Huawei Huawei Certifications HC-711-ENU Questions & Answers

• Question 191:

  IPSEC WEB configuration wizard which does not support the following scenarios?

  A. Gateway to Gateway

  B. Gateway Center

  C. Branch Gateway D. Host and Host

  Correct Answer: D

• Question 192:

  Which of the following configuration command parameter is not consistent with the actual scenario or technology implementations?

  A. ah authentication-algorithm md5

  B. ah encryption-algorithm des

  C. esp authentication-algorithm md5

  D. esp encryption-algorithm des

  Correct Answer: B

• Question 193:

  In the transmission mode IPSec applications, the following data packets which area may be subject to encryption security?

  A. The network layer and the upper layer packets

  B. Original IP packet header

  C. The new IP packet header

  D. Transport layer and upper layer packets

  Correct Answer: D

• Question 194:

  MAC address -based ACL application, which of the following description is correct?

  A. Can only be a source MAC address filtering

  B. Can only be a source MAC address and destination MAC address filtering

  C. Only data link layer protocol type, source MAC address and destination MAC address filtering

  D. Only network layer protocol type, source MAC address and destination MAC address filtering

  Correct Answer: C

• Question 195:

  VPDN tunneling protocols include: (Choose three)

  A. L2TP

  B. GRE

  C. PPTP

  D. L2F

  Correct Answer: ACD

• Question 196:

  There is VPN Client -side, LAC, LNS and other three components of the application scenario, which of the following components used between the L2TP TUNNEL? (Choose two)

  A. Between the VPN Client and LAC

  B. Between the VPN Client and LNS

  C. Between LAC and LNS

  D. All other options are correct

  Correct Answer: BC

• Question 197:

  You cannot add any interface to the firewall Local security zone, the firewall interface itself belongs to the Local security zone.

  A. True

  B. False

  Correct Answer: A

• Question 198:

  When configuring ACL need to use anti- mask, elected the following statements are true about the anti-mask option.

  A. Take anti- mask bit 0,which means that the network needs to match the corresponding bit comparison

  B. Take anti- mask bit 1,which means that the network needs to match the corresponding bit comparison

  C. Not all anti- mask value of 0

  D. Not all anti- mask value of 1

  Correct Answer: A

• Question 199:

  GRE VPN technology itself can provide which of the following techniques?

  A. Tunneling

  B. Encryption and decryption technology

  C. Flow control and QoS

  D. Key Management

  Correct Answer: A

• Question 200:

  L2TP technology, LAC client uses port number _____ _____ protocol encapsulated packets.

  A. TCP 51

  B. UDP 51

  C. UDP 1701

  D. TCP 1701

  Correct Answer: C