Updated Dec 15, 2023 Verified H12-711 dumps Q&As - 100% Pass [Q121-Q141]

Updated Dec 15, 2023 Verified H12-711 dumps Q&As - 100% Pass

New 2023 Latest Questions H12-711 Dumps - Use Updated Huawei Exam

NEW QUESTION # 121
Which of the following is not included in the Corporate Impact Analysis (BIA)?

A. Risk identification
B. Business priority
C. Accident handling priority
D. Impact assessment

Answer: D

NEW QUESTION # 122
Information security levelprotection is the basic system of national information security work

A. True
B. False

Answer: A

NEW QUESTION # 123
After the firewall uses the hrp standby config enable command to enable the standby device configuration function, all the information that can be backed up can bedirectly configured on the standby device, and the configuration on the standby device can be synchronized to the active device.

A. True
B. False

Answer: A

NEW QUESTION # 124
Which of thefollowing 3re the versions of the SNMP protocol? (Multiple choice)

A. SNMPv2c
B. SNMPv3
C. SNMPvl
D. SNMPv2b

Answer: A,B,C

NEW QUESTION # 125
Regarding the problem that the two-way binding user of the authentication-free method cannot access the networkresources, which of the following options are possible reasons? (Multiple choice)

A. The authentication-free user does not use the PC with the specified IP/MAC address.
B. The authentication-free user and the authenticated user are in the same security zone
C. The authentication action in the authentication policy is se- to "No credit / free authentication"
D. Online users have reached a large value

Answer: A,D

NEW QUESTION # 126
Which of the following attacks does not belong to special packet attack?

A. IP address scanning attack
B. ICMP redirect packet attack
C. Large ICMP packet attack
D. ICMP unreachable packet attack

Answer: A

NEW QUESTION # 127
Which statement about NAT is wrong? (Choose two.)

A. NAT technology can support multi-channel protocols such as FTP and other standard multi-channel protocol
B. NAT Outbound refers to conversion to the source IP address, NAT Inbound refers to conversion to the destination IP address
C. Outbound direction NAT can support the following application modes: one-on-one, many-to-many and many-to-one
D. NAT Inbound command and NAT Server command have the same functions, can choose to configure according to personal preference

Answer: B,D

NEW QUESTION # 128
Which level is the corresponding warning for major network security incidents that occur?

A. Red warning
B. Orange warning
C. Yellow warning
D. Blue warning

Answer: B

NEW QUESTION # 129
When configuring security policy, a security policy can reference an address set or configure multiple destination IP addresses.

A. True
B. False

Answer: A

NEW QUESTION # 130
Which of the following attacks is not a cyber-attack?

A. IP spoofing attack
B. MAC address spoofing attack
C. Smurf attack
D. ICMP attack

Answer: B

NEW QUESTION # 131
Which of the following description are correct about the security policy action and security configuration file? (Multiple Choice)

A. If the action of the security policy is "prohibited", the device will discard this traffic and will not perform content security check later.
B. The security configuration file can be applied without being applied to the security policy allowed by the action.
C. The security configuration file must be applied to the security policy that is allowed to take effect.
D. If the security policy action is "Allow", the traffic will not match the security configuration file.

Answer: A,C

NEW QUESTION # 132
Which of the following is wrong about the management of Internet users?

A. Each user group can belong to multiple user groups
B. Each user group can include multiple users and user groups
C. Each user belongs to at least one user group, also can belong to multiple user groups
D. The system has a default user group by default, which is also the system default authentication domain.

Answer: A

NEW QUESTION # 133
HRP (Huawei Redundancy Protocol) Protocol to backup the connection state of data includes:

A. The dynamic blacklist
B. The routing table
C. TCP/UDP sessions table
D. Server Map table

Answer: A,C,D

NEW QUESTION # 134
Which of the following is true about firewall security policies?

A. By default, the security policy can control unicast packets andbroadcast packets.
B. By default, the security policy can control multicast.
C. By default, the security policy can control unicast packets, broadcast packets, and multicast packets.
D. By default, the security policy only controls unicast packets.

Answer: D

NEW QUESTION # 135
Which of the following option does not belong to symmetric encryption algorithm?

A. AES
B. 3DES
C. DES
D. RSA

Answer: D

NEW QUESTION # 136
What are the advantages of address translation techniques included? (Multiple choice)

A. Many host address conversion can make the internal LAN to share an IP address on the Internet
B. Address conversion that can handle the IP header of encryption
C. Address conversion can block internal network users,improve the safety of internal network
D. Address conversion can make internal network users (private IPaddress) easy access to the Internet

Answer: A,C,D

NEW QUESTION # 137
Administrators want to clear the current session table. Which of the following command is correct?

A. display session table
B. clear firewall session table
C. reset firewall session table
D. display firewall session table

Answer: C

NEW QUESTION # 138
Which of the following guarantees "should detect and protect spam at critical network nodes and maintain upgrades and updates of the spam protection mechanism" in security 2.0?

A. Border protection
B. Malicious code prevention
C. Communication transmission
D. Centralized control

Answer: B

NEW QUESTION # 139

Execute the command on the Firewall and display the above information.
Which of the following description is correct? (Choose two.)

A. The virtual IP address of the firewall G1/0/1 interface is 202.30.10.2
B. The priority of the VRRP backup group of the firewall VRID 1 is 100
C. This Firewall VGMP group status is Active
D. If the master device fails, it will not switch

Answer: B,C

NEW QUESTION # 140
The VRRP advertisement packet of the Huawei USG firewall is a multicast packet. Therefore, each firewall in the backup group must be able to implement direct Layer 2 interworking