Huawei Huawei Certifications HC-711-ENU Questions & Answers

• Question 41:

  There are several IPSec protocol encapsulation mode? (Choose two)

  A. Tunnel Mode

  B. Transfer mode

  C. Master Mode

  D. Aggressive Mode

  Correct Answer: AB

• Question 42:

  After receiving the L2TP LNS packets, check if the newspaper wengong IP address is not found in the local header successfully established the link, but also to the next step L2TP packet of information processing.

  A. True

  B. False

  Correct Answer: B

• Question 43:

  SVN3000 Shared Web gateway can be accessed via IP, domain names in two ways.

  A. True

  B. False

  Correct Answer: B

• Question 44:

  SVN3000 network expansion capabilities, the need to implement a remote user can access the corporate network and local area network, and can access the Internet, the client needs to use routing as follows:

  A. Full- channel mode (Full Tunnel)

  B. Separation channel mode (Split Tunnel)

  C. Routing (route Tunnel)

  D. Manually (Manual Tunnel)

  Correct Answer: D

• Question 45:

  Firewall configured nat server global 202.106.1.1 inside 10.10.1.1, and now need to filter through the interface technology package allows users of the public network WWW server access is correcT.

  A. rule permit TCP source 202.106.1.1 0 source-port 80

  B. rule permit TCP source 10.10.1.1 0 source-port 80

  C. rule permit TCP destination 202.106.1.1 0 destination-port 80

  D. rule permit TCP destination 10.10.1.1 0 destination-port 80

  Correct Answer: D

• Question 46:

  NAT technology which has the following characteristics? (Choose two)

  A. Provide addresses for the network user to hide,there is a certain security

  B. Does not support an unlimited number of IP for network NAPT conversion

  C. For network users both inside and outside,feel the IP address of the conversion process,the entire process is transparent for the user,

  D. After you configure a bidirectional NAT, an external user can access the network resources within

  Correct Answer: AC

• Question 47:

  Which of the following key management techniques are often applied to the VPN environment?

  A. IKE

  B. Authentication

  C. IPSec

  D. PKI / CA

  Correct Answer: A

• Question 48:

  Packet filtering firewall main features include: (Choose three)

  A. With the complexity and increase the length of ACL,the firewall filtering performance exponentially decreasing trend

  B. ACL rules difficult to adapt static dynamic security filtering requirements

  C. Do not check the session state data is not analyzed,it is very easy for hackers to get away

  D. Complete control of the network to exchange information and control the session,with high security

  Correct Answer: ABC

• Question 49:

  Which of the following statements is true? (Choose two)

  A. New connections per second per second refers to establish TCP connections through the firewall,including the semi- connection

  B. Throughput refers to the maximum amount of data that can be processed simultaneously firewall,generally 1500Byte packets as a test standard

  C. Latency refers to the last bit of the packet enters the firewall to the first bit of the output firewall interval indicator

  D. Refers to the maximum number of concurrent connections Connection Firewall can accommodate the number of

  Correct Answer: CD

• Question 50:

  Local firewall security zones do not contain any interface. Ping firewall on the firewall when an interface IP address, the packet will be given to those inside the firewall module for processing, not to be forwarded. Because they belong to the same security zone, so no need to configure interzone packet filtering can communicate properly.

  A. True

  B. False

  Correct Answer: A