Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 251:

  As a general L2TP Layer 2 VPN technology to support packet encryption.

  A. True
  B. False
  B. False

• Question 252:

  IP-Link auto- detection results can only be applied to detect double hot backup.

  A. True
  B. False
  B. False

• Question 253:

  Port-mapping function is used to publish certain port internal server to the external network.

  A. True
  B. False
  B. False

• Question 254:

  When you configure the security level of firewall security zone, the principles to be followed arE. (Choose three)

  A. New security zone,the security level is not set before it,the system requirements of its security level to 100
  B. Can set the security level for the custom security zones
  C. Once you set the security level is not allowed to change
  D. The same system,two security zones do not allow the same level of security configuration
  B. Can set the security level for the custom security zones
  C. Once you set the security level is not allowed to change
  D. The same system,two security zones do not allow the same level of security configuration

• Question 255:

  Normal access to the user Wang credited l2tp vpn from outside the network address, found inside the firewall can ping the network port, but cannot access the network server, check the configuration discovery, Virtual-Template is added to the untrust zone within the network port in trust area, resulting in the cause cannot access the server, the following statements is correct? (Choose two)

  A. The server is not configured gateway
  B. Untrust and trust between domain rules unopened
  C. Untrust and local inter-domain rules unopened
  D. The other three options are correct
  A. The server is not configured gateway
  B. Untrust and trust between domain rules unopened

• Question 256:

  SVN3000 product extensions supported by the network access methods, including what? (Choose three)

  A. Full- channel mode (Full Tunnel)
  B. Separation channel mode (Split Tunnel)
  C. Routing (route Tunnel)
  D. Manually (Manual Tunnel)
  A. Full- channel mode (Full Tunnel)
  B. Separation channel mode (Split Tunnel)
  D. Manually (Manual Tunnel)

• Question 257:

  USG (Eudemon) supports NAT firewall features include: (Choose three)

  A. NAT outbound
  B. NAT server
  C. NAT Traversal
  D. NAT Inbound
  A. NAT outbound
  B. NAT server
  D. NAT Inbound

• Question 258:

  Which of the following configuration command parameter is not consistent with the actual scenario or technology implementations?

  A. ah authentication-algorithm md5
  B. ah encryption-algorithm des
  C. esp authentication-algorithm md5
  D. esp encryption-algorithm des
  B. ah encryption-algorithm des

• Question 259:

  About Advanced ACL, the following statements is correct? (Choose two)

  A. Advanced ACL can match the source IP address
  B. Advanced ACL can match the destination IP address
  C. Advanced ACL can match the source MAC address
  D. Advanced ACL can match the destination MAC address
  A. Advanced ACL can match the source IP address
  B. Advanced ACL can match the destination IP address

• Question 260:

  Security Alliance (SA) is the basis of IPSec is agreement between the communicating peers on certain safety elements.

  A. True
  B. False
  A. True