2023 Realistic H12-711_V4.0 100% Pass Guaranteed Download Exam Q&A [Q51-Q70]

5/5 - (1 vote)

2023 Realistic H12-711_V4.0 100% Pass Guaranteed Download Exam Q&A

Accurate H12-711_V4.0 Answers 365 Days Free Updates

Achieving the Huawei H12-711_V4.0 certification demonstrates a candidate’s expertise in network security and their ability to design and deploy secure networks using Huawei solutions. HCIA-Security V4.0 certification is highly valued by employers and can lead to career advancement opportunities in the field of security.

QUESTION 51
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?

Hold a summary meeting of the project in the information security management stage

Determine risk disposal measures and implement rectification plans

Determine risk tolerance and risk appetite

System integration and information security management system document preparation

QUESTION 52
In the automatic backup mode of hot standby on the second machine, which of the following sessions is backed up?

ICMP session

TCP half-connection session

Self-session to the firewall

UDP first packet session

QUESTION 53
The following description of IDS, which items are correct
The IDS cannot be linked to the firewall.

Mouth IDS is a fine-grained detection device, through which the live network can be monitored more accurately.

The IDS can be upgraded flexibly and in a timely manner, and the strategic configuration operation is convenient and flexible.

With IDS, system administrators can capture traffic from critical nodes and do intelligent analysis to find anomalous and suspicious network behavior and report it to administrators.

QUESTION 54
DES is a stream encryption algorithm, because the cipher capacity is only 56 bits, so it is not enough to deal with the weakness of insufficient security, and later 3DES was proposed.

TRUE

FALSE

QUESTION 55
IPSec VPN uses an asymmetric algorithm to calculate the ___ key to encrypt data packets.[fill in the blank]

symmetry

TRUE

QUESTION 56
Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution.[fill in the blank]*

3142

3143

QUESTION 57
The following description of the intrusion fire protection system IPS, which is correct?

The port IPS can be concatenated at the network boundary.

The IPS cannot prevent intrusion from occurring in real time.

The port IPS can be attached to the switch and port mirrored through the switch.

Oral IPS has the ability to customize intrusion prevention rules.

QUESTION 58
The following description of the construction of a digital certificate, which item is wrong

The name of the device that issued the certificate can be different from the subject name in the issuer certificate.

The structure of the certificate follows the specification of the X.509 v3 version.

The simplest certificate consists of a public key, a name, and a digital signature from a certificate authority.

The issuer signs the certificate information with the private key.

QUESTION 59
Which of the following protocols is a file transfer protocol?

Mouth POP3

Mouth NFS

Mouth HITP

Mouth DFTP

QUESTION 60
Which of the following descriptions about the main implementation of single sign-on is wrong? ( )[Multiple choice]*

Accept PC message mode

Query the AD server security log mode

Query the syslog server mode

Firewall monitors AD authentication packets

QUESTION 61
We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the ____ encryption algorithm to improve the encryption and decryption speed.[fill in the blank]*

symmetry

packets

QUESTION 62
The initial priority of the USG9500VGMP group is related to which of the following factors ( )? *

interface bandwidth

VRRP priority

Number of daughter cards on the interface board

The number of CPUs on the D service board

QUESTION 63
Please order the following steps in the PKI life cycle correctly, 1. Issued, 2. storage, 3. Update, 4. verify[fill in the blank]*

1243

1245

QUESTION 64
In the Linux system, which of the following is the command to query the P address information? ( )[Multiple choice]*

ifconfig)

display ip interface brief

ipconfig

display ip

QUESTION 65
According to the level protection requirements, which of the following behaviors belong to the scope of information security operation and maintenance management? ( )*

Participate in information security training

Backup or restore data

Develop an emergency response plan

Security hardening of the host

QUESTION 66
IP packets using the AH+ESP protocol? ( )[Multiple choice]*

QUESTION 67
Which of the following is not included in the Business Impact Analysis (BIA).

Risk identification

Impact assessment

Incident handling priority

Business priorities

QUESTION 68
Which of the following is the correct sequence for incident response management
1. Detection 2 Report 3 Mitigation 4 Lessons learned 5 Fix 6 Recovery 7 Response

1->3->2->7->6->5->4

1->7->3->2->6->5->4

1->3->2->7->5->6->4

1->2->3->7->6->5->4

QUESTION 69
As shown in the figure, the administrator needs to test the network quality of the 20.0.0/24 CIDR block to the 40.0.0/24 CIDR block on Device B, and the device needs to send large packets for a long time to test the network connectivity and stability.