H12-711_V4.0試験無料問題集（942題）「Huawei HCIA-Security V4.0 認定」

出題：1

When IPsec VPN uses transport mode to encapsulate packets, which of the following is not within the certification scope of the ESP security protocol?

A. ICP Header

B. ESP Header

C. IP Header

D. ESP Iail

正解：C 解答を投票する

出題：2

SSL VPN routing mode determines the route of messages sent by customers. In () mode, no matter what resource is accessed, the data will be intercepted by the virtual network card and forwarded to the virtual gateway for processing.

正解：

Full routing

出題：3

NAT technology can achieve secure data transmission by encrypting data.

A. True

B. False

正解：B 解答を投票する

出題：4

Which of the following types of computer viruses can be divided into? (Multiple Choice)

A. Snailworm

B. Trojan horse

C. Backdoor program

D. File virus

正解：A,B,C,D 解答を投票する

出題：5

In the information assurance stage, from which of the following perspectives do we need to consider information security issues?

A. Security system

B. Business

C. Management

D. Technology

正解：A 解答を投票する

出題：6

Which of the following descriptions of ESP characteristics is incorrect?

A. ESP supports NAT traversal

B. ESP supports data source verification

C. ESP adds an ESP header after the standard IP header of each data packet.

D. When using transmission mode, the integrity verification scope of the ESP protocol is the entire IP message.

正解：A 解答を投票する

出題：7

The administrator connects to the firewall through the G1/0/0 interface (the interface has been added to the Trust zone). If the administrator is allowed to log in to the firewall through G1/0/0 for configuration management, how should the administrator configure the traffic allowed in the security policy? direction?

A. Allow traffic from Trust Zone to Trust Zone

B. Allow traffic from Trust Zone to Untrust Zone

C. Release traffic from Local Zone to Local Zone

D. Allow traffic from Trust Zone to Local Zone

正解：D 解答を投票する

出題：8

When IPsec VPN uses tunnel mode to encapsulate packets, which of the following is not within the encryption scope of the ESP security protocol?

A. Raw IP Header

B. TCP Header

C. ESP Header

D. ESP Tail

正解：C 解答を投票する

出題：9

Which of the following does not include the fragmented packets that a packet filtering firewall can filter?

A. Forged ICMP error messages

B. Non-fragmented packets

C. First fragmented message

D. Subsequent fragmented messages

正解：C 解答を投票する

出題：10

Which of the following options is not a hashing algorithm?

A. MD5

B. SHA2

C. SM1

D. SHA1

正解：C 解答を投票する

出題：11

Which of the following descriptions of PKI technology is incorrect?

A. Through PKI technology, attacks by malicious users by repeatedly sending captured data packets can be prevented.

B. Through PKI technology, users can verify the legitimacy of access devices, thereby ensuring that users access a safe and legal network.

C. Through PKI technology, the privacy of data transmitted in the network can be guaranteed, and the data will not be tampered with or snooped.

D. Through PKI technology, the security of data can be guaranteed. Unauthorized devices and users cannot view the data. Through PKI technology, the privacy of data transmitted in the network can be guaranteed, and the data will not be tampered with or snooped.

正解：A 解答を投票する

出題：12

Regarding the description of firewall, which of the following is correct?

A. Adding a firewall to a network will inevitably change the topology of the network.

B. Firewalls cannot transparently access the network.

C. To avoid single points of failure, the firewall only supports side-by-side deployment.

D. Depending on the usage scenario, the firewall can be deployed in transparent mode or in three-way mode.

正解：D 解答を投票する

H12-711_V4.0試験無料問題集「Huawei HCIA-Security V4.0 認定」