Huawei H12-721-ENU 問題集

質問 1：
HWTACACS can only encrypt the password part, while Radius protocol can encrypt message body except Radius message header.
A. False
B. True
正解：A

質問 2：
Huawei has the following bandwidth policy configuration command on the USG6000:
[USG] traffic-policy
[USG-policy-traffic] profile class1
[USG-policy-traffic-profile-class1] bandwidth maximum-bandwidth whole both 1000
[USG-policy-traffic-profile-class1] bandwidth connection-limit whole both 20
[USG-policy-traffic-profile-class1] quit
[USG-policy-traffic] rule name policy1
[USG-policy-traffic-rule-policy1] source-zone untrust
[USG-policy-traffic-rule-policy1] destination-zone dmz
[USG-policy-traffic-rule-policy1] destination-address 10.10.10.0 mask 255.255.255.0
[USG-policy-traffic-rule-policy1] action cos profile class1
[USG-policy-traffic-rule-policy1] quit
[USG-policy-traffic] rule name policy2
[USG-policy-traffic-rule-policy2] source -zo ne dmz
[USG-policy-traffic-rule-policy2] destination-zone untrust
[USG-policy-traffic-rule-policy2] destination-address 10.10.10.5 mask 255.255.255.255
[USG-policy-traffic-rule-policy2] action no-qos
Which of the following statements are correct? (Multiple choices)
A. When accessing the destination network segment 10.10.10.0/24, it will not be restricted by the maximum number of connections 20
B. When accessing a host with a destination address of 10.10.10.5, the number of connections will be limited
C. When accessing the destination network segment 10.10.10.0/24, traffic will be limited by a maximum of 20 connections.
D. When accessing a host with a destination address of 10.10.10.5 will not be limited by the bandwidth policy
正解：C,D

質問 3：
Which of the following options is wrong about the statement of the public network interface and the private network interface in the virtual system?
A. The private network interface refers to the interface not configured with set public-interface command.
B. A private network interface is an interface that uses a private IP address.
C. The public network interface refers to the interface configured with set public-interface command.
D. The bandwidth resource configuration in the resource class takes effect only when the public interface is configured.
正解：B

質問 4：
What are the load balancing algorithms supported by the Huawei USG6000 firewall?
A. Simple polling algorithm
B. Ratio
C. Source IP hash algorithm
D. Weighted polling algorithm
正解：A,C,D

質問 5：
An enterprise branch and headquarters need to be able to transmit multicast packets. As shown in the figure, FW_B is the branch gateway, and the FW_B is used to establish an IPSec VPN with the headquarters (pre-shared key authentication). Which parts in the following configuration on FW_B is required? (Multiple choices)

A. Applying the IPSec Security Framework on the GRE Tunnel Interface
B. Configure the route and set the next hop of the traffic that needs to be transmitted over the GRE over IPSec tunnel to 12.1.1.1/24.
C. Configure routes to set the next hop of the traffic that needs to be transmitted over the GRE over IPSec tunnel to the tunnel interface address.
D. Configure the security policy. The reference rule is permit:192.168.0.0/24->Internet data flow.
正解：A,C

質問 6：
Huawei USG6000 series devices deploy dual-system hot backup, by default, firewall does not back up which of the following status information? (Multiple choices)
A. Port Mapping Table in PAT Mode
B. TCP Semi-Connect Sessions that didn't complete 3 handshakes
C. Session to the firewall itself
D. IPSec tunnel and serial number
正解：B,C

質問 7：
When you create a virtual system, VPN instances of the same name are automatically generated.
And the system will automatically create a logical interface for it, from which value does the logical interface number begin?
A. 0
B. 2
C. 3
D. 1
正解：D