Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 191:

  An administrator using the following command to view the state of device components

  

  Slot3 board is status abnormal, what are the possible causes? (Choose three answers)

  A. The device does not support this interface cards.
  B. The Interface Card is damaged.
  C. The backplane or damaged pins on the motherboard, such as incorrect installation lead pin board tilt.
  D. The ADSL phone line is faulty.
  A. The device does not support this interface cards.
  B. The Interface Card is damaged.
  C. The backplane or damaged pins on the motherboard, such as incorrect installation lead pin board tilt.

• Question 192:

  Refer to the following NIP firewall intrusion detection actions: 1 records the invasion process, alarm logging

  2. NIP attack detection 3 reconfigure the firewall 4 Termination invasion Which of the following is the correct sequence of events?

  A. 1 -> 2 -> 3 -> 4
  B. 2 -> 1 -> 3 -> 4
  C. 3 -> 1 -> 2 -> 4
  D. 1 -> 2 -> 4 -> 3
  B. 2 -> 1 -> 3 -> 4

• Question 193:

  With Blacklist, which part of the packets are examined to determine there is an attack?

  A. The source address
  B. destination address
  C. Source Port
  D. destination port
  A. The source address

• Question 194:

  Corporate network administrator for a large data flow, when the USG is out of memory or CPU processing capacity limit is reached, in order to ensure that forwards packets do not carry a threat, USG dropped over the device throughput traffic.

  Which of the following commands can achieve this kind of functionality?

  A. utm bypass enable
  B. undo utm bypass enable
  C. ips bypass enable
  D. undo ips bypass enable
  B. undo utm bypass enable

• Question 195:

  A USG standby scenario is shown in Figure. The service interface works in three steps, down the line connecting the router through an administrator to view, USG_A status is H RP_M [USG A], USG_B state HRP_S [USG_B ], but all the traffic is not completely passing through USG_A, half of the traffic also passes via USG_B.

  

  Which of the following configuration command can solve this problem? [USG_A] interface GigabitEthernet 0/0/1 [USG_A-GigabitEthernet 0/0/1] hrp track master [USG_A] interface GigabitEthernet 0/0/3 [USG_A-GigabitEthernet 0/0/3] hrp track master [USG_A] ospf 101 [USG_A-ospf -101] area 0 [USG_A-ospf-101-area-0.0.0.0] network 10.104.10.0 0.0.0.255 [USG_A-ospf-101-area-0.0.0.0] network 10.104.30.0 0.0.0.255 [USG_A] hrp interface GigabitEthernet 0/0/2 [USG_B] interface GigabitEthernet 0/0/1

  [USG_B-GigabitEthernet 0/0/1] hrp track slave [USG_B] interface GigabitEthernet 0/0/3 [USG_B-GigabitEthernet 0/0/3] hrp track slave [USG_B] ospf 101 [USG_B] ospf 101 [USG_B-ospf -101] area 0 [USG_B-ospf-101-area-0.0.0.0] network 10.104.10.0 0.0.0.255 [USG_B-ospf-101-area-0.0.0.0] network 10.104.30.0 0.0.0.255 [USG_B] hrp interface GigabitEthernet 0/0/2

  A. [USG_A] hrp ospf-cost adjust-enable [USG_B] hrp ospf-cost adjust-enable
  B. [USG_B] interface GigabitEthernet 0/0/1 [USG_B-GigabitEthernet 0/0/1] hrp track master [USG_B] interface GigabitEthernet 0/0/3 [USG_B-GigabitEthernet 0/0/3] hrp track master
  C. hrp preempt delay 60
  D. heartbeat port addresses are not released to the OSPF
  A. [USG_A] hrp ospf-cost adjust-enable [USG_B] hrp ospf-cost adjust-enable

• Question 196:

  Two endpoints cannot build a successful IPsec VPN session. Which of the following firewall configuation errors could be the problem? (Choose three answers)

  A. A device does not have a route to the peer within the network.
  B. A gateway configuration on both ends with the referenced ACL security policy
  C. The gateway configuration on both ends of the IPsec proposal is inconsistent.
  D. Both ends are not configured for DPD.
  A. A device does not have a route to the peer within the network.
  B. A gateway configuration on both ends with the referenced ACL security policy
  C. The gateway configuration on both ends of the IPsec proposal is inconsistent.

• Question 197:

  Which of the following statements is correct one for the dual hot standby in conjunction with IPSec functionality?

  A. USG supports IPsec primary backup mode of hot standby.
  B. Load does not support IPsec stateful failover under balancing.
  C. You must configure the session fast backup.
  D. You must configure preemption
  A. USG supports IPsec primary backup mode of hot standby.

• Question 198:

  Which statement is correct regarding load checks and fingerprint learning with UDP Flood defenses.

  A. UDP packet data segments are exactly the same content that can be used to check the load defense.
  B. Fingerprint learning is dynamically generated by cleaning equipment, the attack packets after learning some salient features of the fingerprint, fingerprint matching packets will be dropped.
  C. Load inspection checks all UDP packets of data.
  D. Load checks need to set the offset number of bytes, fingerprint learning does not need to set the offset number of bytes.
  D. Load checks need to set the offset number of bytes, fingerprint learning does not need to set the offset number of bytes.

• Question 199:

  After BFD session is established, control packets are sent periodically to each other. If a system does not receive the packet sent by peer within the detection time, it is assumed that the BFD session is down.

  Which Mode is this one?

  A. Synchronous Mode
  B. Detection Mode
  C. Asynchronous Mode
  D. Query Mode
  C. Asynchronous Mode

• Question 200:

  In the attack shown below, a victim host packet captures the traffic. According to the information shown, what kind of attack is this?

  

  A. SYN Flood
  B. SYN-ACK Flood
  C. ACK-Flood
  D. Connection Flood
  C. ACK-Flood