Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 161:

  Stateful inspection firewall can detect TCP protocol, but cannot detect UDP, since UDP is a connectionless protocol face.

  A. True
  B. False
  B. False

• Question 162:

  USG2000 (Eudemon 200E) series firewall default ACL match type

  A. auto
  B. config
  C. predefine
  D. custom
  B. config

• Question 163:

  L2TP user authentication statement is correct:

  A. In the LAC can authenticate the user
  B. The LNS can authenticate the user
  C. After LAC authenticates the user,LNS can authenticate the user again
  D. All other options are on the argument
  D. All other options are on the argument

• Question 164:

  Firewall supports three main VPDN VPN, namely, L2TP, PPTP, IPSec:

  A. True
  B. False
  B. False

• Question 165:

  Configuration [LAC-l2tp1] start l2tp ip 3.3.2.1 full username pc1 in, ip address 3.3.1.1 means?

  A. This initiates an IP address
  B. The end of the virtual template address
  C. The LNS public address
  D. Virtual template addresses the LNS
  C. The LNS public address

• Question 166:

  SVN3000 network expansion in the application, the client obtains an IP address in two ways: the virtual gateway address pool and DHCP server within the network.

  A. True
  B. False
  A. True

• Question 167:

  For inter-domain packet filtering, the following statements is correct? (Choose three)

  A. policy 1 disable command to disable policy 1
  B. By default,Policy to create higher the priority,the more the first match
  C. By policy move command to adjust the position of the policy,policy id will change accordingly
  D. Once matched to a Policy, in accordance with the Policy on the definition of processing packets no longer continue to match directly down
  A. policy 1 disable command to disable policy 1
  B. By default,Policy to create higher the priority,the more the first match
  D. Once matched to a Policy, in accordance with the Policy on the definition of processing packets no longer continue to match directly down

• Question 168:

  Which statement is correct?

  A. Latency refers to the first bit of the packet enters the firewall to the first bit of the output firewall interval indicator,is an ideal situation for measuring the speed of processing data firewall
  B. Refers to the maximum number of concurrent connections per second, the new set up through the firewall can be a complete TCP / UDP connection
  C. If the USG (Eudemon) transparent firewall mode to work,just like the place in the network bridges (bridge) the same access to the USG (Eudemon) firewall device without the need to modify the original structure and configuration
  D. When USG (Eudemon) firewall using routing mode,no ACL packet filtering,ASPF dynamic filtering, NAT conversion functions
  C. If the USG (Eudemon) transparent firewall mode to work,just like the place in the network bridges (bridge) the same access to the USG (Eudemon) firewall device without the need to modify the original structure and configuration

• Question 169:

  For firewall access control process : 1, 2 routing table lookup, find interzone packet filtering rules 3, 4 session table lookup, find the blacklist, the correct order?

  A. 1-3-2-4
  B. 3-2-1-4
  C. 3-4-1-2
  D. 4-3-1-2
  D. 4-3-1-2

• Question 170:

  Proxy firewalls need to develop a protocol for each application layer proxy, long development cycle, but it is difficult to upgrade.

  A. True
  B. False
  A. True