H12-721 Exam Training Practice Tests (Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network))]

Question 1

After the smart route configuration is complete, the traffic is not forwarded according to the configuration. Which actions that the administrator can take? (Multiple choices)

A. Wait for the aging of the session table B. Manually clear the session table information through the command line reset firewall session table C. Reconfigure the smart routing policy D. Submit the configuration for it to take effect

Correct Answer: A,B

Question 2

The global routing means that when there are multiple equal-cost routes to the destination network, the Huawei USG6000 firewall can dynamically select the outbound interface according to the link bandwidth, weight, priority, or automatically detected link quality set by the administrator, to achieve the reasonable use of link resources and improve the user experience.

A. True B. False

Correct Answer: A

Question 3

When the administrator assigns interface G1/0/0 to virtual system vsysa, it finds that the allocation fails. Which of the following reason is impossible?

A. The interface has been added to the security zone of other virtual systems. B. The interface is not in the UP state. C. This interface is a Layer 2 interface and cannot be directly assigned to a virtual system. D. The G1/0/0 port has been allocated to other virtual systems.

Correct Answer: B

Question 4

To prevent link overload and link congestion, the administrator can set an overload protection threshold on the interface. When the bandwidth usage of a link reaches the threshold, the traffic of the established session is still forwarded from the link, but the traffic of the newly established session is no longer forwarded through this link.

A. True B. False

Correct Answer: A

Question 5

About the configuration command in the smart routing, which statement of the following is correct? (Multiple Choice)
#
multi-interface
mode priority-of-link-quality
priority-of-link-quality parameter delay jitter loss
priority-of-link-quality protocol tcp-simple
add interface GigabitEthernet1/0/1
add interface GigabitEthernet1/0/2

A. Parameter of link quality detection has the delay, jitter, and packet loss rate B. Use the way of bandwidth-based load sharing C. Selected 3 links for sharing D. Use the TCP protocol to detect

Correct Answer: A,D

Question 6

About the description of the process of network expansion, which statement is wrong?

A. The remote user's local PC automatically generates a virtual network adapter. The virtual gateway randomly selects an IP address from the address pool and assigns it to the remote user's virtual network adapter. B. After the remote user virtual network adapter obtained the private IP address, it need to manually configure the route to the intranet server so that the internal network resources can be accessed normally. C. The remote user sends a business request packet to the Server on the intranet. The packet arrives to the virtual gateway through the SSL VPN tunnel. D. After the network extension function is triggered, an SSL VPN tunnel needs to be established first between the remote user and the virtual gateway.

Correct Answer: B

Question 7

Which of the following resource allocation methods are supported by Huawei USG6000 product resource allocation?

A. Automatic allocation B. Non-quota allocation C. Manual allocation D. Quota allocation

Correct Answer: C,D

Question 8

When traffic is finally sent from the outgoing interface, it is limited by the bandwidth of the outgoing interface. If the traffic is greater than the outbound interface bandwidth, which of the following will be used to do queue scheduling for traffic to ensure that high-priority packets are sent preferentially?

A. QoS B. Forwarding priority C. Bandwidth policy matching order D. Remark DSCP priority

Correct Answer: B

Question 9

As shown in the figure, the remote user uses the Web proxy to access the intranet resources. Which of the following options is wrong for the Web proxy analysis? (Multiple options)

A. If you want to implement the Web proxy function, the remote user must first establish an HTTPS session with the FW virtual gateway. B. The implementation of the web link has an encryption function, which can ensure remote users secure access to intranet resources. C. The web proxy is implemented using the web link. D. After the remote user establishes an HTTP session with the FW virtual gateway, it then establishes an HTTPS session with the Web Server.

Correct Answer: B,D

Question 10

If the firewall works at Layer 2 and is directly connected to the intranet or connected through a Layer 2 switch, which of the following cannot be used as a matching condition for the policy route?

A. MAC address B. DSCP priority C. Inbound interface D. IP address

Correct Answer: A

Question 11

The server health detection mechanism is enabled on the USG firewall of an enterprise to detect the running status of three real servers (Server A, Server B, and Server C) at the back end. When the USG fails to receive any response packet from Server B.
At this point, the use of Server e is forbidden and traffic is distributed to other servers according to the configured policy.

A. True B. False

Correct Answer: A

Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721 Exam Practice Test