H12-711_V3.0 Free Practice Test

- (Exam Topic 2)
Which of the following is false about scanning for vulnerabilities?

1. A. Vulnerabilities are known in advance and discovered after the fact.
2. B. Vulnerabilities are generally patchable
3. C. Vulnerabilities are security risks that expose computers to hacking
4. D. Vulnerabilities are avoidable

Correct Answer: D

- (Exam Topic 1)
Which of the following is not part of a digital certificate?

1. A. public key
2. B. private key
3. C. Validity period
4. D. Issuer

Correct Answer: B

- (Exam Topic 2)
Which of the following is network address port translation (NAPT) and only translate network addresses (No-PAT) difference?

1. A. go throughNo-PATAfter conversion, for external network users, all packets come from the sameIPaddress
2. B. No-PATOnly supports protocol port translation at the transport layer
3. C. NAPTOnly supports protocol address translation at the network layer
4. D. No-PATSupports protocol address translation at the network layer

Correct Answer: D

- (Exam Topic 1)
Firewall usagehrp standby config enableAfter the command to enable the configuration function of the standby device, all the information that can be backed up can be configured directly on the standby device, and the configuration on the standby device can be synchronized to the active device.

1. A. True
2. B. False

Correct Answer: A

- (Exam Topic 1)
When the firewall upgrades the signature database and virus database online through the security service center, the firewall is required to be able to connect to the Internet first, and theDNSaddress

1. A. True
2. B. False

Correct Answer: A