H12-711-ENU Exam Training Practice Tests (Huawei HCIA-Security V3.0)]

Question 1

Which of the following descriptions about windows logs is wrong?

A. The application log contains events logged by the application or system program, mainly recording events in the running of the program. B. windows server 2008 system logs stored in the Application.evtx C. The system log is used to record the events generated by the operating system components, including the crash of the driver, system components and application software, and data. D. windows server 2008 security log is stored in security.evtx

Correct Answer: B

Question 2

Which of the following are core elements of the IATF (Information Assurance Technology Framework) model? (Multiple choice)

A. Technology B. person C. Environment D. Operation

Correct Answer: A,B,D

Question 3

When the IPSec VPN tunnel mode is deployed, the AH protocol is used for packet encapsulation. In the new IP packet header field, which of the following parameters does not require data integrity check?

A. Destination IP address B. Idetification C. TTL D. Source IP address

Correct Answer: C

Question 4

Which of the following description is wrong about the Intrusion Prevention System (IPS)?

A. IPS devices can be blocked in real time once they detect intrusion B. IDS devices need to be linked to the firewall to block the intrusion. C. IPS devices can be cascaded at the network boundary and deployed online D. IPS devices cannot be bypassed in the network.

Correct Answer: D

Question 5

After the network intrusion event occurs, according to the plan to obtain the identity of the intrusion, the attack source and other information, and block the intrusion behavior, which links of the above actions are involved in the PDRR network security model? (Multiple Choice)

A. Protection link B. Response link C. Recovery link D. Testing link

Correct Answer: B,D

Question 6

As shown in the figure, a NAT server application scenario is configured when the web configuration mode is used.

Which of the following statements are correct? (Multiple choice)

A. When configuring an interzone security policy, set the source security zone to DMZ and the target security zone to Untrust. B. When configuring NAT Server, the internal address is 10.1.1.2 and the external address is 200.10.10.1. C. When configuring NAT Server, the internal address is 200.10.10.1 and the external address is 10.1.1.2. D. When configuring an interzone security policy, set the source security zone to Untrust and the target security zone to DMZ.

Correct Answer: B,D

Question 7

Which of the following is the port number used by L2TP packets?

A. 1701 B. 17 C. 500 D. 4500

Correct Answer: A

Question 8

In the classification of the information security level protection system, which of the following levels defines the damage to the social order and the public interest if the information system is destroyed? (multiple choice)

A. Second level System audit protection level B. Fourth level Structured protection C. Third level Security mark protection D. First level User-independent protection level

Correct Answer: A,B,C,D

Question 9

In Huawei SDSec solution, which layer of equipment does the firewall belong to?

A. Executive layer B. Monitoring layer C. Control layer D. Analysis layer

Correct Answer: A

Question 10

In IPSEC VPN, which of the following scenarios can be applied by tunnel mode?

A. between the host and the host B. Between tunnel mode and transport mode C. between hosts and security gateways D. between security gateways

Correct Answer: D

Question 11

Both A and B communicate data. If an asymmetric encryption algorithm is used for encryption, when A sends data to B, which of the following keys will be used for data encryption?

A. B private key B. A public key C. B public key D. A private key

Correct Answer: C

Question 12

Which of the following are parts of the PKI architecture? (Multiple Choice)

A. Certificate Storage organization B. Certificate Registration Authority C. Certification Authority D. End entity

Correct Answer: A,B,C,D

Huawei HCIA-Security V3.0 - H12-711-ENU Exam Practice Test