point to? (Choose two.)
- A. Tunnel interface IP address
- B. Tunnel Interface
- C. External networks (Internet) Interface
- D. External network (Internet) interface IP address
Answer: A,B
NEW QUESTION 131
Which of the following attacks is not a malformed message attack?
- A. Smurf attack
- B. TCP fragment attack
- C. Teardrop attack
- D. ICMP unreachable packet attack
Answer: D
NEW QUESTION 132
During the configuration of NAT, which of the following will the device generate a Server-map entry? (Multiple Choice)?
- A. After configuring NAT No-PAT, the device will create a server-map table for the configured multi-channel protocol data stream.
- B. After the NAT server is configured successfully, the device automatically generates a server map entry.
- C. A server-map entry is generated when easy-ip is configured.
- D. Automatically generate server-map entries when configuring source NAT.
Answer: A,B
NEW QUESTION 133
Which of the following are the same features of Windows and LINUX systems? (MultipleChoice)
- A. Support multitasking
- B. Support graphical interface operations
- C. Support multiple terminal platforms
- D. Open source system
Answer: A,B,C
NEW QUESTION 134
The administrator PC and the USG firewall management interface directly connected using the web the way initialization. Which nether following statements are true? (Multiple choice)
- A. Set the NIC ofthe management PC to automatically obtain the IP address.
- B. Manage PC browser accesshttp://192.168.0.1
- C. Manage PC browser access http://192.168.1.1
- D. IP address ofthe management PC is manually set to 192.168.0.2-'92.168.0.254
Answer: B,D
NEW QUESTION 135
Typical remote authentication modes are: (Multiple Choice)
- A. Local
- B. RADIUS
- C. LLDP
- D. HWTACACS
Answer: B,D
NEW QUESTION 136
In the currentnetwork it has deployed other authentication system, device registration function by enabling a single point, reducing the user to re-enter the password. What are correct about single sign-on statements?
(Multiple choice)
- A. AD domain single sign-on is only one depbyment model
- B. AD domain single sign-on login can be minored data stream synchronized manner to the firewall
- C. Device can identify the user through the authentication of the identity authentication system, user access, the device will not pis authentication pages, to avoid further asked to enter a username / password
- D. Although not requireto enter a user password, but the authentication server needs to interact with the user password and devices used to ensure that certification through discussion
Answer: B,C
NEW QUESTION 137
The following security policy command, representatives of the meaning:
- A. banned from trust region access to untrust region and the destination address is 10.1.0.0/16 segment all hosts ICMP message
- B. banned from trust region access to untrust region and the source address is 10.2.10.10 host to all the hosts ICMP message
- C. banned from trust region access to untrust region and the source address is 10.1.0.0/16 segment all the hosts ICMP message
- D. banned from trust region access to untrust region and the destination address is 10.1.10.10 host ICMP message
Answer: C
NEW QUESTION 138
In the construction of information security system, the security model is needed to accurately describe the relationship between important aspects of security and system behavior
- A. True
- B. False
Answer: B
NEW QUESTION 139
Which of the following is correct about the description of SSL VPN?
- A. Can be used without a client
- B. No authentication required
- C. may IP encrypt layer
- D. There is a NAT traversal problem
Answer: A
NEW QUESTION 140
......
H12-711 Dumps Ensure Your Passing: https://www.practicematerial.com/H12-711-exam-materials.html
H12-711 exam dumps and online Test Engine: https://drive.google.com/open?id=1oBg08J70Q38ZTFVuwMi2k9SmUV2uXXsc
