New Updated Huawei H12-711_V3.0 Exam Questions

dumps2022-05-12T02:59:58+08:00

Huawei H12-711_V3.0 exam updated questions are here for you. Earn HCIA-Security V3.0 certification is much easier now. To get certified, you can have basic ability to configure and maintain small and medium-sized enterprise information security solution. Free updated Huawei H12-711_V3.0 exam questions are below.

Page 1 of 21

1. Regarding the description of the Windows log event type, which of the following is correct? (Multiple Choice)

Warning event refers to an event that the application, driver or service is successful.

Error events usually refer to the loss of functionality and data. For example, a service cannot be loaded as a system boot, an error event is generated.

When the disk space is insufficient, it will be recorded as a "information event".

Failure audit event refers to a failure of security login attempts, such as failure when a user view accesses a network drive, is recorded as a failure audit event.

2. Which types of the following can the encryption technology be divided into? (Multiple Choice)

Symmetrical encryption

Fractional symmetric encryption

Fingerprint encryption

Data encryption

3. Which of the following is the status information that can be backed up by the HRP (Huawei Redundancy Protocol) protocol? (Multiple Choice)

Conference table

ServerMap entry

Dynamic blacklist

Routing table

4. Which of the following is the core part of the P2DR model?

Policy

Protection

Detection

Response

5. Evidence identification needs to solve the integrity verification of evidence and determine if it meets the standards that can be used. Regarding the standards of evidence identification, which of the following statement is correct?

Relevance standard refers to that if the electronic evidence can have a material impact on the facts of the case to a certain extent, the court should rule that it is relevant.

Objective standard refers to the acquisition, storage, and submission of electronic evidences shall be legal, and the basic rights such as national interests, social welfare and personal privacy do not constitute strict violations.

Legality standard is to ensure that electronic evidence is collected from the initial acquisition, and the content is not changed in the process of submission as litigation evidence.

Fair standard refers to that only the legal subject obtains the evidentiary material by legal means has evidentiary ability.

6. Data Analysis Technology is to find, match keywords or key phrases, and analyze the correlation of time in data streams or information streams that have been obtained.

Which of the following does not belong to evidence analysis technology?

Password decipherment, data decryption technology

File Digital Summary Analysis Technology

Exploring the technology of the connection between different evidence

Spam tracking technology

7. About AH and ESP security protocols, which of the following statements are correct? (Multiple Choice)

AH can provide the functions of encryption and verification

ESP can provide the functions of encryption and verification

AH's protocol number is 51

ESP's protocol number is 51

8. DDoS attack belongs to which attack type?

Snoop scan attack

Malformed packet attack

Special packet attack

Flow type attack

9. About SSL VPN technology, which of the following statement is wrong?

SSL VPN technology is perfect for NAT traversal scenarios

Encryption of SSL VPN technology only takes effect on the application layer

SSL VPN requires dial client

SSL VPN technology expands the network range of enterprises

10. Which options can be operated in the advanced settings of the Windows Firewall? (Multiple Choice)

Restore default

Change Notification Rules

Set connection safety rules

Set inbound and outbound rules

Page 2 of 21

11. When configuring NAT Server on the USG Series Firewall, a Server-Map table is generated. Which item below does not belong to content in this performance?

Destination IP

Destination port number

Agreement number

Source IP

12. Which attack below does not belong to a special packet attack?

ICMP redirection packet attack

ICMP unreachable packet attack

IP address scan attack

Super ICMP Packet Attack

13. Which attack below is not a malformated packet attack?

TEARDROP attack

Smurf attack

TCP shard attack

ICMP unreachable message attack

14. "Caesar Password" is mainly encrypted by using a stick of specific specifications.

True

False

15. Which of the following is a remote authentication method? (Multiple Choice)

RADIUS

Local

HWTACACS

LLDP

16. When the firewall hard disk is on the throne, which of the following statement about the firewall log is correct?

Administrators can announce the content log to view the detection and defense record of network threats

Administrators can understand the user's security risk behavior and the cause of the alarm or blocking reason via threat logs.

Administrators know the user's behavior, the keyword of the exploitation, and the effectiveness of the audit policy configuration through user activity logs.

Administrators can use the security policy in which traffic hits in the policy, for fault location when there is a problem.

17. In the Client-Initiated VPN configuration, it is generally recommended to plan the address pool and headquarters network address as different network segments, otherwise you need to turn on the proxy forwarding function on the gateway device.

True

False

18. In addition to supporting built-in Portal authentication, firewall also supports custom Portal authentication, and does not require separate deployment of external Portal servers when using custom Portal authentication.

True

False

19. NAPT technology can implement a public IP address for multiple private network hosts.

True

False

20. IPSec VPN technology does not support NAT crossing when using the ESP security protocol package, because ESP encrypts the header of the packet.

True

False

Page 3 of 21

21. Which item is correct about SSL VPN?

Can be used without the client

Can encrypt the IP layer

There is a NAT crossing problem

No authentication

22. Some applications such as Oracle Database Applications, has no data streaming for a long time, so that the firewall session connection is interrupted, resulting in business interruption, which of the following is the optimal solution?

Configure a long connection for one business

Open the ASPF function

Optimize safety strategy

Open Split Cache

23. "Implementing security monitoring management for information and information systems, preventing illegal use of information and information systems", is to achieve which feature in information security?

Confidentiality

Controllability

Non-repudiation

Integrity

24. When configuring a security policy, a security policy can reference the address set or configure multiple destination IP addresses.

True

False

25. Which of the following is not a quintuple range?

Source IP

Source Mac

Destination IP

Destination port

26. Which of the following statement is wrong about the L2TP VPN of Client-Initialized?

After the remote user access the Internet, the L2TP tunnel connection request can be initiated directly from the remote LNS through the client software.

