HUAWEI H12-711_V3.0 Free Practice Questions

NEW QUESTION 1

According to the level protection requirements, which of the following behaviors belong to the scope of information security operation and maintenance management? ( )*

• A. Participate in information security training
• B. Backup or restore data
• C. Develop an emergency response plan
• D. Security hardening of the host

Answer: ABCD

NEW QUESTION 2

Digital certificate technology solves the problem that the public key owner cannot be determined in digital signature technology

• A. True
• B. False

Answer: A

NEW QUESTION 3

In the security assessment method, the purpose of security scanning is to scan the target system with scanning analysis and assessment tools in order to find relevant vulnerabilities and prepare for attacks.

• A. True
• B. False

Answer: B

NEW QUESTION 4

When configuring user single sign-on, use the receivePCIn message mode, the authentication process has the following steps:
* 1. visitorPCExecute the login script and send the user login information toADmonitor
* 2. Firewall extracts user andIPAdd the correspondence to the online user table
* 3. ADmonitor connected toADThe server queries the login user information and forwards the queried user information to the firewall
* 4. visitor loginADarea,ADThe server returns a login success message to the user and issues the login script. Which of the following is the correct order?

• A. 1-2-3-4
• B. 4-1-3-2
• C. 3-2-1-4
• D. 1-4-3-2

Answer: B

NEW QUESTION 5

Because NAT technology can realize one-to-many address translation. So with NAT technology, there is no need to worry about insufficient IPv4 addresses.

• A. True
• B. False

Answer: A

NEW QUESTION 6

In a stateful inspection firewall, when the stateful inspection mechanism is enabled, the second packet of the three-way handshake (SYN+ACK) when reaching the firewall, which of the following descriptions is correct if there is no corresponding session table on the firewall?

• A. The firewall does not create a session table, but allows packets to pass through
• B. If the firewall security policy allows packets to pass, create a session table
• C. Packets must not pass through the firewall
• D. Packets must pass through the firewall and establish a session

Answer: C

NEW QUESTION 7

Which of the following descriptions about digital fingerprints in digital signatures is wrong?

• A. The receiver needs to use the sender's public key to unlock the digital signature to obtain the digital fingerprint.
• B. It is the data obtained by the sender after calculating the plaintext information through the HASH algorithm.
• C. The receiver will use the sender's public key to calculate the generated data fingerprint and compare it with the received digital fingerprint.
• D. Digital fingerprints are also known as information digests.

Answer: C

NEW QUESTION 8

20

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

Please sort from large to small according to the table processing priority of iptables.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 10

________ Mode: Two devices, one master and one backup. Under normal circumstances, service traffic is handled by the active device. When the active device fails, the standby device replaces the active device to process service traffic to ensure that services are not interrupted.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

VGMPIn which of the following situations occurs in the group, the group will not actively send the message to the peerVGMPmessage/

• A. Dual-system hot backup function enabled
• B. Manually switch the active and standby status of the firewall
• C. Firewall service interface failure
• D. Session table entry changes

Answer: D

NEW QUESTION 12

Which of the following statements about OSPF is correct?

• A. Distance Vector Protocol
• B. Good scalability
• C. No loops
• D. Support authentication

Answer: BCD

NEW QUESTION 13

Information security level protection is the basic system of national information security work

• A. True
• B. False

Answer: A

NEW QUESTION 14

( ) Can block discovered network intrusions in real time. (fill in the blank)

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

waiting for insurance2.0Which one of the stipulations"Spam should be detected and protected at key network nodes, and spam protection mechanisms should be upgraded and updated?

• A. Malicious code prevention
• B. communication transmission
• C. Centralized control
• D. Border Protection

Answer: A

NEW QUESTION 16

Which of the following options is not included in the processing method adopted by the firewall for the matched authentication data flow?

• A. Portali certification
• B. Certification-free
• C. WeChat authentication
• D. not certified

Answer: D

NEW QUESTION 17
......