Spring Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Huawei
Huawei Certified Network Professional HCNP
H12-721
Huawei Certified ICT Professional - Constructing Infrastructure of Security Network Questions and Answers

Pass the Huawei Certified Network Professional HCNP H12-721 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam H12-721 Premium Access

View all detail and faqs for the H12-721 exam

Go to Exam

746 Students Passed

86% Average Score

95% Same Questions

Viewing page 5 out of 7 pages

Viewing questions 41-50 out of questions

Questions # 41:

An administrator can view the status of the device components by the following command: The status of the Slot3 board is Abnormal. What are the possible causes of the following faults?

Question # 41

Options:

This slot is not supported in this slot of device A.

interface card is damaged

The pin on the backplane or motherboard is damaged. If the incorrect board is installed, the pin is tilted.

ADSL telephone line failure

Answer

A, B, C

Questions # 42:

What are the three elements of an abnormal flow cleaning solution?

Options:

cleaning center

Testing Center

Management Center

Collection Center

Answer

A, B, C

Questions # 43:

After the NAT server is configured (no-reverse parameter is added), the firewall automatically generates static Server-Map entries. The first packet matches the Server-Map entry and does not match the session table.

Options:

TRUE

FALSE

Answer

Questions # 44:

The preemption function of the VGMP management group is enabled by default, and the delay time is 60s.

Options:

TRUE

FALSE

Answer

Explanation

Note: The preemption function of the VGMP management group is enabled by default. The delay time is 30s, the priority of the master is 65001, and the priority of the slave is 65000.

Questions # 45:

A data flow has established a session in the firewall. If the packet filtering policy corresponding to the data is modified, how should the firewall execute?

Options:

When the new packet arrives at the firewall, it immediately performs filtering according to the latest policy and refreshes the session table.

immediately performs filtering according to the latest policy, does not refresh the session table

The session is not aged, the new policy is not executed, and the previously established session is matched.

modification will fail, you need to clear the session to modify

Answer

Questions # 46:

Which of the following encryption methods does IPSec VPN use to encrypt communication traffic?

Options:

public key encryption

private key encryption

symmetric key encryption

pre-shared key encryption

Answer

Explanation

Note: IKE V1 Phase 1 mainly negotiates the following three tasks: First, negotiate the parameters used to establish IKE SA: encryption algorithm, integrity verification algorithm, identity authentication method and authentication word, DH group, IKE SA life cycle, etc. . These parameters are defined in the IKE security proposal. The second is to use the DH algorithm to exchange information related to the key (the material for generating various keys), and the peer devices can use each of the key information to generate a symmetric key for ISAKMP message encryption and verification. The third is to verify each other's identity and use a pre-shared key or digital certificate to verify identity.

Questions # 47:

L2TP is a tunneling protocol set up for transparent transmission of PPP packets between users and enterprise servers. Which of the following features are included?

Options:

L2TP protocol uses the TCP protocol

supports private address allocation and does not occupy public IP addresses.

and PPP configurations support authentication and work with Radius to support flexible local and remote AAA After combining with IPSec,

supports encryption of packets.

Answer

B, C, D

Questions # 48:

The USG series firewall is deployed on an enterprise network. You need to log in to the USG through telnet or ssh. Each command entered by the user must be authorized by the server to continue. Which of the following authentication methods can meet the requirements of the enterprise?

Options:

Radius

LDAP

HWTACACS

Answer

Explanation

clipboard/drawings/NULL

Questions # 49:

The Tracert packet attack is an ICMP timeout packet returned by the attacker when the TTL is ____, and the ICMP port unreachable packet returned when the destination address is reached to find the path through which the packet arrives at the destination. Spying on the structure of the network

Options:

varies according to actual conditions

Answer

Questions # 50:

In the abnormal traffic cleaning solution of Huawei, in the scenario of bypass deployment, dynamic routing and drainage does not require manual intervention. If an abnormality is detected, the management center generates an automatic drainage task. The traffic is sent to the cleaning device.