Huawei Huawei Certification H12-721 Questions & Answers

• Question 61:

  Load balancing has the following configuration: [USG] sIb enable [USG] sIb [USG-slb] rserver 1 rip 10.1.1.3 weight 32 [USG-slb] rserver 2 rip 10.1.1.4 weight 16 [USG-slb] rserver 3 rip 10.1.1.5 weight 32 [USG-slb] group test [USG-slb-group-test] metric srchash [USG-slb-group-test] add rserver 1 [USG-slb-group-test] add rserver 2 [USG-slb-group-test] add rserver 3 Which of the following statements is correct? (Choose two answers)

  A. Load balancing algorithm for the polling algorithm.

  B. The configuration is complete load balancing configuration.

  C. Value judgments based on weight which server data stream should flow, the smaller the weight value, the corresponding real server processing capacity should be more weak.

  D. weight is the weight of a real server weight.

  Correct Answer: CD

• Question 62:

  Which statement is correct regarding local users with VPN instance bindings?

  A. By the command Iocal-user user-name vpn-instance vpn-instance-name local user can bind a VPN instance Under

  B. Default bindings already achieved between local users and VPN instances

  C. After the local user to bind with V PN instance, local users that can manage the entire firewalls

  D. Local users with VPN instance can not bind

  Correct Answer: A

• Question 63:

  In a Link-group with three physical interfaces, when either one of the interfaces fail, which of the following descriptions of what happens is correct? (Choose two answers)

  A. With any interface failure within the group, the system will set the other interface state to Down.

  B. When any interface group fails, the other interface status within the group does not change.

  C. When the group returned to normal with one of the interfaces up, the interface status within the entire group will be re-set to Up.

  D. When the group returns to normal after all the interfaces are up, the interface status within the entire group was re-set to Up.

  Correct Answer: AD

• Question 64:

  Dual hot standby load balancing service requires three interfaces, one for the line connecting the router, and two USG facilities mutual backup, configuration commands are "hrp track master" and "hrp track slave"

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 65:

  Load balancing to ensure that the same user traffic will access the IP address assigned to different servers uses what technology? (Choose three answers)

  A. Virtual Services Technology

  B. Server Health Check

  C. Hot Standby Technology

  D. Flow-based forwarding

  Correct Answer: ABD

• Question 66:

  Tracert packet attack occurs when an attacker using TTL returned ________. ICMP timeout packets reach the destination address and return an ICMP time exceeded message back to the source IP address. An attacker may run the tracert program to detect source ip address in ICMP returned message and it can snoop structure of the network.

  A. 0

  B. 1

  C. 2

  D. Changes according to the actual situation

  Correct Answer: A

• Question 67:

  In the dual hot standby network diagram shown below, figure PC1 gateway address should be the IP address of the main contact with the device, namely 10.100.10.2/24.

  

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 68:

  As shown in Figure, firewall is in stateful failover networking environment, the firewall interfaces are in the business routing mode, and up and down are the router with OSPF configured.

  

  Assuming the OSPF protocol convergence Recovery time is 30s, following best configuration management is to seize on the HRP?

  A. hrp preempt delay 20

  B. hrp preempt delay 40

  C. hrp preempt delay 30

  D. undo hrp preempt deplay

  Correct Answer: B

• Question 69:

  Which of the following attack is SYN Flood attack?

  A. An attacker sends a large number of SYN packets, resulting in a large number of not fully established TCP connections, occupying resources.

  B. It refers to the attacker and the attacked object the establishment of a normal full TCP connection, but no follow-up messages.

  C. It refers to the attacker sending a large number of ICMP packets (such as Ping) consuming link bandwidth.

  D. It refers to the attacker sending a large number of UDP packets to the server consuming link bandwidth.

  Correct Answer: A

• Question 70:

  Which of the following statements are true about Link-group? (Choose two answers)

  A. The cross-switch interface supports state management

  B. The support interface state management across the interface board

  C. It provides support for remote management interface status

  D. It supports hot-swappable interface board

  Correct Answer: BD