Huawei Huawei Certification H12-721 Questions & Answers

• Question 41:

  When using the SSL VPN client, it initiates network expansion "Connect gateway mate lost", what are the causes of this failure? (Choose three answers)

  A. If you are using a proxy server, network extension client proxy server settings wrong.

  B. PC and virtual gateway routing between unreachable TCP .

  C. Network expansion between the client and the virtual gateway connection is blocked by the firewall.

  D. Username and password configuration errors.

  Correct Answer: ABC

• Question 42:

  HRP technology can achieve an alternate configuration of the firewall that does not need any kind of information, all the configuration information are synchronized to the primary firewall HRP prepared by a firewall, and configuration information is not lost after restart.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 43:

  An enterprise branch firewall is configured for NAT. As shown in the figure, USG_B is the NAT gateway. In order to extablish an IPSec VPN to USG_B, you need to configure what on USG_B? (Choose two answers)

  

  A. Configure a NAT Policy, citing the rule to allow the network segment's source and destination IP addresses for the ACL.

  B. Configuration the IKE peer, use name authentication, and remote-address of the interface address on USG_A.

  C. Configure a NAT Policy, where there is first a deny IPsec rule within the enterprise network to protect the data flow from within the headquarters of the network, and then permit the enterprise network to the Internet network data stream.

  D. Configure a IPSec policy template, citing the IKE peer.

  Correct Answer: BC

• Question 44:

  In static fingerprint filtering for different packets with different processing methods, which of the following statements is correct? (Choose two answers)

  A. TCP / UDP / custom services can be based on the load (ie, packet data segment) fingerprints.

  B. DNS packets fingerprints for Query ID.

  C. HTTP packets fingerprints for Universal Resource Identifier URI (Uniform Resource Identifier).

  D. ICMP packets through fingerprints identifier.

  Correct Answer: AC

• Question 45:

  A user has been successfully authenticated using an SSL VPN. However, users can not access the Web-link resources through the Web server.

  

  Using the information provided, which of the following is correct?

  A. Network server does not have the Web services enabled.

  B. Virtual Gateway policy configuration error

  C. Virtual connection between the gateway and the network server is not normal

  D. Virtual gateway and network server is unreachable

  Correct Answer: A

• Question 46:

  Below displays the IKE V1 first stage pre-shared key mode during the main mode packet switching crawl. Based on the information shown, the crawl occurs under which packet?

  

  A. IKE first or second Message

  B. IKE third or fourth Message

  C. IKE fifth or sixth Message

  D. IKE seventh or eighth Message

  Correct Answer: A

• Question 47:

  Interface management information and service control information are transmitted on the same channel.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 48:

  IP-link probe packets will be sent to the specified IP address by default when the probe fails three times, enabling this interface if the main link fails.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 49:

  Two endpoints cannot build a successful IPsec VPN session. Which of the following firewall configuation errors could be the problem? (Choose three answers)

  A. A device does not have a route to the peer within the network.

  B. A gateway configuration on both ends with the referenced ACL security policy

  C. The gateway configuration on both ends of the IPsec proposal is inconsistent.

  D. Both ends are not configured for DPD.

  Correct Answer: ABC

• Question 50:

  Which of the following does an IPSec VPN use to encrypt the communication data stream?

  A. Public Key Encryption

  B. Private key encryption

  C. Symmetric key encryption

  D. Pre-shared key encryption

  Correct Answer: C