H12-711_V3.0-ENU問題集、Huawei実際の試験問題

質問 1

Which of the following options is notIPSec SAlogo?

A. source address

B. Destination address

C. Security Protocol

D. SPI

正解: A

質問 2

Which of the following statements about the PKI life cycle is correct?

A. Certificate download: The PKI entity downloads the issued certificate to the RA server through SCEP or CIPvz protocol, or through DAP.HIITP or out-of-band mode, download the issued certificate.

B. Certificate issuance: When a PKI entity applies for a local certificate from a CA, if there is an RA, the RA will first review the identity information of the PKI entity. After the verification is passed, the RA will send the application information to the CA.

C. Certificate renewal: When the certificate expires and the key is leaked, the PKI entity must replace the certificate. The purpose of renewal can be achieved by re-applying, or it can be automatically renewed using SCEP or CPv2 protocol.

D. Certificate application: certificate application, namely certificate registration, is a PKI entity introducing itself to the CA and obtaining a certificate

正解: A,B,C,D

質問 3

The reason why NAPT can realize one-to-many address translation is that the ______ is also translated when the address is translated, so multiple private addresses can share the same public address.[fill in the blank]*

正解:

port

質問 4

For network security incidents that occur, remote emergency response is generally adopted first. If the problem cannot be solved for the customer through remote access, after confirmation by the customer, go to the local emergency response process

A. True

B. False

正解: A

質問 5

Under normal circumstances, the terminal number used by the RADIUS server to provide accounting services is ( ). (fill in the blank)

正解:

1813

質問 6

Which of the following are remote authentication methods? (multiple choice)

A. Local

B. HWTACACS

C. RADIUS

D. LLDP

正解: B,C

質問 7

About intrusion prevention systems (IPS), which of the following is false?

A. IPSDevices can be connected in series at the network boundary and deployed online

B. IPSThe device cannot be deployed in bypass mode in the network

C. IDSThe device needs to be linked with the firewall to block intrusion

D. IPSOnce the device detects intrusion behavior, it can achieve real-time blocking

正解: B

質問 8

The TCP/IP protocol stack packet encapsulation includes: Which of the following describes the encapsulation order (sort order: ABDC)

A. TCP/UDP

B. IP

C. MAC

D. Data

正解: A,B,C,D

質問 9

aboutGREEncapsulation and decapsulation, which of the following descriptions is false?

A. Decapsulation process, afterGREAfter the module is decapsulated, this packet will go inIPmodule for further processing

B. The encapsulation process, the original data packet is passed to theTunnelDepart after the interfaceGREpackage

C. The decapsulation process, the destination receivesGREAfter the message, the data packet is delivered to theTunnelDepart after the interfaceGREDecapsulation

D. packaging process, afterGREAfter the module is encapsulated, this packet will enterIPmodule for further processing

正解: D

質問 10

aboutClient-InitializedofL2TP VPN, which of the following statements is false?

A. remote user accessinternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request

B. LNSAssign private keys to remote usersIPaddress

C. LNSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password

D. Remote users do not need to installVPNclient software

正解: D

質問 11

In the authentication policy of the firewall, _____ allows the user to not need to enter the user name and password, but can obtain the corresponding relationship between the user and the IP, so as to carry out policy management based on the user[fill in the blank]*

正解:

Certification-free

質問 12

Which of the following options is correct for the description of a buffer overflow attack?(multiple choice)

A. Buffer overflow attacks exploit the flaws of software systems in memory operations to run attack code with high operating privileges.

B. Buffer overflow attacks are one of the most common ways to attack the behavior of software systems

C. Buffer overflow attacks have nothing to do with the vulnerabilities and architecture of the operating system.

D. Buffer overflow attacks are application-layer attacks.

正解: A,B,D

質問 13

Which of the following options is correct for the description of the rating of the level protection system in the
2.0 class protection system?

A. Level 3: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, or cause damage to social order and public interests and also cause damage to national security.

B. Level 4: When the information system is damaged, it will cause particularly serious damage to social order and public interests, or cause serious damage to national security.

C. Level 1: After the information system is damaged, it will cause serious damage to the legitimate rights and interests of citizens, legal persons and other organizations, but will not damage national security, social order and public interests.

D. Level 5: When the information system is damaged, it will cause particularly serious damage to national security.

正解: B,C,D

質問 14

Which of the following NAT technologies can implement a public network address to provide source address translation for multiple private network addresses?

A. NAPT

B. NAT Server

C. Easy-ip

D. NAT No-PAT

正解: A,B,C,D

Huawei HCIA-Security V3.0 - H12-711_V3.0-ENU 模擬練習