New HCIA-Security H12-711-ENU Exam Questions

New HCIA-Security H12-711-ENU exam questions have been updated on 1/10/2019, which will be your best and valid materials for passing H12-711-ENU HCIA-Security-CBSN (Huawei Certified ICT Associate – Constructing Basic Security Network) exam.

Here we share 25 free questions of New HCIA-Security H12-711-ENU Exam Questions to help you check the quality. Each questions score 4, you can test all these free questions of H12-711-ENU exam to make a decision to purchase the full version.

Begin to Test:

1. Which of the following is true about the description of SSL VPN?

Can be used without a client

May encrypt to IP layer

There is a NAT traversal problem

No authentication required

Question 1 of 25

2. IPSec VPN technology does not support NAT traversal when encapsulating with ESP security protocol, because ESP encrypts the packet header.

True

False

Question 2 of 25

3. Except built-in Portal authentication, firewall also supports custom Portal authentication, when using a custom Portal authentication, no need to deploy a separate external Portal server.

True

False

Question 3 of 25

4. Which of the following is the encryption technology used by digital envelopes?

Symmetric encryption algorithm

Asymmetric encryption algorithm

Hash algorithm

Stream encryption algorithm

Question 4 of 25

5. NAPT technology can implement a public network IP address for multiple private network hosts.

True

False

Question 5 of 25

6. In the Client-Initiated VPN configuration, generally it is recommended to plan the address pool and the headquarters of the network address for the different network segments, or need to open proxy forwarding on the gateway device.

True

False

Question 6 of 25

7. When the firewall hard disk is in place, which of the following is correct description for the firewall log?

The administrator can advertise the content log to view the detection and defense records of network threats.

The administrator can use the threat log to understand the user's security risk behavior and the reason for being alarmed or blocked.

The administrator knows the user's behavior, the keywords explored, and the effectiveness of the audit policy configuration through the user activity log.

The administrator can learn the security policy of the traffic hit through the policy hit log, and use it for fault location when the problem occurs.

Question 7 of 25

8. Typical remote authentication modes are: (Multiple Choice)

RADIUS

Local

HWTACACS

LLDP

Question 8 of 25

9. Which of the following attacks is not a malformed message attack?

Teardrop attack

Smurf attack

TCP fragment attack

ICMP unreachable packet attack

Question 9 of 25

10. Which of the following attacks does not belong to special packet attack?

ICMP redirect packet attack

ICMP unreachable packet attack

IP address scanning attack

Large ICMP packet attack

Question 10 of 25

11. Caesar Code is primarily used to encrypt data by using a stick of a specific specification.

True

False

Question 11 of 25

12. When configuring NAT Server on the USG series firewall, the server-map table will be generated. Which of the following does not belong in the table?

Destination IP

Destination port number

Agreement number

Source IP

Question 12 of 25

13. Which of the following options can be used in the advanced settings of windows firewall? (Multiple Choice)

Restore defaults

Change notification rules

Set connection security rules

Set out inbound rules

Question 13 of 25

14. Regarding SSL VPN technology, which of the following options is wrong?

SSL VPN technology can be perfectly applied to NAT traversal scenarios

SSL VPN technology encryption only takes effect on the application layer

SSL VPN requires a dial-up client

SSL VPN technology extends the network scope of the enterprise

Question 14 of 25

15. Which of the following types of attacks does the DDoS attack belong to?

Snooping scanning attack

Malformed packet attack

Special message attack

Traffic attack

Question 15 of 25

16. Regarding the AH and ESP security protocols, which of the following options is correct? (Multiple Choice)

AH can provide encryption and verification functions

ESP can provide encryption and verification functions

The agreement number of AH is 51.

The agreement number of ESP is 51.

Question 16 of 25

17. Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the standard of evidence identification?

Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to a certain extent, the court should determine that it is relevant.

Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated.

Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.

Fairness standard refers to the evidence obtained by the legal subject through legal means, which has the evidence ability.

Question 17 of 25

18. Data analysis technology is to find and match keywords or key phrases in the acquired data stream or information flow, and analyze the correlation of time. Which of the following is not an evidence analysis technique?

Password deciphering, data decryption technology

Document Digital Abstract Analysis Technology

Techniques for discovering the connections between different evidences

Spam tracking technology

Question 18 of 25

19. Which of the following is the core part of the P2DR model?

Policy Strategy

Protection

Detection

Response

Question 19 of 25

20. HRP (Huawei Redundancy Protocol) Protocol to back up the connection state of data include: (Multiple Choice)

TCP/UDP sessions table

Server Map table

the dynamic blacklist

the routing table

Question 20 of 25

21. Which types of encryption technology can be divided into? (Multiple Choice)

Symmetric encryption

Asymmetric encryption

Fingerprint encryption

Data encryption

Question 21 of 25

22. Some applications, such as Oracle database application, there is no data transfer for a long time, so that firewall session connection is interrupted, thus resulting in service interruption, which of the following technology can solve this problem?

Configure a long business connection

Configure default session aging time

Optimization of packet filtering rules

Turn fragment cache

Question 22 of 25

23. Which of the following is the correct description of windows log event type? (Multiple Choice)

A warning event is a successful operation event of an application, driver, or service.

Error events usually refer to the loss of function and data. For example, if a service cannot be loaded as a system boot, an error event will be generated.

When the disk space is insufficient, it will be recorded as an "information event"

Failure audit event refers to a failed audit security login attempt, such as a failure when the user view accesses the network drive is logged as a failed audit event.

Question 23 of 25

24. What is the nature of information security in “Implementation of security monitoring and management of information and information systems to prevent the illegal use of information and information systems”?

Confidentiality

Controllability

Non-repudiation

Integrity

Question 24 of 25

25. When configuring security policy, a security policy can reference an address set or configure multiple destination IP addresses.

True

False

Question 25 of 25

You can purchase the full version now, any questions, please contact [email protected].

HCDA Test Preparations

Latest Huawei Exam Dumps | New HCIA, HCIP and HCIE Tests

Tag Archives: H12-711-ENU test prep

New HCIA-Security H12-711-ENU Exam Questions

Recent Posts

Tags