Latest Dumps for Huawei H12-711_V3.0 Exam

dumps2021-09-14T07:35:39+08:00

Huawei HCIA-Security H12-711_V3.0 exam latest dumps are available, which are the best guides for you to pass H12-711_V3.0 exam. With all of Huawei certification H12-711_V3.0 exam questions and answers, you can pass the test in the first attempt. Free Huawei H12-711_V3.0 exam dumps questions are online below.

Page 1 of 2

1. Applying for special funds for emergency response and which stage of the work of complete network emergency response do purchasing emergency response software and hardware equipment belong to?

Preparation stage

Inhibition stage

Response stage

Recovery stage

2. Equipment sabotage attacks are generally not easy to cause information leakage, but usually cause the interruption of network communication services.

True

False

3. Regarding the description of the authentication of Internet users and VPN access users, which of the following is wrong?

Internet users and VPN access users share data, and user attribute checks (user status, account expiration time, etc.) are also effective for VPN access

The process of local authentication or server authentication for online users is basically the same, both of which authenticate users through authentication domains, and the user triggering methods are also the same

After VPN users access the network, they can access the network resources of the corporate headquarters, and the firewall can control the accessible network resources based on the user’s name

After being authenticated, VPN access users will be online at the same time on the user online list

4. Which of the following descriptions about the patch is wrong?

A patch is a small program made by the original author of the software for the discovered vulnerabilities

Not applying a patch does not affect the operation of the system, so it does not matter whether it is patched or not.

Patches are generally updated continuously.

Computer users should download and install the latest patches in time to protect their systems

5. Regarding the description of the intrusion prevention system (IPS), which of the following is wrong?

The IDS device needs to be linked to the firewall to block the intrusion

IPS devices cannot be deployed in bypass mode in the network

IPS equipment can be connected in series at the network boundary and deployed online

Once the IPS device detects the intrusion, it can block it in real time

6. Regarding Huawei routers and switches, which of the following statements are correct? (Multiple choice)

Routers can implement some security functions, and some routers can implement more security functions by adding security boards

The main function of the router is to forward data. When the company has security requirements, sometimes a firewall may be a more suitable choice.

The switch has some security functions, and some switches can realize more security functions by adding a security board

The switch does not have security functions

7. Which of the following options does not belong to the log type of the windows operating system?

Business log

Application log

Security log

System log

8. After a network intrusion event occurs, according to the plan to obtain the identity of the intrusion, the source of the attack and other information, and block the intrusion behavior, which links in the PDRR network security model do the above actions belong to? (Multiple choice)

Protection link

Testing link

Response link

Recovery link

9. Regarding the vulnerability scan, which of the following is wrong?

The vulnerability is unknown in advance and discovered afterwards.

Vulnerabilities are generally patchable

Vulnerabilities are security risks, which can expose computers to hacker attacks

Vulnerabilities can be avoided

10. The visitor logs in to the AD domain, and the AD server returns a login success message to the user and delivers the login script. Which of the following is the correct order?

1-2-3-4

4-1-3-2

3-2-1-4

1-4-3-2

11. The administrator wants to create a web configuration administrator, the device web access port number is 20000, and the administrator is at the administrator level, which of the following commands is correct?

A)

Option A

Option B

Option C

Option D

12. Regarding the actions of the security policy and the description of the security configuration file, which of the following options are correct? (Multiple choice)

Prohibited If the action of the security policy is "prohibited", the device will discard this traffic, and no further content security checks will be performed

The security configuration file can take effect without being applied to the security policy where the action is allowed

The security configuration file must be applied to the security policy whose action is allowed to take effect.

If the security policy action is "Allow", the traffic will not match the security profile

13. Which of the following options belong to the same characteristics of windows system and LINUX system? (Multiple choice)

Support multitasking

Support graphical interface operation

Open-source system

Support multiple terminal platforms

14. In the process of configuring NAT, in which of the following situations, the device will generate Server-map entries? (Multiple choice)

Automatically generate server-map entries when configuring source NAT

After the NAT server is successfully configured, the device will automatically generate Server-map entries

Server-map entries will be generated when easy-ip is configured

After configuring NAT No-PAT, the device will create a server-map table for the configured multi-channel protocol data stream

15. NAT technology can realize data secure transmission by encrypting data.

True

False

16. Which of the following sequence for incident response management is correct?

1 Detection 2 Report 3 Mitigation 4 Summarize experience 5 Repair 6 Recovery 7 Response

1-3-2-7-5-6-4

1-3-2-7-6-5-4

1-2-3-7-6-5-4

1-7-3-2-6-5-4

17. Regarding L2TP VPN, which of the following is wrong?

Applicable for employees on business trips to dial-up access to the intranet

Data will not be encrypted

Can be used in conjunction with IPsec VPN

Belongs to the three-tier VPN technology

18. Encryption technology can convert readable information into unreadable information through a certain method.

True

False

19. ASPF (Application specific Packet Filter) is a packet filtering technology based on the application layer and implements a special security mechanism through the server-map table. Regarding ASPF and server-map tables, which of the following are correct? (Multiple choice)

ASPF monitors the packets in the communication process

ASPF can dynamically create server-map

ASPF dynamically allows multi-channel protocol data to pass through the server-map table

The five-tuple server-map table entry implements a function similar to the session table

20. The role of antivirus software and host firewall is the same.

True

False

Page 2 of 2

21. The process of electronic evidence collection includes: protecting the scene, obtaining evidence, preserving evidence, identifying evidence, analyzing evidence, tracking and presenting evidence.

