Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 151:

  According to the network diagram regarding hot standby, which of the following are correct? (Choose three answers)

  

  A. VRRP backup group itself has preemption. As shown, when USG_A failurs and is restored, USG_A re-use preemption becomes it has master status.
  B. With VGMP management group preemption and VRRP backup groups, when the management group fails and recovers, the priority management group will also be restored.
  C. By default, the preemption delay is 0.
  D. If a VRRP group is added to the VGMP management group, preemption will fail. The VGMP unified management group decides this behavior.
  A. VRRP backup group itself has preemption. As shown, when USG_A failurs and is restored, USG_A re-use preemption becomes it has master status.
  B. With VGMP management group preemption and VRRP backup groups, when the management group fails and recovers, the priority management group will also be restored.
  D. If a VRRP group is added to the VGMP management group, preemption will fail. The VGMP unified management group decides this behavior.

• Question 152:

  In the dual hot standby network diagram shown below, figure PC1 gateway address should be the IP address of the main contact with the device, namely 10.100.10.2/24.

  

  A. TRUE
  B. FALSE
  B. FALSE

• Question 153:

  Below displays the IKE V1 first stage pre-shared key mode during the main mode packet switching crawl. Based on the information shown, the crawl occurs under which packet?

  

  A. IKE first or second Message
  B. IKE third or fourth Message
  C. IKE fifth or sixth Message
  D. IKE seventh or eighth Message
  A. IKE first or second Message

• Question 154:

  The main method of caching servers DNS Request Flood defense is the use of DNS source authentication.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 155:

  What are the three elements of abnormal flow cleaning solution? (Choose three answers)

  A. Cleaning Center
  B. Testing Center
  C. Management Center
  D. Acquisition Center
  A. Cleaning Center
  B. Testing Center
  C. Management Center

• Question 156:

  USG two ways to build a firewall to Site IPsec VPN through the Site, when viewing a USGA state as follows: display ipsec statistics the security packet statistics: input / output security packets: 4/0 input / output security bytes: 400/0 input / output dropped security packets: 0/0 After viewing the state above, what information do you get? (Choose two answers)

  A. USGA encrypted data packets 4; USGA decrypt the packet is set 0.
  B. USGA has decrypted packet is 4, USGA already encrypted data packet is 0.
  C. Site A network device, there is no route, leading to the protection of the data may not be sent to the USGA.
  D. IPsec tunnel is not established.
  B. USGA has decrypted packet is 4, USGA already encrypted data packet is 0.
  C. Site A network device, there is no route, leading to the protection of the data may not be sent to the USGA.

• Question 157:

  In the dual-system hot backup networking environment as shown in the standby firewall also need to configure NAT function, assuming that the external address of the VRRP backup group. NAT address pool and NAT Server in the same network segment. Which of the following configuration needs to be on the Server? (choose two answers)

  

  A. HRP_M [USG_A] nat address-group 1 2.2.2.5 2.2.2.6 vrrp 1
  B. HRP_M [USG_A] nat address-group 1 2.2.2.5 2.2.2.6 vrrp 2
  C. HRP_M [USG_A] nat server global 2.2.2.10 inside 10.100.10.3 vrrp 2
  D. HRP_M [USG_A] nat server global 2.2.2.10 inside 10.100.10.3 vrrp 1
  B. HRP_M [USG_A] nat address-group 1 2.2.2.5 2.2.2.6 vrrp 2
  C. HRP_M [USG_A] nat server global 2.2.2.10 inside 10.100.10.3 vrrp 2

• Question 158:

  In a Firewall device through the source legality verification technology that defends SYN Flood attacks, the device receives a SYN packet, sending SYN-ASK probe packet and SYN packets to the source IP address of the host. If the host is real, which message will it send?

  A. RST packets
  B. FIN packets
  C. ACK packet
  D. SYN packets
  A. RST packets

• Question 159:

  A user logs into the Virtual Gateway Web Page but receives a "can not display the webpage" message. What are possible causes for this? (Choose two answers)

  A. Virtual Gateway Router unreachable from user PC.
  B. Virtual Gateway IP address has been changed.
  C. Using a Shared Web Gateway
  D. Client browser set up a proxy server.
  A. Virtual Gateway Router unreachable from user PC.
  B. Virtual Gateway IP address has been changed.

• Question 160:

  In a Link-group with three physical interfaces, when either one of the interfaces fail, which of the following descriptions of what happens is correct? (Choose two answers)

  A. With any interface failure within the group, the system will set the other interface state to Down.
  B. When any interface group fails, the other interface status within the group does not change.
  C. When the group returned to normal with one of the interfaces up, the interface status within the entire group will be re-set to Up.
  D. When the group returns to normal after all the interfaces are up, the interface status within the entire group was re-set to Up.
  A. With any interface failure within the group, the system will set the other interface state to Down.
  D. When the group returns to normal after all the interfaces are up, the interface status within the entire group was re-set to Up.