Updated H12-711_V3.0-ENU Exam Questions For Preparation of HCIA-Security V3.0 Exam

HCIA-Security V3.0 H13-711_V3.0-ENU exam questions have been updated by the HCDAtest team, who have full confidence to ensure that you can pass HCIA-Security V3.0 certification exam in the first attempt.

Updated H12-711_V3.0-ENU exam questions of HCDAtest containing 706 practice exam questions with the most verified answers are the best preparation materials online. Here are have Huawei H12-711_V3.0-ENU free test online for checking the high-quality of HCIA-Security V3.0 H12-711_V3.0-ENU exam. If you have any questions, please contact us via mail: [email protected].

Begin to Test:

1. The key used by DES encryption is bits, while the key used by 3DES encryption is _______ bits.

56168

64168

64128

56128

Question 1 of 25

2. How many IPSec SAs need to be established to encapsulate IP packets using the AH+ESP protocol?

Question 2 of 25

3. Which of the following security measures does the monitor correspond to?

Intrusion Detection System

Encrypted VPN

Access Control System

Firewall

Question 3 of 25

4. Which of the following VPNs cannot be used in a site-to-Site scenario?

SSL VPN

L2TP VPN

IPSec VPN

GRE VPN

Question 4 of 25

5. Which of the following options is not included in the processing method adopted by the firewall for the matched authentication data flow?

Portal Authentication

Certification-free

WeChat authentication

Not certified

Question 5 of 25

6. When an access user uses Client-Initiated VPN to establish a tunnel with the LNS, how many PPP connections can a tunnel carry?

Question 6 of 25

7. Regarding the Server Map table generated by NAT No-PAT, which of the following descriptions is correct?

The function of the Server Map generated by NAT No-PAT is equivalent to the security policy, that is, the packets matching the Server Map table can pass through the firewall directly without matching the security policy.

There are two Server Maps generated by NAT No-PAT by default. One is a reverse Server Map table, which is mainly used for address translation when external network users actively access the private network users without additional configuration of NAT and security policies.

The Server Map generated by NAT No-PAT is static, that is, after NAT No-PAT is configured, the Server Map table will be automatically generated and will exist permanently.

There are two server maps generated by NAT No-PAT by default. One is a forward server map table, which main function is to ensure that a specific private network address directly hits the table entry for address translation when accessing the public network, improving efficiency.

Question 7 of 25

8. Which of the following statements about the heartbeat interface is wrong?

The MGMT interface (GigabitEthernet0/0/0) cannot be used as the heartbeat interface

The connection method of the heartbeat interface can be direct connection, or it can be connected through a switch or router

It is recommended to configure at least two heartbeat interfaces. One heartbeat interface is used as the master, and the other heartbeat interface is used as the backup

An interface with an MTU value greater than 1500 cannot be used as a heartbeat interface

Question 8 of 25

9. Which of the following is not a type of digital certificate?

Local certificate

Terminal certificate

Self-signed certificate

Device local certificate

Question 9 of 25

10. Information security prevention includes both management and technical measures. Which of the following measures is not a precautionary method for information security technology?

Information security training for employees

Vulnerability scan of the server

Authenticate employees

Enable anti-virus function on the firewall

Question 10 of 25

11. The administrator connects to the firewall through the G1/0/0 interface (which has been added to the Trust zone). If the administrator is allowed to log in to the firewall through G1/0/0 for configuration management, how to configure the traffic allowed in the security policy direction?

Allow traffic from Trust Zone to Untrust Zone

Allow traffic from Trust Zone to Local Zone

Allow traffic from Local Zone to Local Zone

Allow traffic from Trust Zone to Trust Zone

Question 11 of 25

12. The company administrator uses the ping command to test the connectivity of the network. If he needs to specify the source address of the ehco-request message, what is the additional parameter he needs?

-i

-a

-c

–f

Question 12 of 25

13. Which of the following descriptions about the characteristics of the HWTACACS protocol is wrong?

Use UDP protocol

Separation of Authentication and Authorization

In addition to the standard HWTACACS header, all the message body is encrypted

Suitable for conducting security controls.

Question 13 of 25

14. Regarding NAT technology, which of the following descriptions is correct?

The internal network server of the NAT network cannot be accessed by external network users, so if a server that needs to provide external services is deployed, be sure to assign an independent public network address to the server

NAT reduces the difficulty of network monitoring

NAT technology can only achieve one-to-one address conversion, but cannot achieve address multiplexing

NAT can hide the intranet IP address

Question 14 of 25

15. An employee of a company accesses the internal web server of the company through the firewall, and the web page of the website can be opened by using a browser, but the reachability of the web server is tested by using the Ping command, and it shows that it is unreachable.
What is the possible reason?

The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol

The web server is down

The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol

The interface of the firewall connecting to the server is not added to the security zone

Question 15 of 25

16. Which of the following SSLVPN functions can only access all TCP resources?

Network expansion

Port Forwarding

web proxy

File Sharing

Question 16 of 25

17. Regarding NAT technology, which of the following descriptions is false?

In Huawei firewalls, source NAT technology refers to the translation of the source address in the IP header of the connection that initiates the connection.

In Huawei firewall, Easy IP directly uses the public network address of the interface as the translated address, and does not need to configure a NAT address pool.

In Huawei firewalls, the NAT No-PAT technology needs to be implemented by configuring a NAT address pool.

In Huawei firewalls, the only NAT technology with port translation is NAPT.

Question 17 of 25

18. The attacker sends a sw packet with the same source address and destination address, or the source address is the loopback address to the target host (the source port and destination port are the same), causing the attacker to send a SYN-ACK message to its own address.
What kind of attack is this behavior?

SYN flood attack

TCP Spoofing Attack

smurf attack

Land Attack

Question 18 of 25

19. In the information assurance stage, which of the following perspectives need to be considered for information security?

Management

Security System

Business

Technology

Question 19 of 25

20. Which of the following is an "information sabotage incident" in the classification of cybersecurity incidents?

Software and hardware failure

Phishing

Internet Scanning and Plagiarism

Trojan attack

Question 20 of 25

21. The TCP/IP protocol stack packet encapsulation includes:
1. Data
2. TCP/UDP
3. MAC
4. IP
Which of the following describes the packaging order is correct?

1234

1243

1342

1423

Question 21 of 25

22. Which of the following descriptions about the function of the iptables table is wrong?

NAT table: The function of address translation.

Raw table: Determines whether the packet is processed by the state tracking mechanism.

Mangle Table: Modify Security Policy

Filter table: Policies that are allowed or not allowed in the data packet.

Question 22 of 25

23. Which of the following is not a block encryption algorithm in the symmetric encryption algorithm?

RC5

RC4

RC6

RC2

Question 23 of 25

24. Regarding the single sign-on supported by the firewall, which of the following is not included?

RADIUS single sign-on

ISM Single Sign-On

AD single sign-on

HWTACACS single sign-on

Question 24 of 25

25. Which of the following options is not a private network IP address?

192.168.254.254/16

172.32.1.1/24

10.32.254.254/24

10.10.10.10/8

Question 25 of 25

HCDA Test Preparations

Latest Huawei Exam Dumps | New HCIA, HCIP and HCIE Tests

Updated H12-711_V3.0-ENU Exam Questions For Preparation of HCIA-Security V3.0 Exam

Leave a Reply Cancel reply

Recent Posts

Tags