Huawei H12-711 考試概覽:

認證廠商:	Huawei
考試名稱:	Huawei Certified ICT Associate - Security V3.0 (H12-711)
考試代碼:	H12-711
考試時間:	90 分鐘
相關認證:	HCIP-Security HCIE-Security
實際考試題數:	60-70
支援語言:	英文, 簡體中文
證照有效期限:	3 年
考試形式:	單選題, 多選題
考試費用:	約 200 USD（因地區而異）
及格分數:	600/1000
推薦課程:	Huawei HCIA-Security 培訓課程
考試報名:	華為認證官方入口網站 Pearson VUE Huawei 考試
範例考題:	Huawei H12-711 範例考題
考試方式:	線上監考或授權測試中心（Pearson VUE / Huawei 考試中心，視地區而定）
必備條件:	無強制先決條件，建議具備基礎網路知識
官方大綱網址:	https://e.huawei.com/en/talent/#/cert

Huawei H12-711 考試大綱主題:

章節	目標
主題 1: 網路攻擊防禦	- 攻擊類型與防禦方法 1. DDoS 攻擊 2. 欺騙與嗅探
主題 2: 使用者認證與存取控制	- AAA 架構 1. 認證、授權、計費
主題 3: 安全設備與技術	- VPN 技術 1. SSL VPN 概述 2. IPSec VPN 基礎 - 防火牆基礎 1. 狀態檢測 2. 安全區域與策略
主題 4: 網路安全基礎	- 安全概念與原則 1. 常見安全威脅與攻擊類型 2. 機密性、完整性、可用性 (CIA)
主題 5: 安全維運	- 安全管理基礎 1. 安全策略設定 2. 日誌分析與監控

最新的 HCNA-Security H12-711 免費考試真題：

問題 #1

When Firewall does dual-system hot backup networking, in order to achieve the overall status of the backup group switching, which of the following protocol technology need to be used?

A. HRP
B. VGMP
C. VRRP
D. OSPF

問題 #2

Which of the following guarantees "should detect and protect spam at critical network nodes and maintain upgrades and updates of the spam protection mechanism" in security 2.0?

A. Border protection
B. Centralized control
C. Malicious code prevention
D. Communication transmission

問題 #3

Which of the following statements is wrong about the firewall gateway's anti-virus response to the HTTP protocol?

A. Alarm mode device only generates logs and sends them out without processing the files transmitted by the HTTP protocol.
B. Response methods include announcement and blocking
C. Blocking means that the device disconnects from the HTTP server and blocks file transfer.
D. When the gateway device blocks the HTTP connection, push the web page to the client and generate a log.

問題 #4

The following security policy command, representatives of the meaning:

A. banned from trust region access to untrust region and the source address is 10.1.0.0/16 segment all the hosts ICMP message
B. banned from trust region access to untrust region and the destination address is 10.1.10.10 host ICMP message
C. banned from trust region access to untrust region and the source address is 10.2.10.10 host to all the hosts ICMP message
D. banned from trust region access to untrust region and the destination address is 10.1.0.0/16 segment all hosts ICMP message

問題 #5

Which of the following are the main implementations of gateway anti-virus? (Multiple choice)

A. Agent scanning method
B. Package inspection method
C. File killing method
D. Stream scanning method

問題與答案：

問題 #1
答案： B

問題 #2
答案： C

問題 #3
答案： B

問題 #4
答案： A

問題 #5
答案： A,D