H12-711_V4.0 Exam Dumps, H12-711_V4.0 Practice Test Questions [Q42-Q61]

Rate this post

H12-711_V4.0 Exam Dumps, H12-711_V4.0 Practice Test Questions

PDF (New 2024) Actual Huawei H12-711_V4.0 Exam Questions

NO.42 As shown in the figure, the process of AD single sign-on (querying the security log mode of AD server), please match the corresponding operation process.

NO.43 What is the protocol number of the GRE protocol?

The 50th

NO.44 Which of the following zones is not the firewall default security zone?

Trust

The Local

DMZ

Management

NO.45 As shown in the figure, nat server global202.106.1.1 inside10.10.1.1 is configured on the firewall. Which of the following is the correct configuration for interzone rules? ( )[Multiple choice]*

rule name c. source-zone untrust. destination-zone trust. destination-address 202.106.1.132, action permit

rule name d, source- zone untrust. destination- zone trust. destination- address10.l0.1.1 32, action permit

rule name b, source- zone untrust, destination- zone trust, source- address10.10.1.1 32, action permit

rule name b, source-zone untrust, destination-zone trust, source-address202.106.l.1 32, action permit

NO.46 What is correct about the following description of device management in the operating system?

The main task of port device management is to complete the I/O requests made by users and classify I/O devices for users.

Whenever a process makes an I/O request to the system, as long as it is secure, the device allocator will assign the device to the process according to a certain policy.

Device management can virtualize a physical device into multiple logical devices through virtualization technology, providing multiple user processes to use.

In order to alleviate the problem of speed mismatch between CPU and I/O devices and improve the parallelism of CPU and I/O devices, in modern operating systems, almost all I/O devices are exchanging numbers with processors

Buffers are used at all times.

NO.47 Which of the following types of malicious code on your computer includes?

Oral virus

Trojan horses

Port SQL injection

Oral spyware

NO.48 The RADIUS protocol specifies how to pass user information, billing information, authentication and billing results between the NAS and the RADIUS server, and the RADIUS server is responsible for receiving the user’s connection request, completing the authentication, and returning the result to the NAS.

TRUE

FALSE

NO.49 ARP man-in-the-middle attacks are a type of spoofing attack technique.

TRUE

FALSE

NO.50 Which of the following is not a type of Windows log event?

Information

Debugging

Error

Warning

NO.51 The following description of digital certificates, which one is wrong

The simplest certificate consists of a public key, a name, and a digital signature from a certificate authority.

Digital certificates contain the owner’s public key and related identity information.

In general, the key of a digital certificate has an expiration date.

Digital certificates do not solve the problem of digital signature technology where the public key cannot be determined to be the designated owner.

NO.52 Drag the warning level of the network security emergency response on the left into the box on the right, and arrange it from top to bottom in order of severity.[fill in the blank]*

3124

3125

NO.53 In the automatic backup mode of hot standby on the second machine, which of the following sessions is backed up?

ICMP session

TCP half-connection session

Self-session to the firewall

UDP first packet session

NO.54 Which of the following descriptions about the heartbeat interface is wrong ( )?[Multiple choice]*

It is recommended to configure at least two heartbeat interfaces. – One heartbeat interface is used as the master, and the other heartbeat interface is used as the backup.

The interface MTU value is greater than 1500 and cannot be used as a heartbeat interface

The connection method of the heartbeat interface can be directly connected, or it can be connected through a switch or router

MGMT interface (Gigabi tEtherneto/0/0) cannot be used as heartbeat interface

NO.55 The following description of IDS, which items are correct
The IDS cannot be linked to the firewall.

Mouth IDS is a fine-grained detection device, through which the live network can be monitored more accurately.

The IDS can be upgraded flexibly and in a timely manner, and the strategic configuration operation is convenient and flexible.

With IDS, system administrators can capture traffic from critical nodes and do intelligent analysis to find anomalous and suspicious network behavior and report it to administrators.

NO.56 Which of the following is the correct sequence for incident response management
1. Detection 2 Report 3 Mitigation 4 Lessons learned 5 Fix 6 Recovery 7 Response

1->3->2->7->6->5->4

1->7->3->2->6->5->4

1->3->2->7->5->6->4

1->2->3->7->6->5->4

NO.57 Which layer of the protocol stack does SSL provide end-to-end encrypted transmission services?

Application layer

Data link layer

Network layer

Transport layer

NO.58 Which of the following descriptions of server authentication is correct?

The visitor sends the username and password that identifies his identity to FW through the portal authentication page, there is no password stored on F7, FT sends the username and password to a third-party authentication server, and the verification process is carried out on the authentication server.

Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.

The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor’s identity information to FW.

The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the FW.

NO.59 The following description of investigation and evidence collection, which one is correct

Documentary evidence is required in computer crime.

In all investigation and evidence collection, it is best to have law enforcement agencies involved.

Evidence is not necessarily required in the course of the investigation.

Evidence obtained by wiretapping is also valid.

NO.60 A Web server is deployed in an enterprise intranet to provide Web access services to Internet users, and in order to protect the access security of the server, it should be divided into the _____ area of the firewall.

DMZ

DMY

NO.61 The keys used by the IPSec encryption and authentication algorithms can be configured manually or dynamically negotiated via the ____ protocol. (abbreviation, all uppercase).

IKE

IKB

Loading …

Huawei H12-711_V4.0 (HCIA-Security V4.0) Certification Exam is a valuable certification for individuals who want to enhance their career prospects in the field of network security. HCIA-Security V4.0 certification is recognized globally and is highly regarded by employers in the networking industry. By passing this certification exam, individuals can demonstrate their expertise in the field of network security, and can increase their chances of landing high-paying jobs in this field.

Updated Mar-2024 Pass H12-711_V4.0 Exam – Real Practice Test Questions: https://www.actualcollection.com/H12-711_V4.0-exam-questions.html

Leave a comment Cancel reply