Certification Topics of H12-711_V4.0 Exam PDF Recently Updated Questions
H12-711_V4.0 Exam Prep Guide: Prep guide for the H12-711_V4.0 Exam
Huawei H12-711_V4.0 (HCIA-Security V4.0) exam is a certification exam that validates the knowledge and skills of candidates in the field of security technology. H12-711_V4.0 exam is designed to test the candidate's ability to implement and manage security solutions for small and medium-sized enterprises. H12-711_V4.0 exam covers a wide range of topics including network security, security management, firewall technology, intrusion detection and prevention, VPN technology, and security audit.
NEW QUESTION # 55
As shown, in transmission mode, which of the following locations should the AH header be inserted in?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 56
For which of the following parameters can the packet filtering firewall filter?
- A. IP address of the port source destination
- B. Port packet payload
- C. Port number and protocol number of the port source
- D. The MAC address of the source destination
Answer: A,C
NEW QUESTION # 57
Which of the following attack methods is to construct special SQL statements and submit sensitive information to exploit program vulnerabilities
- A. SQL injection attacks
- B. Phishing attacks
- C. Worm attack
- D. Buffer overflow attack
Answer: A
NEW QUESTION # 58
Which of the following is not an encryption algorithm in a VPN?
- A. The RIP
- B. 3DES
- C. AES
- D. DES
Answer: A
NEW QUESTION # 59
The following description of asymmetric encryption algorithms, which item is wrong?
- A. Compared with symmetric encryption algorithms, the security factor is higher.
- B. Asymmetric encryption algorithms are a pair of keys, divided into public and private keys.
- C. Encryption is faster than symmetric encryption algorithms.
- D. Public keys are generally disclosed to users.
Answer: C
NEW QUESTION # 60
The initial priority of the USG9500VGMP group is related to which of the following factors ( )? *
- A. Number of daughter cards on the interface board
- B. VRRP priority
- C. The number of CPUs on the D service board
- D. interface bandwidth
Answer: A,C
NEW QUESTION # 61
Please order the following steps in the PKI life cycle correctly, 1. Issued, 2. storage, 3. Update, 4. verify[fill in the blank]*
- A. 0
- B. 1
Answer: B
NEW QUESTION # 62
Huawei Firewall only supports the inter-domain persistent connection function for TCP packets.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION # 63
In cases where some configurations alter existing session table entries and want them to take effect immediately, you can regenerate the session table by clearing the session table information. All session table information can be cleared by executing the _____firewall session table command.
- A. reset
- B. set
Answer: A
NEW QUESTION # 64
What type of ACL does ACL number 3001 correspond to?
- A. Basic ACL
- B. Layer 2 ACL
- C. interface ACL
- D. Advanced ACLs
Answer: D
NEW QUESTION # 65
IPSec VPN uses an asymmetric algorithm to calculate the ___ key to encrypt data packets.[fill in the blank]
- A. TRUE
- B. symmetry
Answer: B
NEW QUESTION # 66
Drag the warning level of the network security emergency response on the left into the box on the right, and arrange it from top to bottom in order of severity.[fill in the blank]*
- A. 0
- B. 1
Answer: A
NEW QUESTION # 67
WAF can accurately control and manage users' online behavior and user traffic.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 68
The trigger modes of the built-in Portal authentication in the firewall include pre-authentication and ____ authentication[fill in the blank]*
- A. session
- B. Portal
Answer: A
NEW QUESTION # 69
Using the ___ method of the Web proxy, the virtual gateway will encrypt the real URL that the user wants to access, and can adapt to different terminal types.[fill in the blank]*
- A. reb rewrite
- B. web rewrite
Answer: B
NEW QUESTION # 70
What is correct in the following description of Security Alliance in IPSec?
There are two ways to set up an IPSec SA
- A. IPSec SA is a one-way logical connection, usually established in pairs (Inbound and Outbound).
- B. Security Alliance SA is a communication peer agreement for certain elements that describes how peers can communicate securely using secure services such as encryption.
- C. manual and IKE.
IPSec SA is uniquely identified by a triple.
Answer: A,B,C
NEW QUESTION # 71
Which of the following types of malicious code on your computer includes?
- A. Oral virus
- B. Trojan horses
- C. Oral spyware
- D. Port SQL injection
Answer: A,B,C,D
NEW QUESTION # 72
Which of the following descriptions about the main implementation of single sign-on is wrong? ( )[Multiple choice]*
- A. Firewall monitors AD authentication packets
- B. Query the syslog server mode
- C. Accept PC message mode
- D. Query the AD server security log mode
Answer: B
NEW QUESTION # 73
IP packets using the AH+ESP protocol? ( )[Multiple choice]*
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 74
......
2024 New Preparation Guide of Huawei H12-711_V4.0 Exam: https://www.testpassed.com/H12-711_V4.0-still-valid-exam.html
H12-711_V4.0 Practice Exam - 94 Unique Questions: https://drive.google.com/open?id=1C-BAndgz7N5M8Ft_BqkwHqGFapokymxV