H12-721-ENU Exam Training Practice Tests (Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network))]

Question 1

When using the Radius server to authenticate users, you need to configure the corresponding username and password on both the Radius server and the firewall.

A. True B. False

Correct Answer: B

Question 2

In the L2TP over IPSec application scenario, Huawei USG6000 product will encapsulate the original data packet with IPsec and then encapsulate the data packet with L2TP.

A. FALSE B. TRUE

Correct Answer: A

Question 3

An enterprise deploys the Huawei USG6000 series firewall on the network. Users must log in to the firewall through Telnet or SSH. Each command entered by the user must be authorized by the server.
Which of the following authentication methods can meet the requirements?

A. LDAP B. HWTACACS C. Radius D. AD

Correct Answer: B

Question 4

Which of the following technologies does Huawei WAF5000 use to deal with special web attacks such as hotlinking and cross-site request forgery?

A. Behavior State Chain Detection technology B. Abnormal state tracking technology C. Signature Matching technology D. Illegal link filtering technology

Correct Answer: A

Question 5

Relationship between virtual system and VPN instance, which of the following options is wrong?

A. The underlying of the proposed system is dependent on the automatically generated VPN instance. When the upper layer services are configured, it is not necessary to link with the VPN instance. B. Administrators can also use the ip vpn-instance command to manually create a VPN instance for route isolation. C. When you create a virtual system, a VPN instance of the same name is automatically generated. D. The automatically generated VPII instance must be bound to the VPN instance on the interface, just like the manually configured VPN instance.

Correct Answer: D

Question 6

Server load balancing technology uses Server-map tables and session tables to implement mapping between virtual servers and real servers. What kind of server-map table is generated?

A. Dynamic server-map table B. Forward STUN type protocols such as QQ/MSN and TFTP C. Static server-map table D. NAT NO-PAT

Correct Answer: C

Question 7

Which of the following statement is correct about VRRP packet?

A. VRRP uses TCP packets B. The destination address of VRRP packet is 224.0.0.18 C. VRRP packets are unicast packets D. VRRP uses UDP packets

Correct Answer: B

Question 8

SSL VPN adopts the B/S architecture design. The remote user terminal does not need to install additional client software. Directly using a Web browser can safe and fast access to corporate intranet resources.

A. FALSE B. TRUE

Correct Answer: B

Question 9

Which of the following is incorrect about IPsec?

A. ESP does not verify IP headers in transmission mode B. ESP can support NAT traversal C. AH can only verify that data packets cannot be encrypted D. AH protocol uses 3DES algorithm for data validation

Correct Answer: D

Question 10

Which statements are correct about the shunting of virtual systems? (Multiple Choice)

A. The process of determining the ownership of a message and a virtual system is called shunting. B. The process of classifying traffic is called shunting. C. Through shunting, packets entering the device can be sent to the correct virtual system for processing. D. Packets can be classified and processed by shunting.

Correct Answer: A,C

Question 11

About Radius certification process, there are the following steps:
1. The Radius client in the network device receives the username and password and sends an authentication request to the Radius server.
2. When the user logs in to a network device such as the USG, the user name and password will be sent to the Radius client.
3. After the Radius server receives a valid request, it completes the authentication and returns the required user authorization information to the Radius client.
Which of the following order is correct?

A. 1-2-3 B. 2-3-1 C. 3-2-1 D. 2-1-3

Correct Answer: D

Question 12

GRE Over IPSec tunnel can achive the tranform of IPX packets.

A. True B. False

Correct Answer: A

Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721-ENU Exam Practice Test