[Dec 11, 2024] Latest Huawei Certified ICT Associate H12-711_V4.0 Actual Free Exam Questions
Huawei Certified ICT Associate H12-711_V4.0 Dumps Updated Practice Test and 942 unique questions
NEW QUESTION # 316
As shown, in transmission mode, which of the following locations should the AH header be inserted in?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 317
What is the security level of the Untrust zone in Huawei firewalls?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 318
What is the authentication range of the AH protocol in tunnel mode?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 319
Which of the following is not part of the digital certificate?
- A. Public key
- B. Private key
- C. Issuer
- D. Validity period
Answer: B
NEW QUESTION # 320
Use the public IP address of the outgoing interface as the address after NAT, and convert the address and port at the same time.
Which of the following types of NATs fit the above description?
- A. NAPT
- B. Easy IP
- C. Triplet NAT
- D. NAT No-PAT
Answer: B
NEW QUESTION # 321
Firewalls are divided according to protection objects. Windows Firewall belongs to ()
- A. Software firewall
- B. Network firewall
- C. Hardware firewall
- D. Stand-alone firewall
Answer: D
NEW QUESTION # 322
Which of the following is not a type of Windows log event?
- A. Information
- B. Warning
- C. Error
- D. Debugging
Answer: C
NEW QUESTION # 323
Which of the following VPN technology options support encryption of data packets? (Multiple Choice)
- A. GRE VPN
- B. SSL VPN
- C. L2TP VPN
- D. IPsec VPN
Answer: B,D
NEW QUESTION # 324
When users in the external network access the internal server, use the two-way NAT function to simultaneously convert the source and destination addresses of the packets, which can avoid setting up a gateway on the internal server and simplify configuration.
- A. False
- B. True
Answer: B
NEW QUESTION # 325
Which of the following descriptions of digital fingerprints in digital signatures is incorrect?
- A. The receiver will use the sender's public key to calculate the generated data fingerprint and compare it with the received digital fingerprint.
- B. The receiver needs to use the sender's public key to decrypt the digital signature and obtain the digital fingerprint.
- C. Digital fingerprint is also called information summary.
- D. It is the data obtained by the sender after calculating the plaintext information through the HASH algorithm.
Answer: A
NEW QUESTION # 326
Which of the following descriptions about IPsecVPN are correct? (Multiple Choice)
- A. IPsec VPN does not support user authentication.
- B. IPsecVPN supports encryption of communication data that needs to be encrypted on the internal network at both ends of the tunnel.
- C. IPsecVPN has powerful data encryption function and supports multiple symmetric encryption methods and combinations.
- D. IPsec VPN has no requirements for user clients.
Answer: B,C
NEW QUESTION # 327
Because a server is a type of computer, we can use our personal computers as servers in enterprises.
- A. False
- B. True
Answer: A
NEW QUESTION # 328
Which of the following protection levels are included in the TCSEC standard? (Multiple Choice)
- A. Autonomous protection level
- B. Mandatory protection level
- C. Passive protection level
- D. Verify protection level
Answer: A,B,D
NEW QUESTION # 329
Which of the following descriptions of SSL VPN services are correct? (Multiple Choice)
- A. Mobile office users use network extension services when accessing intranet IP resources
- B. Mobile office users use the port forwarding service when accessing intranet UDP resources.
- C. Mobile office users use the file sharing service when accessing the intranet file server
- D. Mobile office users use the file sharing service when accessing the intranet file server
Answer: A,C,D
NEW QUESTION # 330
The hash algorithm is collision-resistant, that is, if you input different data, the output Hash value cannot be the same.
- A. False
- B. True
Answer: A
NEW QUESTION # 331
When the company network administrator performs dual-machine hot backup, considering the possibility of inconsistent round-trip paths, and wants to enable the session fast backup function, the command that needs to be entered is ()
Answer:
Explanation:
hrp mirror session enable
NEW QUESTION # 332
Which of the following options are malicious programs? (Multiple Choice)
- A. Virus
- B. Vulnerabilities
- C. Trojan horse
- D. Worms
Answer: A,C,D
NEW QUESTION # 333
For ICMP messages, the firewall only supports status detection for Ping echo request messages and Ping echo response messages. Other types of ICMP messages do not perform status detection.
- A. False
- B. True
Answer: B
NEW QUESTION # 334
Which of the following does not belong to system security?
- A. Security of services running in the system
- B. Database system configuration security
- C. Security database
- D. Operating system security
Answer: C
NEW QUESTION # 335
Intrusion prevention signatures are used to describe the characteristics of attack behavior in the network. Firewalls detect and prevent attacks by comparing data flows with intrusion prevention signatures.
- A. False
- B. True
Answer: B
NEW QUESTION # 336
In the Linux system, which of the following is the command to query the P address information? ( )[Multiple choice]*
- A. ipconfig
- B. display ip interface brief
- C. ifconfig)
- D. display ip
Answer: C
NEW QUESTION # 337
In the IS027001 certification process, which of the following items are part of the terminal security inspection in the formal audit? (Multiple Choice)
- A. Anti-virus software installation
- B. Screensaver
- C. On-site observation of the computer room
- D. Training records
Answer: A,B,C
NEW QUESTION # 338
......
Verified H12-711_V4.0 dumps Q&As - 100% Pass from Actual4Exams: https://latestdumps.actual4exams.com/H12-711_V4.0-real-braindumps.html