Spring Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Huawei
Huawei Certified Network Professional HCNP
H12-721
Huawei Certified ICT Professional - Constructing Infrastructure of Security Network Questions and Answers

Pass the Huawei Certified Network Professional HCNP H12-721 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam H12-721 Premium Access

View all detail and faqs for the H12-721 exam

Go to Exam

746 Students Passed

86% Average Score

95% Same Questions

Viewing page 3 out of 7 pages

Viewing questions 21-30 out of questions

Questions # 21:

The firewall device defends against the SYN Flood attack by using the technology of source legality verification. The device receives the SYN packet and sends the SYN-ACK probe packet to the source IP address host in the SYN packet. If the host exists, it will Which message is sent?

Options:

RST message

FIN message

ACK message

SYN message

Answer

Questions # 22:

What are the HRP backup methods supported by the USG?

Options:

automatic backup

manual batch backup

fast backup

real-time backup

Answer

A, B, C

Explanation

Note: The HRP backup channel configuration of the active and standby USGs must be the same. The HRP backup channel interfaces of the active and standby USGs must be directly connected. The switch cannot be connected in the middle. The HRP backup channel interface cannot be a Layer 2 switch interface or a Vlanif interface. The USG supports the use of an Eth-Trunk interface as an HRP backup channel, which improves reliability and increases the bandwidth of the backup channel. There are three ways to back up HRP in the textbook: real-time backup, fast backup, and batch backup. After consulting the data, there are four persuasive arguments: one is fast backup; the other is batch backup; the third is manual backup; the fourth is automatic backup--the default backup mode when HRP function is enabled. Therefore, the answer is ABC

Questions # 23:

In the firewall DDoS attack defense technology, the data packet of the session table is not defended. If the data packet of the session has been established, it is directly released.

Options:

TRUE

FALSE

Answer

Questions # 24:

The SSL VPN authentication login is unsuccessful and the message "Bad username or password" is displayed. Which one is wrong?

Options:

username and password are entered incorrectly

user or group filter field configuration error

certificate filter field configuration error

administrator configured a policy to limit the source IP address of the terminal

Answer

Questions # 25:

Connecting the internal network interface address from the firewall By pinging the internal network address of the peer, the IPSec tunnel can be successfully triggered. The internal PC cannot trigger the tunnel establishment. What are the possible reasons?

Options:

IKE proposal configuration problem

IPSec proposal configuration problem

interested traffic ACL source network segment does not include the PC

packet filtering (inter-domain policy) configuration problem

Answer

A, D

Questions # 26:

The USG_B status is HRP_M[USG_A], and the USG_B status is HRP_S[USG_B]. The status of the USG_A is HRP_M[USG_A]. However, all traffic did not pass USG_A completely, and half of the traffic also passed USG_B.

Options:

[USG_A]hrp ospf-cost adjust-enable [USG_B]hrp ospf-cost adjust-enable

[USG_B]interface GigabitEthernet 0/0/1 [USG_B- GigabitEthernet 0/0/1]hrp track master

[USG_B]interface GigabitEthernet 0/0/3 [USG_B- GigabitEthernet 0/0/3]hrp track master

hrp preempt delay 60

The address of the heartbeat is not released to OSPF.

Answer

Questions # 27:

The figure shows the data flow direction of the Bypass interface in the Bypass working mode and the non-Bypass working mode. What are the following statements about the working flow of the electrical Bypass interface?

Question # 27

Options:

When the interface is in the non-bypass state, the traffic flows from the GE0 interface to the USG through Router_a. After the USG processes, the traffic flows from the GE1 interface to Router_B.

When the interface is working in the Bypass state, the traffic is forwarded from the GE0 interface to the USG. The USG does not pass any processing and flows directly from the GE1 interface to Router_B.

When the firewall is configured to implement the security priority, the uplink and downlink services are not interrupted when the interface works in the bypass state. Therefore, the device can be kept in the Bypass state.

The electrical bypass interface can only work in Layer 2 mode and has circuit bypass function.

Answer

A, B

Questions # 28:

In Huawei's abnormal traffic cleaning solution, the characteristics of the straight-line deployment mode and the bypass deployment mode are correct.

Options:

straight path deployment method requires separate deployment of detection equipment

side deployment mode requires separate deployment of detection equipment

bypass deployment mode is more flexible than the direct route deployment mode. You can use static drainage or dynamic drainage.

Straight-line deployment mode Anti-DDoS device performs real-time drainage on all traffic passing through

Answer

Questions # 29:

Which of the following technologies can enhance the security of mobile users accessing the company's intranet VPN solution?

Options:

SSL

PPPoE

GRE

L2TP

Answer

Questions # 30:

When an attack occurs, the result of packet capture on the attacked host (1.1.1.1) is as shown in the figure. What kind of attack is this attack?

Question # 30

Options:

Smurf attack

Land attack

WinNuke attack

Ping of Death attack

Answer

Viewing page 3 out of 7 pages

Viewing questions 21-30 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25

ADM-201

Agentforce-Specialist

CMMC-CCP

Data-Cloud-Consultant

PDI

PSE-Strata-Pro-24

Secure-Software-Design

Sharing-and-Visibility-Architect

Workday-Pro-Integrations

ZDTA