[Jan 31, 2022] Pass H12-711 Review Guide, Reliable H12-711 Test Engine
H12-711 Test Engine Practice Test Questions, Exam Dumps
NEW QUESTION 55
Which of the following is not the scope of business of the National Internet Emergency Center?
- A. Early warning rotification of security incidents
- B. Cooperate with other agencies to provide training services
- C. Emergency handling of security incidents
- D. Providing security evaluation services for government departments, enterprises and institutions
Answer: B
NEW QUESTION 56
Which of the following is wrong about the scanning of vulnerabilities?
- A. Vulnerabilities are security risks that can expose computers to hackers
- B. Vulnerabilities are generally repairable
- C. Vulnerabilities can be avoided
- D. The vulnerability was discovered beforehand and discovered afterwards
Answer: C
NEW QUESTION 57
Which ofthe following types are included in Huawei firewall user management? (Multiple Choice)
- A. Device User Management
- B. Access user management
- C. Administrator User Management
- D. Internet user management
Answer: B,C,D
NEW QUESTION 58
Which of the following is true about the sequencing of the PKI work process?
1. The communication terminal applies for CA certificate.
2. PKI replies to CA certificate
3. Obtain each other's certificate and verify the validity
4. Communication terminal installs local certificate
5. PKI issues a local certificate
6. The communication terminal applies for a local certificate
7. Communication terminal installs CA certificate
8. Communicate with each other
- A. 1-2-7-6-5-4-3-8
- B. 6-5-4-1-2-7-3-8
- C. 6-5-4-3-1-2-7-8
- D. 1-2-6-5-7-4-3-8
Answer: A
NEW QUESTION 59
The preservation of electronicevidence is directly related to the legal effect of evidence, and it is in conformity with the preservation of legal procedures, and its authenticity and reliability are guaranteed. Which of the following is not an evidence preservation technique?
- A. Digital certificate technology
- B. Encryption technology
- C. Digital signature technology
- D. Packet tag tracking technology
Answer: D
NEW QUESTION 60
Which level is the corresponding warning for major network security incidents that occur?
- A. Red warning
- B. Blue warning
- C. Yellow warning
- D. Orange warning
Answer: D
NEW QUESTION 61
Which of the following io true about the description of the firewall?
- A. In order to avoid single point of faiure. the firewall only supports side-by-side deplcyment.
- B. Adding a firewall to the network will inevitably change the :opology of the network.
- C. Depending on the usage scenario, the firewall can be deployed in transparent moce or deployed in a three bedroom mode.
- D. The firewall cannot transparently access the network.
Answer: C
NEW QUESTION 62
When using the web configuration type to do the configuration, the correct statements as following are:
(Choose two.)
- A. When configuring the NAT Server, the internal address is 10.1.1.2, the external address is 200.10.10.1
- B. When configuring the inter-domain security policy, setting the source security area as DMZ, the target security area as Untrust
- C. When configuring the inter-domain security policy, it needs to set the source security area as Untrust, the target security area as DMZ
- D. When configuring the NAT server, the internal address is 200.10.10.1, the external address is 10.1.1.2
Answer: A,C
NEW QUESTION 63
Which of the following is the correct description of windows log event type? (Multiple Choice)
- A. When the disk space isinsufficient, it will be recorded as an "information event"
- B. Failure audit event refers to a failed audit security login attempt, such as a failure when the user views accesses the network drive is logged as a failed audit event.
- C. Error events usually refer to the loss of function and data. For example, if a service cannot be loaded as a system boot, an error event will be generated.
- D. A warning event is asuccessful operation event of an application, driver, or service.
Answer: A,B,C
NEW QUESTION 64
The GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ. If the area connected to GE1/0/1 can accessthe area connected to GE1/0/2, which of the following is correct?
- A. Need to configure DMZ to local security policy
- B. No need to do any configuration
- C. Need to configure local to DMZ security policy
- D. Need to configure an interzone security policy
Answer: B
NEW QUESTION 65
Which of the following options can be used in the advanced settings of Windows Firewall? (Multiple choice)
- A. Set out inbound rules
- B. Set connection security rules
- C. Restore defaults
- D. Change notification rules
Answer: A,B,C,D
NEW QUESTION 66
Which of the following options does not include the respondents in the questionnaire for safety assessment?
- A. HR
- B. Technical leader
- C. Security administrator
- D. Network System Administrator
Answer: A
NEW QUESTION 67
OSPF is more commonly used than RIP because OSPF has device authentication and is more secure.
- A. True
- B. False
Answer: B
NEW QUESTION 68
Which of the following behaviors is relatively safer when connecting to Wi-Fi in public places?
- A. Connect unencrypted free Wi-Fi for online shopping
- B. Connect Wi-Fi hotspots that are not encrypted
- C. Connect to the paid Wi-Fi hotspot provided by the operator and only browse the web
- D. Connect encrypted freeWi-Fi for online transfer operations
Answer: C
NEW QUESTION 69
ASPF (Application Specific Packet Filter) is a kind of packet filtering basedon the application layer, it checks the application layer protocol information and monitor the connection state of the application layer protocol.
ASPF by Server Map table achieves a special security mechanism. Which statement about ASPF and Server map table are correct? (Multiple choice)
- A. Quintupleserver-map entries achieve a similar functionality with session table
- B. ASPF dynamically create and delete filtering rules
- C. ASPF through server map table realize dynamic to allow multi-channel protocol data to pass
- D. ASPF monitors the packets in the process of communication
Answer: B,C,D
NEW QUESTION 70
IPSec VPN technology does not support NAT traversal when encapsulating with ESP security protocol, because ESP encrypts the packet header
- A. True
- B. False
Answer: B
NEW QUESTION 71
Which of the following encryption algorithm, encryption and decryption keys are the same?
- A. MD5
- B. RSA(1024)
- C. DES
- D. SHA-1
Answer: C
NEW QUESTION 72
When you configure a firewall between the domain security policy, if the 192.168.0.0/24 network segment is set to match object, the following configuration, which is correct? (Choose two.)
- A. policy 1
policy source 192.168.0.0 mask 0.0.0.255 - B. policy 1
policy source 192.168.0.0 255.255.255.0 - C. policy 1
policy source 192.168.0.0 0.0.0.255 - D. policy 1
policy source 192.168.0.0 mask 255.255.255.0
Answer: C,D
NEW QUESTION 73
......
100% Free H12-711 Daily Practice Exam With 290 Questions: https://troytec.getvalidtest.com/H12-711-brain-dumps.html