H12-711 reliable braindumps - Latest Training Dumps

Huawei H12-711 Dumps – The Sure Way To Pass Exam

H12-711 Exam Questions (Updated 2022) 100% Real Question Answers

NO.57 Regarding the problem that the two-way binding user of the authentication-free method cannot access the network resources, which of the following options are possible reasons? (Multiple choice)

The authentication-free user and the authenticated user are in the same security zone.

The authentication-free user does not use the PC with the specified IP/MAC address.

The authentication action in the authentication policy is set to “No credit / free authentication”

Online users have reached a large value

NO.58 Based on the GRE encapsulation and de-encapsulation, which description is error?

Encapsulation Process: The original data packetstransmit the data packets through looking up routing to the Tunnel interface to trigger GRE encapsulation.

Encapsulation Process: After GRE module packaging, the data packet will enter the IP module for further processing

De-encapsulation Process: After the destination receives GRE packets, transmitting the data packets through looking up the routing to the Tunnel interfaces to trigger GRE encapsulation.

De-encapsulation Process: After GRE module de-encapsulation, the data packets will enter the IPmodule for further processing.

NO.59 Which of the following description is wrong about the intrusion detection system?

The intrusion detection system can dynamically collect a large amount of key information and materials through the network and computer, and can timely analyze and judge the current state of the entire system environment.

The intrusion detection system can perform blocking operation if it finds that there is a violation of the security policy or the system has traces of being attacked.

Intrusion detection system includes all hardware and software systems for intrusion detection

The flood detection system can be linked with firewalls and switches to become a powerful “helper” of the firewall, which is better and more precise to control traffic access between domains.

NO.60 Which of the following is not the scope of business of the National Internet Emergency Center?

Emergency handling of security incidents

Early warning notification of security incidents

Providing security evaluation services for government departments, enterprises and institutions

Cooperate with other agencies to provide training services

NO.61 Firewall update signature database and Virus database online through security service center, requires the firewall can connect to the Internet first, and then need to configure the correct DNS addresses.

TRUE

FALSE

NO.62 Which of the following options are supported by VPN technology to encrypt data messages? (Multiple choice)

SSL VPN

GRE VPN

IPSec VPN

L2TP VPN

NO.63 What are common hash algorithms? (Choose two.)

DES

AES

MD5

SHA-1

NO.64 When the session authentication mode is used to trigger the firewall’s built-in Portal authentication, the user does not actively perform identity authentication, advanced service access, and device push “redirect” to the authentication page.

True

False

NO.65 Use iptables to write a rule that does not allow the network segment of 172.16.0.0/16 to access the device. Which of the following rules is correct?

iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT

iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

NO.66 Digital signature is to achieve the integrity of data transmission by using a hash algorithm to generate digital fingerprints.

True

False

NO.67 When Layer 2 switches (not configured VLAN) receiving a data frame, of no match is found in the MAC address table, it will forward the data frame to all ports (including Layer 2 switches receiving port).

True

False

NO.68 The content of intrusion detection covers authorized and unauthorized intrusions. Which of the following is not in the scope of intrusion detection?

Pretending to be another user

Administrator mistakenly delete configuration

Planting worms and Trojans

Leaking data information

NO.69 Which of the following is true about the description of the TCP/IP protocol stack packet decapsulation? (Multiple choice)

The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as IP.

After the transport layer (TCP) receives the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol, such as UDP, is known according to the parsing information.

After receiving the data packet, the network layer is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such as HTTP.

After the application layer receives the data packet, the application layer information is stripped after parsing, and the user data displayed at the end is exactly the same as the data sent by the sender host.

NO.70 The preservation of electronicevidence is directly related to the legal effect of evidence, and it is in conformity with the preservation of legal procedures, and its authenticity and reliability are guaranteed. Which of the following is not an evidence preservation technique?

Encryption technology

Digital certificate technology

Digital signature technology

Packet tag tracking technology

NO.71 In the Client-Initiated VPN configuration, generally it is recommended to plan the address pool and the headquarters or need to of the network address for the different network or need to open proxy forwarding on the gateway device

True

False

NO.72 What is the nature of information security in “Implementation of security monitoring and management of information and information systems to prevent the illegal use of information and information systems”?

Confidentiality

Controllability

Non-repudiation

Integrity

NO.73 HRP (Huawei Redundancy Protocol) Protocol to backup the connection state of data include: (Multiple Choice)

TCP/UDP sessions table

Ser/er Map table

the dynamic blacklist

the routing table

NO.74 Information security levelprotection is to improve the overall national security level, while rationally optimizing the distribution of security resources, so that it can return the greatest security and economic benefits

True

False

Pass Huawei H12-711 Exam Quickly With TrainingDump: https://www.trainingdump.com/Huawei/H12-711-practice-exam-dumps.html

Tag H12-711 reliable braindumps

Huawei H12-711 Dumps – The Sure Way To Pass Exam [Q57-Q74]