Huawei HC-711 Online Practice Questions and Exam Preparation

Huawei HC-711 Online Questions & Answers

• Question 61:

  Seen through the display ike sa result follows statements is correct? (Choose two) current ike sa number: 1 connection-id peer vpn flag phase doi 0x1f1 2.2.2.1 0 RD | ST v1: 1 IPSEC 0x60436dc4 flag meaning RD - READY ST - STAYALIVE RL - REPLACED FD - FADING TO - TIMEOUT

  A. The first phase has been successfully established ike sa
  B. The second phase has been successfully established ipsec sa
  C. ike using version V1
  D. ike using version V2
  A. The first phase has been successfully established ike sa
  C. ike using version V1

• Question 62:

  SVN3000 network expansion capabilities, the need to implement remote users can access the corporate network and local area network, you cannot access the Internet, the client needs to use routing as follows:

  A. Full- channel mode (Full Tunnel)
  B. Separation channel mode (Split Tunnel)
  C. Routing (route Tunnel)
  D. Manually (Manual Tunnel)
  B. Separation channel mode (Split Tunnel)

• Question 63:

  About L2TP message, saying the error is:

  A. L2TP supports two types of messages : control messages and data messages
  B. Control messages for tunnel and session connection establishment, maintenance,and transmission control.
  C. Data messages are used to encapsulate PPP frames and transmitted over the tunnel.
  D. Control messages and data messages are transmitted reliably provide flow control and congestion control.
  D. Control messages and data messages are transmitted reliably provide flow control and congestion control.

• Question 64:

  IPSEC configuration steps include: (Choose three)

  A. Restart Firewall
  B. Define the data flow and inter-domain protection rules
  C. Configure IPSec security proposal
  D. Configure IKE Peer
  B. Define the data flow and inter-domain protection rules
  C. Configure IPSec security proposal
  D. Configure IKE Peer

• Question 65:

  Here on Client-Initialized the L2TP VPN, right there saying? (Choose three)

  A. L2TP tunnel connection request initiated remote users via PSTN / ISDN access to NAS, to get permission to access the Internet directly to the remote LNS.
  B. L2TP LNS device receives user connection requests,based on the user name and password to authenticate the user
  C. LNS assigns a private IP address for the remote user.
  D. VPN remote dial-up users do not need to install software
  A. L2TP tunnel connection request initiated remote users via PSTN / ISDN access to NAS, to get permission to access the Internet directly to the remote LNS.
  B. L2TP LNS device receives user connection requests,based on the user name and password to authenticate the user
  C. LNS assigns a private IP address for the remote user.

• Question 66:

  Which of the following are Huawei security software products? (Choose three)

  A. TSM
  B. DSM
  C. eLog
  D. SVN3000
  A. TSM
  B. DSM
  C. eLog

• Question 67:

  Under the same conditions for an encryption algorithm, key lengths longer need to crack the higher the cost.

  A. True
  B. False
  A. True

• Question 68:

  LAC device via L2TP users to understand what information is requested to initiate a tunnel which LNS?

  A. Source IP address
  B. Destination IP address
  C. The source IP address and destination IP address
  D. Username + Password
  D. Username + Password

• Question 69:

  SVN provides the following IP address allocation which way? (Choose three)

  A. DHCP allocation
  B. IP address pool(randomly assigned)
  C. IP address pool(user account with an IP address binding)
  D. Virtual IP address allocation
  A. DHCP allocation
  B. IP address pool(randomly assigned)
  C. IP address pool(user account with an IP address binding)

• Question 70:

  SVN3000 Shared Web gateway can be accessed via IP, domain names in two ways.

  A. True
  B. False
  B. False