Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 221:

  Which of the following does an IPSec VPN use to encrypt the communication data stream?

  A. Public Key Encryption
  B. Private key encryption
  C. Symmetric key encryption
  D. Pre-shared key encryption
  C. Symmetric key encryption

• Question 222:

  When an attack occurs, the attacked host (1.1.128.4) was fooled. Host found many packets as shown. Based on an analysis what type of attack is this?

  

  A. Smurf attack
  B. Land Attack
  C. WinNuke
  D. TCP packet flag attack
  D. TCP packet flag attack

• Question 223:

  Under preemption and the default.VGMP management group is enabled, the preemption delay is 60s.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 224:

  According to the victim host capture shown in Figure, What type of attack is this?

  

  A. ARP Flood attack
  B. HTTP Flood Attack
  C. ARP spoofing attack
  D. SYN Flood attack
  A. ARP Flood attack

• Question 225:

  Which of the following regarding HTTP Flood defense is not correct?

  A. HTTP Flood Source Authentication
  B. URI destination IP detection
  C. fingerprints learning
  D. Checks the load
  D. Checks the load

• Question 226:

  The following attacks have special packets? (Choose three answers)

  A. Ping of Death attack
  B. Large ICMP packet attack
  C. Tracert packet attack
  D. ICMP unreachable packet attack
  B. Large ICMP packet attack
  C. Tracert packet attack
  D. ICMP unreachable packet attack

• Question 227:

  After the configuration on NRT Server (no-reverse parameter is not added), the firewall will automatically generate static Server-map entries, the first packet matching Server-map entries, but it does not match the session table.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 228:

  DDos attacks work through the network to the target (usually a server, such as DNS server, WEB server) and sends a small amount of abnormal packets of non-traffic, so that the attacked server parses the message, causing the system to crash or become busy.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 229:

  As shown in Figure, firewall is in stateful failover networking environment. Which of the following command enables the device to automatically adjust VGMP management priority, and automatic standby switch?

  

  A. hrp ospf-cost adjust-enable
  B. hrp preempt delay 60
  C. hrp interface GigabitEthernet 0/0/2
  D. hrp auto-sync config
  A. hrp ospf-cost adjust-enable

• Question 230:

  A simple network is connected PC1-USG-Router-PC2. If PC1 sends packets to PC2, and the USG processes fragmented packets, which modes can be used to do this? (Choose three answers)

  A. fragment cache
  B. slice discarded
  C. fragmentation direct forwarding
  D. slicing defense
  A. fragment cache
  B. slice discarded
  C. fragmentation direct forwarding