Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 261:

  GRE VPN technology itself can provide which of the following techniques?

  A. Tunneling
  B. Encryption and decryption technology
  C. Flow control and QoS
  D. Key Management
  A. Tunneling

• Question 262:

  Huawei firewall security zones are provided by default () (Choose three)

  A. local area
  B. trust region
  C. untrust area
  D. Regional Security
  A. local area
  B. trust region
  C. untrust area

• Question 263:

  SSL and IPSec security protocols, encryption and authentication. However, SSL protocol only on the application of both data communications transmission is encrypted, but not all of the data from one host to another is encrypted (such as TCP / IP and application layer protocol).

  A. True
  B. False
  A. True

• Question 264:

  In the TSM system supports access control devices, which of the following devices do not support access control terminal visits functions?

  A. Hardware SACG(Hardware Security Access Control Gateway)
  B. 802.1X
  C. Software SACG(host firewall)
  D. ARP control
  A. Hardware SACG(Hardware Security Access Control Gateway)

• Question 265:

  What are the common hashing algorithms? (Choose two)

  A. DES
  B. AES
  C. MD5
  D. SHA-1
  C. MD5
  D. SHA-1

• Question 266:

  For nat inbound direction, the following statement is correct: (Choose two)

  A. Mainly used in internal hosts do not need to know the situation of a public network of
  B. Is the source address of the external network user request packet,converted to network addresses
  C. Is a network user address into internet addresses
  D. In order for the internal private network users can access internet address
  A. Mainly used in internal hosts do not need to know the situation of a public network of
  B. Is the source address of the external network user request packet,converted to network addresses

• Question 267:

  Packet filtering firewall interfaces, inbound high priority area is the access interface from low- priority areas in the interface.

  A. True
  B. False
  B. False

• Question 268:

  When the port is configured to allow certain vlan trunk through, trunk belongs to these vlan.

  A. True
  B. False
  A. True

• Question 269:

  Which of the following ways L2TP VPN, the tunnel is established between the client and the LNS Client -side?

  A. Client-Initialized L2TP way
  B. NAS-Initialized L2TP way
  C. Unsolicited L2TP
  D. VPDN
  A. Client-Initialized L2TP way

• Question 270:

  Packet filtering firewall main features include: (Choose three)

  A. With the complexity and increase the length of ACL,the firewall filtering performance exponentially decreasing trend
  B. ACL rules difficult to adapt static dynamic security filtering requirements
  C. Do not check the session state data is not analyzed,it is very easy for hackers to get away
  D. Complete control of the network to exchange information and control the session,with high security
  A. With the complexity and increase the length of ACL,the firewall filtering performance exponentially decreasing trend
  B. ACL rules difficult to adapt static dynamic security filtering requirements
  C. Do not check the session state data is not analyzed,it is very easy for hackers to get away