1 / 9

Valid Huawei HCNP-Security H12-721-ENU exam dumps

H12-721-ENU exam questions are valid for the HCNP-Security candidates. HCNP-Security-CISN (Constructing Infrastructure of Security) certification need to clear H12-721-ENU exam test. Just click to know the details https://www.dumpsbase.com/h12-721-enu.html

huaweidumpsbase
Download Presentation

Valid Huawei HCNP-Security H12-721-ENU exam dumps

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. https://www.dumpsbase.com/h12-721-enu.html Huawei H12-721-ENU Dumps Questions Full Version: V10.02 with 180 Q&AS View Huawei H12-721-ENU Dumps Questions Now! 1 / 9

  2. https://www.dumpsbase.com/h12-721-enu.html 1. Users cannot access intranet resources when using the network extension function. Which of the following are not possible causes of the failure? A. Did you obtain a virtual IP address on the virtual network card of the user's PC? B. The route between the firewall and intranet server is unreachable. C. User connection is timeout. D. The virtual IP address conflicts with the FW interface address, intranet server address, and DHCP address pool address. Answer: C 2. On a hot standby networking, if the peer heartbeat interface address is specified when the HRP heartbeat interface is configured, which of the following types of packets is the VGMP hello packet sent between the firewalls? A. Unicast packets B. Broadcast packets C. Multicast packets D. UDP packets Answer: A 3. The hot standby networking shown as the following picture, in the figure, the gateway address of PC1 should be the interface IP address of the master device, that is, 10.100.10.2/24. 2 / 9

  3. https://www.dumpsbase.com/h12-721-enu.html A. True B. False Answer: B 4. The bandwidth management function only supports limiting the number of connections initiated by a specified IP. A. True B. False Answer: B 5. When using the Radius server to authenticate users, you need to configure the corresponding username and password on both the Radius server and the firewall. A. True B. False Answer: B 6. As shown in the figure is the firewall hot standby networking environment. In this networking environment, which of the following commands can ensure that the device automatically adjusts the priority of the VGMP management group and automatically performs the active/standby switchover? 3 / 9

  4. https://www.dumpsbase.com/h12-721-enu.html A. hrp ospf-cost adjust-enable B. hrp preempt delay 60 C. hrp interface GigabitEthernet 0/0/2 D. hrp auto-sync config Answer: A 7. About the description of the process of network expansion, which statement is wrong? A. After the network extension function is triggered, an SSL VPN tunnel needs to be established first between the remote user and the virtual gateway. B. The remote user's local PC automatically generates a virtual network adapter. The virtual gateway randomly selects an IP address from the address pool and assigns it to the remote user's virtual network adapter. C. After the remote user virtual network adapter obtained the private IP address, it need to manually configure the route to the intranet server so that the internal network resources can be accessed normally. D. The remote user sends a business request packet to the Server on the intranet. The packet arrives to the virtual gateway through the SSL VPN tunnel. Answer: C 8. In the IDC room, a Huawei USG6000 series firewall can be divided into several virtual systems. Then, the root firewall administrator generates virtual system administrators to manage each virtual system separately. A. True B. False Answer: A 9. The two FWs are interconnected by IPSec. The display ike sa is executed in FW_A. The result is shown as following. Which of the following statements are correct? (Multiple Choices) 4 / 9

  5. https://www.dumpsbase.com/h12-721-enu.html A. FW_A is the initiator of IKE secure channel negotiation B. FW_B is the initiator of IKE security channel negotiation C. SA between firewalls has been successfully established D. SA between firewalls have not been established successfully Answer: AC 10. In hot standby, what is the number of cycles does not receive the HRP HELLO packet from the peer end, the Slave peer considers the peer end to be faulty? A. One B. Two C. Three D. Five Answer: C 11. Which of the following resource allocation methods are supported by Huawei USG6000 product resource allocation? A. Quota allocation B. Automatic allocation C. Manual allocation D. Non-quota allocation Answer: AC 12. An enterprise networking is shown as the following figure, the hot standby is configured on USG_A and USG_B, and USG_A is the master device. The administrator wants to configure SSL VPN on the firewall so that branch office employees can access the headquarters through SSL VPN. What should the SSL VPN virtual gateway address be? 5 / 9

  6. https://www.dumpsbase.com/h12-721-enu.html A. 202.38.10.2/24 B. 202.38.10.3/24 C. 202.38.10.1/24 D. 10.100.10.2/24 Answer: C 13. GRE Over IPSec tunnel can achive the tranform of IPX packets. A. True B. False Answer: A 14. Huawei UMA products can be deployed in a logically concatenated manner. Which of the following statements is true about the logical mode of this deployment? A. Logical Mode: Person -> Slave Account -> Authorization -> Master Account -> Target system. B. Logical Mode: Person -> Master Account -> Authorization -> Slave Account -> Target System. C. Logical Mode: Authorization -> Slave Account -> Person -> Master Account -> Target System. D. Logical Mode: Target System -> Slave Account -> Authorization -> Master Account -> Person. Answer: B 15. The global routing means that when there are multiple equal-cost routes to the destination network, the Huawei USG6000 firewall can dynamically select the outbound interface according to the link bandwidth, weight, priority, or automatically detected link quality set by the administrator, to achieve the reasonable use of link resources and improve the user experience. A. True B. False 6 / 9

  7. https://www.dumpsbase.com/h12-721-enu.html Answer: A 16. When traffic is finally sent from the outgoing interface, it is limited by the bandwidth of the outgoing interface. If the traffic is greater than the outbound interface bandwidth, which of the following will be used to do queue scheduling for traffic to ensure that high-priority packets are sent preferentially? A. Remark DSCP priority B. Forwarding priority C. Bandwidth policy matching order D. QoS Answer: B 17. About the server load balancing, which of the following technology can be used to perceive the changes of server state to ensure that user requests are not sent to the failed server? A. VGMP Hello packets B. VRRP packets C. DPD D. Service Health Check Answer: D 18. The following figure shows the networking of BFD for OSPF: 19. OSPF is running among the three devices FW_A, FW_B, and FW_C. They are neighbors. 20. When the neighbor status reaches the FULL state, and BFD and OSPF are configured as ganged, BFD completes the establishment of BFD session. Which of the following statements are correct? (Multiple Choices) 7 / 9

  8. https://www.dumpsbase.com/h12-721-enu.html A. When the link a fails, the BFD first percieves, and the FWA and FWB converge immediately. B. BFD can provide second-level fault detection mechanism C. After the BFD finds the event of neighbor Down, rerunning the routing calculation between the devices, the new route is link b. D. When link a fails, OSPF automatically converges and informs BFD Answer: AC DumpsBase Promotion Online 8 / 9

  9. https://www.dumpsbase.com/h12-721-enu.html More exams promotion could get from promotion page. 9 / 9 Powered by TCPDF (www.tcpdf.org)

More Related