The LNS device receives the user's L2TP connection request, and the user can be verified according to the username and password.

LNS assign private IP addresses for remote users.

The remote users do not need to install VPN client software

27. About the description of the vulnerability scan, which of the following is wrong?

Vulnerability Scan is a technology based on network remote monitoring target network or host security performance vulnerability, which can be used to simulate attack experiments and security audits.

Vulnerability scan is used to detect if the target host system has a vulnerability, generally a scan for a specific vulnerability for the target host

Vulnerability scan is a passive prevention measures to effectively avoid hacker attack behavior

Vulnerability scan can be used according to the results of ping scanning and port scanning

28. Regarding the firewall security strategy, which of the following is wrong?

If the security policy is Permit, the discarded message will not be accumulated "hitting"

When configuring the security policy name, you cannot reuse the same name.

Adjust the order of the security policy, do not need to save the configuration file, take effect immediately

Huawei USG series firewall security strategy entry cannot exceed 128

29. What protection levels are included in TCSEC standard? (Multiple Choice)

Verification Protection

Forced Protection

Self-protection

Passive Protection

30. Which one of the options below belong to the component of the PKI architecture? (Multiple Choice)

Terminal entity

Certificate certification authority

Certificate registration authority

Certificate Storage authority

Page 4 of 21

31. "Be good at observation" and "keep suspicion" can help us better identify security threats in the online world.

True

False

32. In tunnel encapsulation mode, there is no need to have the routing to the destination private network segment, because the data will reseal using the new IP header to find routing table.

True

False

33. About the description of the Windows firewall, which of the following statements are correct? (Multiple Choice)

Windows firewalls can only allow or prohibit preset programs or features and programs installed on the system, and cannot customize the release rules in accordance with protocols or port numbers.

Windows firewall not only allows or prohibits preset programs or features and programs installed on the system, but also support to customize the release rules in accordance with protocols or port numbers.

If in the process of setting up the Windows firewall, the Internet cannot be accessed, you can quickly restore the firewall to the initial state using the restored default value function.

Windows firewall can change the notification rule in the closed state

34. Regarding the investigation and evidence collection, which of the following statement is correct?

Evidence is not necessarily needed in an investigation

Evidence acquired by eavesdropping is also effective

During all investigation and evidence, preferably with law enforcement involved.

Document evidence is required in computer crimes

35. Regarding the online user management, which of the following is incorrect?

Each user group can include multiple users and user groups

Each user group can belong to multiple parent user groups

The system has a default user group by default, and it is also the system default authentication domain.

Each user at least belongs to one user group, or it can belong to multiple user groups.

36. Which of the following is not used by the Detection link in the P2DR model?

Real-time monitoring

Detection

Alarm

Close service

37. Which item below is not a Linux operating system?

CentOS

RedHat

Ubuntu

MAC OS

38. In some scenarios, it is necessary to convert the source IP address, but also convert the destination IP address, which technology of the following is used by these scenarios?

Two-way NAT

Source Nat

NAT-Server

Nat Alg

39. Which protocols below can guarantee the confidentiality of data transmission? (Multiple Choice)

Telnet

SSH

FTP

HTTPS

40. On the USG series firewall, after configuring the web redirection, the the authentication page cannot pop up. Which item below does not belong to the cause?

Unconfigured authentication policy or authentication policy configuration error

Unenable WEB authentication function

Browser SSL version is not matched with the firewall authentication page SSL version

The port number of the authentication page service is set to 8887

Page 5 of 21

41. Which is the order of the four stages of the Information Security Management System (ISMS) in the following options?

Plan->Check->Do->Action

Check->Plan->Do->Action

Plan->Do->Check->Action

Plan->Check->Action->Do

42. Which of the following behavior is needed in the "Check" section in the construction management cycle of the information security system?

Safety management system design

Implementation of safety management system

Risk assessment

Safety management system operation monitoring

43. Check the HRP status information of the firewall as follows:

HRP_S[USG_B] display hrp state

The firewall's config state is: Standby

Current state of virtual routers configured as standby:

GigabitEthernet1/0/0 vrid 1: standby

GigabitEthernet1/0/1 vrid 2: standby

According to the above information, which of the following description is correct?

This firewall VGMP group status is Active

The VRRP group status of this firewall G1/0/0 and G1/0/1 interface is standby

This firewall's HRP heartbeat interface is G1/0/0 and G1/0/1

This firewall must be in a preemptive state

44. Which types can be divided into according to the shape of servers? (Multiple Choice)

Blade server

Tower server

Rackline server

x86 server

45. Common scan attacks include: port scan tools, vulnerability scanning tools, application scan tools and database scanning tools, etc.

True

False

46. Divide the firewall according to the protection subject, Windows firewall belongs to ______.

Software firewall

Hardware firewall

Single machine firewall

Network firewall

47. Which options are the way for PKI entity to apply for a local certificate from a CA? (Multiple Choice)

Online application

Local application

Network application

Offline application

48. IPS (Intrusion Prevention System) is a defense system that can real-time block during the found invasion.

True

False

49. Which of the following is not a symmetrical encryption algorithm?

DES

3DES

AES

RSA

50. Regarding the firewall security zone, which of the following statements are correct? (Multiple Choice)

The firewall has four security zones by default, and the four security zone priorities do not support modification.

A firewall can have 12 security zones at most

Firewall can create two security areas of the same priority

When data flow occurs between different security zones, the security check of the device is triggered, and the corresponding security policy is implemented.

Page 6 of 21

51. Digital certificates can be divided into local certificates, CA certificates, root certificates, and self-signed certificates depending on the use scenario.

