최신Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721무료샘플문제

A. Separately running logical device which is divided on the NGFW are called virtual systems.

B. If the virtual system function is not enabled, the root system does not exist.

C. There are two types of virtual systems, the root system and the virtual system on the NGFW.

D. A special virtual system that exists by default on the NGFW is called the root system.

A. True

B. False

A. DSCP priority

B. Inbound interface

C. MAC address

D. IP address

A. True

B. False

A. If any interface in the group fails, the system sets the status of other interfaces in the group to Down.

B. If any interface in the group fails, the status of other interfaces in the group does not change.

C. After some interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

D. After all the interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

A. Logical mode: Person -> Slave account -> Authorization -> Master account -> Target system.

B. The slave account is the target system account. It does not need to be in one-to-one correspondence with the personnel. Ordinary operation and maintenance personnel may not feel it.

C. The primary account is the UMA account, which corresponds to the operation and maintenance personnel.

D. The user Web logs in to the UMA without installing the client on the terminal and does not change the original operating habits.

A. Network-to-Network Scenario: IPSec VPN

B. Terminal-to-network scenario: SSL VPN

C. Terminal-to-network scenario: GRE over IPSec

D. Terminal-to-network scenario: L2TP over IPSec

A. For multiple real servers, real servers must be in the same network segment and the same security zone

B. For multiple real servers, real servers may not be in the same security zone but must be on the same network segment

C. For multiple real servers, the network segment where the real server is located and the security zone do not affect the load balancing function.

D. For multiple real servers, real servers may not be in the same network segment but must be in the same security zone

A. Exclusive strategy

B. Bandwidth reuse

C. Dynamic sharing

D. Strategy Sharing

A. Source IP hash algorithm

B. The minimum connection algorithm

C. Simple Round-Robin algorithm

D. Weighted Round-Robin algorithm

A. SA between firewalls has been successfully established

B. FW_A is the initiator of IKE secure channel negotiation

C. FW_B is the initiator of IKE security channel negotiation

D. SA between firewalls have not been established successfully

A. True

B. False

A. USG A and USG B respectively start the BFD state machine. The initial state is Down, and the BFD packets with the Down state are sent. The value of your Discriminator is 0.

B. After the USG B receives a BFD packet whose status is Init, the local status changes to Up.

C. After a state transition of "DOWN => INIT" occurs on USG A and USG B, a timeout timer is started. If the BFD packet whose status is Init or Up is not received after the timer times out, the local status automatically switches back to Down.

D. After the local BFD state of the USG 0 is Init, if it continues to receive the packets whose state is Down, it re-processes and updates its own local state.

A. Business log

B. Packet loss logs

C. Session log

D. System log

A. Using IKE v1 main mode for negotiation

B. Using IKE v2 for negotiation

C. Configuring IPSec Policy Template

D. Configuring IPSec Security Policy