Huawei H12-711_V4.0 Practice Exam – 94 Unique Questions [Q54-Q76]

Q54. Which of the following characteristics does a denial-of-service attack include?

Q55. At what layer does packet filtering technology in the firewall filter packets?

Q56. Which layer of the protocol stack does SSL provide end-to-end encrypted transmission services?

Q57. An enterprise wants to build a server system and requires the following functions: 1. The enterprise needs to have its own dedicated mailbox, and the sending and receiving of emails needs to go through the enterprise’s server; 2. The server must provide file transfer and access services. Users in different departments of the enterprise provide accounts with different permissions: 3. When the enterprise accesses the internal webpage of the enterprise, the enterprise can directly enter the domain name in the browser to access. To meet the above requirements, which of the following servers do enterprises need to deploy? ( )*

Q58. ARP man-in-the-middle attacks are a type of spoofing attack technique.

Q59. Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution. 1. Inhibition stage, 2. recovery phase, 3. Detection stage, 4. eradication phase[fill in the blank]*

Q60. Which of the following zones is not the firewall default security zone?

Q61. When IPSec VPN uses tunnel mode to encapsulate packets, which of the following is not within the encryption scope of the ESP security protocol? ( )[Multiple choice]*

Q62. The following description of investigation and evidence collection, which one is correct

Q63. Which of the following is the numbering range of Layer 2 ACLs?

Q64. IKE SA is a one-way logical connection, and only one IKE SA needs to be established between two peers.

Q65. Certificates saved in DER format may or may not contain a private key.

Q66. As shown in the figure, nat server global202.106.1.1 inside10.10.1.1 is configured on the firewall. Which of the following is the correct configuration for interzone rules? ( )[Multiple choice]*

Q67. What is correct in the following description of Security Alliance in IPSec?
There are two ways to set up an IPSec SA

Q68. What are the correct entries in the following description of firewall security zones?

Q69. The shard cache technology will wait for the arrival of the first shard packet, and then reassemble and decrypt all the packets, and then do subsequent processing by the device to ensure that the session can proceed normally in some application scenarios.

Q70. Which of the following are the backup items that HRP can provide?

Q71. When the Layer 2 switch receives a unicast frame and the MAC address table entry of the switch is empty, the switch discards the unicast frame.

Q72. As shown in the figure, what is the range of the AH protocol authentication range in transmission mode?

Q73. The following description of the construction of a digital certificate, which item is wrong

Q74. When using passive mode to establish an FTP connection, the control channel uses port 20 and the data channel uses port 21. ( )[Multiple choice]*

Q75. The following description of asymmetric encryption algorithms, which item is wrong?

Q76. Which of the following descriptions about the heartbeat interface is wrong ( )?[Multiple choice]*