Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 61:

  ESP verifies only the IP payload in NAT traversal, but the ESP port information will be encrypted causing the layer 4 information to be unusable with PAT.

  Using the IPsec NAT transparency feature can solve this problem, the ESP packet is encapsulated in a UDP header and contains the information necessary to enable PAT to work.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 62:

  As shown below, the trust area has two PC machines, PC1 10.1.1.1, PC2 10.1.155.1 and the Untrust zone has one server 10.2.2.2.

  PC1 can not access 10.2.2.2, 10.2.2.2 and PC2 actively access each other. Through configuration analysis, how will you fix the following problems?

  

  A. image075
  B. image077
  C. image079
  D. image081
  A. image075

• Question 63:

  Which of the following attack types includes CC attacks??

  A. Denial of Service Attack
  B. Scanning and snooping attack
  C. Malformed packet attacks
  D. Based system vulnerabilities
  A. Denial of Service Attack

• Question 64:

  PCA has an IP address of 192.168.3.1 in the Trust area. In the Untrust zone users cannot access the Internet server.

  

  Based on the configuration of the Trust and Untrust fields above, what is the most likely cause of the failure?

  A. A misconfigured security policies, the direction should be Outbound.
  B. Since the first rule of the firewall is the default packet-filter deny, the configuration is not implemented.
  C. The policy source of 192.168.3.0 0.0.0.255 is incorrect; you need to modify a policy source 192.168.3.0 0.0.255.255.
  D. The policy destination any is incorrect; you must define a clear destination IP address.
  A. A misconfigured security policies, the direction should be Outbound.

• Question 65:

  The mechanism of source authentication defense against HTTPS flood attacks is that the anti-DDoS device, instead of the SSL server, initiates the TCP three-way handshake with the client. If the TCP three-way handshake is complete, the source authentication succeeds.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 66:

  The USG supported HRP backup options are awhich of the follwoing? (Choose three answers)

  A. Automatic Backup
  B. Manual batch backup
  C. Quick Backup
  D. Real-time backup
  A. Automatic Backup
  B. Manual batch backup
  C. Quick Backup

• Question 67:

  With IP address scanning attack prevention, not only can it be used to prevent the ICMP packet destination address detection, it can also prevent the use of TCP / UDP scanning probe target addresses.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 68:

  An administrator to view the status information and IPsec Debug information is shown below. After going through the output, what is the most likely reason for failure?

  

  A. The end ike ike peer strategies and policies do not match
  B. The end ike remote name and peer ike name does not match
  C. The end ipsec proposal and peer ipsec proposal does not match
  D. The end of the Security acl or does not match the peer Security acl
  A. The end ike ike peer strategies and policies do not match

• Question 69:

  With the USG firewall, which two commands can be used to view equipment components (control board, fans, power supplies, etc.) run state and memory / CPU usage? (Choose two answers)

  A. display device
  B. display environment
  C. display version
  D. dir
  A. display device
  B. display environment

• Question 70:

  Which of the following statements about VRRP and VGMP packets are correct? (Choose 2 answers)

  A. VGMP groups use VGMP Hello packets to communicate with VRRP groups.
  B. VGMP groups use VGMP Hello packets for mutual communication.
  C. VGMP groups use VRRP packets for mutual communication.
  D. VGMP groups use VGMP packets to communicate with VRRP groups.
  B. VGMP groups use VGMP Hello packets for mutual communication.
  D. VGMP groups use VGMP packets to communicate with VRRP groups.