Huawei Huawei Certification H12-721 Questions & Answers

• Question 21:

  According to the victim host capture shown in Figure, What type of attack is this?

  

  A. ARP Flood attack

  B. HTTP Flood Attack

  C. ARP spoofing attack

  D. SYN Flood attack

  Correct Answer: A

• Question 22:

  What do we want to achieve with Virtual firewalls on a single physical firewall device where we create virtual multiple logical firewalls and multiple instances? (Choose three answers)

  A. Security multiple instances

  B. VPN multi-instance

  C. configure multiple instances

  D. exchange multiple instances

  Correct Answer: ABC

• Question 23:

  Comparing URPF strict mode and loose mode, which of the following statement is incorrect?

  A. Strict mode requires not only the presence of the corresponding entries in the forwarding table also called the interface but it must match in order to pass the URPF check.

  B. If using strict mode, the source address of the packet in the FIB USG does not exist, but the situation has configured a default route and doing allow-default-route, the packet will pass the URPF check for normal forwarding.

  C. Under a symmetrical environment, it is recommended to use the route URPF strict mode.

  D. Loose mode does not check whether the interface matches the source address of the packet as long as the existence of the USG's FIB table, packets can be passed.

  Correct Answer: B

• Question 24:

  In Hot standby, the backup channel must be the primary interface to the interface board. Which type is not supported?

  A. Ethernet

  B. GigabitEthernet

  C. E1

  D. vlan-if

  Correct Answer: C

• Question 25:

  In an Eth-Trunk interface, you can achieve load balancing by configuring different weights on each member link.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 26:

  The key steps to configure virtual firewalls include the following: 1 Configure the IP address of the interface 2 Create a VPN instance and the VPN instance of the specified routing instance and include the interface to the security domain

  4 Configure Inter-domain configuration default packet filtering rules 5 Bind the interface with the VPN instance What is the correct order?

  A. 2-1-3-4-5

  B. 1-3-4-2-5

  C. 2-5-1-3-4

  D. 1-2-5-3-4

  Correct Answer: C

• Question 27:

  The network administrator of a company uses firewalls in hot standby mode in order to forward larger traffic.

  

  Network diagram shows that when the configuration is complete, Out of two firewalls, A fails, before the failure of the data stream being transmitted, it was a serious loss, but after the failure of new transmission data stream can work.

  What causes this phenomenon?

  A. On the firewall configuration HFP seizes less than the OSPF convergence time

  B. OSPF is not configured to adjust status under the HRP COST value function

  C. No configuration session on USG. Quick backup feature in an inconsistent situation can not be forwarded back and forth path normal packets

  D. HRP tracking is not enabled on the line interface on the firewall

  Correct Answer: C

• Question 28:

  USG_A and USG_B are in a hot standby configuration as shown below. The current session table show 1,500+ sessions, and when a switchover occurs there is a period of traffic interruption. You want to ensure a seamless failover.

  

  Which of the following are valid options that could be done to ensure a seamless failover?

  A. Run the "hrp preempt delay 64" command to make the preemption delay time longer.

  B. Check the connectivity between heartbeats.

  C. Configure session fast backup.

  D. Use the "no Hrp enable" command.

  Correct Answer: A

• Question 29:

  Which of the following packets are not sent during IP-link detection? (Choose two answers)

  A. ARP packets

  B. IGMP packets

  C. ICMP packets

  D. Hello packets

  Correct Answer: BD

• Question 30:

  Which of the following state indicates that the BFD session has been successfully established?

  A. Down

  B. Init

  C. Up

  D. AdminUp

  Correct Answer: C