H12-721試験無料問題集（180題）「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) 認定」

出題：1

A firewall device can create multiple virtual gateways. Each virtual gateway is independent and does not affect each other. Administrators can configure their own users, resources, and policies under the virtual gateway for independent management.

A. FALSE

B. TRUE

正解：B 解答を投票する

出題：2

Which statements are correct about the shunting of virtual systems? (Multiple Choice)

A. Packets can be classified and processed by shunting.

B. The process of determining the ownership of a message and a virtual system is called shunting.

C. Through shunting, packets entering the device can be sent to the correct virtual system for processing.

D. The process of classifying traffic is called shunting.

正解：B,C 解答を投票する

出題：3

Huawei USG6000 series devices deploy dual-system hot backup, by default, firewall does not back up which of the following status information? (Multiple choices)

A. Session to the firewall itself

B. IPSec tunnel and serial number

C. TCP Semi-Connect Sessions that didn't complete 3 handshakes

D. Port Mapping Table in PAT Mode

正解：A,C 解答を投票する

出題：4

IP-Link sends a probe packet to the specified IP address. By default, if three probes fail, the link to this IP address is considered to be faulty.

A. True

B. False

正解：A 解答を投票する

出題：5

Divide the overall maximum bandwidth by the number of online IPs and use the resulting value as the maximum bandwidth per IP. Which of the following options belongs to this bandwidth allocation method?

A. Dynamic sharing

B. Bandwidth reuse

C. Exclusive strategy

D. Strategy Sharing

正解：A 解答を投票する

出題：6

Based on the following ISP routing configuration information on a firewall, which of the following options are correct? (Multiple choices)

A. Configure a total of 2 csv files.

B. The china-unicom.csv file has two outgoing interfaces bound to the firewall.

C. There are two files that have been issued by the ISP.

D. The two outgoing interfaces of china-unicom.csv are all routed in the routing table.

正解：B,C 解答を投票する

出題：7

Which of the following is the possible cause of the failure?

A. The route between the gateway and intranet server is unreachable.

B. SSL VPN is deployed on the firewall next to the one-arm deployment. You need to use NAT to map the private address of the SSL VPN gateway to public network address. The address mapping is incorrect.

C. The security policy does not allow traffic from the external network to the intranet server.

D. The user is not assigned to the Web proxy resources.

正解：D 解答を投票する

出題：8

As shown in the following figure for a dual-system hot backup networking environment. Backup groups 1 and 2 join the VGMP management group, USG_A serves as the master device, and USG_B serves as the backup device. If the USG_A fails, such as power fails, the USG_B state will switch from the Slave to the Master. When USG_A recovers, the state is switched to Master again. At this time, the state of USG_B is still Master.
What is the cause of this phenomenon?

A. The heartbeat line fails after the USGA recovers from the failure

B. Two firewall for load sharing way, in the same backup group, both the master and the slave are configured.

C. No hrp track configured

D. The priority of the VRRP backup group is not restored in time after the USGA recovers

正解：A 解答を投票する

出題：9

What are the load balancing algorithms supported by the Huawei USG6000 firewall?

A. Source IP hash algorithm

B. Simple polling algorithm

C. Weighted polling algorithm

D. Ratio

正解：A,B,C 解答を投票する

出題：10

Load balancing implements the function of allocating user traffic accessing the same IP address to different servers. Which of the following are main technologies?

A. Virtual Service Technology

B. Server health check

C. Hot Standby Technology

D. Load balancing algorithm

正解：A,B,D 解答を投票する

H12-721試験無料問題集「Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) 認定」