Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 241:

  When using the SSL VPN client, it initiates network expansion "Connect gateway mate lost", what are the causes of this failure? (Choose three answers)

  A. If you are using a proxy server, network extension client proxy server settings wrong.
  B. PC and virtual gateway routing between unreachable TCP .
  C. Network expansion between the client and the virtual gateway connection is blocked by the firewall.
  D. Username and password configuration errors.
  A. If you are using a proxy server, network extension client proxy server settings wrong.
  B. PC and virtual gateway routing between unreachable TCP .
  C. Network expansion between the client and the virtual gateway connection is blocked by the firewall.

• Question 242:

  In the FTP networ diagram shown below, you want to use the external control port of 21000 on the FTP Server, but the FTP clients can not access the FTP Server.

  

  You have ruled packet filtering, the FTP server itself, and USG connectivity issues. What do you think the most likely problem is? (Choose two answers)

  A. No use of port mapping function, the FTP client request to the FTP Server is sent to port 21000 packets as normal packets and it does not recognize these as FTP packets.
  B. The firewall can identify the FTP traffic on port 21 only, and does not recognize port 21000 FTP traffic.
  C. ASPF function is not configured.
  D. The equipment discards all UDP traffic.
  A. No use of port mapping function, the FTP client request to the FTP Server is sent to port 21000 packets as normal packets and it does not recognize these as FTP packets.
  C. ASPF function is not configured.

• Question 243:

  A man in the middle attack refers to an intermediate that sees the data exchange between server and client. To the server, all messages appear to be sent to or received from the client; and to the client all the packets appear to have been sent to or received from the server. If a hacker is using the man-in-the-middle attack, the hacker will send at least two data packets as shown to achieve this attack.

  

  Which of the following packet 1 and packet 2 Field Description is correct? (Choose two answers)

  A. Packet 1: Source IP 1.1.1.1 Source MAC C-C-C The purpose of IP 1.1.1.2 The purpose of Mac B-B-B
  B. Packet 1: Source IP 1.1.1.3 Source MAC C-C-C The purpose of IP 1.1.1.2 The purpose of Mac B-B-B
  C. Packet 2: Source IP 1.1.1.2 Source MAC C-C-C The purpose of IP 1.1.1.1 The purpose of Mac A-A-A
  D. Packet 2: Source IP 1.1.1.3 Source MAC C-C-C The purpose of IP 1.1.1.1 The purpose of Mac A-A-A
  A. Packet 1: Source IP 1.1.1.1 Source MAC C-C-C The purpose of IP 1.1.1.2 The purpose of Mac B-B-B
  C. Packet 2: Source IP 1.1.1.2 Source MAC C-C-C The purpose of IP 1.1.1.1 The purpose of Mac A-A-A

• Question 244:

  The USG limited flow policy configuration is as follows: [USG] car-class class1 type shared [USG-shared-car-class-class1] car 1000 [USG-shared-car-class-class1] quit [USG-traffic-policy-interzone-trust-untrust-outbound-shared [USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy 1 [USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy car-class class1 [USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy source 192.168.1.0.0.0.0.255 [USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy destination 192.168.2.0 0.0.0.255 [USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] action car Based on this information, which of the following statements is correct?

  A. Class1 limits the definition of the overall car-class, and limits to 1000bps
  B. Policy1 traffic will match without limiting the direct release
  C. The 192.168.1.0/24 hosts tthat access the data flow will be limited
  D. Matching Policy1 traffic will be flow controlled for each source IP
  C. The 192.168.1.0/24 hosts tthat access the data flow will be limited

• Question 245:

  If the two sides wish to establish an IPsec VPN tunnel and using just one of the IP addresses, which of the following configuration methods can not be applied in the gateway?

  A. Policy Template
  B. Strategy Name savage mode authentication
  C. Pre-share
  D. Savage mode key certification
  A. Policy Template