Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 21:

  The following virtual firewall networking, USG provided outwardly rough business, VPN instance vfw1 coarse A, to the enterprise network diagram below.

  A foreign enterprise network users need to access via PC C. Server B in DMZ zone is NAT'ed. If I want to achieve this requirement, then I must have following key configuration? (Choose three answers)

  

  A. [USG] ip vpn-instance vfw1 vpn-id 1
  B. [USG] ip vpn-instance vfw1 [USG-vpn-vfw1] route-distinguisher 1001 [USG-vpn-vfw1] quit
  C. [USG] nat server zone vpn-instance vfw1 untrust global 2.1.2.100 inside 192.168.1.2 vpn-instance vfw1
  D. [USG] nat address-group 1 2.1.2.5 2.1.3.10 vpn-instance vfw1
  A. [USG] ip vpn-instance vfw1 vpn-id 1
  B. [USG] ip vpn-instance vfw1 [USG-vpn-vfw1] route-distinguisher 1001 [USG-vpn-vfw1] quit
  C. [USG] nat server zone vpn-instance vfw1 untrust global 2.1.2.100 inside 192.168.1.2 vpn-instance vfw1

• Question 22:

  Virtual firewall technology can be implemented using IP address overlap.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 23:

  USG firewall supports which of the load balancing algorithms? (Choose three answers)

  A. The source address hashing algorithm (srchash)
  B. Polling simple algorithm (roundrobin)
  C. Weighted Round Robin algorithm (weightrr)
  D. ratio (Ratio)
  A. The source address hashing algorithm (srchash)
  B. Polling simple algorithm (roundrobin)
  C. Weighted Round Robin algorithm (weightrr)

• Question 24:

  In hot standby environment, there is an event of inconsistent data packets being sent back and forth. Which of the following conditions may cause packet loss? (Choose three answers)

  A. Quick Sync feature is not enabled session
  B. heartbeat insufficient bandwidth
  C. Close monitoring of the state
  D. heartbeat port specified error
  A. Quick Sync feature is not enabled session
  B. heartbeat insufficient bandwidth
  D. heartbeat port specified error

• Question 25:

  IP-link probe packets will be sent to the specified IP address by default when the probe fails three times, enabling this interface if the main link fails.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 26:

  Logging session log NAT / ASPF generated DPI traffic monitoring logs. Logs for this type provide a "binary" output mode. Using binary output can greatly reduce the impact on system performance but the use of binary form output requires supporting eLog log management system.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 27:

  Regarding IKE DPD, which statement is incorrect?

  A. IKE is used to detect the state of a neighbor
  B. DPD regularly send messages between IKE peers.
  C. When DPD messages are not received within the specified time DPD sends a request to the remote side and waits for response packets.
  D. DPD sends encrypted queries only when the timer expires.
  B. DPD regularly send messages between IKE peers.

• Question 28:

  Establishing an IPsec tunnel is unsuccessful. The following is the debug output:

  %% 01IKE/4/WARNING (I): phase2: proposal mismatch, please check ipsec proposal configuration.

  0.34476900%% 01IKE/7/DEBUG (d): dropped message from 3.3.3.1 due to notification type NO_PROPOSAL_CHOSEN

  Based on this information, what is the likely cause of the failure?

  A. The IKE proposal is inconsistent.
  B. The ipsec proposal is inconsistent.
  C. IKEpeer configuration error.
  D. Security ACL configuration error.
  B. The ipsec proposal is inconsistent.

• Question 29:

  A static BFD session is configured between USG A and USG B. Which of the following statements about BFD session creation and removal are correct? (Select 2 Answers)

  A. Both USG A and USG B enable the BFD state machine. The initial status of the state machine is Down. They transmit BFD control packets whose status is Down. The value of Your Discriminator is 0.
  B. If the local BFD status of USG B becomes Init and USG B still receives packets whose status is Down, USG B will update its local BFD status.
  C. After receiving the BFD control packet whose status is Init, USG B switches the local BFD status to Up.
  D. After the status transfers from Down to Init, a timeout timer is enabled respectively on USG A and USG B. If the timer does not receive any BFD packet whose status is Init or Up within the timeout, the local BFD status automatically switches to Down.
  C. After receiving the BFD control packet whose status is Init, USG B switches the local BFD status to Up.
  D. After the status transfers from Down to Init, a timeout timer is enabled respectively on USG A and USG B. If the timer does not receive any BFD packet whose status is Init or Up within the timeout, the local BFD status automatically switches to Down.

• Question 30:

  On the USG in hda1 ;/ we need to delete directories on sslconfig.cfg. Which of the following commands is needed to complete this operation?

  A. cd: hda 1: /remove sslconfig.cfg
  B. cd: hda 1: /delete sslconfig.cfg
  C. cd: hda 1: /rmdir sslconfig.cfg
  D. cd: hda 1: /mkdir sslconfig.cfg
  B. cd: hda 1: /delete sslconfig.cfg