H12-711-V4-0Preview

Which of the following statements is correct about the default zones of Huawei firewalls?

Which of the following actions can be taken on matched data flows by a firewall authentication policy? (Choose all that apply.)

Which of the following statements are correct about gratuitous ARP? (Choose all that apply.)

Security policies check data flows that pass through firewalls. Only the data flows that match the security policies are allowed to pass.

Which of the following statements are correct about the functions of L2TP? (Choose all that apply.)

Which of the following statements is correct about the heartbeat link and heartbeat interface of a firewall?

In single sign-on mode, the firewall functions as the authentication point to obtain user login information and enable users to connect to the network through the firewall.

DRAG DROP -
Arrange the call setup process of an L2TP tunnel in the correct order according to the following figure.

Which of the following statements is incorrect about IPsec SA?

When the VGMP group priority of the local firewall is higher than that of the peer firewall, the VGMP group status of the local firewall is Master.

User authentication is an identity authentication mechanism. It can verify the identity of a user and obtain the mapping between the user and the IP address. User authentication is the basis for configuring user-specific policies.

When logging in to the web UI through HTTPS, you need to specify a local certificate issued by a CA that the web browser trusts for the HTTPS client on the device. Because the web browser can verify the local certificate, this approach avoids malicious attacks and ensures secure logins of administrators.

Which of the following protocols are file transfer protocols? (Choose all that apply.)

Which of the following is not a function of public key technologies?

You can specify 5-tuple matching conditions in a security policy to implement intra-zone and inter-zone access control. Which of the following is not an item in the 5-tuple?

Which of the following enterprise internal services can be provided to mobile office users through the port forwarding function of SSL VPN? (Choose all that apply.)

Which of the following algorithms are hash algorithms? (Choose all that apply.)

Which of the following statements are correct about IKEv2 negotiation? (Choose all that apply.)

If a firewall detects a virus-infected file that is an application exception, the firewall processes the file according to the response action (permit, alert, or block) of the application exception. Which of the following is the alert action?

Which of the following protocols are transport layer protocols? (Choose all that apply.)

Which of the following statements are correct about single sign-on for Internet access users? (Choose all that apply.)

In IPsec, AH provides data origin authentication, data integrity check, and anti-replay, but does not provide encryption.

Symmetric key encryption features high efficiency, simple algorithm, and low cost. It is suitable for encrypting a large amount of data.

A NAT policy consists of the post-NAT address (address in the address pool or address of the outbound interface), matching condition, and action. Which of the following is not a matching condition of a NAT policy?