Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 211:

  After a successful L2TP user authentication, IP address obtained is wrong to say :

  A. User address allocation has been assigned an IP address bound and dynamically assigned IP addresses from the address pool in two ways
  B. L2TP user-assigned IP address can be any address
  C. L2TP user-assigned IP address and the address of the network to be accessed in the same network segment
  D. Address assignment plan well in advance to avoid address conflicts exist
  B. L2TP user-assigned IP address can be any address

• Question 212:

  GRE VPN tunnel interface (Tunnel Interface) interface borrows the IP address of the other as its IP address on this interface to enable the dynamic routing protocol.

  A. True
  B. False
  B. False

• Question 213:

  Source host sends ARP-request, the data package source IP address field of the source host IP address, source MAC address field is the MAC address of the source host, destination IP address field of the destination host IP address, destination MAC address of the destination host is encapsulated MAC address

  A. True
  B. False
  B. False

• Question 214:

  IKE main mode and aggressive mode are the main differences? (Choose two)

  A. Exchange messages using the three main mode packet mode uses six brutal message
  B. Finally, there are two main mode message encryption, identity protection
  C. Finally, there are two messages savage mode encryption, identity protection
  D. Master mode only way to identify the IP address of the peer,and barbarous mode can be used to identify the IP address or name of the peer manner.
  B. Finally, there are two main mode message encryption, identity protection
  D. Master mode only way to identify the IP address of the peer,and barbarous mode can be used to identify the IP address or name of the peer manner.

• Question 215:

  About stateful inspection firewall and packet filtering firewall description is correct.

  A. Packet filtering firewall is not required for each packet entering the firewall rule matching;
  B. Because the UDP protocol is connectionless -oriented protocol,so stateful inspection firewall UDP packetscannotmatch state table;
  C. When stateful inspection firewall to inspect packets,packets of the same before and after the connection is not relevant.
  D. Stateful inspection firewall only needs to connect to the first packet to match the access rule,which is connected directly to the subsequent packets matching(to TCP applications,for example) in the state table
  D. Stateful inspection firewall only needs to connect to the first packet to match the access rule,which is connected directly to the subsequent packets matching(to TCP applications,for example) in the state table

• Question 216:

  When the host receives the ARP response packet, it will not be sent to verify whether they had the ARP request, but the response bag MAC address and IP corresponding relationship directly replace the original ARP cache table out

  A. True
  B. False
  A. True

• Question 217:

  In ipsec vpn configuration if you use pre-shared key authentication mode, you can choose whether to configure the key for the end, but if you configure a key, the key must be the same on both sides.

  A. True
  B. False
  B. False

• Question 218:

  In GRE VPN applications, the network physical interface and Tunnel interfaces added to the same security zone, you can reduce the inter -domain packet filtering policy configuration.

  A. True
  B. False
  A. True

• Question 219:

  Between the Client and the LAC protocol by which to communicate? (Choose two) A. PPP

  B. PPPOE
  C. IP
  D. UDP
  B. PPPOE

• Question 220:

  Security Alliance (SA) is composed of tuples which uniquely identify? (Choose three)

  A. SPI
  B. Source IP address
  C. Destination IP address
  D. Security Protocol No.
  A. SPI
  C. Destination IP address
  D. Security Protocol No.