2022年11月04日合格確定ガイド準備H12-711_V4.0試験知能問題集 [Q45-Q62]

2022年11月04日合格確定ガイド準備H12-711_V4.0試験知能問題集

無料最新Huawei Certified ICT Associate H12-711_V4.0リアル試験問題と回答2022年更新

質問 45
Which of the following NAT technologies can implement a public network address to provide source address translation for multiple private network addresses ( )*

A. Easy-ip
CT Jinglu
B. NAT Server
C. NAT No-PAT
D. NAPT

正解: B

質問 46
As shown, in transmission mode, which of the following locations should the AH header be inserted in?

A. 0
B. 1
C. 2
D. 3

正解: C

質問 47
What is the security level of the Untrust zone in Huawei firewalls?

A. 0
B. 1
C. 2
D. 3

正解: C

質問 48
The network environment is becoming more and more complex, and network security incidents occur frequently. While accelerating the construction of informatization, enterprises must not only resist external attacks, but also prevent internal management personnel from being involved in data leakage and operation and maintenance accidents due to operational errors and other issues. Which of the following options might reduce operational risk?

A. Oral Each department system is independently authenticated and uses a single static password for authentication.
B. According to the administrator configuration, the O&M user corresponds to the background resource account, and restricts the unauthorized use of the account. mouth Based on the password security policy, the O&M security audit system automatically modifies the password of the background resource account at regular intervals.
C. Each system is independently operated, maintained and managed, and the access process is not audited and monitored.

正解: B

質問 49
_____ Authentication is to configure user information (including local user's user name, password and various attributes) on the network access server. The advantage is that it is fast.[fill in the blank]*

A. total authentication
B. local authentication

正解: B

質問 50
Which of the following descriptions about the main implementation of single sign-on is wrong? ( )[Multiple choice]*

A. Query the AD server security log mode
B. Query the syslog server mode
C. Accept PC message mode
D. Firewall monitors AD authentication packets

正解: B

質問 51
What is correct about the following description of device management in the operating system?

A. In order to alleviate the problem of speed mismatch between CPU and I/O devices and improve the parallelism of CPU and I/O devices, in modern operating systems, almost all I/O devices are exchanging numbers with processors
B. The main task of port device management is to complete the I/O requests made by users and classify I/O devices for users.
C. Whenever a process makes an I/O request to the system, as long as it is secure, the device allocator will assign the device to the process according to a certain policy.
D. Device management can virtualize a physical device into multiple logical devices through virtualization technology, providing multiple user processes to use.

正解: A,B,C,D

解説:
Buffers are used at all times.

質問 52
ARP man-in-the-middle attacks are a type of spoofing attack technique.

A. FALSE
B. TRUE

正解: B

質問 53
Which of the following is the numbering range of Layer 2 ACLs?

A. The 4000~4999
B. The 1000~1999
C. @2000~2999
D. The 3000~3999

正解: D

質問 54
A Web server is deployed in an enterprise intranet to provide Web access services to Internet users, and in order to protect the access security of the server, it should be divided into the _____ area of the firewall.

A. DMZ
B. DMY

正解: A

質問 55
An engineer needs to back up the firewall configuration. Now he wants to use a command to view all the current configurations of the firewall. May I ask the command he uses is ____[fill in the blank]*

A. display current-configuration
B. current-configuration

正解: A

質問 56
When the Layer 2 switch receives a unicast frame and the MAC address table entry of the switch is empty, the switch discards the unicast frame.

A. FALSE
B. TRUE

正解: A

質問 57
The keys used by the IPSec encryption and authentication algorithms can be configured manually or dynamically negotiated via the ____ protocol. (abbreviation, all uppercase).

A. IKB
B. IKE

正解: B

質問 58
Which of the following attack methods is to construct special SQL statements and submit sensitive information to exploit program vulnerabilities

A. Phishing attacks
B. Buffer overflow attack
C. SQL injection attacks
D. Worm attack

正解: C

質問 59
The shard cache technology will wait for the arrival of the first shard packet, and then reassemble and decrypt all the packets, and then do subsequent processing by the device to ensure that the session can proceed normally in some application scenarios.