Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 221:

  Which of the following techniques can be achieved after a key is compromised, will not affect the security of other keys?

  A. DH (Diffie-Hellman) key exchange and distribution
  B. Perfect forward secrecy (Perfect Forward Secrecy)
  C. Authentication
  D. Identity Protection
  B. Perfect forward secrecy (Perfect Forward Secrecy)

• Question 222:

  Priority DMZ area is how much?

  A. 5
  B. 50
  C. 85
  D. 100
  B. 50

• Question 223:

  Source socket means: source IP address + port + source and destination IP address

  A. True
  B. False
  B. False

• Question 224:

  After SVN3000 network extensions configured for full- channel mode (Full Tunnel), network users can access Internet resources.

  A. True
  B. False
  B. False

• Question 225:

  After the write function is enabled USB encryption policies, end-user copy to U disk files are encrypted, only the enterprise user and installed TSM terminal security agents in order to use these encrypted files, encrypted files copied from disk to the local U hardware automatically decrypted;

  A. True
  B. False
  A. True

• Question 226:

  Which of the following products can be achieved on NAT audit log management?

  A. TSM
  B. DSM
  C. eLog
  D. VSM
  C. eLog

• Question 227:

  Meaning as access control lists are: [USG (or Eudemon)] acl number 3100 [USG (or Eudemon)-acl-3100] rule deny icmp source 10.1.10.10 0.0.255.255 destination any icmp-type host-unreachable

  A. The serial number is 3100 rule prohibited to 10.1.10.10 host unreachable packets to all hosts
  B. The serial number is 3100 rule prohibiting all 10.1.0.0/16 that host unreachable packets
  C. The serial number is 3100 rule prohibited from 10.1.0.0/16 to all hosts on the network unreachable packets
  D. Rules of the serial number is 3100,banned from all hosts 10.1.10.10 host unreachable packets
  C. The serial number is 3100 rule prohibited from 10.1.0.0/16 to all hosts on the network unreachable packets

• Question 228:

  Which of the following statements is correct?

  A. Ability to International Organization for Standardization definition of " security" is a way to identify and mitigate insecurity
  B. Security is to find a balance between confidentiality and integrity
  C. A high level of security technologies and policies can make the device or network without any risk
  D. Information security is a subset of network security is a comprehensive and continuous technology
  A. Ability to International Organization for Standardization definition of " security" is a way to identify and mitigate insecurity

• Question 229:

  For the end user, SVN equivalent web___________, while the internal servers, SVN has assumed the role of __________ of:

  A. Server,
  B. The client,the client
  C. Client, server
  D. Server,the client
  D. Server,the client

• Question 230:

  GRE encapsulation is a work in which of the following interfaces (protected data stream arriving at the interface)?

  A. interface tunnel 1
  B. interface Ethernet 0/0(within the network)
  C. interface Ethernet 0/0(external network)
  D. interface loopback 1
  A. interface tunnel 1