True

False

52. Which of the following statement is wrong about the root CA certificate?

The issuer is CA

Certificate main name is CA

Public key information is the public key of CA

Signature is generated by the CA public key encryption

53. Which configuration below can implement NAT ALG function?

nat alg protocol

alg protocol

nat protocol

detect protocol

54. Regarding the anti-patient response method of firewall gateway for HTTP protocols, which of the following statement is incorrect?

After the gateway device blocks the HTTP connection, push the web page to the client and generate a log.

Response methods include declaration and blocking

The alarm mode device generates only the log, and the file is not processed by the file transferred to the HTTP protocol.

Blocked refers to the device disconnects to the HTTP server and block file transfer.

55. Which of the following is not a user authentication method in a USG firewall?

Free certification

Password authentication

Single sign-in

Fingerprint certification

56. Both the firewall GE1/0/1 and GE1/0/2 are in the DMZ area. If the area to achieve GE1/0/1 can access the area connected in GE1 / 0/2, which of the following is correct?

Need to configure local to DMZ security policies

No need to do any configuration

You need to configure domain security policies

Need to configure security policies from DMZ to Local

57. Find the blacklist below

which order below is correct?

1->3->2->4

3->2->1->4

3->4->1->2

4->3->1->2

58. Administrators want to know the current session table. Which of the following order is correct?

clear firewall session table

reset firewall session table

display firewall session table

display session table

59. Which of the following is the basic function of anti-virus software? (Multiple Choice)

Prevent virus

Find virus

Clear virus

Copy virus

60. The European TCSEC criterion is divided into two modules of function and evaluation, mainly in the military, government, and business.

True

False

Page 7 of 21

61. In the future development trend of information security, terminal detection is an important ring. Which methods are the category of terminal detection? (Multiple Choice)

Install the host anti-virus software

Monitoring the procedure equipment

Prevent users from accessing public search engines

Monitor host registry modified record

62. Write a rule with iptables that does not allow 172.16.0.0.0/16 to access this device, which rule is correct?

iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT

iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

63. Regarding the HRP standby configuration consistency check contents, which of the following is not included?

NAT strategy

Whether the heartbeat interface of the same serial number is configured

The next jump and outcoming interface of the static route

Certification strategy

64. In the USG series firewall, you can use the ______ function to provide a well-known application service for the non-knowledge port.

Port mapping

Mac and IP address binding

Packing filter

Long connection

65. What item is not included in the design principle of questionnaire surveys?

Integrity

Openness

Specificity

Consistency

66. Want to implement "anti-virus function" in the security policy, you must perform license activation.

True

False

67. The configuration command regarding the NAT address pool is as follows:

nat address-group 1

section 0 202.202.168.10 202.202.168.20

mode no-pat

Among them, the meaning of the NO-PAT parameter is:

Do not convert address

Perform port multiplexing

Do not convert the source port

Do not convert destination ports

68. On the surface, threats such as viruses, vulnerabilities, and Trojan horses are the causes of information security incidents, but at the root, information security incidents are also closely related to people and the information system itself.

True

False

69. When connecting to Wi-Fi in public places, which of the following is relatively safer?

Connect to unencrypted Wi-Fi hotspots

Connect to the paid Wi-Fi hotspot provided by the operator and only browse the Internet

Connect to unencrypted free Wi-Fi for online shopping

Connect to encrypted free Wi-Fi for online transfer operations

70. Which of the following is the action to be taken in the summary phase of cybersecurity emergency response? (Multiple Choice)

Establish a defense system and specify control measures

Evaluate the implementation of emergency plans and propose follow-up improvement plans

Judging the effectiveness of isolation measures

Evaluate the members of the emergency response organization

Page 8 of 21

71. Regarding port mirroring, which of the following descriptions are correct? (Multiple Choice)

The mirror port copies the packet to the observing port

The observation port sends the received message to the monitoring device

The mirror port sends the received message to the monitoring device

The observing port copies the packet to the mirror port

72. Which of the following options is the protocol number of GRE?

73. Which of the following descriptions of the VGMP protocol is wrong?

VGMP adds multiple VRRP backup groups on the same firewall to a management group, and the management group manages all VRRP backup groups in a unified manner

VGMP uniformly controls the switching of the status of each VRRP backup group to ensure that the status of all VRRP backup groups in the management group is consistent.

VGMP group devices in Active state will periodically send hello messages to the opposite end, and the stdandby end is only responsible for listening to hello messages and will not respond

By default, when the standby end does not receive the hello message sent by the opposite end for three hello message cycles, it will consider the opposite end to be faulty and switch itself to the Active state.

74. For data communication between the two communicating parties, if an asymmetric encryption algorithm is used for encryption, when A sends data to B, which of the following keys will be used for data encryption?

A's public key

A's private key

B's public key

B's private key

75. IPSec VPN uses an asymmetric encryption algorithm to encrypt the transmitted data.

True

False

76. Regarding GRE encapsulation and decapsulation, which of the following descriptions is wrong?

In the encapsulation process, the original data packet is sent to the Tunnel interface through the route search, and then GRE encapsulation is started.

In the encapsulation process. After encapsulation by the GRE module, the data packet will enter the IP module for further processing

In the decapsulation process. After receiving the GRE message, the destination end passes the data packet to the Tunnel interface by searching for a route, and then starts GRE decapsulation.

In the decapsulation process, after the GRE module decapsulates, the data packet will enter the IP module for further processing

77. The repair of antivirus software only needs to repair some system files that were accidentally deleted when checking and killing viruses to prevent system crashes.

