Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 121:

  Regarding IKE main mode and aggressive modes, which of the following statements is correct?

  A. In savage mode with the the first phase of negotiation, all packets are encrypted
  B. All main mode packts under the first phase of negotiation are encrypted
  C. The DH algorithm is used in aggressive mode
  D. Whether the negotiation is successful or not, IKE will enter into fast mode
  C. The DH algorithm is used in aggressive mode

• Question 122:

  In the Huawei abnormal flow cleaning solution, deployed at the scene of a bypass, the re- injection scheme can be used to have which of the following? (Choose three answers)

  A. routing strategy
  B. MPLS VPN tunnel mode
  C. routing
  D. Layer 2 VPN mode
  A. routing strategy
  B. MPLS VPN tunnel mode
  C. routing

• Question 123:

  USG5000A has an IPSEC connection to USG5000B and the "display ike sa" command was performed on USG5000A:

  

  Based on the output shown, which of the following is correct?

  A. USG5000A Firewall is a secure channel initiator IKE negotiation
  B. USG5000B is the initiator of IKE negotiation of safe passage
  C. The SA has been successfully established between the firewalls
  D. The SA has not been established between the firewalls successfully.
  A. USG5000A Firewall is a secure channel initiator IKE negotiation
  C. The SA has been successfully established between the firewalls

• Question 124:

  The picture below shows that the IKE V1 first stage pre-shared key mode. Which of the following statement is correct?

  

  A. D-H exchange public values and various auxiliary data
  B. SA recommended strategy
  C. Authentication
  D. encryption transformation strategy
  A. D-H exchange public values and various auxiliary data

• Question 125:

  The USG series product dual-system hot backup does not involve the ______ protocol.

  A. HRP
  B. VRRP
  C. VGMP
  D. IGMP
  D. IGMP

• Question 126:

  The IKE first stage main mode negotiation process includes the following information? (Choose three answers)

  A. IKE proposal set
  B. IPsec proposal set
  C. DH key exchange public information
  D. Both sides identity
  A. IKE proposal set
  C. DH key exchange public information
  D. Both sides identity

• Question 127:

  As shown in Figure Eth-Trunk functionality with binding, if the need is to implement each interface-by-packet load balancing feature, you need to run which of the following configuration commands?

  

  A. [USG] load-balance interface eth-trunk 1 packet-all
  B. [USG] interface eth-trunk 1 [USG-Eth-Trunk 1] load-balance packet-all
  C. [USG] load-balance interface eth-trunk 1 src-dst-ip
  D. [USG] interface eth-trunk 1 [USG-Eth-Trunk 1] load-balance src-dst-ip
  B. [USG] interface eth-trunk 1 [USG-Eth-Trunk 1] load-balance packet-all

• Question 128:

  On the IP-MAC address binding, when both IP and MAC packets that match, it will go to the next processing firewall whereas the packet is discarded if IP and MAC does not match.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 129:

  Dual hot standby, when the client does not receive packets sent by slave, after how many HRP HELLO packets, HRP would think that peer has failed or is dead.

  A. 1
  B. 2
  C. 3
  D. 5
  C. 3

• Question 130:

  HWTACACS encrypts only part of the password, but with RADIUS the entire packet is encrypted.

  A. TRUE
  B. FALSE
  B. FALSE