Huawei H12-711 Premium Exam Engine pdf – Download Free Updated 290 Questions [Q79-Q97] – IT Certification Exam Questions & Answers

Rate this post

Huawei H12-711 Premium Exam Engine pdf – Download Free Updated 290 Questions

Verified H12-711 Bundle Real Exam Dumps PDF

NEW QUESTION 79
In SSL handshake protocol, what is the role of Server Key Exchange message?

server key exchange message indicates that the server has finished sending all the information

in the server key exchange message, it contains set of parameters required for completing key exchange

it contains an X.509 certificate in server key exchange message, the public key is contained in the certificate, which is issued to the client to verify signatures or to encrypt messages when key exchange

in the server key exchange message, it contains the negotiated CipherSuite which is copied to the state of the current connection

NEW QUESTION 80
Regarding the description of the vulnerability scanning, which of the following is wrong?

Vulnerability scanning is a technology based on network remote monitoring of target network or host security performance vulnerability, which can be used for simulated attack experiments and security audits.

Vulnerability scanning is used to detect whether there is a vulnerability in the target host system. Generally, the target host is scanned for specific vulnerabilities.

Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks.

Vulnerability scanning can be done based on the results of ping scan results and port scan

NEW QUESTION 81
As shown in the figure, a NAT server application scenario isconfigured when the web configuration mode is used

Which of the following statements are correct”? (Multiple choice)

When configuring an interzone secunty policy, set the source security zone to Untrust and the target security zone to DMZ

When configuring NAT Server, the internal address is 10 1.1 2 and the external address is 200.10.10.1.

When configuring an interzone secunty policy, set the source security zone to DMZ and the target secunty zone to Untrust.

When configuring NAT Server, the internal address is 200.10.10.1 and the external address is 10.1.1.2.

NEW QUESTION 82
Which of the following is not a requirement for firewall double hot standby?

The firewall hardware model is consistent

The firewall software version is consistent

The type and number of the interface used are the same.

The firewall interface has the same IP address.

NEW QUESTION 83
In order to obtain evidence of crime, it is necessary to master the technology of intrusion tracking. Which of the following descriptions are correct about the tracking technology? (Multiple Choice)

Packet Recording Technology marks packets on each passing router by inserting trace data into the tracked IP packets

Link test technology determines the source of the attack by testing the network link between the routers

Packet tagging technology extracts information from attack sources by recording packets on the router and then using data drilling techniques

Shallow mail behavior analysis can analyze the information such as sending IP address, sending time, sending frequency, number of recipients, shallow email headers and so on.

NEW QUESTION 84
On the USG series firewalls, the default security policy does not support modification

True

False

NEW QUESTION 85
Which ofthe following does not belong to the user authentication method in the USG firewall?

Free certification

Password authentication

Single sign-on

Fingerprint authentication

NEW QUESTION 86
Which of the following is wrong about the scanning of vulnerabilities?

The vulnerability was discovered beforehand and discovered afterwards

Vulnerabilities are generally repairable

Vulnerabilities are security risks that can expose computers to hackers

Vulnerabilities can be avoided

NEW QUESTION 87
After the firewall uses the hrp standby config enable command to enable the standby device configuration function, all the information that can be backed up can bedirectly configured on the standby device, and the configuration on the standby device can be synchronized to the active device.

True

False

NEW QUESTION 88
Which of the following is correct about firewall IPSec policy?

By default, IPSec policy can control unicast packets and broadcast packets.

By default, IPSec policy can control multicast.

By default, IPSec policy only controls unicast packets.

By default, IPSec policy can control unicast packets, broadcast packets, and multicast packets 。

NEW QUESTION 89
VPN tunnel technology refers to through encryption algorithm (such as DES, 3DE5) to achieve data transmitted in the network will not be intercepted.

True

False

Explanation/Reference:

NEW QUESTION 90
Which of the following are the response actions after the gateway antivirus detects the mail virus? (Multiple choice)

Alarm

Blocking

Announcement

Delete attachments

NEW QUESTION 91
Using a computer to store information about criminal activity is not a computer crime.

True

False

NEW QUESTION 92
Which of the following is null a itjquiiemeiil fui (bewail duuble hul standby?

The firewall hardware model is consistent

The firewall software version is consistent

The type and number of the interface used are the same

The firewall interface has the same IP address.

NEW QUESTION 93
Which of the following options does not belong to the log type of the Windows operating system?

Business log

Application log

Security log

System log

NEW QUESTION 94
In the USG series firewall, which of the following commands can be used to query the NAT translation result?

display nat translation

display firewall session table

display current nat

display firewall nat translation

NEW QUESTION 95
Which of the following are correct about configuring the firewall security zone?(Multiple Choice)

The firewall has four security zones by default, and the four security zone priorities do not support modification.

Firewall can have 12 security zones at most.

The firewall can create two security zones of the same priority

When data flows between different security zones, the device security check is triggered and the corresponding security policy is implemented

NEW QUESTION 96
The Huawei Redundancy Protocol (HRP) is used to synchronize the main firewall configuration and connection status and other data on the backup firewall to synchronize . Whichof the following options is not in the scope of synchronization?

Security policy

NAT policy

Blacklist

IPS signature set

NEW QUESTION 97
As shown in the figure, a TCP connection is established between client A and server
B. Which of the following two “?” packet numbers should be?