Huawei Huawei Certifications HC-711-ENU Questions & Answers

• Question 321:

  When you configure ipsec, ike local-name for the command statement is correct? (Choose two)

  A. When using aggressive mode,when the name of the authentication,you need to configure the local name

  B. Use main mode when you need to configure the local name

  C. The local name must be on the side of the remote-name consistent configuration

  D. Local name must configure remote-name local consistency

  Correct Answer: AC

• Question 322:

  Address range rule permit ip source 192.168.11.32 0.0.0.31 represents the?

  A. 192.168.11.0-192.168.11.255

  B. 192.168.11.32-192.168.11.63

  C. 192.168.11.31-192.168.11.64

  D. 192.168.11.32-192.168.11.64

  Correct Answer: B

• Question 323:

  The following statement about the NAT address translation Which is correct: (Choose three)

  A. NAT technology can effectively hide the hosts on the LAN,is an effective network security technology.

  B. NAT can follow the user's needs, providing FTP, WWW, Telnet and other services outside the LAN.

  C. Some application layer protocols carry IP address information in the data,but also to modify the data in the upper IP address information when they make NAT.

  D. For some non- TCP, UDP protocol(such as ICMP, PPTP), NATcannotdo the conversion.

  Correct Answer: ABC

• Question 324:

  Common symmetric encryption algorithms are there? (Choose three)

  A. DES

  B. 3DES

  C. AES

  D. MD5

  Correct Answer: ABC

• Question 325:

  Which of the following ways L2TP VPN, the tunnel is established between the client and the LNS Client -side?

  A. Client-Initialized L2TP way

  B. NAS-Initialized L2TP way

  C. Unsolicited L2TP

  D. VPDN

  Correct Answer: A

• Question 326:

  VPN for mobile users have access? (Choose two)

  A. GRE

  B. L2TP

  C. MPLS

  D. L2TP + IPSec

  Correct Answer: BD

• Question 327:

  USG (Eudemon) firewall nat configuration is as follows: # nat address-group 1 10.1.1.5 10.1.1.10 nat server 1 protocol tcp global 1.1.1.1 ftp inside 10.1.1.2 ftp # nat-policy interzone dmz untrust inbound policy 0 action source-nat policy destination 1.1.1.1 0 address-group 1 #

  The following statement is correct that:

  A. NAT outbound configuration,network users to access the external network into an address in the address pool 10.1.1.5 10.1.1.10

  B. untrust host access nat server 1.1.1.1, destination address into 10.1.1.2, the original address unchanged

  C. Built- domain nat,DMZ host access nat server 1.1.1.1, destination address into 10.1.1.2, the source address into the address pool 1

  D. NAT inbound configuration,untrust host access nat server 1.1.1.1, destination address into 10.1.1.2, the source address into the address pool 1

  Correct Answer: D

• Question 328:

  Packet filtering firewall does not check the session state data content analysis, safety cannot be adequately protected.

  A. True

  B. False

  Correct Answer: A

• Question 329:

  Asymmetric encryption algorithm strength stronger than symmetric algorithms, asymmetric algorithms because the longer the key length.

  A. True

  B. False

  Correct Answer: B

• Question 330:

  SVN3000 virtual gateway, which can be accessed using the IP address, and can be accessed using the domain name which of the following types?

  A. Exclusive type

  B. Share -based

  C. Fixed

  D. Manual type

  Correct Answer: A