H12-711_V4.0試験無料問題集（942題）「Huawei HCIA-Security V4.0 認定」

出題：1

Which of the following are included in the backup methods of dual-machine hot standby? (Multiple Choice)

A. Automatic backup

B. Session quick backup

C. Manual batch backup

D. After the device is restarted, the configurations of the active and standby FWs are automatically synchronized.

正解：A,C,D 解答を投票する

出題：2

Among the following options, which one is not a private IP address?

A. 172.32.1.1/24

B. 10.32.254.254/24

C. 10.10.10.10/8

D. 192.168.254.254/16

正解：A 解答を投票する

出題：3

VPN is a virtual private network, which is used to build a private virtual network on a public network and transmit private network traffic in this virtual network.

A. True

B. False

正解：A 解答を投票する

出題：4

The results seen through display ike sa are as follows. Which of the following statements is incorrect?

A. IKE SA has been established

B. IKE uses the V1 version

C. IPsec SA has been established

D. The neighbor address is 2.2.2.1

正解：C 解答を投票する

出題：5

Which of the following descriptions of the IKEv2 negotiation process are correct? (Multiple Choice)

A. The four messages in the initial exchange process of IKEv2 are all encrypted and transmitted.

B. The transmission of some control information in IKEv2 negotiation is completed through notification exchange.

C. The interaction messages exchanged by IKEv2 to create sub-SAs are protected by the keys negotiated in the initial exchange.

D. Under normal circumstances, IKEv2 uses 2 exchanges of 4 messages to complete the establishment of a pair of IPsec SAs.

正解：B,C,D 解答を投票する

出題：6

Which of the following descriptions of the VGMP protocol is incorrect?

A. VGMP ensures that the status of all VRRP backup groups in the management group is consistent by uniformly controlling the status switching of each VRRP backup group.

B. VGMP adds multiple VRRP backup groups on the same firewall to a management group, and the management group manages all VRRP backup groups uniformly.

C. By default, when the standby end does not receive a hello message from the peer end within three hello message cycles, it will consider that the peer end is faulty and switch itself to the Active state.

D. The VGMP group device in the Active status will regularly send hello messages to the peer. The stdandby end is only responsible for monitoring hello messages and will not respond.

正解：D 解答を投票する

出題：7

SSL is a security protocol that provides secure connections for TCP-based application layer protocols.

A. True

B. False

正解：A 解答を投票する

出題：8

When the FW is deployed at the network egress, if a failure occurs, Internet access services will be affected. In order to improve the reliability of the network, two FWs need to be deployed and formed ()

正解：

Dual-machine hot standby

出題：9

Normally, the port used by the FTP active mode server for data transmission is the TCP () port.

正解：

20

出題：10

Which of the following descriptions of stateful inspection firewalls is correct?

A. Stateful inspection firewalls need to match access rules for each data packet entering the firewall.

B. The stateful inspection firewall cannot match the state table of UDP packets.

C. When stateful inspection firewall checks packets, it does not check the correlation of previous and later packets of the same connection.

D. Stateful inspection firewall only needs to match the access rules on the first packet

正解：D 解答を投票する

出題：11

Through business logs, what activities of users can the administrator view? (Multiple Choice)

A. User's IP address

B. Online duration

C. Login time

D. Password change

正解：A,B,C 解答を投票する

出題：12

Multiple security zones can be configured on Huawei firewalls. By default, high-priority security zones can access low-priority security zones.

A. True

B. False

正解：A 解答を投票する

出題：13

Which of the following protocols are transport layer protocols? (Multiple Choice)

A. TCP

B. DHCP

C. FTP

D. UDP

正解：A,D 解答を投票する

H12-711_V4.0試験無料問題集「Huawei HCIA-Security V4.0 認定」