[Apr 01, 2024] 100% Real & Accurate H12-711 Questions with Free and Fast Updates [Q148-Q172] : Exams Labs Braindumps : http://blog.examslabs.com

NEW QUESTION 148
Which of the following attacks does not belong to special packet attack?

ICMP redirect packet attack

ICMP unreachable packet attack

IP address scanning attack

Large ICMP packet attack

NEW QUESTION 149
Which of the following descriptions is wrong about IKE SA?

IKE SA is two-way

IKE is a UDP-based application layer protocol

IKE SA for IPSec SA services

The encryption algorithm used by user data packets is determined by IKE SA.

NEW QUESTION 150
Which types of encryption technology can be divided into? (Multiple Choice)

Symmetric encryption

Asymmetric encryption

Fingerprint encryption

Data encryption

NEW QUESTION 151
As shown in the figure, a NAT server application scenario is configured when the web configuration mode is used.

Which of the following statements are correct? (Multiple choice)

When configuring an interzone security policy, set the source security zone to Untrust and the target security zone to DMZ.

When configuring NAT Server, the internal address is 10.1.1.2 and the external address is 200.10.10.1.

When configuring an interzone security policy, set the source security zone to DMZ and the target security zone to Untrust.

When configuring NAT Server, the internal address is 200.10.10.1 and the external address is 10.1.1.2.

NEW QUESTION 152
Which of the following statement about :he NAT is wrong?

NAT technology can effectively hide the hosts of the LAN. it is an effective network security protection technology

Address Translation can follow the needs of users, providing FTP. WWW, Telnet and other services outside the LAN

Some application layer protocols earn/ IP address information in the data, but also modify the P address information in the data of the upper layer when they are as NAT

For some non-TCP. UDP protocols (such as ICMP. PPTP), unable to do the NAT translation

NEW QUESTION 153
Firewall update signature database and Virus database online through security service center, requires the firewall can connect to the Internet first, and then need to configure the correct DNS addresses.

TRUE

FALSE

NEW QUESTION 154
Regarding the relationship and role of VRRP/VGMP/HRP, which of the following statements are correct? (Multiple choice)

VRRP is responsible for sending free ARP to direct traffic to the new primary device during active/standby switchover.

VGMP is responsible for monitoring equipment failures and controlling fast switching of equipment.

HRP is responsible for data backup during hot standby operation.

VGMP group in the active state may include the VRRP group in the standby state.

NEW QUESTION 155
Which of the following are the main implementations of gateway anti-viru3? (Multiple choice)

Agent scanning method

Stream scanning method

Package inspection method

File killing method

NEW QUESTION 156
Which of the following statement about the NAT is wrong?

NAT technology can effectively hide the costs of the LAN; it is an effective network security protection technology

Address Translation can follow the needs of users, providing FTP, WWW, Telnet and other services outside the LAN

Some application layer protocols carry IP address information in the data, but also modify the IP address information in the data of the upper layer when they are as NAT

For some non-TCP, UDP protocols (such as ICMP, PPTP), unable to do the NAT translation

NEW QUESTION 157
When the session authentication mode is used to trigger the firewall’s built-in Portal authentication, the user does not actively perform identity authentication, advanced service access, and device push “redirect” to the authentication page.

True

False

NEW QUESTION 158
What do VLAN port types include? (Choose three.)

Access Port

Trunk port

Hybrid port

Ethernet port

NEW QUESTION 159
Which of the following options belong to the necessary configuration for the firewall double hot standby scenario? (Multiple Choice)

hrp enable

hrp mirror session enable

hrp interface interface-type interface-number

hrp preempt [delay interval]

NEW QUESTION 160
Which of the following is not a hash algorithm?

MD5

SHA1

SM1

SHA2

NEW QUESTION 161
Which of the following are the necessary configurations of IPSec VPN? (Multiple Choice)

Configuring IKE neighbors

Configure IKE SA related parameters

Configuring IPSec SA related parameters

Configure the stream of interest

NEW QUESTION 162
What is the nature of information security in “Implementation of security monitoring and management of information and information systems to prevent the illegal use of information and information systems”?

Confidentiality

Controllability

Non-repudiation

Integrity

NEW QUESTION 163
Intrusion prevention system technical characteristics include (Multiple choice)

Online mode

Real-time blocking

Self-learning and adaptive

Straight road deployment

NEW QUESTION 164
The GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ. If the area connected to GE1/0/1 can accessthe area connected to GE1/0/2, which of the following is correct?

Need to configure local to DMZ security policy

No need to do any configuration

Need to configure an interzone security policy

Need to configure DMZ to local security policy

NEW QUESTION 165
Execute the command on the firewall and display the following information. which of the following description is correct? (Multiple Choice) HRP_A [USG_A] display vrrp interfaceGigabitEthernet 0/0/1 GigabitEthernet0/0/1 | Virtual Router 1 VRRP Group: Active state: Active Virtual IP: 202.38.10.1 Virtual MAC: 0000-5e00-0101 Primary IP: 202.38.10.2 PriorityRun: 100 PriorityConfig: 100 MasterPriority: 100 Preempt: YES Delay Time: 10

The status of this firewall VGMP group is Active.

This firewall G1 / 0/1 virtual interface IP address 202.30.10.2

This firewall VRID is 1 the VRRP priority to backup group 100

Will not switch when the primary device fails

NEW QUESTION 166
Which of the following is used to encrypt digital fingerprints in digital signature technology?

sender public key

sender private key

Receiver public key

Receiver private key

NEW QUESTION 167
IPSec VPN uses an asymmetric encryption algorithm to encrypt the transmitted data

True

False

NEW QUESTION 168
Which of the following is correct about firewall IPSec policy?

By default, IPSec policy can control unicast packets and broadcast packets.

By default, IPSec policy can control multicast.

By default, IPSec policy only controls unicast packets.

By default, IPSec policy can control unicast packets, broadcast packets, and multicast packets 。

NEW QUESTION 169
The single-point login function of the online user, the user authenticates directly to the AD server, and the device does not interfere with the user authentication process. The AD monitoring service needs to be deployed on the USG device to monitor the authentication information of the AD server.

True

False

NEW QUESTION 170
Winch of the following is the encryption technology used in digital envelopes?

Symmetric encryption algorithm

Asymmetric encryption algorithm

NEW QUESTION 171
In the current network it has deployed other authentication system, device registration function by enabling a single point, reducing the user to re-enter the password.
What are correct about single sign-on statements? (Multiple choice)

device can identify the user through the authentication of the identity authentication system, user access, the device will not push authentication pages, to avoid further asked to enter a username / password

AD domain single sign-on is only one deployment model

Although not require to enter a user password, but the authentication server needs to interact with the user password and devices used to ensure that certification through discussion

AD domain single sign-on login can be mirrored data stream synchronized manner to the firewall

NEW QUESTION 172
Which ofthe following are the standard port numbers for the FTP protocol? (Multiple choice)