True

False

78. Which of the following does not belong to the classification of cybersecurity incidents?

Major cybersecurity incidents

Special cybersecurity incidents

General cybersecurity incidents

Major cybersecurity incidents

79. Regarding single sign on, which of the following statements are correct? (Multiple Choice)

The device can identify users who have passed the authentication by the identity authentication system

There is only one deployment mode for AD domain single sign on

Although there is no need to enter the user password, the authentication server needs to interact with the user password and the device to ensure that the authentication is passed

AD domain single sign on can be synchronized to the firewall by mirroring the login data stream

80. Regarding the relationship and role of VRRP/VGMP/HRP, which of the following statements are correct? (Multiple Choice)

VRRP is responsible for sending gratuitous ARP to direct traffic to the new master device when the master device is switched.

VGMP is responsible for monitoring equipment failures and controlling the fast switching of equipment

HRP is responsible for data backup during dual-system hot backup operation

The VGMP group in the Active state may contain the VRRP group in the Standby state

Page 9 of 21

81. The administrator PC is directly connected to the management port of the USG firewall and uses the web method to perform initialization operations. Which of the following statements is correct? (Multiple Choice)

The browser of the management PC visits http://192.168.0.1

The IP address of the management PC is manually set to 192.168.0.2-192.168.0.254

The browser of the management PC visits http://192.168.1.1

Set the network card of the management PC to automatically obtain an IP address

82. In the Huawei SDSec solution, which layer of equipment does the firewall belong to?

Analysis layer

Control layer

Executive level

Monitoring layer

83. hen deploying dual-system hot backup on the firewall, in order to switch the overall state of the VRRP backup group, which of the following protocols is required?

VRRP

VGMP

HRP

OSPF

84. The user enters the correct user name and password

Which of the following is the correct process sequence?

2->5->3->1->4

2->3->5->1->4

2->1->3->5->4

2->3->1->5->4

85. Regarding the description of firewall dual-system hot backup, which of the following options are correct? (Multiple Choice)

When multiple areas on the firewall need to provide dual-system backup, multiple VRRP backup groups need to be configured on the firewall

The state of all VRRP backup groups of the same VGMP management group on the same firewall is required to be consistent

The firewall dual-system hot backup needs to synchronize the backup of the session table, MAC table, routing table and other information between the master device and the slave device

VGMP is used to ensure the consistency of all VRRP backup group switching

86. Regarding the matching conditions of the security policy, which of the following options are correct? (Multiple Choice)

The "source security zone" in the matching condition is an optional parameter

"Time period" in the matching condition is an optional parameter

"Application" in the matching condition is an optional parameter

"Service" in the matching condition is an optional parameter

87. The attacker responds to the request by sending ICMP and sets the destination address of the request packet to the broadcast address of the victim network.What kind of attack does this behavior belong to?

IP spoofing attack

Smurf attack

ICMP redirect attack

SYN flood attack

88. Communicate with each other

1-2-6-5-7-4-3-8

1-2-7-6-5-4-3-8

6-5-4-1-2-7-3-8

6-5-4-3-1-2-7-8

89. Clients in the Trust zone of the firewall can log in to the FTP server in the Untrust zone, but cannot download files. Which of the following methods can solve the problem? (Multiple Choice)

Release 21 port number between Trust and Untrust

When the FTP working mode is port mode, modify the security policy action from Trust to Untrust zone to allow

Enable detect ftp

When FTP working mode is Passive mode, modify the security policy action from Trust to Untrust zone to allow

90. Which of the following is not part of the digital certificate?

Public key

Private key

Validity period

Issuer

Page 10 of 21

91. Regarding the description of TCP/IP protocol stack packet decapsulation, which of the following is correct? (Multiple Choice)

The data message is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known based on the analysis information, such as IP

After the transport layer (TCP) receives the data message, the transport layer information is stripped after parsing, and the upper layer processing protocol is known based on the parsing information, such as UDP

After the network layer receives the data message, the network layer information is stripped after parsing, and the upper layer processing protocol is known based on the parsing information, such as HTTP

After the application layer receives the data message, the application layer information is stripped after parsing, and the final user data displayed is exactly the same as the data sent by the sender host

92. Which of the following is not a key technology of anti-virus software?

Shelling technology

Self-protection

Format the disk

Real-time update virus database

93. Which of the following options are malicious programs? (Multiple Choices)

Trojan Horse

Vulnerabilities

Worms

Viruses

94. Which of the following options are the key elements of information security protection? (Multiple Choice)

Asset management

Safe operation and maintenance and management

Security products and technologies

Personnel

95. Which of the following is not a major form of computer crime?

Plant a Trojan horse into the target host

Hacking the target host

Use a computer to conduct personal surveys

Use scanning tools to collect network information without permission

96. When deploying the IPSec VPN tunnel mode, the AH protocol is used for packet encapsulation. In the header field of the new IP packet, which of the following parameters does not require data integrity verification?

Source IP address

Destination IP address

TTL

Idetification

97. When configuring a GRE Tunnel interface, which of the following parameters does the Destination address generally refer to?

Local Tunnel interface IP address

Outbound IP address of the local external network

The external IP address of the peer

IP address of the remote tunnel interface

98. Which of the following options belong to application risks? (Multiple Choice)

Network virus

Email Security

Database system configuration security

WEB service security

99. Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc. These fields have an "and" relationship, that is, only the information in the message matches all fields It is considered that this strategy has been hit by the above.

True

False

100. Regarding the description of SSL VPN, which of the following is correct?

Can be used without a client

The IP layer can be encrypted

There is a NAT traversal problem

No authentication required

Page 11 of 21

101. Regarding the description of the four-way handshake for disconnecting the TCP connection, which of the following is wrong?

The active closing party sends the first FIN to execute the active closing, and the other party receives the FIN and the execution is closed

When the passive shutdown receives the first FIN, it will send back an ACK and randomly generate an acknowledgment sequence number.

