Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 51:

  What do we want to achieve with Virtual firewalls on a single physical firewall device where we create virtual multiple logical firewalls and multiple instances? (Choose three answers)

  A. Security multiple instances
  B. VPN multi-instance
  C. configure multiple instances
  D. exchange multiple instances
  A. Security multiple instances
  B. VPN multi-instance
  C. configure multiple instances

• Question 52:

  After the firewall creates a new security instance, the firewall does not have any security zones assigned to the new instance and the administrator needs to configure them.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 53:

  When configured behind a firewall stateful failover, in the Web configuration interface, select "System> High Reliability> hot standby", click "Check HRP configuration consistency" corresponding "check" button.

  

  Pop-up window, as shown, which of the following configurations can solve the problem (assuming heartbeat interface is added to the DMZ zone)?

  A. firewall packet-filter default permit interzone trust locaI
  B. firewall packet-filter default permit interzone trust dmz
  C. firewall packet-filter default permit interzone untrust dmz
  D. firewall packet-filter default permit interzone local
  D. firewall packet-filter default permit interzone local

• Question 54:

  In the firewall DDos attack prevention technology, the Anti-DDoS prevents attacks based on what?

  A. Based on the ability of the application to authenticate the source address of the packet, the application, and the cleaning equipment source by sending probe packets to prevent the attack traffic source.
  B. session-based concurrent connections to the defense, where the new connection or abnormal connections exceeds the threshold levels..
  C. Mainly by fingerprint analysis to study and get traffic capture feature to prevent bots or initiate the attack traffic through a proxy to distinguish normal user access behavior.
  D. By detecting the session using filter scanning packets and special control packets.
  B. session-based concurrent connections to the defense, where the new connection or abnormal connections exceeds the threshold levels..

• Question 55:

  An administrator views the status information and IPsec Debug information as follows: What is the most likely reason for failure?

  

  A. The end ike ike peer strategies and policies do not match
  B. The end ike remote name and peer ike name does not match
  C. The end ipsec proposal and peer ipsec proposal does not match
  D. The end of the Security acl or does not match the peer Security acl
  D. The end of the Security acl or does not match the peer Security acl

• Question 56:

  An enterprise network flow is shown below. Server A can not access the server B, administrators troubleshoot and found that server A can access the firewall A, but can not access the firewall B.

  

  What method will administrators use to troubleshoot this problem?

  A. stratification
  B. Break Law
  C. substitution method
  D. Block Method
  B. Break Law

• Question 57:

  IPsec tunneling is used as a backup connection as shown below:

  

  Which of the following statements are true about the tunnel interface? (Choose two answers)

  A. IPsec security policy should be applied to the tunnel interface
  B. Protocol for the Tunnel Interface must be GRE.
  C. Tunnel interface needs to be configured on the IP address and the IP address of the gateway. The external network IP address of the outgoing interface must be in the same network segment.
  D. Tunnel interfaces can be added to any security zone, provided they have the appropriate inter-domain security policies.
  A. IPsec security policy should be applied to the tunnel interface
  D. Tunnel interfaces can be added to any security zone, provided they have the appropriate inter-domain security policies.

• Question 58:

  With regard to virtual gateway type and shared exclusive type, which of the following statement is correct? (Choose three answers)

  A. Exclusive monopoly-type virtual gateway IP address.
  B. When the network IP address of tension, it is recommended to use share-based virtual gateway.
  C. Exclusive domain model can be used to access the virtual gateway.
  D. Multiple Shared Web Gateway, distinguished by its IP address.
  A. Exclusive monopoly-type virtual gateway IP address.
  B. When the network IP address of tension, it is recommended to use share-based virtual gateway.
  C. Exclusive domain model can be used to access the virtual gateway.

• Question 59:

  IPSec with AH and ESP support NAT traversal.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 60:

  Which statement is correct regarding the Eth-trunk function? (Choose three answers)

  A. improves communication bandwidth of the link
  B. improves data security
  C. Traffic load balancing
  D. improves the reliability of the link
  A. improves communication bandwidth of the link
  C. Traffic load balancing
  D. improves the reliability of the link