H12-711_V4.0試験無料問題集（152題）「Huawei HCIA-Security V4.0 認定」

出題：1

Which of the following descriptions of single sign-on is correct?

A. The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor's identity information to FW. F7 only records the identity information of the visitor and does not participate in the authentication process

B. The visitor recited the Portal authentication page and sent the username and password to FT to identify his/her identity, and the password was not stored on the FT, and the FI sent the username and password to the third-party authentication server, and the authentication process was carried out on the authentication server.

C. Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.

D. The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the FW.

正解：A 解答を投票する

出題：2

_____ Authentication is to configure user information (including local user's user name, password and various attributes) on the network access server. The advantage is that it is fast.

正解：

local authentication

出題：3

Which of the following attacks can be detected through intrusion prevention?

A. Buffer overflow attack

B. Injection attack

C. Trojan horse

D. Directory traversal

正解：A,B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which type of NAT translates both addresses and port numbers and uses the public IP address of the outbound interface as the post-NAT address?

A. NAT No-PAT

B. 3-tuple NAT

C. NAPT

D. Easy IP

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

When logging in to the web UI through HTTPS, you need to specify a local certificate issued by a CA that the web browser trusts for the HTTPS client on the device. Because the web browser can verify the local certificate, this approach avoids malicious attacks and ensures secure logins of administrators.

A. FALSE

B. TRUE

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which of the following statements are correct about SYN flood attack defense technologies on Huawei firewalls?

A. The number of half-open TCP connections can be limited to defend against SYN flood attacks.

B. SYN cookie technology can be used to defend against SYN flood attacks.

C. The TCP connection establishment rate can be limited to defend against SYN flood attacks.

D. Interzone security policies can be configured to defend against SYN flood attacks.

正解：A,B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

In the TCP/P protocol core, which of the following protocols works at the application layer?

A. IGMP

B. RIP

C. ICMP

D. ARP

正解：B 解答を投票する

出題：8

The trigger modes of the built-in Portal authentication in the firewall include pre-authentication and ____ authentication.

正解：

session

出題：9

Which of the following statements is incorrect about PKI?

A. PKI ensures that data is accessible only to authorized devices and users, protecting data privacy.

B. PKI enables users to verify the validity of access devices, ensuring that users connect to secure and legitimate networks.

C. PKI protects data against tampering and eavesdropping, ensuring the privacy of data transmitted on the network.

D. PKI prevents attacks initiated by malicious users resending obtained packets.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Which of the following statements are correct about IKE-based SA establishment in IPsec?

A. The SPI value is generated randomly.

B. SAs are valid permanently.

C. IKE-based SA establishment applies to medium- and large-sized networks.

D. Keys are generated using the DH algorithm and dynamically updated.

正解：A,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

As shown in the figure, which of the following shows the authentication range of ESP in transport mode?

A. 2

B. 1

C. 4

D. 3

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

In cases where some configurations alter existing session table entries and want them to take effect immediately, you can regenerate the session table by clearing the session table information. All session table information can be cleared by executing the _____firewall session table command.

正解：

reset

出題：13

Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?

A. Hold a summary meeting of the project in the information security management stage

B. Determine risk disposal measures and implement rectification plans

C. Determine risk tolerance and risk appetite

D. System integration and information security management system document preparation

正解：A 解答を投票する

H12-711_V4.0試験無料問題集「Huawei HCIA-Security V4.0 認定」