最新的Huawei H12-711_V3.0免費考試真題

問題1

Which of the following statements about the PKI life cycle is correct?

A. Certificate issuance: When a PKI entity applies for a local certificate from a CA, if there is an RA, the RA will first review the identity information of the PKI entity. After the verification is passed, the RA will send the application information to the CA.

B. Certificate renewal: When the certificate expires and the key is leaked, the PKI entity must replace the certificate. The purpose of renewal can be achieved by re-applying, or it can be automatically renewed using SCEP or CPv2 protocol.

C. Certificate download: The PKI entity downloads the issued certificate to the RA server through SCEP or CIPvz protocol, or through DAP.HIITP or out-of-band mode, download the issued certificate.

D. Certificate application: certificate application, namely certificate registration, is a PKI entity introducing itself to the CA and obtaining a certificate

正確答案: A,B,C,D

問題2

Please order the following project implementation steps from project initiation.[fill in the blank]*

正確答案:

project initiation and variance analysis, risk assessment, system design and release, system operation and supervision, certification and continuous improvement)

問題3

Which of the following options is not included in the survey respondents in the security assessment method?

A. Technical director

B. security administrator

C. network system administrator

D. HR

正確答案: D

問題4

Regarding the description of vulnerability scanning, which of the following is false?

A. Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks

B. Vulnerability scanning is a network-based technology for remotely monitoring the security performance vulnerabilities of target networks or hosts, and can be used to conduct simulated attack experiments and security audits.

C. can be based onpingScan and port scan results for vulnerability scanning

D. Vulnerability scanning is used to detect whether there are vulnerabilities in the target host system, generally scanning the target host for specific vulnerabilities

正確答案: A

問題5

Which of the following options are at risk from traffic-based attacks? (multiple choice)

A. The web page has been tampered with

B. Server down

C. network down

D. data stolen

正確答案: B,C

問題6

Execute the command on the firewall and display the above information. Which of the following descriptions is correct? (multiple choice)

A. this firewallG1/0/1virtual interfaceIPaddress is202.38.10.2

B. When the main deviceUSG_AWill not switch in the event of a failure

C. this firewallVGMPgroup status isActive

D. this firewallVRIDfor1ofVRRPThe priority of the backup group is100

正確答案: A,C,D

問題7

Which of the following security threats is an application security threat?

A. network intrusion

B. User identity is not authenticated

C. Viruses, Trojans

D. Man-in-the-middle attack

正確答案: C

問題8

After the company network administrator configures the dual-system hot backup, he wants to check the status of the current VGMP group, so he typed the command and displayed the following information HRP_M<FW_A>_ Role: active, peer: active Running priority:45000, peer:45000 Backup channel1 usage: 30x Stab1 e time: 1days, 13 hours, 35 minutes Last state change information: 2020-03-22 16:01:56 HRP core state changed, old_state=normal (active), new_state=normal (active).local priority F 4 peer_priority 45000.
Configuration:
hello interval: 1000ms
preempt: 60s
mirror configuration:off
mirror session:on
track trunk member:on
auto-sync configuration:on
auto-sync connection- status:on
adjust ospf cost:on
adjust ospfv3-cost:on
adjust bgp-cost:on
nat resource: off
Detail information on:
Gigabi tEthernet0/0/1:up
Gigabi tEthernet0/0/3:up
ospf-cost: +0
then the command he typed in the blank is[fill in the blank]*

正確答案:

display hrp state verbose

問題9

Which of the following VPNs cannot be used in a Site to-Site scenario? ( )[Multiple choice]*

A. GRE VPN

B. IPSEC VPN

C. L2TP VPN

D. SSL VPN

正確答案: D

問題10

Which of the following options belong to international organizations related to the standardization of information security? (multiple choice)

A. International Telecommunication Union(ITU)ITU

B. Wi-Fi Alliance Wi-Fialliance organization

C. International Organization for Standardization(ISO)International Organization for Standardization

D. International Electrotechnical Commission(IEC) International Electrotechnical Commission

正確答案: A,C,D

問題11

The method of collecting information by port scanning using scanning tools belongs to the means of ( ) analysis. (fill in the blank)

正確答案:

Penetration

問題12

Which of the following is not a stand-alone anti-virus technology?

A. Patch the system

B. Install anti-virus software

C. Use virus detection tools

D. Configure anti-virus technology on the network firewall

正確答案: D

問題13

aboutVRRP/VGMP/HRPWhich of the following statements is correct? (multiple choice)

A. HRPResponsible for data backup during dual-system hot standby operation

B. VRRPResponsible for sending free messages during active/standby switchoverARPDirect traffic on the new master

C. inActivestateVGMPGroups may containstandbystateVRRPGroup

D. VGMPResponsible for monitoring equipment failures and controlling rapid switching of equipment

正確答案: A,B,D

最新的Huawei HCIA-Security V3.0 - H12-711_V3.0免費考試真題

聯系我們

站內鏈接

最新更新