The passive closing party needs to send an end-of-file character to the application, and the application closes its connection and causes a FIN to be sent

After the passive closing party sends FIN, the active closing party must send back a confirmation and set the confirmation sequence number to the received sequence number plus 1

102. Which of the following is not asymmetric encryption algorithm?

MD5

DSA

RSA

103. Regarding Client-Initiated VPN, which of the following statements are correct? (Multiple choice)

A tunnel is established between each access user and LNS

Each tunnel carries only one L2TP session and PPP connection

Each tunnel carries multiple L2TP sessions and PPP connections

Each tunnel carries multiple L2TP sessions and one PPP connection

104. Regarding the firewall security policy statement, which of the following options is wrong?

If the security policy is permit, the discarded packets will not accumulate the "hit times"

When configuring the security policy name, the same name cannot be used repeatedly

Adjust the order of the security policy without saving the configuration file, it will take effect immediately

The number of security policy entries of Huawei USG series firewalls cannot exceed 128

105. Which of the following options VPN technology supports to encrypt data messages? (Multiple choice)

SSL VPN

GRE VPN

IPSec VPN

L2TP VPN

106. Which of the following is the user name/password for the first login of the USG series firewall?

Username admin Password Admin@123

Username admin Password admin@123

Username admin Password admin

Username admin Password Admin123

107. In the process of using the server, there are various security threats. Which of the following options is not a server security threat?

Natural disasters

DDos attack

Hacking

Malicious program

108. Regarding Client-Initialized L2TP VPN, which of the following statements is wrong?

After remote users access the Internet, they can directly initiate an L2TP tunnel connection request to the remote LNS through the client software

The LNS device receives the user's L2TP connection request, and can verify the user based on the user name and password

LNS assigns private IP addresses to remote users

Remote users do not need to install VPN client software

109. Which of the following options is not included in the survey object targeted by the questionnaire in the safety assessment method?

Network system administrator

Security Administrator

Technical leader

110. The vulnerabilities that have not been discovered are 0 day vulnerabilities

True

False

Page 12 of 21

111. Regarding the problem that users with two-way binding in authentication-free mode cannot access network resources, which of the following options are possible reasons? (Multiple choices)

Authentication-free users and authenticated users are in the same security zone

The authentication-free user does not use a PC with the specified IP/MAC address

The authentication action in the authentication policy is set to "no account/authentication-free"

Online users have reached the maximum value

112. ASPF (Application Specific Packet Filter) is a packet filtering technology based on the application layer and implements a special security mechanism through the server-map table.

Regarding ASPF and server-map tables, which of the following are correct? (Multiple choice)

ASPF monitors the messages in the communication process

ASPF can dynamically create server-map tables

ASPF dynamically allows multi-channel protocol data to pass through the server-map table

The five-tuple server-map table entry implements a function similar to the session table

113. Which of the following are functions of address translation technology? (Multiple choice)

Address translation can enable internal network users (private IP addresses) to access the Internet

Address translation can make many hosts in the internal LAN share an IP address to surf the Internet

Address translation can handle encrypted IP headers

Address translation can shield users on the internal network and improve the security of the internal network

114. Regarding NAT address translation, which of the following statements is wrong?

Configure the NAT address pool in the source NAT technology, you can configure only one IP address in the address pool

Address conversion can provide FTP, WWW, Telnet and other services outside the local area network according to the needs of users

Some application layer protocols carry IP address information in the data, and when NAT is performed on them, the IP address information in the upper layer data must be modified

For some non-TCP, UDP protocols (such as ICMP, PPTP), NAT conversion is not possible

115. Regarding the relationship and function of VRRP/VGMP/HRP, which of the following statements is correct? (Multiple choice)

VRRP is responsible for sending gratuitous ARP to direct the traffic to the new master device when the master device is switched.

VGMP is responsible for monitoring equipment failures and controlling the fast switching of equipment

HRP is responsible for data backup during the dual-system hot backup operation

A VGMP group in the Active state may contain a VRRP group in the Standby state

116. When the firewall upgrades the signature database and virus database online through the security service center, the firewall must first be able to connect to the Internet, and secondly, the correct DNS address must be configured.

True

False

117. Which of the following is not a symmetric encryption algorithm?

DES

3DES

AES

RSA

118. The results seen through display ike sa are as follows. Which of the following statements is wrong?

IKE SA has been established

IPSec SA has been established

The neighbor address is 2.2.2.1

IKE uses the V1 version

119. Regarding the comparison between windows and linux, which of the following statements is wrong?

It is difficult for new linux users to get started, and some learning and guidance are needed.

Windows can be compatible with most software and play most games

Linux is an open source code, you can do whatever you want

Windows is open source, you can do whatever you want

120. Which of the following options belong to the core elements of the IATF (Information Assurance Technology Framework) model? (Multiple choices)

Environment

People

Technology

Operation

Page 13 of 21

121. Which of the following are multi-user operating systems? (Multiple choice)

MSDOS

UNIX

LINUX

Windows

122. The preservation of electronic evidence is directly related to the legal effect of evidence. The authenticity and reliability of the preservation in accordance with legal procedures can be guaranteed. Which of the following is not an evidence preservation technology?

Encryption technology

Digital certificate technology

Digital signature technology

Message mark tracking technology

123. When one of the following situations occurs in the VGMP group, the VGMP group will not actively send VGMP messages to the opposite end?

