An attacker sends a large number of SIP INVITE messages to the server, leading to a denial of service attack on the SIP server.
This attack occurs on which layer of the seven layer OSI model?
A. Application Layer
B. Network Layer
C. Transport Layer
D. Data Link Layer
About BFD detection mechanism, the following statement is correct? (Choose two answers)
A. BFD control packets are encapsulated in TCP packets
B. BFD provides two detection modes: asynchronous and synchronous mode
C. After the establishment of a BFD session, both systems periodically send BFD control packets
D. At the beginning of the session, the two sides negotiate through the control system carried in the packet parameters
In-Band management and port management control information and business information is transmitted on the same channel.
A. TRUE
B. FALSE
If a data stream has been established in the firewall session and you modify the data corresponding packet filtering policy, how will the firewall perform?
A. When a new packet reaches the firewall, filtering is performed immediately according to the latest strategies and refreshes the session table
B. Immediately perform filtering according to the latest strategy session table is not refreshed.
C. session before aging, not to implement the new strategy, in accordance with previously established session match
D. modification will fail to modify the need to clear the session.
The VGMP HELLO packets default time is 1 second, that is, when the end of the three HELLO Slave cycle range, if packets do not received HELLO packets sent to the client, it will consider the peer as dead, and it will switch them to Master-like State.
A. TRUE
B. FALSE
Which of the following is a drawback of an L2TP VPN?
A. It cannot be routed in two layers
B. You must use L2TP Over IPsec
C. No authentication
D. No encryption
The USG series product dual-system hot backup does not involve the ______ protocol.
A. HRP
B. VRRP
C. VGMP
D. IGMP
Regarding the Radius authentication process, refer to the following steps:
1.
Network device Radius client (network access server) receives the user name and password, and sends an authentication request to the Radius server.
2.
When a user logs into the USG access servers and other network devices, the user name and password will be sent to the network access server.
3.
After the Radius server receives a valid request to complete the request and the required user authorization information is sent back to the client.
Which of the following is a correct sequence?
A. 1-2-3
B. 2-1-3
C. 3-2-1
D. 2-3-1
In IPsec VPN with NAT traversal, you must use IKE aggressive mode.
A. TRUE
B. FALSE
Which command can be used to set the virtual IP address of VRRP group 1 when you configure USG hot backup?
A. vrrp vrid 1 virtual-ip ip address master
B. vrrp virtual-ip ip address vrid 1 master
C. vrrp virtual-ip ip address master vrid 1
D. vrrp master virtual-ip ip address vrid 1
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Huawei exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your H12-721 exam preparations and Huawei certification application, do not hesitate to visit our Vcedump.com to find your solutions here.