最新的Huawei H12-711-ENU免費考試真題

問題1

Digital signatures are used to generate digital fingerprints by using a hashing algorithm to ensure the integrity of data transmission.

A. False

B. True

正確答案: B

問題2

When the IPSec VPN tunnel mode is deployed, the AH protocol is used for packet encapsulation. In the new IP packet header field, which of the following parameters does not require data integrity check?

A. Source IP address

B. Destination IP address

C. TTL

D. Idetification

正確答案: C

問題3

Regarding the description of the vulnerability scanning, which of the following is wrong?

A. Vulnerability scanning is a technology based on network remote monitoring of target network or host security performance vulnerability, which can be used for simulated attack experiments and security audits.

B. Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks.

C. Vulnerability scanning can be done based on the results of ping scan results and port scan

D. Vulnerability scanning is used to detect whether there is a vulnerability in the target host system. Generally, the target host is scanned for specific vulnerabilities.

正確答案: B

問題4

Which of the following is not part of the LINUX operating system?

A. CentOS

B. MAC OS

C. RedHat

D. Ubuntu

正確答案: B

問題5

Which of the following is correct for the command to view the number of security policy matches?

A. display security-policy all

B. display security-policy count

C. count security-policy hit

D. display firewall sesstion table

正確答案: A

問題6

Which of the following is true about firewall security policies?

A. By default, the security policy can control unicast packets, broadcast packets, and multicast packets.

B. By default, the security policy only controls unicast packets.

C. By default, the security policy can control multicast.

D. By default, the security policy can control unicast packets and broadcast packets.

正確答案: B

問題7

Digital certificates can be divided into local certificates, CA certificates, root certificates and self-signed certificates according to different usage scenarios.

A. False

B. True

正確答案: B

問題8

Which of the following are correct about configuring the firewall security zone? (Multiple Choice)

A. The firewall can create two security zones of the same priority

B. When data flows between different security zones, the device security check is triggered and the corresponding security policy is implemented.

C. The firewall has four security zones by default, and the four security zone priorities do not support modification.

D. Firewall can have 12 security zones at most.

正確答案: B,C

問題9

Against IP Spoofing, which of the following description is wrong?

A. The hosts based on IP address's trust relationship can login directly without entering password verification

B. IP spoofing is to use the hosts' normal trust relationship based on the IP address to launch it

C. An attacker would need to disguise the source IP addresses as trusted hosts, and send the data segment with the SYN flag request for connection

D. After IP spoofing attack is successful, the attacker can use forged any IP address to imitate legitimate host to access to critical information

正確答案: D

問題10

Which of the following is the encryption technology used in digital envelopes?

A. Hash algorithm

B. Streaming algorithm

C. Asymmetric encryption algorithm

D. Symmetric encryption algorithm

正確答案: C

問題11

Which of the following are the response actions after the gateway antivirus detects the mail virus? (Multiple choice)

A. Delete attachments

B. Alarm

C. Announcement

D. Blocking

正確答案: A,B,C,D

問題12

Which of the following is not the identity of the IPSec SA?

A. Destination address

B. Source address

C. SPI

D. Security policy

正確答案: B

最新的Huawei HCIA-Security V3.0 - H12-711-ENU免費考試真題

聯系我們

站內鏈接

最新更新