The dual-system hot backup function is enabled

Manually switch the firewall status between active and standby

Firewall service interface failure

Session table entry changes

124. Which of the following options can be operated in the advanced settings of the windows firewall? (Multiple choice)

Restore default values

Change notification rules

Set connection security rules

Set up inbound and outbound rules

125. Regarding the security policy configuration command, which of the following is correct?

#

security-policy

rule name rule1

source-zone trust

destination-zone untrust

source-address 10.1.0.0 0.0.255.255

service icmp

action deny

#

Prohibit ICMP packets from the trust zone to the untrust zone and the destination address is 10.1.10.10 host

Prohibit ICMP packets from all hosts that access the untrust zone from the trust zone and the destination address is the 10.1.0.0/16 network segment

Prohibit all host ICMP packets from the trust zone to the untrust zone and the source address is 10.1.0.0/16 network segment

Prohibit all host ICMP packets from the trust zone to the untrust zone and the source address is 10.2.10.10

126. In information security protection, commonly used security products include firewalls, Anti-DDos equipment, and IPS/IDS equipment

True

False

127. If the administrator uses the default default authentication domain to authenticate the user, the user only needs to enter the user name when logging in; if the administrator uses the newly created authentication domain to authenticate the user, the user needs to enter "Username@" when logging in. Certified domain name"

True

False

128. Digital certificate technology solves the problem that the owner of the public key cannot be determined in digital signature technology

True

False

129. Regarding the firewall security policy, the following items are correct?

By default, the security policy can control unicast packets and broadcast packets.

By default, the security policy can control multicast

By default, the security policy only controls unicast packets.

By default, the security policy can control unicast messages, broadcast messages and multicast messages

130. In the process of using the digital envelope, which of the following information will be encrypted? (Multiple choice)

Symmetric key

User data

Recipient's public key

Receiver's private key

Page 14 of 21

131. Which of the following options belong to the certification field of ISO27001? (Multiple choice)

Access control

Personnel safety

Vulnerability management

Business continuity management

132. Regarding the description of firewall, which of the following is correct?

The firewall cannot transparently access the network.

Adding a firewall to the network will inevitably change the topology of the network.

In order to avoid a single point of failure, the firewall only supports bypass deployment

According to different usage scenarios, the firewall can be deployed in a transparent mode or in a three-in-one mode.

133. On Huawei USG series devices, the administrator wants to erase the configuration file. Which of the following commands is correct?

clear saved-configuration

reset saved-configuration

reset current-configuration

reset running-configuration

134. For the description of buffer overflow attacks, which of the following options are correct? (Multiple choice)

Buffer overflow attacks exploit the flaws of the software system's memory operations to run attack codes with high operating privileges.

Buffer overflow attacks have nothing to do with the vulnerabilities and architecture of the operating system.

Buffer overflow attack is one of the common methods in the behavior of attacking software systems

Buffer overflow attacks are application layer attacks.

135. Security technology has different methods in different technical levels and fields. Which of the following devices can be used for network layer security protection? (Multiple choice)

Vulnerability scanning equipment

Firewall

Anti-DDoS equipment

IPS/IDS equipment

136. IPSEC VPN technology does not support NAT traversal when encapsulated with ESP security protocol, because ESP encrypts the header of the message

True

False

137. Which of the following options belong to the function of SSL VPN? (Multiple choice)

User authentication

Port scan

File sharing

WEB rewrite

138. In the digital signature process, which of the following items are mainly used for HASH algorithm to verify the integrity of data transmission?

User data

Symmetric key

Recipient's public key

Receiver's private key

139. Which of the following traffic matches the authentication policy will trigger authentication?

Access to the device or the traffic initiated by the device

DHCP, BGP, OSPF, LDP packets

Traffic of visitors accessing HTTP services

DNS packet corresponding to the first HTTP service data flow

140. Both GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ zone. If you want to realize that the area connected by GE1/0/1 can access the area connected by GE1/0/2, which of the following is correct?

Need to configure the security policy from local to DMZ

No configuration required

Need to configure inter-domain security policies

Need to configure DMZ to local security policy

Page 15 of 21

141. Using a computer to store information about criminal activities is not a method of computer crime

True

False

142. Regarding IKE SA, which of the following descriptions is wrong?

IKE SA is two-way

IKE is an application layer protocol based on UDP

IKE SA serves for IPSec SA

The encryption algorithm used in user data packets is determined by IKE SA

143. Regarding VPN, which of the following statements is wrong?

Virtual private network has lower cost than dedicated line

VPN technology must involve encryption technology

VPN technology is a technology that multiplexes logical channels on actual physical lines

The emergence of VPN technology allows employees on business trips to remotely access the internal server of the enterprise

144. Which of the following are the standard port numbers of the FTP protocol? (Multiple choice)

145. Information security grade protection is to improve the overall national security level, and at the same time to rationally optimize the allocation of security resources, so that it can return the greatest security economic benefits

True

False

146. In response to network security incidents, remote emergency response is generally taken first. If the problem cannot be solved for the customer through remote access, after the customer confirms, it will be transferred to the local emergency response process.

True

False

147. Usually we will divide servers into two categories: general servers and functional servers. Which of the following options meets this classification standard?

Divided by application level

Divided by purpose

Divided by shape

Divided by system architecture

148. NAPT technology can realize a public IP address for multiple private network hosts

True

False

149. After the firewall uses the hrp standby config enable command to enable the standby device configuration function, all the information that can be backed up can be directly configured on the standby device, and the configuration on the standby device can be synchronized to the active device

True

False

150. Which of the following options belong to the characteristics of the symmetric encryption algorithm? (Multiple choices)

Fast encryption speed

Slow confidentiality

Key distribution is not secure

High key distribution security

Page 16 of 21

151. Which of the following options are harmful to traffic-based attacks? (Multiple choices)

The network is down

Server down

Data is stolen

The webpage has been tampered with

152. Intrusion Prevention System (IPS) is a defense system that can block intrusions in real time

True

False

153. Which of the following options is not included in the consistency check of the HRP master and backup configuration?

NAT policy

Whether the heartbeat interface with the same serial number is configured

Next hop and outgoing interface of the static route

Authentication strategy

154. Regarding the NAT configuration statement, which of the following is wrong?

Configure source NAT in transparent mode, the firewall does not support easy-ip mode

The IP address in the address pool can overlap with the public IP address of the NAT server

When there are VoIP services in the network, NAT ALG is not required to be configured

The firewall does not support NAPT conversion of ESP and AH packets

155. Regarding the actions of the security policy and the description of the security configuration file, which of the following options are correct? (Multiple choice)

If the action of the security policy is "Forbidden", the device will discard this traffic, and no further content security checks will be performed.

