1. Home
  2. Huawei
  3. HC-711-ENU

HCNA Huawei Certified Network Associate - Constructing Basic Security Network (HCNA-CBSN) - ENU

Exam Details

  • Exam Code
    :HC-711-ENU
  • Exam Name
    :HCNA Huawei Certified Network Associate - Constructing Basic Security Network (HCNA-CBSN) - ENU
  • Certification
    :Huawei Certifications
  • Vendor
    :Huawei
  • Total Questions
    :363 Q&As
  • Last Updated
    :Jul 16, 2025

Huawei Huawei Certifications HC-711-ENU Questions & Answers

  • Question 61:

    IPSec AH + ESP used to establish an IPSec tunnel mode, will create several IPSec SA?

    A. 2

    B. 3

    C. 4

    D. 1

  • Question 62:

    Microsoft patch does not include what level?

    A. Key

    B. Serious

    C. Important

    D. Medium

  • Question 63:

    Following on the firewall access control lists, statements is correct? (Choose three)

    A. Basic Access Control Lists can be filtered for the source and destination IP address

    B. Advanced Access Control Lists can be filtered for agreement

    C. You can filter on the data link layer protocol header type field in the MAC -based access control list

    D. The hardware packet filtering ACL,you can dimension source MAC address, destination MAC address, protocol,etc. to match traffic

  • Question 64:

    L2TP user authentication statement is correct:

    A. In the LAC can authenticate the user

    B. The LNS can authenticate the user

    C. After LAC authenticates the user,LNS can authenticate the user again

    D. All other options are on the argument

  • Question 65:

    L2TP protocol registered ports are:

    A. TCP 1701

    B. TCP 1710

    C. UDP 1701

    D. UDP 1702

  • Question 66:

    When renting leased line to connect two ISP firewall port to use by SA, two firewalls are DTE devices, clocks are set to slave.

    A. True

    B. False

  • Question 67:

    In most scenarios, NAT Inbound refers to the use of an Internet address instead of the internal LAN address, his role is used to hide the actual IP address of the Internet server.

    A. True

    B. False

  • Question 68:

    Security Alliance (SA) is the basis of IPSec is agreement between the communicating peers on certain safety elements.

    A. True

    B. False

  • Question 69:

    LAC device via L2TP users to understand what information is requested to initiate a tunnel which LNS?

    A. Source IP address

    B. Destination IP address

    C. The source IP address and destination IP address

    D. Username + Password

  • Question 70:

    IPSec by AH (Authentication Header) and ESP (Encapsulating Security Payload) protocol to achieve these two private security, integrity, authenticity, and anti-replay, and also through IKE (Internet Key Exchange) provides auto-negotiation exchanged for IPSec key to establish and maintain security alliance services to simplify the use and management of IPSec.

    A. True

    B. False

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Huawei exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your HC-711-ENU exam preparations and Huawei certification application, do not hesitate to visit our Vcedump.com to find your solutions here.