Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 71:

  Testing Center is responsible for flow testing, and test results sent to the management center.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 72:

  USG GE0/0/0 firewall interface IP address is 192.168.0.1/24 and the firewall act as a FTP server. PC host IP address is 192.168.0.2/24, firewall GE0/0/0 interfaces to the host PC is directly connected via a network cable.

  As shown below:

  PC (192.168.0.2/24) ----------- (GE0/0/0) USG

  Which of the following commands can work together to complete the system configuration files vrpcfg.cfg backup operations? (Choose two answers)

  A. Complete the following command on the firewall: [USG] ftp server enable Info: Start FTP server [USG] aaa [USG-aaa] local-user ftpuser password simple Ftppass # [USG-aaa] local-user ftpuser service-type ftp [USG-aaa] local-user ftpuser ftp-directory hda1 :/
  B. Complete the following command on the firewall: Ftp 192.168.0.2 Trying 192.168.0.2 ... Press CTRL + K to abort Connected to 192.168.0.2. 220 FTP Server ready User (192.168.0.2: (none)): ftpuser 331 Password required for ftpuser Password: 230 User ftpuser logged in. [ftp] get vrpcfg.cfg
  C. Complete the following command on the PC:
  D. \ Documents and Settings \ Administrator> ftp 192.168.0.1 Connected to 192.168.0.1. 220 FTP service ready. User (192.168.0.1: (none)): ftpuser 331 Password required for ftpuser Password: 230 User logged in. ftp> get vrpcfg.cfg
  E. Complete the following command on the PC:
  F. \ Documents and Settings \ Administrator> ftp 192.168.0.1 Connected to 192.168.0.1. 220 FTP service ready. User (192.168.0.1: (none)): ftpuser 331 Password required for ftpuser Password: 230 User logged in. ftp> put vrpcfg.cfg
  A. Complete the following command on the firewall: [USG] ftp server enable Info: Start FTP server [USG] aaa [USG-aaa] local-user ftpuser password simple Ftppass # [USG-aaa] local-user ftpuser service-type ftp [USG-aaa] local-user ftpuser ftp-directory hda1 :/
  C. Complete the following command on the PC:

• Question 73:

  The anti-DDoS device can implement traffic blocking or limiting to defend against attacks if the service learning function discovers that certain services do not run on the network or the service traffic volume is small.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 74:

  In Hot standby, the backup channel must be the primary interface to the interface board. Which type is not supported?

  A. Ethernet
  B. GigabitEthernet
  C. E1
  D. vlan-if
  C. E1

• Question 75:

  Figure 1 is the first to be attacked host. A packet capture screenshots is shown in line no 132, Figure 2 is a screenshot of attacked first host with line no. 133 packet capture. Analyse what type of attack is this?

  

  

  A. UDP Flood
  B. UDP Flood attack slice
  C. IP fragmentation attack
  D. TAP Fragment Flood
  B. UDP Flood attack slice

• Question 76:

  A Site to Site IPsec VPN tunnel negotiation has been lost. How can you view the IKE Phase 2 security associations, established connections, and configurations? (Choose two answers)

  A. display ike sa
  B. display ipsec sa brief
  C. display ipsec policy
  D. display interface
  A. display ike sa
  B. display ipsec sa brief

• Question 77:

  In-Band management and port management control information and business information is transmitted on the same channel.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 78:

  IPsec VPN using digital certificates for authentication has the following steps:

  1.

  Certificate signature verification

  2.

  Find the certificate serial number in the CRL

  3.

  Both devices share their entity certificate

  4.

  Verify the certificate is valid

  5.

  Establish a VPN tunnel

  Which of the following is the correct pattern?

  A. 3-2-1-4-5
  B. 1-3-2-4-5
  C. 3-1-4-2-5
  D. 2-4-3-1-5
  C. 3-1-4-2-5

• Question 79:

  Which of the following description about SMURF attacks is correct?

  A. Attacker sends ping requests to a subnet (broadcast), requesting that devices on that subnet send ping replies to a target system. Once the host or network is detected, it is then brought down.
  B. Attacker sends SYN packets with source and destination addresses for the IP address where the attacker is. A SYN-ACK message is sent to their own address, so is the presence of an attacker hosts a large number of air connections.
  C. An attacker can target where to send a UDP packet in the network. The source address of the packet is being attacked. Host address, destination address are in the subnet broadcast address where the attack host the subnet network address using destination port number 7 or 19.
  D. An attacker using a network or host receives an ICMP unreachable packets, the packets destined for the follow-up of this destination address directly considered unreachable, thereby cutting off the connection to the host destination.
  A. Attacker sends ping requests to a subnet (broadcast), requesting that devices on that subnet send ping replies to a target system. Once the host or network is detected, it is then brought down.

• Question 80:

  The key steps to configure virtual firewalls include the following: 1 Configure the IP address of the interface 2 Create a VPN instance and the VPN instance of the specified routing instance and include the interface to the security domain 4 Configure Inter-domain configuration default packet filtering rules 5 Bind the interface with the VPN instance What is the correct order?

  A. 2-1-3-4-5
  B. 1-3-4-2-5
  C. 2-5-1-3-4
  D. 1-2-5-3-4
  C. 2-5-1-3-4