1. Home
  2. Huawei
  3. H12-721

Huawei H12-721 Online Practice Questions and Exam Preparation

H12-721 Exam Details

  • Exam Code
    :H12-721
  • Exam Name
    :HCIP-Security-CISN V3.0
  • Certification
    :Huawei Certifications
  • Vendor
    :Huawei
  • Total Questions
    :245 Q&As
  • Last Updated
    :Nov 05, 2023

Huawei H12-721 Online Questions & Answers

  • Question 111:

    When making hot standby switch, USG Series Firewall service port will send gratuitous ARP scene there. Which deployment mode is used? (Choose two answers)

    A. Routing Switch Mode +
    B. routing mode + router
    C. exchange mode + switch
    D. exchange mode + router

  • Question 112:

    As shown in a corporate network, where the USG_A and USG_B a hot standby configuration, USG_A based devices. Administrators want to configure SSL VPN enables branch employees can access through SSL VPN headquarters on the firewall.

    The SSL VPN virtual gateway address should be and why?

    A. 202.38.10.2/24
    B. 202.38.10.3/24
    C. 202.38.10.1/24
    D. 10.100.10.2/24

  • Question 113:

    Which of the following statements about IPsec and IKE following are correct? (Choose three answers)

    A. With IPsec there are two ways to establish the security association, manual mode (manual) and IKE auto-negotiation (Isakmp) mode.
    B. IKE aggressive mode can be selected based on negotitations initiated by the tunnel endpoint IP address or ID, to find the corresponding authentication word and finalize negotiations.
    C. The NAT traversal function is used to delete the IKE negotiation verification process for UDP port numbers, while achieving a VPN tunnel to discover the NAT gateway function. If a NAT gateway device is used, then the data transfer after the IPsec uses UDP encapsulation.
    D. IKE security mechanisms include DH Diffie-Hellman key exchange and distribution; improve the security front (Perfect Forward Secrecy PFS), encryption, and SHA1 algorithms.

  • Question 114:

    Which of the statement is correct about the Eth-trunk function? (Choose three answers)

    A. It improves communication bandwidth of the link
    B. It improves data security
    C. Traffic load balancing
    D. It improve sthe reliability of the link

  • Question 115:

    The IP-MAC address binding configuration is as follows:

    [USG] firewall mac-binding 202.169.168.1 00e0-fc00-0100

    When the data packets travel through the Huawei firewall device, and other strategies such as packet filtering, attack prevention are not considered, the following data ttravels hrough the firewall device? (Choose two answers)

    A. Packet source IP: 202.169.168.1 Packet source MAC: FFFF-FFFF-FFFF
    B. Packet source IP: 202.169.168.2 Packet source MAC: 00e0-fc00-0100
    C. Packet source IP: 202.1.1.1 Packet source MAC: 00e0-fc11-1111
    D. Packet source IP: 202.169.168.1 Packet source MAC: 00e0-fc00-0100

  • Question 116:

    About VRRP packets, which of the following statements is correct? (Choose two answers)

    A. VRRP packets using TCP
    B. VRRP packets using UDP
    C. VRRP packet destination address is 224.0.0.18
    D. VRRP packet TTL value is 255

  • Question 117:

    As shown in Figure BFDS for SPF networking scenarios:

    1.

    Run OSPF between FW_A, FW_B and FW_C. All three devices are neighbors.

    2.

    To reach FULL neighbor state, configure OSPF BFD and linkage. BFD finished creating BFD sessions. Which of the following statements are correct? (Choose two answers)

    A. When a link fails, BD first perception, FWA and FWB will soon converge
    B. Link switch toggles the seconds level
    C. FWA deal with neighbors Down event, re-route calculation, a new route for the link b
    D. When a link fails, OSPF convergence and automatic notification BD

  • Question 118:

    Comparing URPF strict mode and loose mode, which of the following statement is incorrect?

    A. Strict mode requires not only the presence of the corresponding entries in the forwarding table also called the interface but it must match in order to pass the URPF check.
    B. If using strict mode, the source address of the packet in the FIB USG does not exist, but the situation has configured a default route and doing allow-default-route, the packet will pass the URPF check for normal forwarding.
    C. Under a symmetrical environment, it is recommended to use the route URPF strict mode.
    D. Loose mode does not check whether the interface matches the source address of the packet as long as the existence of the USG's FIB table, packets can be passed.

  • Question 119:

    Virtual firewalls to forward multiple instances refers to the presence of more than one firewall routing table, supports forwarding address overlapping, are implemented in the same configuration interface, and the user can configure permissions and view all data.

    A. TRUE
    B. FALSE

  • Question 120:

    If a data stream has been established in the firewall session and you modify the data corresponding packet filtering policy, how will the firewall perform?

    A. When a new packet reaches the firewall, filtering is performed immediately according to the latest strategies and refreshes the session table
    B. Immediately perform filtering according to the latest strategy session table is not refreshed.
    C. session before aging, not to implement the new strategy, in accordance with previously established session match
    D. modification will fail to modify the need to clear the session.

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Huawei exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your H12-721 exam preparations and Huawei certification application, do not hesitate to visit our Vcedump.com to find your solutions here.