最新的Huawei Certified ICT Associate認證 H12-711_V4.0考試題庫

問題1

Server mapping entries have fewer elements than session entries, so it can be applied in NAT and ASPF to allow Internet users to initiate connections with the intranet.

A. TRUE

B. FALSE

正確答案: A

說明：（僅 VCESoft 成員可見）

問題2

Which of the following is the numbering range of Layer 2 ACLs?

A. The 4000~4999

B. @2000~2999

C. The 1000~1999

D. The 3000~3999

正確答案: D

問題3

As shown in the figure, which of the following shows the authentication range of ESP in transport mode?

A. 1

B. 4

C. 3

D. 2

正確答案: C

說明：（僅 VCESoft 成員可見）

問題4

Which security zone can be deleted and its priority can be reconfigured?

A. Trust

B. DMZ

C. Untrust

D. ISP

正確答案: B

說明：（僅 VCESoft 成員可見）

問題5

In the automatic backup mode of hot standby on the second machine, which of the following sessions is backed up?

A. UDP first packet session

B. TCP half-connection session

C. ICMP session

D. Self-session to the firewall

正確答案: C

問題6

Which of the following statements is incorrect about Portal authentication?

A. In user-initiated authentication, users proactively initiate authentication and can access network resources only after authentication.

B. The built-in Portal authentication triggering modes include session authentication and user-initiated authentication.

C. In Portal authentication, users can be authenticated only on the firewall authentication page.

D. In session authentication, users do not initiate identity authentication. Instead, they access the HTTP service first and are authenticated during the access. Service access is allowed only after authentication.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題7

Please order the following steps in the PKI life cycle correctly, 1. Issued, 2. storage, 3. Update, 4. verify.

正確答案:

1243

問題8

Which of the following problems cannot be solved using PKI?

A. No paper receipt is used in transaction, making arbitration difficult.

B. The transaction parties cannot verify the identities of each other.

C. The network is congested due to heavy traffic. As a result, the server cannot provide services properly.

D. Data may be eavesdropped and tampered with during transmission, and information security cannot be ensured.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題9

The following description of IDS, which items are correct
The IDS cannot be linked to the firewall.

A. The IDS can be upgraded flexibly and in a timely manner, and the strategic configuration operation is convenient and flexible.

B. With IDS, system administrators can capture traffic from critical nodes and do intelligent analysis to find anomalous and suspicious network behavior and report it to administrators.

C. Mouth IDS is a fine-grained detection device, through which the live network can be monitored more accurately.

正確答案: A,B,C

問題10

Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution.

正確答案:

3142

問題11

The following description of the construction of a digital certificate, which item is wrong

A. The issuer signs the certificate information with the private key.

B. The structure of the certificate follows the specification of the X.509 v3 version.

C. The simplest certificate consists of a public key, a name, and a digital signature from a certificate authority.

D. The name of the device that issued the certificate can be different from the subject name in the issuer certificate.

正確答案: D

問題12

The following description of the AH protocol in IPSec VPN, which one is wrong?

A. Supports data integrity checking

B. Supports data source validation

C. Support anti-message replay

D. Supports packet encryption

正確答案: D

問題13

On a firewall, security policies with the permit action do not need to be configured for traffic between users in the same zone.

A. TRUE

B. FALSE

正確答案: A

說明：（僅 VCESoft 成員可見）

問題14

Which of the following attributes are contained in the distinguished name DN in LDAP?

A. OU

B. DIT

C. CN

D. DC

正確答案: A,C,D

說明：（僅 VCESoft 成員可見）

最新的Huawei HCIA-Security V4.0 - H12-711_V4.0免費考試真題

最新更新

站內鏈接

聯系我們