The security configuration file can take effect without being applied to the security policy where the action is allowed

The security configuration file must be applied to the security policy where the action is allowed to take effect

If the security policy action is "allow", the traffic will not match the security profile

156. Which of the following options are included in the encryption technology to protect data during data transmission? (Multiple choice)

Confidentiality

Controllability

Integrity

Source verification

157. After a network attack occurs, set isolation areas, summarize data, and estimate losses according to the plan. Which stage of the cyber security emergency response is the above actions?

Preparation stage

Testing phase

Inhibition phase

Recovery phase

158. IPSec VPN uses an asymmetric encryption algorithm to encrypt the transmitted data

True

False

159. The digital certificate uses a third-party organization to impartiality to the public key, thereby ensuring the non-repudiation of data transmission. Therefore, only the certificate of the communicating party is required to confirm the correctness of the public key.

True

False

160. Digital signature is to generate a digital fingerprint by using a hash algorithm to ensure the integrity of data transmission

True

False

Page 17 of 21

161. Regarding the description of the firewall fragment caching function, which of the following options are correct? (Multiple choice)

By default, the firewall caches fragmented packets

After configuring the direct forwarding of fragmented packets, the firewall will forward fragmented packets that are not the first fragment of packets according to the inter-domain security policy

For fragmented packets, NAT ALG does not support the processing of SIP fragmented packets

By default, the maximum fragment cache number of an IPV4 message is 32, and the maximum fragment cache number of an IPv6 message is 255

162. The SIP protocol uses SDP messages to establish a session, and the SDP message contains a remote address or multicast address

True

False

163. Which of the following attacks is not a network attack?

IP spoofing attack

Smurf attack

MAC address spoofing attack

ICMP attack

164. What versions of the SNMP protocol are there? (Multiple choice)

SNMPv1

SNMPv2b

SNMPv2c

SNMPv3

165. Regarding the description of the preemption function managed by VGMP, which of the following is wrong?

By default, the preemption function of the VGMP management group is enabled

By default, the preemption delay time of the VGMP management group is 40s

Preemption means that when the original failed master device recovers from a failure, its priority will be restored, and you can regain its own status as the master

After the VRRP backup group is added to the VGMP management group, the original preemption function on the VRRP backup group becomes invalid

166. In the IPSec VPN transmission mode, which part of the data message is encrypted?

Network layer and upper layer data packets

Original IP header

New IP header

Transport layer and upper layer data messages

167. Regarding the windows log, which of the following descriptions is wrong?

The system log is used to record events generated by operating system components, mainly including driver, system components and application software crashes and data

The system log of windows server 2008 is stored in Application.evtx

Application log contains events recorded by applications or system programs, mainly recording events related to program operation

The security log of windows server 2008 is stored in security.evtx

168. Regarding the description of IP Spoofing, which of the following is wrong?

IP spoofing attacks are launched by using the normal IP address-based trust relationship between hosts

After an IP spoofing attack is successful, the attacker can use any forged IP address to imitate a legitimate host to access key information

The attacker needs to disguise the source IP address as a trusted host and send a data segment marked with SYN to request a connection

Hosts in a trust relationship based on IP addresses can log in directly without entering password verification

169. In the USG series firewall, which of the following commands can be used to query the NAT conversion result?

display nat translation

display firewall session table

display current nat

display firewall nat translation

170. The preservation of electronic evidence is directly related to the legal effect of evidence, and its authenticity and reliability can only be guaranteed if it conforms to legal procedures. Which of the following is not an evidence preservation technique?

Encryption technology

Digital certificate technology

Digital signature technology

Message mark tracking technology

Page 18 of 21

171. Which of the following is the status information that can be backed up by the HRP (Huawei Redundancy Protocol) protocol? (Multiple choice)

Session table

ServerMap table entries

Dynamic blacklist

Routing table

172. As shown in the figure, a TCP connection is established between client A and server B. Which of the following should be the serial number of the "?" message in the two places in the figure?

a+1:a

a:a+1

b+1:b

a+1:a+1

173. According to different usage scenarios, digital certificates can be divided into local certificates, CA certificates, root certificates and self-signed certificates, etc.

True

False

174. Which of the following are remote authentication methods? (Multiple choice)

RADIUS

Local

HWTACACS

LLDP

175. Regarding IPSec SA, which of the following statements is correct?

IPSec SA is one-way

IPSec SA is bidirectional

Used to generate encryption keys

Used to generate secret algorithms

176. Which of the following is not included in the steps of the safety assessment method?

Manual audit

Penetration testing

Questionnaire

Data analysis

177. Which item stipulates that "spam should be detected and protected at key network nodes, and the upgrade and update of the spam protection mechanism should be maintained"?

Malicious code prevention

Communication transmission

Centralized control

Border protection

178. Which of the following options does not belong to the five-tuple range?

Source IP

Source MAC

Destination IP

Destination port

179. In a stateful inspection firewall, when the stateful inspection mechanism is turned on, when the second packet (SYN+ACK) of the three-way handshake arrives at the firewall, if there is no corresponding session table on the firewall, which of the following descriptions is correct?

