Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 181:

  Connection status data to be backed up by HRP functions include two of the following. (Choose two answers)

  A. ServerMap entries
  B. Port mapping table
  C. Dynamic blacklist
  D. Session entries
  A. ServerMap entries
  C. Dynamic blacklist

• Question 182:

  When the firewall is working in a hot standby load balancing networking environment, if the behavior of a router and firewall is down while working in routing mode, you need to configure the OSPF cost adjustment value based on HRP.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 183:

  Interface management information and service control information are transmitted on the same channel.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 184:

  Which of the following is the role of Message5 and Message6 with the main mode IKE negotiation process?

  A. Runs the DH algorithm
  B. negotiate set of proposals
  C. mutual authentication
  D. negotiate IPsec SA
  C. mutual authentication

• Question 185:

  An enterprise branch firewall is configured for NAT. As shown in the figure, USG_B is the NAT gateway. In order to extablish an IPSec VPN to USG_B, you need to configure what on USG_B? (Choose two answers)

  

  A. Configure a NAT Policy, citing the rule to allow the network segment's source and destination IP addresses for the ACL.
  B. Configuration the IKE peer, use name authentication, and remote-address of the interface address on USG_A.
  C. Configure a NAT Policy, where there is first a deny IPsec rule within the enterprise network to protect the data flow from within the headquarters of the network, and then permit the enterprise network to the Internet network data stream.
  D. Configure a IPSec policy template, citing the IKE peer.
  B. Configuration the IKE peer, use name authentication, and remote-address of the interface address on USG_A.
  C. Configure a NAT Policy, where there is first a deny IPsec rule within the enterprise network to protect the data flow from within the headquarters of the network, and then permit the enterprise network to the Internet network data stream.

• Question 186:

  Regarding IKEv1 and IKEv2, which of the following is not correct?

  A. IKEv2 builds a pair of IPsec SA, normally used twice to exchange four messages that can be used to establish a pair of IPsec Security Associations.
  B. IKE version 2 does not support master mode, it uses the concept of savage mode.
  C. To create the next pair of IPsec SA IKEv1 Main Mode requires only six messages.
  D. IKEv2 IPsec SA established more than a pair, each additional SA on just one exchange, that is, two messages can be completed.
  C. To create the next pair of IPsec SA IKEv1 Main Mode requires only six messages.

• Question 187:

  SSL VPN authentication is successful, and with the use of the file-sharing feature, you can view the directories and files, but you can not upload, delete, or rename files. What are possible reasons? (Choose two answers)

  A. If the file server for NFS, the user's UID and GID attribute does not allow users to upload, delete or rename the file operation.
  B. If the type of file server for SMB, the user currently logged on to the file share resource has only read permission and no write access.
  C. The SSL firewall configuration file sharing feature allows only viewing.
  D. Some TCP connections between the gateway and the virtual file server are blocked by the firewall.
  A. If the file server for NFS, the user's UID and GID attribute does not allow users to upload, delete or rename the file operation.
  B. If the type of file server for SMB, the user currently logged on to the file share resource has only read permission and no write access.

• Question 188:

  Which command can be used to set the virtual IP address of VRRP group 1 when you configure USG hot backup?

  A. vrrp vrid 1 virtual-ip ip address master
  B. vrrp virtual-ip ip address vrid 1 master
  C. vrrp virtual-ip ip address master vrid 1
  D. vrrp master virtual-ip ip address vrid 1
  A. vrrp vrid 1 virtual-ip ip address master

• Question 189:

  Tracert packet attack occurs when an attacker using TTL returned ________. ICMP timeout packets reach the destination address and return an ICMP time exceeded message back to the source IP address. An attacker may run the tracert program to detect source ip address in ICMP returned message and it can snoop structure of the network.

  B. 1
  C. 2
  D. Changes according to the actual situation
  A

• Question 190:

  In hot standby networking environment, two USG's NAT configuration is consistent. When the virtual IP address is in the address of the VRRP backup group, then NAT address pool in the same network segment. The next two figures show the NAT Server applications with a combination of VRRP ARP response situations.

  

  Which Combination of the following NAT Server configuration and VRRP shown as options are correct?

  A. Figure 1 will VRRP backup group Interface NAT address pool with connection to the Internet on the binding, in Figure 2 the VRRP backup group Interface NAT address pool with connection to the Internet on the binding.
  B. Figure 1 is not the VRRP backup group Interface NAT address pool with connection to the Internet on the binding, Figure 2 is not the VRRP backup group Interface NAT address pool with connection to the Internet on the binding.
  C. Figure 1 is not the VRRP backup group Interface NAT address pool with connection to the Internet on the binding, in Figure 2 the VRRP backup group Interface NAT address pool with connection to the Internet on the binding.
  D. Figure 1 is not the VRRP backup group Interface NAT address pool with connection to the Internet on the binding, Figure 2 is not the VRRP backup group interfaces with NAT address pool on connection to the Internet unbound.
  C. Figure 1 is not the VRRP backup group Interface NAT address pool with connection to the Internet on the binding, in Figure 2 the VRRP backup group Interface NAT address pool with connection to the Internet on the binding.