[Nov 10, 2021] H12-711 Exam Brain Dumps - Study Notes and Theory
Pass Huawei H12-711 Test Practice Test Questions Exam Dumps
NEW QUESTION 59
Which ofthe following does not belong to the user authentication method in the USG firewall?
- A. Fingerprint authentication
- B. Password authentication
- C. Single sign-on
- D. Free certification
Answer: A
NEW QUESTION 60
Which of the following attacks is not a cyber-attack?
- A. IP spoofing attack
- B. MAC address spoofing attack
- C. ICMP attack
- D. Smurf attack
Answer: B
NEW QUESTION 61
After the firewall uses the hrp standby config enable command to enable the standby device configuration function, all the information that can be backed up can bedirectly configured on the standby device, and the configuration on the standby device can be synchronized to the active device.
- A. False
- B. True
Answer: B
NEW QUESTION 62
In the GRE configuration environment, which of the following interface or IP address is the local GRE device configuration of the end private network route required to point to? (Choose two.)
- A. Tunnel Interface
- B. Tunnel interface IP address
- C. External network (Internet) interface IP address
- D. External networks (Internet) Interface
Answer: A,B
NEW QUESTION 63
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the standard of evidence identification?
- A. Fairness standard refers to the evidence obtained by the legal subject through legal means, which has the evidence ability.
- B. Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.
- C. Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated.
- D. Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to a certain extent, the court should determine that it is relevant.
Answer: D
NEW QUESTION 64
When Layer 2 switches (not configured VLAN) receiving a data frame, of no match is found in the MAC address table, it will forward the data frame to all ports (including Layer 2 switches receiving port).
- A. False
- B. True
Answer: A
NEW QUESTION 65
Which of the following descriptions about IKE SA is wrong?
- A. IKE is a UDP- based application layer protocol
- B. The encryption algorithm used by user data packets isdetermined by IKE SA.
- C. IKE SA servers for IPSec SA
- D. IKE SA is two-way
Answer: B
NEW QUESTION 66
Administrators want to clear the current session table. Which of the following command is correct?
- A. display session table
- B. clear firewall session table
- C. reset firewall session table
- D. display firewall session table
Answer: C
NEW QUESTION 67
Regarding the description of the vulnerability scanning, which of the following is wrong?
- A. Vulnerability scanning can be done based on the results of ping scan results and port scan
- B. Vulnerability scanning is a technology based on network remote monitoring of target network or host security performance vulnerability, which can be used for simulated attack experiments and security audits.
- C. Vulnerability scanning is used to detect whether there is a vulnerability in the target host system. Generally, the target host is scanned for specific vulnerabilities.
- D. Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks.
Answer: D
NEW QUESTION 68
Which of the following statement is wong about L2TP VPN?
- A. Applicable to business employees dialing access to the intranet
- B. Will not encrypt the data
- C. Belongs to Layer 3 VPN technology
- D. Can be used in conjunction with IPsec VPN
Answer: C
NEW QUESTION 69
How to view the matching number of security policy?
- A. display device
- B. display startup saved-configuration
- C. display current-configuration
- D. display policy all
Answer: D
NEW QUESTION 70
Which of the following are the basic functions of anti-virus software? (Multiple Choice)
- A. Defend virus
- B. Find virus
- C. Clear virus
- D. Copy virus
Answer: A,B,C
NEW QUESTION 71
Which of the following is the encryption technology used in digital envelopes?
- A. Symmetric encryption algorithm
- B. Asymmetric encryption algorithm
- C. Stream encryption algorithm
- D. Hash algorithm
Answer: B
NEW QUESTION 72
Intrusion Prevention System (IPS) is a defense system that can block in real time when an intrusion is discovered
- A. False
- B. True
Answer: B
NEW QUESTION 73
Which of the following statements about IPSec SA is true?
- A. IPSec SA is one-way
- B. IPSec SA is two-way
- C. used to generate anencryption key
- D. Used to generate a secret algorithm
Answer: A
NEW QUESTION 74
......
Verified H12-711 dumps Q&As - H12-711 dumps with Correct Answers: https://www.practicematerial.com/H12-711-exam-materials.html
The Best HCNA-Security Study Guide for the H12-711 Exam: https://drive.google.com/open?id=1oBg08J70Q38ZTFVuwMi2k9SmUV2uXXsc
