H12-711_V3.0 Free Practice Test

- (Exam Topic 2)
Use the Ping command on the firewall to test the reachability to the server (the security zone where the server is located is the DMZ). If a security policy is configured to allow the test traffic, the source security zone is ______. [fill in the blank]*
Solution:
local

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 1)
When A and B communicate with each other in data communication, if an asymmetric encryption algorithm is used for encryption, when A sends data to B, which of the following keys will be used for data encryption?

1. A. A's public key
2. B. A's private key
3. C. B's public key
4. D. B's private key

Correct Answer: C

- (Exam Topic 1)
againstIPspoofing attack (IP Spoofing), which of the following is an error?

1. A. IPSpoofing attacks are based onIPaddress trust relationship to initiate
2. B. IPAfter a successful spoofing attack, the attacker can use forged arbitraryIPThe address impersonates a legitimate host to access key information
3. C. The attacker needs to put the sourceIPlandaddress masquerading as a trusted host and sendSYNmarkNote the data segment request connection
4. D. based onIPThe hosts in the trust relationship of the addresses can log in directly without entering password authentication.

Correct Answer: C

- (Exam Topic 2)
Which of the following statements is true about business continuity plans? (multiple choice)

1. A. The business continuity plan does not require senior company involvement during the scoping phase of the project
2. B. Because all possible accidents cannot be predicted,BCPFlexibility is required
3. C. The business continuity plan does not require senior company involvement until it is formally documented
4. D. Not all security incidents must be reported to company executives

Correct Answer: BD

- (Exam Topic 2)
Control actions of firewall inter-domain forwarding security policypermitanddeny, which of the following options are correct? (multiple choice)

1. A. The actions of the firewall's default security policy are:deny
2. B. The packet matches the interzone security policydenyThe packet is discarded immediately after the action, and other interzone security policies will not continue to be executed.
3. C. Even if the packet matches the security policypermitaction, and may not necessarily be forwarded by the firewall
4. D. Whether the packet matches the security policypermitaction, ordenyaction, will go toUTMmodule handling

Correct Answer: ABC