Huawei H12-711-ENU 問題集

質問 1：
Which of the following option does not belong to symmetric encryption algorithm?
A. DES
B. RSA
C. AES
D. 3DES
正解：B

質問 2：
In the IPSec VPN transmission mode, which part of the data packet is encrypted?
A. Network layer and upper layer data packet
B. Transport layer and upper layer data packet
C. New IP packet header
D. Original IP packet header
正解：B

質問 3：
Which of the following are the necessary configurations of IPSec VPN? (Multiple Choice)
A. Configure the stream of interest
B. Configure IKE SA related parameters
C. Configuring IKE neighbors
D. Configuring IPSec SA related parameters
正解：A,B,C,D

質問 4：
Which of the following is not part of the LINUX operating system?
A. CentOS
B. MAC OS
C. Ubuntu
D. RedHat
正解：B

質問 5：
Which of the following description about the group management for VGMP is wrong?
A. master/slave devices exchange packets to understand each other through the heartbeat line, and backup the related commands and status information
B. The interface type and number of two firewalls heartbeat port may be different, as long as they can communicate with each other
C. Master/slave status change of VRRP backup group needs to notify its VGMP management group
D. Periodically sends Hello packets between VGMP of master/slave firewall
正解：B

質問 6：
Which of the following is true about the sequencing of the PKI work process?
1. The communication terminal applies for CA certificate.
2. PKI replies to CA certificate
3. Obtain each other's certificate and verify the validity
4. Communication terminal installs local certificate
5. PKI issues a local certificate
6. The communication terminal applies for a local certificate
7. Communication terminal installs CA certificate
8. Communicate with each other
A. 6-5-4-1-2-7-3-8
B. 6-5-4-3-1-2-7-8
C. 1-2-7-6-5-4-3-8
D. 1-2-6-5-7-4-3-8
正解：C

質問 7：
Which of the following descriptions about the action and security profile of the security policy are correct? (Multiple choice)
A. The security profile must be applied to the security policy that is allowed to take effect.
B. If the action of the security policy is "prohibited", the device will discard this traffic, and then no content security check will be performed.
C. If the security policy action is "Allow", the traffic will not match the security profile.
D. The security profile may not be applied to the security policy that the action is allowed and take effect.
正解：A,B

質問 8：
Which of the following is not the main form of computer crime?
A. Use scanning tools to collect network information without permission
B. Using a computer for personal surveys
C. Implant a Trojan to the target host
D. Hacking the target host
正解：B

質問 9：
Regarding the firewall security policy, which of the following options are wrong?
A. The number of security policy entries of Huawei USG series firewalls cannot exceed 128.
B. Adjust the order of security policies without saving the configuration file.
C. If the security policy is permit, the discarded message will not accumulate the number of hits.
D. When configuring the security policy name, you cannot reuse the same name.
正解：C