Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 101:

  In some scenarios, it is necessary to convert the source IP address, destination IP address but also for the conversion, is called bidirectional NAT.

  A. True
  B. False
  A. True

• Question 102:

  USG (Eudemon) series firewall ike default using. dh group2

  A. True
  B. False
  B. False

• Question 103:

  Which of the following algorithms in IPSec encryption algorithm does not belong?

  A. DES
  B. SHA1
  C. 3DES
  D. AES
  B. SHA1

• Question 104:

  Digital certificates do not include which of the following section?

  A. Name of the certificate holder
  B. The certificate is valid
  C. Public key certificate
  D. Certificate private key
  D. Certificate private key

• Question 105:

  pppoe-server bind virtual-template 1 This command applications which interface?

  A. LAC's internal network port
  B. LAC's external network
  C. LNS within the network port
  D. LNS external network port
  A. LAC's internal network port

• Question 106:

  Applied on the interface of the firewall packet filtering, cited acl2000, the source IP address of the IP address 192.168.0.55 to reach the interface, the following statements is correct? (Choose two) acl 2000 match-order auto rule permit source 192.168.0.1 0.0.0.255 rule deny source 192.168.0.32 0.0.0.31

  A. The IP packet matching allows policy to be forwarded by the firewall
  B. The IP packet matching refused strategy will be discarded by the firewall
  C. configured to match the order of priority of use acl2000
  D. acl2000 using a depth-first match order
  B. The IP packet matching refused strategy will be discarded by the firewall
  D. acl2000 using a depth-first match order

• Question 107:

  Symmetric encryption algorithm encryption key and decryption key are the same.

  A. True
  B. False
  A. True

• Question 108:

  USG (Eudemon) Series firewalls from priority (priority) to define security zones can be set which of the following values ? (Choose two)

  A. 150
  B. 100
  C. 80
  D. 40
  C. 80
  D. 40

• Question 109:

  Firewall configured nat server global 202.106.1.1 inside 10.10.1.1, and now need to filter through the interface technology package allows users of the public network WWW server access is correcT.

  A. rule permit TCP source 202.106.1.1 0 source-port 80
  B. rule permit TCP source 10.10.1.1 0 source-port 80
  C. rule permit TCP destination 202.106.1.1 0 destination-port 80
  D. rule permit TCP destination 10.10.1.1 0 destination-port 80
  D. rule permit TCP destination 10.10.1.1 0 destination-port 80

• Question 110:

  In tunnel mode and ESP, which of the following regional information is expressly transfusion?

  A. The new IP packet header
  B. Original IP packet header
  C. Transport layer header
  D. Application layer packet header
  A. The new IP packet header