H12-711_V3.0-ENU Exam Training Practice Tests (Huawei HCIA-Security V3.0)]

Question 1

Please match the following information security risks to information security incidents one by one.[fill in the blank]* physical security riskEnterprise server permissions are loosely set Information Security Management RiskInfected Panda Burning Incense Information Access RiskFire destroyed equipment in computer room application riskTalk to people about leaking company secrets

Correct Answer:

2413

Question 2

aboutClient-InitializedofL2TP VPN, which of the following statements is false?

A. Remote users do not need to installVPNclient software B. LNSThe device receives the userL2TPConnection request, the user can be authenticated according to the user name and password C. LNSAssign private keys to remote usersIPaddress D. remote user accessinternetAfter that, it can be directly sent to the remoteLNSinitiateL2TPtunnel connection request

Correct Answer: A

Question 3

Which of the following security measures does the monitor correspond to?

A. Access control system B. Encrypted VPN C. Firewall D. Intrusion Detection System

Correct Answer: D

Question 4

_____ Mode: Two devices, one master and one backup. Under normal circumstances, service traffic is handled by the active device. When the active device fails, the standby device replaces the active device to process service traffic to ensure that services are not interrupted.[fill in the blank]*

Correct Answer:

Dual-system hot standby active/standby backup

Question 5

Digital envelope technology means that the sender uses the receiver's public key to encrypt the data and then sends the ciphertext to the receiver.

A. True B. False

Correct Answer: A

Question 6

Which of the following descriptions about the DNS protocol is correct?

A. There are four types of servers in the DNS domain name resolution system: root server, top-level domain name server, recursive server and cache server. B. The DNS protocol port number is 53 C. If the DNS cache server does not have the domain name resolution cache to be queried, it will directly query the top-level domain name server D. DNS protocol transport layer can use either TCP or UDP

Correct Answer: A,B,C

Question 7

waiting for insurance2.0Which one of the stipulations"Spam should be detected and protected at key network nodes, and spam protection mechanisms should be upgraded and updated?

A. Malicious code prevention B. communication transmission C. Centralized control D. Border Protection

Correct Answer: A

Question 8

Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution.[fill in the blank]*

Correct Answer:

3142

Question 9

Digital certificates can be divided into local certificates,CAcertificates, root certificates, self-signed certificates, etc.

A. True B. False

Correct Answer: A

Question 10

Which of the following descriptions about digital fingerprints in digital signatures is wrong? ( )[Multiple choice]*

A. The receiver needs to use the sender's public key to unlock the digital signature to obtain the digital fingerprint. B. The receiver will use the sender's public key to calculate the generated data fingerprint and compare it with the received digital fingerprint. C. It is the data obtained by the sender after calculating the plaintext information through the HASH algorithm. D. Digital fingerprints are also known as information digests.

Correct Answer: D

Question 11

Evidence identification needs to address the verification of the integrity of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the criteria for identification of evidence?

A. The standard of legality is to ensure that the content of electronic evidence remains unchanged from the initial acquisition and collection to the submission and use as litigation evidence. B. The relevance standard means that if the telephony evidence can have a substantial impact on the facts of the case to a certain extent, the court should rule that it is relevant. C. The standard of fairness refers to the evidentiary material obtained by the legal subject through legal means, which has evidential capacity. D. The standard of objectivity means that the acquisition, storage, and submission of electronic evidence should be legal, and not constitute a serious violation of basic rights such as national interests, social welfare, and personal privacy.

Correct Answer: B

Question 12

Which of the following is used in digital signature technology to encrypt digital fingerprints?

A. sender's public key B. sender private key C. Receiver's public key D. Receiver's private key

Correct Answer: B

Question 13

Which of the following options are available inwindowsDo you do it in the advanced settings of the firewall?
(multiple choice)

A. Set up connection security rules B. Change notification rules C. Restore defaults D. Set up inbound and outbound rules

Correct Answer: A,B,C,D

Question 14

To configure a NAT policy in command line mode, you need to use the .command ( ) in the system view to enter the NAT policy configuration view. (all lowercase) (fill in the blank)

Correct Answer:

nat-policy

Huawei HCIA-Security V3.0 - H12-711_V3.0-ENU Exam Practice Test