The firewall does not create a session table, but allows packets to pass

If the firewall security policy allows packets to pass, create a session table

Packets must not pass through the firewall

The message must pass through the firewall and establish a session

180. In the VRRP (Virtual Router Redundancy Protocol) group, the main firewall regularly sends notification messages to the backup firewall, and the backup firewall is only responsible for monitoring notification messages and will not respond

True

False

Page 19 of 21

181. Huawei USG firewall VRRP notification message is a multicast message, so each firewall in the backup group must be able to achieve direct layer 2 intercommunication

True

False

182. Because the server is a kind of computer, we can use our personal computer as a server in the enterprise.

True

False

183. As shown in the figure is an application scenario of a NAT server, when using the web configuration method for this configuration. Which of the following statements is correct? (Multiple choice)

When configuring the interzone security policy, you need to set the source security zone to Untrust and the target security zone to DMZ

When configuring NAT Server, the internal address is 10.1.1.2 and the external address is 200.10.10.1

When configuring the interzone security policy, set the source security zone to DMZ and the target security zone to Untrust

When configuring NAT Server, the internal address is 200.10.10.1 and the external address is 10.1.1.2.

184. In the configuration of L2TP, for the command Tunnel Name, which of the following statements are correct? (Multiple choice)

Used to specify the local tunnel name

Used to specify the tunnel name of the opposite end

Tunnel Nnames on both ends must be consistent

If Tunnel Name is not configured, the tunnel name is the local system name

185. Which of the following types of attacks are DDos attacks?

Snooping scan attack

Malformed message attack

Special message attack

Traffic attacks

186. In the USG system firewall, you can use which function to provide well-known application services for non-well-known ports?

Port mapping

MAC and IP address binding

Packet filtering

Long connection

187. Regarding the command to view the number of security policy matches, which of the following is correct?

display firewall sesstion table

display security-policy all

display security-policy count

count security-policy hit

188. Which of the following options belongs to the Layer 2 VPN technology?

SSL VPN

L2TP VPN

GRE VPN

IPSec VPN

189. Regarding the description of the advanced settings of the windows firewall, which of the following options are wrong? (Multiple choice)

When setting the pushstack rules, only the local port can be restricted, but the remote port cannot be restricted

When setting the pushstack rules, both the local port and the remote port can be restricted

When setting the popstack rules, only the local port can be restricted, but the remote port cannot be restricted

When setting the popstack rules, both the local port and the remote port can be restricted

190. Regarding the description of VGMP group management, which of the following is wrong?

All changes in the active/standby status of a VRRP backup group need to be notified to the VGMP management group it belongs to

The interface types and numbers of the heartbeat ports of the two firewalls can be different, as long as the Layer 2 interoperability can be ensured.

The VGMP of the active and standby firewalls periodically send hello messages

The active and standby equipment learns the status of each other through the heartbeat line exchange messages, and backs up related commands and status information.

Page 20 of 21

191. In the security assessment method, the purpose of security scanning is to use scanning analysis and assessment tools to scan the target system in order to find relevant vulnerabilities and prepare for attacks

True

False

192. Which of the following attacks is not a malformed message attack?

Teardrop attack

Smurf attack

TCP Fragmentation Attack

ICMP unreachable packet attack

193. Regarding IKE SA, which of the following descriptions is wrong?

IKE SA is two-way

IKE is an application layer protocol based on UDP

IKE SA serves for IPSec SA

The encryption algorithm used in user data packets is determined by IKE SA

194. In the construction of an information security system, a security model is needed to accurately describe the relationship between important aspects of security and system behavior

True

False

195. Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc. These fields have an "and" relationship, that is, only the information in the message and all fields If they all match, it is considered to have hit this strategy.

True

False

196. The matching principle of the security policy is: first search for the manually configured inter-domain security policy, if it does not match, then directly discard the data packet.

True

False

197. Which of the following are the response actions after the gateway anti-virus detects the mail virus? (Multiple choice)

Warning

Block

Declaration

Delete attachment

198. Digital signature is to generate a digital fingerprint by using a hash algorithm to ensure the integrity of data transmission

True

False

199. Regarding NAT address conversion, which of the following statements is wrong?

Configure the NAT address pool in the source NAT technology, you can configure only one IP address in the address pool

Address conversion can provide FTP, WWW, Telnet and other services outside the local area network according to the needs of users

Some application layer protocols carry IP address information in the data, and when NAT is performed on them, the IP address information in the upper layer data must be modified

For some TCP and UDP protocols (such as ICMP, PPTP), NAT conversion is not possible

200. When NAT Server is configured on the USG system firewall, a server-map table will be generated. Which of the following is not included in the table?

Destination IP

Destination port number

Protocol number

Source IP

Page 21 of 21

201. Which of the following options are malicious programs? (Multiple choice)

Trojan Horse

Vulnerabilities

Worms

Viruses

202. Which of the following are the main implementation methods of gateway anti-virus? (Multiple choice)

Proxy scanning method

Stream scanning method

Package inspection and killing method

File inspection and killing methods

203. Which of the following is not a hash algorithm?

MD5

SHA1

SM1

SHA2

204. Regarding the description of firewall dual-system hot backup, which of the following options are correct? (Multiple choice)

When multiple areas on the firewall need to provide dual-system backup, multiple VRRP backup groups need to be configured on the firewall

The state of all VRRP backup groups of the same VGMP management group on the same firewall is required to be consistent

The firewall dual-system hot backup needs to synchronize the backup of the session table, MAC table, routing table and other information between the master device and the slave device

VGMP is used to ensure the consistency of all VRRP backup group switching

205. Which of the following is not a file format for saving certificates supported by USG6000 series devices?

PKCS#12

DER

PEM

PKCS#

New Updated Huawei H12-711_V3.0 Exam Questions

New Updated Huawei H12-711_V3.0 Exam Questions

Share this post

Leave a Reply Cancel reply

Related Posts