Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 141:

  Regarding the Radius authentication process, refer to the following steps:

  1.

  Network device Radius client (network access server) receives the user name and password, and sends an authentication request to the Radius server.

  2.

  When a user logs into the USG access servers and other network devices, the user name and password will be sent to the network access server.

  3.

  After the Radius server receives a valid request to complete the request and the required user authorization information is sent back to the client. Which of the following is a correct sequence?

  A. 1-2-3
  B. 2-1-3
  C. 3-2-1
  D. 2-3-1
  B. 2-1-3

• Question 142:

  When an attack occurs, the attacked host (1.1.129.32) was able to capture many packets as shown. Based on the information shown, what kind of attack is this?

  

  A. Smurf attack
  B. Land Attack
  C. WinNuke
  D. Ping of Death attack
  B. Land Attack

• Question 143:

  Which of the following protocol packets can not be sent by default in an IPsec tunnel?

  A. TCP
  B. UDP
  C. ICMP
  D. IGMP
  D. IGMP

• Question 144:

  HTTP Flood attacks refer indirectly to the target server to initiate a large number of HTTP packets to burden the server so that it can not respond to normal requests. Through the interface rate limit function, HTTP flood attacks can be prevented.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 145:

  No need to use deny rules because of the policy limiting strategy for deny rules without restrictions.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 146:

  Certain users want to limit the maximum bandwidth for network 192.168.1.0/24 500M, and limit the need for all IP addresses network segment to get 1M bandwidth. How should you configure limiting policy to meet this demand?

  A. Configure limiting each IP, set for 192.168.1.0 /24 the maximum bandwidth of network hosts to 500M
  B. Configure the overall limit, limit the maximum bandwidth of the network 192.168.1.0/24 to 1M
  C. Configure overall limiting, limiting the maximum bandwidth of the network 192.168.1.0/24 to 500M
  D. By limiting the overall configuration, the maximum limit 192.168.1.0/24 network bandwidth to 500M, and then limiting the use of IP to ensure that each server bandwidth is 1M
  D. By limiting the overall configuration, the maximum limit 192.168.1.0/24 network bandwidth to 500M, and then limiting the use of IP to ensure that each server bandwidth is 1M

• Question 147:

  Limiting policies can limit which of the following objects? (Choose two answers)

  A. IP connection limit
  B. IP bandwidth limit
  C. PZP protocol data flow restrictions
  D. IM protocol data flow restrictions
  A. IP connection limit
  B. IP bandwidth limit

• Question 148:

  In Defense gate FIN / RST Flood attack method, conversation is checked. The workflow is that when the door FIN / RST packet rate exceeds the threshold; it discards packets, and then starts the conversation check.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 149:

  ACK Flood attacks exploit payload inspection defense. The principle is to clean equipment for ACK packet payload to check if the contents of the full load are consistent (as are all a load of content, etc.), the packet is discarded.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 150:

  With the Huawei Anti-DDoS equipment first packet discard technology, the defense is constantly changing the source IP address or source port number of attack packets. Regarding the first packet discard technology, which of the following is not correct?

  A. UDP protocol does not have retransmission mechanism, so you can not use the first packet discard techniques
  B. The first packet discarding used in conjunction with source authentication, prevents false source of attacks.
  C. Based triples (source IP address, source port, and protocol) to match packets and packets by time interval to determine the first packet
  D. The packet transmission interval is less than the lower limit of the first packet detection rate, or the rate is higher than the upper limit of the first packet inspection packets believed to be the first package.
  A. UDP protocol does not have retransmission mechanism, so you can not use the first packet discard techniques