Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 121:

  Execution acl 3000 match-order auto configured, the data flow will match what way the ACL?

  A. Matching automatically sorted according tothe "depth-first" principle to match.
  B. Match the order configured.That is according to the order the user to configure the ACL match.
  C. Press the automatic sorting match,then match the order configured.
  D. The firewall is not configured
  A. Matching automatically sorted according tothe "depth-first" principle to match.

• Question 122:

  Security access control gateway (Security Access Control Gateway, referred SACG) main function is to control network access terminals for different users, different security situation open different permissions.

  A. True
  B. False
  A. True

• Question 123:

  PPPoE is mainly used for which scene?

  A. Provide remote access users access to Ethernet
  B. Provide access to remote Ethernet services for dial-up users
  C. Enables users to access the Internet data packets are encrypted
  D. To the user can access the Internet faster
  A. Provide remote access users access to Ethernet

• Question 124:

  For E1/CE1 configuration (1, 2 configure virtual serial port IP address, configure virtual serial link layer protocol 3, 4 E1 configuration mode, configure timeslot bundling), correct configuration sequence is:

  A. 1-2-3-4
  B. 2-1-3-4
  C. 3-4-2-1
  D. 4-3-2-1
  C. 3-4-2-1

• Question 125:

  SVN3000 business functions include? (Choose three)

  A. Web Proxy
  B. Network expansion
  C. Port Sharing
  D. File Sharing
  A. Web Proxy
  B. Network expansion
  D. File Sharing

• Question 126:

  In the case of using detect regional command application protocol if it is non-standard port, which of the following techniques to solve the problems brought by a non-standard port?

  A. Port identification
  B. MAC and IP address binding
  C. Packet filtering
  D. Long connection
  A. Port identification

• Question 127:

  Middle attack both passive and active attacks characteristic attack

  A. True
  B. False
  A. True

• Question 128:

  Seen through the display ike proposal command results are as follows, the following statements is correct? (Choose two) priority authentication authentication encryption Diffie-Hellman duration method algorithm algorithm group (seconds)

  default PRE_SHARED SHA DES_CBC MODP_768 86400

  A. Authentication algorithm is SHA
  B. DES encryption algorithm
  C. DH group using group2
  D. Use a barbaric mode
  A. Authentication algorithm is SHA
  B. DES encryption algorithm

• Question 129:

  About L2TP VPN configuration statement is correct: (Choose three)

  A. The LNS L2TP client must configure the IP address of the virtual interface template,and the virtual interface template need to join the security domain
  B. Firewall policies in order to ensure the normal dial-up users log on,you must configure the firewall to receive L2TP tunnel packets security zone where the physical interface between the regions and the Local
  C. Dial-up users need access to internal network resources, you must configure the firewall policy template region corresponding virtual interface and internal security network located between areas where security
  D. If a virtual template interface is added to a safe area,you can directly delete the security zone.
  A. The LNS L2TP client must configure the IP address of the virtual interface template,and the virtual interface template need to join the security domain
  B. Firewall policies in order to ensure the normal dial-up users log on,you must configure the firewall to receive L2TP tunnel packets security zone where the physical interface between the regions and the Local
  C. Dial-up users need access to internal network resources, you must configure the firewall policy template region corresponding virtual interface and internal security network located between areas where security

• Question 130:

  NAT technology which has the following characteristics? (Choose two)

  A. Provide addresses for the network user to hide,there is a certain security
  B. Does not support an unlimited number of IP for network NAPT conversion
  C. For network users both inside and outside,feel the IP address of the conversion process,the entire process is transparent for the user,
  D. After you configure a bidirectional NAT, an external user can access the network resources within
  A. Provide addresses for the network user to hide,there is a certain security
  C. For network users both inside and outside,feel the IP address of the conversion process,the entire process is transparent for the user,