H12-711-ENU試験無料問題集（290題）「Huawei HCIA-Security V3.0 認定」

出題：1

When configuring a GRE tunnel interface, the destination address generally refers to which of the following parameters?

A. Local end network export IP address

B. IP address of the peer tunnel interface

C. Local tunnel interface IP address

D. Peer external network export IP address

正解：D 解答を投票する

出題：2

Which of the following description of firewall hot standby is correct? (Multiple choice)

A. When multiple areas of the firewall need to provide dual-system backup, you need to configure multiple VRRP backup groups on the firewall.

B. The hot standby of the firewall needs to synchronize the backup between the master device and the slave device by using the session table, MAC table, and routing table.

C. VGMP is to ensure the consistency of all VRRP backup group switching.

D. The status of all VRRP backup groups in the same VGMP management group on the same firewall is the same.

正解：A,C,D 解答を投票する

出題：3

Which of the following options is the correct sequence of the four phases of the Information Security Management System (ISMS)?

A. Check->Plan->Do->Action

B. Plan->Check->Action->Do

C. Plan->Do->Check->Action

D. Plan->Check->Do->Action

正解：C 解答を投票する

出題：4

Apply for emergency response special funds, which stage work content does procurement emergency response software and hardware equipment belong to in the network full emergency response?

A. Response phase

B. Recovery phase

C. Inhibition phase

D. Preparation stage

正解：D 解答を投票する

出題：5

Which of the following options are supported by VPN technology to encrypt data messages? (Multiple choice)

A. L2TP VPN

B. SSL VPN

C. IPSec VPN

D. GRE VPN

正解：B,C 解答を投票する

出題：6

When establishing their own information systems, companies check each operation according to internationally established authoritative standards and can check whether their information systems are safe.

A. True

B. False

正解：A 解答を投票する

出題：7

Intrusion prevention system technical characteristics include (Multiple choice)

A. real-time blocking

B. online mode

C. self-learning and adaptive

D. straight road deployment

正解：A,B,C 解答を投票する

出題：8

Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the standard of evidence identification?

A. Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to a certain extent, the court should determine that it is relevant.

B. Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.

C. Fairness standard refers to the evidence obtained by the legal subject through legal means, which has the evidence ability.

D. Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated.

正解：A 解答を投票する

出題：9

Which of the following are correct about configuring the firewall security zone? (Multiple Choice)

A. When data flows between different security zones, the device security check is triggered and the corresponding security policy is implemented.

B. The firewall can create two security zones of the same priority

C. Firewall can have 12 security zones at most.

D. The firewall has four security zones by default, and the four security zone priorities do not support modification.

正解：A,D 解答を投票する

出題：10

When configuring security policy, a security policy can reference an address set or configure multiple destination IP addresses.

A. True

B. False

正解：A 解答を投票する

出題：11

IPSec VPN technology does not support NAT traversal when encapsulating with ESP security protocol, because ESP encrypts the packet header.

A. True

B. False

正解：B 解答を投票する

出題：12

Regarding the AH and ESP security protocols, which of the following options is correct? (Multiple Choice)

A. AH can provide encryption and verification functions

B. The agreement number of AH is 51.

C. ESP can provide encryption and verification functions

D. The agreement number of ESP is 51.

正解：B,C 解答を投票する

出題：13

Against Buffer overflow attacks, which description is correct? (Multiple choice)

A. buffer overflow attack belongs to the application layer attack behavior

B. Buffer overflow attack is use of the software system on memory operating defects, by using high operating permission to run attack code

C. buffer overflow attack is the most common method of attack software system's behaviors

D. Buffer overflow attack has nothing to do with operating system's vulnerabilities and architecture

正解：A,B,C 解答を投票する

出題：14

After the firewall uses the hrp standby config enable command to enable the standby device configuration function, all the information that can be backed up can be directly configured on the standby device, and the configuration on the standby device can be synchronized to the active device.

A. True

B. False

正解：A 解答を投票する

出題：15

Regarding SSL VPN technology, which of the following options is wrong?

A. SSL VPN requires a dial-up client

B. SSL VPN technology extends the network scope of the enterprise

C. SSL VPN technology can be perfectly applied to NAT traversal scenarios

D. SSL VPN technology encryption only takes effect on the application layer

正解：A 解答を投票する

出題：16

Which of the following are international organizations related to information security standardization? (Multiple Choice)

A. International Organization for Standardization (ISO)

B. International Electrotechnical Commission (IEC)

C. Wi-Fi Alliance

D. International Telecommunication Union (ITU)

正解：A,B,D 解答を投票する

出題：17

In order to obtain evidence of crime, it is necessary to master the technology of intrusion tracking. Which of the following descriptions are correct about the tracking technology? (Multiple Choice)

A. Packet Recording Technology marks packets on each router that has been spoken by inserting trace data into the tracked IP packets.

B. Link detection technology determines the source of the attack by testing the network connection between the routers.

C. Analysis of shallow mail behavior can analyze the information such as sending IP address, sending time, sending frequency, number of recipients, shallow email headers, etc.

D. Packet tagging technology extracts information from attack sources by recording packets on the router and then using data drilling techniques

正解：A,B,C 解答を投票する

出題：18

Which of the following options is not the part of the quintet?

A. Source IP

B. Destination IP

C. Destination Port

D. Source MAC

正解：D 解答を投票する

H12-711-ENU試験無料問題集「Huawei HCIA-Security V3.0 認定」