H12-721-ENU試験無料問題集（180題）「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) 認定」

出題：1

When configuring the IPSec VPN certificate authentication mode, if you select "RSA signature" authentication, need to configure which of the following steps?

A. Create local and public private key pair

B. Upload the peer device certificate

C. Upload local certificate

D. Upload CA certificate

正解：B,C,D 解答を投票する

出題：2

When graphically configuring L2TP over IPSec, select an IPSec point-to-point scenario for deployment.

A. True

B. False

正解：B 解答を投票する

出題：3

The user uses the services provided by SSL to access the network resources of the intranet. The administrator has enabled file sharing and web proxy services for the user, and has allowed the traffic of the service to be released on the firewall. After the user enters the address of the virtual gateway on the PC, A list of file sharing and web proxies is not visible on the web page. Which of the following options are possible causes of this failure?

A. The port of virtual gateway external NAT is incorrect.

B. The virtual IP address is not obtained on the virtual network card of the user PC.

C. The route between the firewall and the client is unreachable.

D. Administrators do not configure authorization of file sharing and web proxies for user.

正解：D 解答を投票する

出題：4

Which of the following resource allocation methods are supported by Huawei USG6000 product resource allocation?

A. Quota allocation

B. Automatic allocation

C. Non-quota allocation

D. Manual allocation

正解：A,D 解答を投票する

出題：5

Which of the following is correct about IKE? (Multiple choices)

A. IKE is a protocol carried by UDP and is the signaling protocol of IPSec.

B. IKE negotiates security associations for IPSec and sends the established parameters and security associations to IPSec.

C. IPSec must use IKE for key exchange

D. IPSec use IKE negotiation SA to encrypt or verify packets.

正解：A,B,D 解答を投票する

出題：6

Load balancing implements the function of allocating user traffic accessing the same IP address to different servers. Which of the following are main technologies?

A. Virtual Service Technology

B. Server health check

C. Hot Standby Technology

D. Load balancing algorithm

正解：A,B,D 解答を投票する

出題：7

Which of the following is the possible cause of the failure?

A. The route between the gateway and intranet server is unreachable.

B. SSL VPN is deployed on the firewall next to the one-arm deployment. You need to use NAT to map the private address of the SSL VPN gateway to public network address. The address mapping is incorrect.

C. The security policy does not allow traffic from the external network to the intranet server.

D. The user is not assigned to the Web proxy resources.

正解：D 解答を投票する

出題：8

Each bandwidth policy that references a bandwidth channel is individually constrained by the bandwidth channel, that is, the traffic that meets the matching conditions of the bandwidth policy, and the maximum bandwidth resource is exclusive.
Which of the following options is a reference to this type of bandwidth channel?

A. Dynamic sharing

B. Bandwidth reuse

C. Exclusive strategy

D. Strategy Sharing

正解：C 解答を投票する

出題：9

In the IDC room, a Huawei USG6000 series firewall can be divided into several virtual systems. Then, the root firewall administrator generates virtual system administrators to manage each virtual system separately.

A. True

B. False

正解：A 解答を投票する

出題：10

What is the correct statement about the virtual system administrator? (Multiple choices)

A. After creating a virtual system, the root system administrator can create one or more administrators for the virtual system.

B. The format of the virtual system administrator user name is unified as "Administrator name@virtual system name".

C. After the virtual system function is enabled, the existing administrator on the device will become the administrator of the root system.

D. The virtual system administrator can enter the configuration interface of the root system to configure and view services.

正解：A,C 解答を投票する

H12-721-ENU試験無料問題集「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) 認定」