Free H12-711 Exam Files Verified & Correct Answers Downloaded Instantly
Instant Download H12-711 Dumps Q&As Provide PDF&Test Engine
NEW QUESTION # 78
Which of the following are the ways in which a PKI entity applies for a local certificate from CA? (Multiple Choice)
- A. Offline application
- B. Local application
- C. Network application
- D. Online application
Answer: A,D
NEW QUESTION # 79
Using a computer to store information about criminal activity is not a comouter crime
- A. True
- B. False
Answer: B
NEW QUESTION # 80
Antivirus software and host firewall have the same effect
- A. True
- B. False
Answer: B
NEW QUESTION # 81
Which of the following options can be used in the advanced settings of windows firewall? (Multiple Choices)
- A. Set out inbound rules
- B. Change notification rules
- C. Set connection security rules
- D. Restore defaults
Answer: A,B,C,D
NEW QUESTION # 82
HTTP packets are carried by UDP. and the HTTPS protocol is based on TCP three-way handshake. Therefore.
HTTPS is relatively secure, and HTTPS is recommended.
- A. True
- B. False
Answer: B
NEW QUESTION # 83
During the configuration of NAT. which of the following will the devicegenerate a Server-map entry?
(Multiple Choice)?
- A. Automatically generate server-map entries when configuring source NAT.
- B. After configuring NAT No-PAT, the device will create a server-map table for the configured multi-channel protocol data stream.
- C. A server-map entry is generated when easy-ip is configured.
- D. After the NAT server is configured successfully, the device automatically generates a server map entry.
Answer: B,D
NEW QUESTION # 84
Which of the following is true about firewall security policies?
- A. By default, the security policy can control unicast packets, broadcast packets, and multicast packets.
- B. By default, the security policy only controls unicast packets.
- C. By default, the security policy can control unicast packets andbroadcast packets.
- D. By default, the security policy can control multicast.
Answer: B
NEW QUESTION # 85
Which of the following options are correct about the NAT policy processing flow? (Multiple Choice)
- A. Server-map is processed after status detection
- B. The source NAT policy is processed after the security policy is matched.
- C. Server-map is processed before the security policy matches
- D. Source NAT policy query is processed after the session is created
Answer: A,B,C
NEW QUESTION # 86
Except built-in Portal authentication, firewall also supports custom Portal authentication, when using a custom Portal authentication, no need to deploy a separate external Portal server.
- A. True
- B. False
Answer: B
NEW QUESTION # 87
Which of the following statements about Client-Initiated VPN is correct? (Multiple choice)
- A. A tunnel is established between each access user and the LNS.
- B. Each tunnel carries multiple L2TP sessions and PPP connections.
- C. Only one L2TP session and PPP connection are carried in each tunnel.
- D. Each tunnel carries multiple L2TP sessions and one PPP connection.
Answer: A,C
NEW QUESTION # 88
Which of the following protocols can guarantee the confidentiality of data transmission? (Multiple Choice)
- A. HTTPS
- B. SSH
- C. FTP
- D. Telnet
Answer: A,B
NEW QUESTION # 89
Which of the following is not a requirement for firewall double hot standby?
- A. The firewall interface has the same IP address.
- B. The firewall software version is consistent
- C. The firewall hardware model is consistent
- D. The type and number of the interface used are the same.
Answer: A
NEW QUESTION # 90
Information security levelprotection is the basic system of national information security work
- A. True
- B. False
Answer: A
NEW QUESTION # 91
Regarding the comparison between windows and Linux, which of the following statements is wrong?
- A. Linux is open source code, you can do what you want.
- B. Getting started with Linux is more difficult and requires some learning and guidance.
- C. Windows can be compatible with most software playing most games
- D. windows is open source, you can do what you want.
Answer: D
NEW QUESTION # 92
Which of the following is used to encrypt digital fingerprints in digital signature technology?
- A. Receiver private key
- B. Receiver public key
- C. sender public key
- D. sender private key
Answer: D
NEW QUESTION # 93
In stateful inspection firewall, when openingstate detection mechanism, three-way handshake's second packet (SYN + ACK) arrives the firewall. If there is still no corresponding session table on the firewall, then which of the following statement is correct?
- A. Packets must pass through the firewall, and establishes a session table
- B. Packets must not pass through the firewall
- C. If the firewall security policy allows packets through, then creating the session table
- D. If the firewall security policy allows packets through, then the packets can pass through the firewall
Answer: B
NEW QUESTION # 94
In the SSL handshake protocol, which of the following message is optional? (Choose two.)
- A. ServerHelloDone
- B. Server Key Exchange
- C. Certificate verify
- D. ChangeCipherSpec
Answer: B,C
Explanation:
Explanation/Reference:
NEW QUESTION # 95
Which of the following statement about the NAT is wrong?
- A. NAT technology can effectively hide the costs of the LAN; it is an effective network security protection technology
- B. Some application layer protocols carry IP address information in the data, but also modify the IP address information in the data of the upper layer when they are as NAT
- C. Address Translation can follow the needs of users, providing FTP, WWW, Telnet and other services outside the LAN
- D. For some non-TCP, UDP protocols (such as ICMP, PPTP), unable to do the NAT translation
Answer: D
NEW QUESTION # 96
Fire Trust domain FTP client wants to access an Untrust server FTP service has allowed the client to access the server TCP 21 port, the client in the Windows command line window can log into the FTP server, but can not download the file, what are the following solutions? (Multiple choice)
- A. the FTP works with the port mode modify the Untrust Trust domain to allow the inbound direction between the default access strategy
- B. take the Trust between Untrust domain to allow two-way default access strategy
- C. Trust Untrust domain configuration is enabled detect ftp
- D. FTP works with Passive mode modify the domain inbound direction between the Untrust Trust default access policy to allow
Answer: A,B,C
NEW QUESTION # 97
The single-point login function of the online user, the user authenticates directly to the AD server, and the device does not interfere with the user authentication process. The AD monitoring service needs to be deployed on the USG device to mcnitorthe authentication information of the AD server.
- A. True
- B. False
Answer: B
NEW QUESTION # 98
About the description of firewall active-standby, which of the following is correct?(Multiple Choice)
- A. It requires the state of all the VRRP backup groups in the same VGMP management group on the same firewall should be consistent.
- B. When a plurality of regions on the firewall needs to provide dual-machine backup function, you need to configure multiple VRRP backup groups on the firewall.
- C. The firewall active-standby requires the information such as the session table. MAC table, routing table and so on synchronous backup between primary devices and slave devices.
- D. VGMP is to ensureall VRRP backup groups' consistency of switching
Answer: A,B,D
NEW QUESTION # 99
Administrators want to clear the current session table. Which of the following command is correct?
- A. reset firewall session table
- B. display firewall session table
- C. display session table
- D. clear firewall session table
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 100
......
Huawei H12-711 (HCIA-Security V3.0) Certification Exam is a professional certification program designed for individuals who aspire to work in the field of cybersecurity. H12-711 exam is an assessment of the candidates’ knowledge, skills, and capabilities in the areas of network security, firewall technology, VPN and IPSec technologies, and security management.
Exam Valid Dumps with Instant Download Free Updates: https://www.prep4surereview.com/H12-711-latest-braindumps.html
Fast Exam Updates H12-711 dumps with PDF Test Engine Practice: https://drive.google.com/open?id=1Lc5SXa5fHYiEI8e46OHe1BgO137cbTSh
