Huawei H12-721 Online Practice Questions and Exam Preparation

Huawei H12-721 Online Questions & Answers

• Question 81:

  The network administrator of a company uses firewalls in hot standby mode in order to forward larger traffic.

  

  Network diagram shows that when the configuration is complete, Out of two firewalls, A fails, before the failure of the data stream being transmitted, it was a serious loss, but after the failure of new transmission data stream can work. What causes this phenomenon?

  A. On the firewall configuration HFP seizes less than the OSPF convergence time
  B. OSPF is not configured to adjust status under the HRP COST value function
  C. No configuration session on USG. Quick backup feature in an inconsistent situation can not be forwarded back and forth path normal packets
  D. HRP tracking is not enabled on the line interface on the firewall
  C. No configuration session on USG. Quick backup feature in an inconsistent situation can not be forwarded back and forth path normal packets

• Question 82:

  As shown below, the address pool for domain abc is the L2TP VPN user's address pool.

  

  Based on the information, which of the following statements is wrong?

  A. L2TP users can authenticate the domain account.
  B. If the value of Used-addr-number field is less than the value of the Pool-length field, the on-line domain does not exceed the maximum number of user access number.
  C. From a corporate LAN a PC can obtain an IP address, but not dial L2TP VPN users.
  D. The address pool address range is from 100.0.0.2 to 100.0.0.99.
  C. From a corporate LAN a PC can obtain an IP address, but not dial L2TP VPN users.

• Question 83:

  Which of the following attack is SYN Flood attack?

  A. An attacker sends a large number of SYN packets, resulting in a large number of not fully established TCP connections, occupying resources.
  B. It refers to the attacker and the attacked object the establishment of a normal full TCP connection, but no follow-up messages.
  C. It refers to the attacker sending a large number of ICMP packets (such as Ping) consuming link bandwidth.
  D. It refers to the attacker sending a large number of UDP packets to the server consuming link bandwidth.
  A. An attacker sends a large number of SYN packets, resulting in a large number of not fully established TCP connections, occupying resources.

• Question 84:

  About L2TP over IPsec VPN, which of the following statements is correct? (Choose two answers)

  A. IPSEC L2TP tunnel packets trigger
  B. L2TP packets trigger IPSEC SA
  C. L2TP tunnel first establish
  D. IPSEC tunnel first establish
  B. L2TP packets trigger IPSEC SA
  D. IPSEC tunnel first establish

• Question 85:

  Which of the following circumstances where main mode IKE negotiation can not be used? (Choose two answers)

  A. IKE in the pre-shared mode and peer identity is ID
  B. IKE in the pre-shared mode, and net exports outside the firewall dynamically assigned addresses using DHCP
  C. IKE in the pre-shared mode, and there is a NAT device link
  D. IKE certificate in RSA mode, and there is a NAT device link
  B. IKE in the pre-shared mode, and net exports outside the firewall dynamically assigned addresses using DHCP
  C. IKE in the pre-shared mode, and there is a NAT device link

• Question 86:

  When there is a lot BFD sessions in a system, in order to prevent periodic OFD control packets from affecting the normal operation of the system, you can use what mode of BFD?

  A. Synchronous Mode
  B. Detection Mode
  C. Asynchronous Mode
  D. Query Mode
  D. Query Mode

• Question 87:

  When an attack occurs, the attacked host (1.1.1.1) captured the results below. What type of attack is this?

  

  A. Smurf attack
  B. Land Attack
  C. WinNuke
  D. Ping of Death attack
  A. Smurf attack

• Question 88:

  Load balancing to ensure that the same user traffic will access the IP address assigned to different servers uses what technology? (Choose three answers)

  A. Virtual Services Technology
  B. Server Health Check
  C. Hot Standby Technology
  D. Flow-based forwarding
  A. Virtual Services Technology
  B. Server Health Check
  D. Flow-based forwarding

• Question 89:

  An attacker sends a large number of SIP INVITE messages to the server, leading to a denial of service attack on the SIP server. This attack occurs on which layer of the seven layer OSI model?

  A. Application Layer
  B. Network Layer
  C. Transport Layer
  D. Data Link Layer
  A. Application Layer

• Question 90:

  Which of the following is a correct desrcription of IKE? (Choose three answers)

  A. IKE is UDP bearer protocol used in IPSEC
  B. IKE negotiates for the IPSEC security protocol, and establishes the parameters and security association for IPSEC
  C. IPSEC SA using IKE negotiation packets for the encryption or authentication process
  D. IPSEC must use the IKE key exchange
  A. IKE is UDP bearer protocol used in IPSEC
  B. IKE negotiates for the IPSEC security protocol, and establishes the parameters and security association for IPSEC
  C. IPSEC SA using IKE negotiation packets for the encryption or authentication process