True

False

22. When the command is executed on the firewall and the following information is displayed, which of the following descriptions is correct? (Multiple choice)

HRP_A [USG A] display vrrp interfaceGigabitEthernet 1/0/1

GigabitEthernet1/0/1 | Virtual Router 1

VRRP Group: Active

state: Active

Virtual IP: 202.38.10.1

Virtual MAC: 0000-5e00-0101

Primary IP: 202.38.10.2

PriorityRun :100

PriorityConfig:100

MasterPriority :100

bbs.hh010.com

Preempt: YES Delay Time: 10

The VGMP group status of this firewall is Active

The virtual IP address of the G1/0/1 interface of this firewall is 202.38.10.2

The priority of the VRRP backup group with VRID 1 of this firewall is 100

When the main device USG_A fails, it will not switch

23. In the USG series firewall system view, the device configuration will be restored to the default configuration after the reset saved-configuration command is executed, and it will take effect without other operations.

True

False

24. Which of the following is the difference between NAPT and No-PAT?

After No-PAT conversion, for external users, all messages come from the same IP address

No-PAT only supports protocol port conversion at the transport layer

NAPT only supports protocol address translation at the network layer

No-PAT supports protocol address translation at the network layer

25. Regarding the description of the buffer overflow attack, which of the following options are correct? (Multiple choice)

Buffer overflow attack exploits the flaws in the memory operation of the software system to run the attack code with high operating authority

Buffer overflow attacks have nothing to do with operating system vulnerabilities and architecture

Buffer overflow attack is one of the common methods in the behavior of attacking software systems

Buffer overflow attacks are application layer attacks

26. Which of the following is not the business scope of the National Internet Emergency Response Center?

Emergency handling of security incidents

Early warning and notification of security incidents

Provide security evaluation services for government departments, enterprises and institutions

Cooperate with other organizations to provide training services

27. The host firewall is mainly used to protect the host from attacks and intrusions from the network.

True

False

28. Which of the following options belong to international organizations related to information security standardization? (Multiple choice)

International Organization for Standardization （ ISO ）

International Electrotechnical Commission （ IEC ）

International Telecommunication Union （ ITU ）

Wi-Fi Alliance Wi-Fi

29. In order to obtain criminal evidence, it is necessary to master the technology of intrusion tracking. Which of the following description of the tracking technology is correct? (Multiple choices)

Data packet recording technology inserts tracking data into the tracked IP data packet, thereby marking the data packet on each router passing by

Link testing technology determines the source of the attack information by testing the network links between routers

Data packet marking technology records data packets on the router, and then uses data drilling technology to extract information about the source of the attack

Shallow mail behavior analysis can realize the analysis of sending IP address, sending time, sending frequency, number of recipients, shallow email headers and other information.

30. Which of the following data does the digital signature technology encrypt to obtain a digital signature?

User data

Recipient's public key

The sender's public key

Digital fingerprint

31. On Huawei USG series firewalls, the default security policy does not support modification.

True

False

32. In the classification of the information security level protection system, which of the following levels defines if the information system is damaged, it will damage the social order and public interests? (Multiple choice)

First level User self-protection level

Second level System audit protection level

Level 3 Security mark protection

Level 4 Structured protection

33. In the Huawei SDSec solution, which of the following is an analysis layer device?

CIS

Agile Controller

switch

Firehunter

34. Regarding the control actions permit and deny of the firewall inter-domain forwarding security policy, which of the following options are correct? (Multiple choice)

The default security policy action of the firewall is denied

After the packet matches the deny action of the inter-domain security policy, the packet is immediately discarded, and other inter-domain security policies will not continue to be executed

Even if the data packet matches the permit action of the security policy, it will not necessarily be forwarded by the firewall

No matter whether the packet is a permit action or a deny action that matches the security policy, it will be transferred to the UTM module for processing

35. Which of the following is not included in the Business Impact Analysis (BIA)?

Business priority

Incident handling priority

Impact assessment

Risk identification

36. When deploying IPSec VPN, which of the following is the main application scenario of tunnel mode?

Between host and host

Between the host and the security gateway

Between security gateways

Between host and server

37. The HRP (Huawei Redundancy Protocol) protocol is used to synchronize the key configuration and connection status of the firewall to the standby firewall. Which of the following options does not belong to the scope of synchronization?

Security strategy

NAT strategy

Blacklist

IPS signature set

38. Regarding the business continuity plan, which of the following statements is correct? (Multiple choice)

The business continuity plan does not require the participation of the company's senior management during the project scope stage

All possible accidents are thought not to be predicted, so BCP needs to be flexible

The business continuity plan does not require the participation of the company's senior management before it is formally documented

Not all safety incidents must be reported to the company's senior management

39. Common information security standards and regulations mainly include the national level protection system (GB), ____, the American standard TCSEC and the European Union standard IT SEC.

ISO 27001

40. In the classification of the information security level protection system, which of the following levels defines if the information system is damaged, it will cause damage to social order and public interests?

The third level: security mark protection

The fourth level: structured protection

The second level: system audit protection

The first level: user self-protection

Latest Dumps for Huawei H12-711_V3.0 Exam

Latest Dumps for Huawei H12-711_V3.0 Exam

Share this post

Leave a Reply Cancel reply

Related Posts