Free Cram & Latest Exams Dumps

QUESTION 34
There are multiple real servers in an enterprise network that provide FTP services to the outside world, and the load balancing function is configured to ensure the load balancing of traffic flowing through the USG.
The administrator hopes that by detecting the real server status, the load ratio of each server is the same as the weight ratio. The following suitable configurations are:

QUESTION 35
In the Anti-DDoS abnormal traffic cleaning solution, the correct recommendations for planning and deployment are:

QUESTION 36
According to the following networking, a customer uses the following configuration on the cleaning equipment. The following statement is correct:
ip route-static 0.0.0.0 0 10.1.2.1

QUESTION 37
A customer network topology is shown in the figure.

An LZTP tunnel is established between the PC and the FW, with the PC as the client and the FW as the LNS side. After the administrator completes the configuration, it is found that the L2TP tunnel cannot be established successfully.
Execute the command debug l2tp packet in the user view to enable the debug switch, and see the following debug information:
USG %%01L2TP/8/L2TDBG (d): L2TP::Check SCCRQ MSG Type 1
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Protocol version: 100
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Framing capability: 1
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Bearer capability, value: 0
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Firmware revision, value: 1200
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Host name, value: maple-54b160e59
USG %%01L2TP/8/L2TDBG (d): L2TP::requested Host isn’t in the define l2tp group, refuse the requested
USG %%01L2TP/8/L2TDBG (d): L2TP::Clear Calls On Tunnel ID=1 Reason=1
Based on the above information, which failure analysis option is correct?

QUESTION 38
For internal network security, which of the following options are recommended for planning deployment priorities?

QUESTION 39
Next-generation firewalls perform content inspection at each UTM module (AV, IPS, URL filtering).

QUESTION 40
Regarding the Internet access area in the data, the correct planning and deployment suggestions are:

QUESTION 41
Which of the following commands are the interface loopback commands needed to handle E1/CE1 problems

QUESTION 42
Using the SSL function of the USG gateway, the administrator can quickly and securely access all resources in the enterprise intranet, not only Web resources, and ensure that the communication between the client and the virtual gateway adopts the SSL security protocol, and the SSL client must ensure that the Without affecting access to other network resources, you can directly access Internet resources.

QUESTION 43
Which of the following options fall under the scope of visitor management?

QUESTION 44
Mobile employees access the headquarters through an L2TP over IPsec tunnel. The correct statement about planning and deployment is:

QUESTION 45
NGFW_A and NGFW_B, NGFW_A and NGFW_C configure static routes respectively. NGFW_A -> NGFW_B is the primary link, NGFW_A -> NGFW_C is the backup link. It is required that the traffic can be quickly switched to the backup link when the primary link fails; the traffic can be switched to the primary chromium road after the primary link is restored.
Which of the following configurations is correct?

QUESTION 46
In the dual-system hot-standby network, the service interface works at Layer 3, the upstream and downstream are connected to the router, the firewall and the upstream and downstream run an OSPF process, which provides the dual-system hot-standby burden sharing network, and the firewall provides the NAT function. The following Incorrect planning deployment advice:

QUESTION 47
Regarding the relationship between 802.1X and RADIUS, which of the following descriptions is correct?

QUESTION 48
Huawei NIP5000 products are based on signature security.

QUESTION 49
The following configuration commands are executed on the normal running USG firewall on the live network, but the interaction of ARP packets is still not seen. Which of the following commands need to be supplemented?
<USG> system-view
[USG] info-center enable
[USG] info-center source arp channel console debug level debugging
[USG] info-center console channel console
<USG> debugging arp packet

QUESTION 50
The whitelist + blacklist mode is adopted in terminal security management. Which of the following are normal behaviors?

QUESTION 51
A Web Server deployed in the DMZ area of an enterprise has an intranet IP address of 10.1.1.3 and a port of 8080. The public network address announced to the outside world is 1.1.1.2, and the external port number is 80.
Configure the following commands on the firewall:
[USG6600] security-policy
[[USG6600-policy-security] rule name untrust_to_mz
[USG6600-policy-security-rule-untrust_to_mz] source-zone untrust
[USG6600-policy-security-rule-untrust_to_mz] destination-zone dmz
[USG6600-policy-security-rule-untrust_to_mz] destination-address 1.1.1.2 32
[USG6600-policy-security-rule-untrust_to_mz] service http
[USG6600-policy-security-rule-untrust_to_mz] action permit
[USG6600] nat server webserver protocol tcp global 1.1.1.2 www inside 10.1.1.3 8080
The external network PC cannot access the Web Server of 10.1.1.3 within the enterprise. Please analyze the most likely reasons for this:

QUESTION 52
According to the “GB/T 22240-2008 Information Security Technology Information System Security Level Protection Grading Guide”, information systems are divided into five levels according to different levels, of which the protection capabilities of the five levels include:

QUESTION 53
NIP5000 devices support setting some interfaces to IDS mode.

QUESTION 54
The following are application layer attacks:

QUESTION 55
Which of the following tasks need to be completed before configuring an IPsec security policy?

QUESTION 56
The user cannot log in to the management device through SSH, and the following configuration information is obtained. Please analyze the possible causes:
aaa
manager-user sshuser
password cipher Admin@123
service-type ssh
ssh authentication-type password
ssh service-type stelnet
authentication-scheme admin_local
#
user-interface vty o 4
authentication-mode aaa
protocol inbound ssh
#
return