2023 Updated Verified Pass H12-711 Study Guides & Best Courses [Q64-Q85]

Rate this post

2023 Updated Verified Pass H12-711 Study Guides & Best Courses

Ultimate Guide to the H12-711 – Latest Edition Available Now

Huawei H12-711 (HCIA-Security V3.0) Certification Exam is an advanced-level certification that is ideal for cybersecurity professionals who are looking to enhance their skills and knowledge in the field. HCIA-Security V3.0 certification exam covers a wide range of topics, including security fundamentals, network security, security management, and security technology.

Huawei H12-711 (HCIA-Security V3.0) Certification Exam is a comprehensive exam that covers all aspects of network security. H12-711 exam consists of multiple-choice questions that test the candidate’s knowledge and understanding of network security concepts. H12-711 exam is designed to assess the candidate’s ability to apply their knowledge to real-world scenarios and solve complex problems related to network security.

QUESTION 64
NAPTtechnology can implement a public network IP address for multiple private network hosts

True

False

QUESTION 65
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements iscorrect about the standard of evidence identification?

Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to s certain extent, the court should determine that it is relevant.

Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated

Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.

Fairness standard refers to the evidence obtained by the legal subject through egal means, which has the evidence ability.

QUESTION 66
In the IPSec VPN transmission mode, which part ofthe data packe: is encrypted?

Network layer and upper layer data packet

Original IP packet header

New IP packet header

Transport layer and upper layer data packet

QUESTION 67
Which of the following are multi-user operating systems? (Multiple choice)

MSDOS

UNIX

LINUX

Windows

QUESTION 68
For the process of forwarding the first packet of the session between firewall domains,there are the following steps:
1. find the routing table
2. find inter-domain packet filtering rules
3. find the session table
4. find the blacklist
Which of the following is the correct order?

1->3->2->4

3->2->1->4

3->4->1->2

4->3->1->2

QUESTION 69
Which of the following descriptions about IKE SA is wrong?

IKE SA is two-way

IKE is a UDP- based application layer protocol

IKE SA servers for IPSec SA

The encryption algorithm used by user data packets isdetermined by IKE SA.

QUESTION 70
Use iptables to write a rule that does not allow the network segment of 172.16.0.0/16 to access the device. Which of the following rules is correct?

iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT

iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

QUESTION 71
As shown in the figure, a NAT server application scenario is configured when the web configuration mode is used.

Which of the following statements are correct? (Multiple choice)

When configuring an interzone security policy, set the source security zone to Untrust and the target security zone to DMZ.

When configuring NAT Server, the internal address is 10.1.1.2 and the external address is 200.10.10.1.

When configuring an interzone security policy, set the source security zone to DMZ and the target security zone to Untrust.

When configuring NAT Server, the internal address is 200.10.10.1 and the external address is 10.1.1.2.

QUESTION 72
ASPF (Application Specific Packet Filter) is a packet filtering technology based on the application layer, and implements a special security mechanism through the server-map table.
Which of the following statements about the ASPF and server-map tables are correct? (Multiple Choice)

ASPF monitors messages during communication

ASPF can dynamically create a server-map

ASPF dynamically allows multi-channel protocol data to pass through the server-map table.

The quintuple server-map entry implements a similar function to the session table.

QUESTION 73
What are the advantages of address translation techniques included? (Multiple choice)

Address conversion can make internal network users (private IPaddress) easy access to the Internet

Many host address conversion can make the internal LAN to share an IP address on the Internet

Address conversion that can handle the IP header of encryption

Address conversion can block internal network users,improve the safety of internal network

QUESTION 74
The network administrator can collect data to be analyzed on the network device by means of packet capture, port mirroring, or log, etc.

True

False

QUESTION 75
Which of the following is the port number used by L2TP packets?

500

1701

4500

QUESTION 76
Under the tunnel encapsulation mode. IPSec configuration does not need to have a route to thedestination private network segment, because the data will be re-encapsulated using the new IP header to find the routing table.

True

False

QUESTION 77
Which of the following is the encryption technology used in digital envelopes?

Symmetric encryption algorithm

Asymmetric encryption algorithm

Hash algorithm

Streaming algorithm

QUESTION 78
Based on the GRE encapsulation and de-encapsulation, which description is error?

Encapsulation Process: The original data packetstransmit the data packets through looking up routing to the Tunnel interface to trigger GRE encapsulation.

Encapsulation Process: After GRE module packaging, the data packet will enter the IP module for further processing

De-encapsulation Process: After the destination receives GRE packets, transmitting the data packets through looking up the routing to the Tunnel interfaces to trigger GRE encapsulation.

De-encapsulation Process: After GRE module de-encapsulation, the data packets will enter the IPmodule for further processing.

QUESTION 79
The single-point login function of the online user, the user authenticates directly to the AD server, and the device does not interfere with the user authentication process. The AD monitoring service needs to be deployed on the USG device to mcnitorthe authentication information of the AD server.

True

False

QUESTION 80
UDP port scanning means that the attacker sends a zero-byte UDP packet to a specific port of the target host.
If the port is open, it will return an ICMP port reachable data packet

True

False

QUESTION 81
Which configuration is correct to implement NAT ALG function?

nat alg protocol

alg protocol

nat protocol

detect protocol

QUESTION 82
Which of the following descriptions about windows logs is wrong?

The system log is used to record the events generated by the operating system components, including the crash of the driver, system components and application software, and data

Windows server 2008 system logs stored in the Application.evtx

The application log contains events logged by the application or system program, mainly recording events in the running of the program.

Windows seiver 2008 security lug is sluied in security.evtx

QUESTION 83
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the standard of evidence identification?

Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to a certain extent, the court should determine that it is relevant.

Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.

Fairness standard refers to the evidence obtained by the legal subject through legal means, which has the evidence ability.

QUESTION 84
Which of the following attacks does not belong to special packet attack?

ICMP redirect packet attack

ICMP unreachable packet attack

IP address scanning attack

Large ICMP packet attack

QUESTION 85
In the IPSec VPN transmission mode, which part of the data packet is encrypted?

Network layer and upper layer data packet

Original IP packet header

New IP packet header

Transport layer and upper layer data packet

Loading …