Huawei Huawei Certification H12-721 Questions & Answers

• Question 31:

  In an IPsec VPN, which statement is incorrect about aggressive mode versus main mode?

  A. In the master mode pre-shared key mode does not support NAT traversal, and brutal mode support.

  B. Main Mode negotiation message was 6, savage mode 3.

  C. In the NAT traversal scenario, the peer ID can not use IP addresses.

  D. Main Mode identity information encrypted exchange of information, while aggressive mode does not encrypt the identity information.

  Correct Answer: C

• Question 32:

  Which of the following attack types includes CC attacks??

  A. Denial of Service Attack

  B. Scanning and snooping attack

  C. Malformed packet attacks

  D. Based system vulnerabilities

  Correct Answer: A

• Question 33:

  Connection status data to be backed up by HRP functions include two of the following. (Choose two answers)

  A. ServerMap entries

  B. Port mapping table

  C. Dynamic blacklist

  D. Session entries

  Correct Answer: AC

• Question 34:

  In the Enterprise netowrk shown below, Server A and Server B can not access Web services. Troubleshooting has found that there is firewall routing module and that there is a problem with the routing table in USG_A.

  An enterprise network follows, then Server A Server B can not access Web services, administrators troubleshoot and found no firewall routing module A problem has been to establish the appropriate routing table, but Firewall A firewall module is provided with wrong.

  

  What troubleshooting method should be used?

  A. stratification

  B. Break Law

  C. substitution method

  D. Block Method

  Correct Answer: D

• Question 35:

  Which of the following techniques can enhance the security of the mobile users to access the corporate network VPN solutions?

  A. SSL

  B. PPPoE

  C. GRE

  D. L2TP

  Correct Answer: A

• Question 36:

  Which of the following regarding HTTP Flood defense is not correct?

  A. HTTP Flood Source Authentication

  B. URI destination IP detection

  C. fingerprints learning

  D. Checks the load

  Correct Answer: D

• Question 37:

  Hot Standby networking environment is shown in Figure 1 and 2 backup group joined VGMP management group, USG_A main equipment, USG_B as a backup device.

  

  When USG_A is in failed state, such as power failure, this time USG_B state switched from Slave to

  Master.

  When USG_A firewall recovers, it switches back to its state Master, and USG_B status remains as Master.

  What has caused this phenomenon?

  A. Two firewall load balancing mode, both in the same backup set is configured to master, also configure the Slave

  B. USGA after the failure to restore its priority VRRP backup group did not recover in time

  C. After the USGA recover from a failure, malfunction heartbeat

  D. No configuration hrp track

  Correct Answer: C

• Question 38:

  When using Radius server to authenticate users, (topology diagram shown below) we not only need to ensure that the user name and password for the account exists on the Radius server, a firewall must be configured on a user name and password.

  

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 39:

  The Huawei abnormal flow cleaning solution must be deployed in an independent testing center.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 40:

  Malformed packet attack techniques would use some legitimate data packets; these packets are of a legitimate application type.

  A. TRUE

  B. FALSE

  Correct Answer: B