Huawei HCIA-Security H12-711 Questions & Answers

• Question 1:

  Proxy Firewall role in the transport layer of the network,its essence is the business directly between the internal network and external network users by the proxy firewall takes over.

  A. True

  B. False

  Correct Answer: B

• Question 2:

  GRE's featuresinclude:(Choose three)

  A. Simple mechanism

  B. CPU load on both ends of the small tunnel

  C. Encrypt data

  D. Does not provide traffic control and QoS.

  Correct Answer: ABD

• Question 3:

  When configuring L2TP group,which of the following commands can be described l2tp- group 1 is the default L2TP group?

  A. allow l2tp virtual-template 1 remote Client01

  B. allow l2tp virtual-template 1 remote default

  C. allow l2tp virtual-template 1

  D. allow l2tp virtual-template 1 default

  Correct Answer: C

• Question 4:

  TSM system support and Duba Online version 5.0,KV2010 Jiangmin and Rising Online antivirus software,such as the strong linkage.

  A. True

  B. False

  Correct Answer: B

• Question 5:

  The following area is not about TSM is?

  A. Pre-authentication domain is the area by the client before authentication can be accessed

  B. After authentication domain is the area the client can access through the security certification

  C. Isolated domain refers to the area by the client access authentication must

  D. Isolated domain is required for access to the area when the client security authentication failure

  Correct Answer: C

• Question 6:

  TSM supports access control which of the following?(Choose three)

  A. Hardware SACG(Hardware Security Access Control Gateway)

  B. 802.1X

  C. Software SACG(host firewall)

  D. ARP control

  Correct Answer: ABC

• Question 7:

  eLog log management system products using the B / S architecture supports centralized,distributed deployment,diverse log acquisition mode,provides the industry's most extensive device support.

  A. True

  B. False

  Correct Answer: A

• Question 8:

  After a successful L2TP user authentication,IP address obtained is wrong to say :

  A. User address allocation has been assigned an IP address bound and dynamically assigned IP addresses from the address pool in two ways

  B. L2TP user-assigned IP address can be any address

  C. L2TP user-assigned IP address and the address of the network to be accessed in the same network segment

  D. Address assignment plan well in advance to avoid address conflicts exist

  Correct Answer: B

• Question 9:

  Which of the following statements is correct?

  A. Ability to International Organization for Standardization definition of " security" is a way to identify and mitigate insecurity

  B. Security is to find a balance between confidentiality and integrity

  C. A high level of security technologies and policies can make the device or network without any risk

  D. Information security is a subset of network security is a comprehensive and continuous technology

  Correct Answer: A

• Question 10:

  About L2TP VPN configuration statement is correct:(Choose three)

  A. The LNS L2TP client must configure the IP address of the virtual interface template,and the virtual interface template need to join the security domain

  B. Firewall policies in order to ensure the normal dial-up users log on,you must configure the firewall to receive L2TP tunnel packets security zone where the physical interface between the regions and the Local

  C. Dial-up users need access to internal network resources, you must configure the firewall policy template region corresponding virtual interface and internal security network located between areas where security

  D. If a virtual template interface is added to a safe area,you can directly delete the security zone.

  Correct Answer: ABC