[Q117-Q141] Accurate & Verified 2024 New H12-711 Answers As Experienced in the Actual Test!

[Q117-Q141] Accurate & Verified 2024 New H12-711 Answers As Experienced in the Actual Test!

April 4, 2024 latestexam 0 Comments

Rate this post

Accurate & Verified 2024 New H12-711 Answers As Experienced in the Actual Test!

H12-711 Certification Sample Questions certification Exam

Huawei H12-711 (HCIA-Security V3.0) Certification Exam is an important certification for security professionals and engineers who want to validate their knowledge and skills in the areas of network security, firewall technology, VPN technologies, and intrusion prevention and detection systems. By passing H12-711 exam, candidates can become certified security professionals in the Huawei technology ecosystem and advance their careers in the field of cybersecurity.

Huawei H12-711 (HCIA-Security V3.0) Exam is a certification exam designed for IT professionals who specialize in network security. H12-711 exam aims to assess an individual’s knowledge of network security principles, policies, and procedures, as well as their ability to identify and mitigate security threats in various network environments. H12-711 exam has a duration of 90 minutes and consists of 60 multiple-choice questions.

Q117. Both the GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ. If the area connected to GE1/0/1 can access the area connected to GE1/0/2, which of the following is correct?

Need to configure the security policy from Local to DMZ

No need to do any configuration

Need to configure an interzone security policy

Need to configure security policy from DMZ to local

Q118. About thecontents of HRP standby configuration consistency check, which of the following is not included?

NAT policy

If the heartbeat interface with the same serial number configured

Next hop and outbound interface of static route

Certification strategy

Q119. Which scenarios does IPSec WEB configuration wizard not support?

Gateway to Gateway

Center Gateway

Branch Gateway

Host and Host

Q120. Regarding the firewall security policy, which of the following options is wrong?

If the security policy is permit, the discarded message will not accumulate the number of hits.

When configuring the security policy name, you cannot reuse the same name

Adjust the order of security policies with immediate effect, no need to save the configuration file.

Huawei’s USG series firewalls cannot have more than 128 security policy entries.

Q121. Which of the following description are correct about the security policy action and security configuration file?
(Multiple Choice)

If the action of the security policy is ‘prohibited’, the device will discard this traffic and will not perform content security check later.

The security configuration file can be applied without being applied to the security policy allowed by the action

The security configuration file must be applied to the security policy that is allowed to take effect.

If the security policy action is “Allow”, the traffic will not match the security configuration file.

Q122. Which of the following options are suppoied by VPNtechnology to encrypt data messages? (Multiple choice)

SSL VPN

GRE VPN

IPSec VPN

L2TP VPN

Q123. Which VPN access modes are suitable for mobile office workers? (Choose three.)

GRE VPN

L2TP VPN

SSL VPN

L2TP over IPsec

Q124. Digital signature technology obtains a digital signature by encrypting which of the following data?

User data

Receiver public key

sender public key

Digital fingerprint

Q125. Execute the command on the firewall and display the following information. which of the following description is correct? (Multiple Choice) HRP_A [USG_A] display vrrp interfaceGigabitEthernet 0/0/1 GigabitEthernet0/0/1 | Virtual Router 1 VRRP Group: Active state: Active Virtual IP: 202.38.10.1 Virtual MAC: 0000-5e00-0101 Primary IP: 202.38.10.2 PriorityRun: 100 PriorityConfig: 100 MasterPriority: 100 Preempt: YES Delay Time: 10

The status of this firewall VGMP group is Active.

This firewall G1 / 0/1 virtual interface IP address 202.30.10.2

This firewall VRID is 1 the VRRP priority to backup group 100

Will not switch when the primary device fails

Q126. Using a computer to store information about criminal activity is not a computer crime.

True

False

Q127. The tunnel addresses at both ends ofthe GRE tunnel can be configured as addresses of different network segments.

True

False

Q128. When you configure a firewall between the domain security policy, if the 192.168.0.0/24 network segment is set to match object, the following configuration, which is correct? (Choose two.)

policy 1
policy source 192.168.0.0 mask 255.255.255.0

policy 1
policy source 192.168.0.0 255.255.255.0

policy 1
policy source 192.168.0.0 mask 0.0.0.255

policy 1
policy source 192.168.0.0 0.0.0.255

Q129. The preservation of electronicevidence is directly related to the legal effect of evidence, and it is in conformity with the preservation of legal procedures, and its authenticity and reliability are guaranteed. Which of the following is not an evidence preservation technique?

Encryption technology

Digital certificate technology

Digital signature technology

Packet tag tracking technology

Q130. Which of the following are correct regarding the matching conditions of the security policy? (Multiple choice)

“The source security zone” is an optional parameter in the matching condition.

“Time period” in the matching condition is an optional parameter

“Apply” in the matching condition is an optional parameter

“Service” is an optional parameter in the matching condition

Q131. Which of the following is not the certificate save file format supported by the USG6000 series?

PKCS#12

DER

PEM

PKCS#

Q132. Which of the following attacks is not a malformed message attack?

Teardrop attack

Smurf attack

TCP fragment attack

ICMP unreachable packet attack

Q133. UDP port scanning means that the attacker sends a zero-byte UDP packet to a specific port of the target host. If the port is open, it will return an ICMP port reachable data packet.

True

False

Q134. Device destruction attacks are generally not easy to cause information leakage, but usually cause network communication services to be interrupted.

True

False

Q135. Which of the following is not a key technology for anti-virus software?

Shelling technology

Self-protection

Format the disk

Real-time upgrade ofthe virus database

Q136. About the descriptions of windows Firewall Advanced Settings, which of the following is wrong? (Multiple choice)

When setting the stacking rule, only the local port can be restricted, and the remote port cannot be restricted,

When setting the stacking rule, both the local port and the remote port can be restricted.

When setting the pop-up rule, only the local port can be restricted, and the remote port cannot be restricted,

When setting the pop-up rule, both local ports and remote ports can be restricted.

Q137. Which of the following is used to encrypt digital fingerprints in digital signature technology?

sender public key

sender private key

Receiver public key

Receiver private key

Q138. In IPSEC VPN, which of the following scenarios can be applied by tunnel mode?

between the host and the host

between hosts and security gateways

between security gateways

between tunnel mode and transport mode

Q139. What are the classification of USG firewall user authentication? (Choose three.)

no authentication

password authentication

single sign-on (sso)

the fingerprint authentication

Explanation/Reference:

Q140. Regarding the firewall security policy, which of the following options are wrong?

If the security policy is permit, the discarded message will not accumulate the number of hits.

When configuring the security policy name, you cannot reuse the samename.

Adjust the order of security policies without saving the configuration file.

The number of security policy entries of Huawei USG series firewalls cannot exceed 128.

Q141. Encryption technology can transform readable information into unreadable information in a certain way

True

False

Loading …

Certification Topics of H12-711 Exam PDF Recently Updated Questions: https://www.latestcram.com/H12-711-exam-cram-questions.html

Related Certifications

CTFL-AT (2)
CTFL_001 (1)
CTAL-TM_Syll2012 (1)
CTAL-TAE (1)
CPSA-FL (1)

Free Cram & Latest Exams Dumps

[Q117-Q141] Accurate & Verified 2024 New H12-711 Answers As Experienced in the Actual Test!

leave a comment Cancel reply

Related Certifications

Recent Posts

Archives

Categories