H12-731-ENU試験無料問題集（205題）「Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) 認定」

出題：1

In Agile Controller, what is the correct statement about the screen saver check policy ?

A. You can check if the screen saver is enabled on the terminal

B. Screen saver settings cannot be fixed automatically

C. Can check if the screen saver password is enabled

D. Only supports Windows OS

正解：A,C,D 解答を投票する

出題：2

The USG and the Router establish a Site-to-Site IPsec VPN. Based on the following information, which of the following options may be correct?
<USG> display ike sa
current ike sa number: 0
<USG> display ipsec statistics
the security packet statistics:
......
negotiate about packet statistics:
IP packet ok: 0, err: 0, drop: 0
IP rcv other cpu to ike: 0, drop:
0
IKE packet inbound ok: 0, err: 0
IKE packet outbound ok: 0, err: 0
SoftExpr: 0, HardExpr: 0,
DPDOper: 0, SwapSa: 0
ModpCnt: 0, SaeSucc: 0,
SoftwareSucc: 0

A. Interzone packet filtering configuration error

B. NAT policy interferes with IPsec protected traffic

C. IPsec proposal configuration is inconsistent

D. Route reachability problem of IKE peer private network

正解：A,B,D 解答を投票する

出題：3

The networking of a network is as follows: PC----ADSL router-----USG-----LAN
The key configurations of the USG are as follows:
l2tp enable
interface Virtual-Template1
ppp authentication-mode pap
ip address 4.1.1.1 255.255.255.0
remote address pool 1
l2tp-group 1
mandatory-Icp
allow 12tp virtual-template 1
#
user-ma page user pc1
password admin@123
aaa
domain default
ip pool 1 4.1.1.1 4.1.1.99
Assuming that other configurations are complete and correct, what is the problem with this configuration in actual work?

A. Disconnect immediately after successful dialing.

B. You can dial successfully, and you can also access the intranet server.

C. Failed to dial successfully.

D. The dial-up is successful, but the intranet server cannot be accessed.

正解：C 解答を投票する

出題：4

Mainframe hardening mainly includes which of the following aspects?

A. Database hardening

B. Account password security

C. OS Hardening

D. Network management system reinforcement

E. Vulnerability Scan

正解：A,B,C 解答を投票する

出題：5

Which protocols can the NGFW perform virus scanning and corresponding processing on files transmitted by?

A. HTTP (Hypertext Transfer Protocol), hypertext transfer protocol

B. POP3 (Post Office Protocol 3), Post Office Protocol version 3

C. HTTPS (Hypertext Transfer Protocol Security) Secure Hypertext Transfer Protocol

D. SNMP (Simple Network Management Protocol), Simple Network Management Protocol

E. FTP (File Transfer Protocol), file transfer protocol

正解：A,B,E 解答を投票する

出題：6

When upgrading the IPS signature database and AV virus database online, it is found that the upgrade fails. During the upgrade operation, the following information is displayed:
Connecting to the security server failure.
The following possible problems are:

A. Check whether the DNS server configuration is correct and valid.

B. Check whether the domain name of the security service center is correct and valid.

C. IPS or AV engine is abnormal.

D. Licensee not purchased.

正解：A,B 解答を投票する

出題：7

In the dual-system hot-standby network, the service interface works at Layer 3, the upstream and downstream are connected to the router, the firewall and the upstream and downstream run an OSPF process, which provides the dual-system hot-standby burden sharing network, and the firewall provides the NAT function. The following Incorrect planning deployment advice:

A. Allows the packet filtering policy between the domain where the heartbeat port Eth-Trunk is located and the local domain, so as to allow heartbeat packets to pass.

B. Enable HRP to adjust OSPF COST function.

C. Configure a static black hole route (network segment route) in the NAT address pool, import it into OSPF and advertise it.

D. For consistency of uplink and downlink status, the firewall's uplink and downlink interfaces are added to the same Link-Group.

正解：B 解答を投票する

出題：8

For the description of NAT Server, which is correct?

A. NAT Server cannot be configured on the virtual firewall for users of the root firewall.

B. If the public network address of the NAT Server and the corresponding public network interface address are in the same network segment, you do not need to configure black hole routing.

C. If the public network address of the NAT Server is the interface address, if the black hole route of this address is configured, the service access to the firewall itself will be abnormal.

D. If the public network address of the NAT Server and the corresponding public network interface address are not in the same network segment, you do not need to configure black hole routing.

正解：B 解答を投票する

出題：9

In the scenario of using Remote access VPN access, the VPN-Client configuration is as shown in the figure, as indicated by the red box, what is the main function?

A. The VPN-Client software will no longer issue the public network address route to the virtual network card.

B. The VPN-Client software issues the public network address route to the virtual network card.

C. The VPN-Client software will issue a default route to the virtual network card.

D. The VPN-Client software no longer issues the default route to the virtual network card.

正解：D 解答を投票する

出題：10

Regarding the authentication mode of 802.1X, which of the following descriptions are correct?

A. From the point of view of the authentication requirements for all access users, the port-based mode is more secure than the MAC-based mode.

B. 802.1X authentication mode is divided into interface-based and MAC-based.

C. Under the same interface, port-based and MAC-based modes can be enabled at the same time.

D. From the point of view of the authentication requirements for all access users, the MAC-based mode is more secure than the port-based mode.

正解：B,D 解答を投票する

H12-731-ENU試験無料問題集「Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) 認定」