H12-711_V3.0 Free Practice Test

- (Exam Topic 3)
In which of the following scenarios does the firewall generate the Server-map table?

1. A. When the firewall generates a session table, it will generate a Server-map table
2. B. ASPF is deployed on the firewall and forwards the traffic of the multi-channel protocol
3. C. Security policies are deployed on the firewall and traffic is released
4. D. NAT Server is deployed on the firewall

Correct Answer: BCD

- (Exam Topic 3)
Which of the following options are available for IPSec VPN peer authentication?

1. A. Digital signature
2. B. Digital certificate
3. C. Digital envelope
4. D. asymmetric key

Correct Answer: ABC

- (Exam Topic 1)
Security policy conditions can be divided into multiple fields, such as source address, destination address, source port, destination port, etc.
"and"That is to say, this policy is hit only if the information in the packet matches all fields.

1. A. True
2. B. False

Correct Answer: B

- (Exam Topic 2)
Which of the following options belong to the default security zone of Huawei Firewall? (multiple choice)

1. A. Zonearea
2. B. Trustarea
3. C. Untrustarea
4. D. Securityarea

Correct Answer: BC

- (Exam Topic 1)
the following aboutVGMPWhich protocol description is wrong?

1. A. VGMPmultiple on the same firewallVRRPAll backup groups are added to one management group, and all backup groups are managed by the management group.VRRPbackup group
2. B. VGMPthrough the unified control ofVRRPSwitching the status of the backup group to ensure that allVRRPBackup group status is consistent
3. C. Status isActiveofVGMPThe group device will periodically sendhellomessage,stdandbyThe end is only responsible for monitoringhellomessage, will not respond
4. D. By default whenstandbyend threehelloThe message period does not receive the message sent by the peerhellomessage, it will think that the peer end is faulty, so it will switch itself toActivestate.

Correct Answer: C