H12-731-ENU Exam Training Practice Tests (Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security))]

Question 1

When the firewall uses WEB redirection password authentication, the user does not take the initiative to authenticate, but first accesses the business, and the firewall redirects the page to the "authentication page". After successful authentication, it automatically jumps to the page the user visited before.

A. FALSE B. TRUE

Correct Answer: B

Question 2

The ARP protocol is used to map the IP address to the correct MAC address, so that the device can encapsulate the correct frame header on the data frame to complete the data forwarding.
If the ARP table is abnormal, it will directly cause the device to fail to forward packets. In the dual-system hot backup scenario, which of the following descriptions are correct when the active and standby firewalls respond to ARP?

A. Request the IP address of the NAT address pool, the current master device responds with a virtual MAC, and the standby device does not respond. B. Request the real IP address of the interface and reply with the real MAC of the interface. C. Request VRRP virtual IP address, the current master device responds with virtual MAC, and the standby device does not respond. D. Configure the ARP proxy to request ARP source IP and destination IP in the same network segment at the same time.

Correct Answer: B,D

Question 3

Which statement is correct about the Portal authentication process?

A. Portal authentication flow is only used in web authentication. B. When the switch receives the Portal online message, it will send a Radius authentication request to the Radius server. C. The server will only send an authentication message to one Portal device for Portal authentication of one terminal. D. The result information of the security check will not be carried in the Portal authentication process.

Correct Answer: B

Question 4

In the networking application of the dual-system hot-standby mode using the USG6600, which aspects should be paid attention to?

A. The IP addresses of the active and standby interfaces should be the same B. NAT address pool and VRRP should be bound C. Fast session backup D. The back and forth paths should be the same

Correct Answer: C,D

Question 5

According to the "GB/T 22240-2008 Information Security Technology Information System Security Level Protection Grading Guide", information systems are divided into five levels according to different levels, of which the protection capabilities of the five levels include:

A. undefined B. Resources that can protect the system from malicious attacks, severe natural disasters, and other threats of considerable severity from national-level, hostile organizations, and resource-rich threat sources under a unified security strategy Damage, can find security breaches and security incidents, after the system is damaged, can quickly restore all functions. C. Able to protect the system from malicious attacks from external small organizations, threat sources with few resources, general natural disasters, and other threats of considerable damage to important resources, and to discover important security Vulnerabilities and security incidents, after the system is compromised, can restore some functions for a period of time. D. It can protect the system from malicious attacks from external organized groups, threat sources with relatively rich resources, serious natural disasters, and other major threats caused by relatively harmful threats under a unified security strategy. Resource damage can find security loopholes and security incidents, and after the system is damaged, most functions can be restored.

Correct Answer: A

Question 6

USGA G0/0/2 (30.1.1.2) ----------------------------- (30.1.1.1) G0/0/2 USGB
A network adopts the above topology and establishes BFD with USGA and USGB, but it is found that the BFD session cannot be Up. The most probable cause is:
<USGA> display bfd session all
-------------------------------------------------- -------------------------------------------------- -------------
Local Remote Peer IP Address Interface Name State Type
-------------------------------------------------- -------------------------------------------------- ------------
60 20 30.1.1.1 GigabitEthernet0/0/2 Down Static
-------------------------------------------------- -------------------------------------------------- ------------
<USGB> display bfd session all
-------------------------------------------------- -------------------------------------------------- -------------
Local Remote Peer IP Address Interface Name State Type
-------------------------------------------------- -------------------------------------------------- ------------
60 20 30.1.1.2 GigabitEthernet0/0/2 Down Static
-------------------------------------------------- -------------------------------------------------- ------------

A. The shutdown command is configured on one side of the BFC session B. BFD session with unbound outbound interface C. BFC session configuration not committed D. Identifiers at both ends of the BFC session do not correspond

Correct Answer: D

Question 7

With the continuous advancement of informatization and information security assurance in our country, strengthening and standardizing the management of information security service qualifications has become an important basic work in information security management.
Which of the following are the qualification certifications provided by China Information Security Certification Center?

A. Safety R&D Service Qualification Certification B. Emergency Treatment Service Qualification Certification C. Security Deployment Service Qualification Certification D. Risk Assessment Service Qualification Certification

Correct Answer: B,D

Question 8

Which of the following options is not part of the visitor management process?

A. The account is automatically offline B. Account Application C. Account Approval D. Account authorization E. Internet Behavior Audit F. page customization

Correct Answer: A

Question 9

In the Remote Access VPN scenario, the remote PC uses the Secoway VPN Client and the firewall to establish a VPN. Which of the following statements is correct?

A. use l2tp dialing by default B. use l2tp over ipsec dial by default C. Default use transfer mode D. Tunnel mode is used by default

Correct Answer: A,D

Question 10

In Huawei NGFW, the network with inconsistent packet return paths is as follows, using the IPS function, which of the following statements is correct?

A. It is recommended to enable bidirectional packet filtering B. The IPS function supports networks with inconsistent packets going back and forth. C. Disable link status detection D. It is recommended to use dual-system hot backup networking

Correct Answer: C

Question 11

In the dual-system hot-standby network, the management group status on the two USGs is Active. What is the possible reason?

A. set a long preemption delay B. Fast session backup not set C. The physical line of the heartbeat has failed D. Backup channel interface not configured

Correct Answer: C

Question 12

What functions are included in the firewall UTM feature?

A. Traffic-based attack defense B. URL filtering C. IPS D. AV E. content filtering

Correct Answer: B,C,D,E

Question 13

Regarding the trigger mechanism of 802.1X authentication, which of the following descriptions are correct?

A. The authentication device can trigger authentication in multicast or unicast. B. The 802.1X authentication trigger can only be initiated by the client. C. 802.1X authentication can only be initiated by an authentication device (such as an 802.1X switch). D. The 802.1X client can trigger authentication by multicast or broadcast.

Correct Answer: A,D

Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) - H12-731-ENU Exam Practice Test