Best Value Available! 2023 Realistic Verified Free H12-711_V4.0 Exam Questions [Q29-Q50] : Best Free Exam Guide : http://free.exams4sures.com

QUESTION 29
Which of the following attack methods is to construct special SQL statements and submit sensitive information to exploit program vulnerabilities

Buffer overflow attack

SQL injection attacks

Worm attack

Phishing attacks

QUESTION 30
The trigger authentication method for firewall access user authentication does not include which of the following? ( )[Multiple choice]*

MPLS VPN

SSL VPN

IPSec VPN

L2TP VPN

QUESTION 31
A Web server is deployed in an enterprise intranet to provide Web access services to Internet users, and in order to protect the access security of the server, it should be divided into the _____ area of the firewall.

DMZ

DMY

QUESTION 32
In cases where some configurations alter existing session table entries and want them to take effect immediately, you can regenerate the session table by clearing the session table information. All session table information can be cleared by executing the _____firewall session table command.

reset

set

QUESTION 33
Huawei Firewall only supports the inter-domain persistent connection function for TCP packets.

TRUE

FALSE

QUESTION 34
Which of the following descriptions of single sign-on is correct?

The visitor recited the Portal authentication page and sent the username and password to FT to identify his/her identity, and the password was not stored on the FT, and the FI sent the username and password to the third-party authentication server, and the authentication process was carried out on the authentication server.

The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor’s identity information to FW. F7 only records the identity information of the visitor and does not participate in the authentication process

Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.

The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the FW.

QUESTION 35
The keys used by the IPSec encryption and authentication algorithms can be configured manually or dynamically negotiated via the ____ protocol. (abbreviation, all uppercase).

IKE

IKB

QUESTION 36
Which of the following protocols is a file transfer protocol?

Mouth POP3

Mouth NFS

Mouth HITP

Mouth DFTP

QUESTION 37
The network environment is becoming more and more complex, and network security incidents occur frequently. While accelerating the construction of informatization, enterprises must not only resist external attacks, but also prevent internal management personnel from being involved in data leakage and operation and maintenance accidents due to operational errors and other issues. Which of the following options might reduce operational risk?

According to the administrator configuration, the O&M user corresponds to the background resource account, and restricts the unauthorized use of the account. mouth Based on the password security policy, the O&M security audit system automatically modifies the password of the background resource account at regular intervals.

Each system is independently operated, maintained and managed, and the access process is not audited and monitored.

Oral Each department system is independently authenticated and uses a single static password for authentication.

QUESTION 38
Certificates saved in DER format may or may not contain a private key.

TRUE

FALSE

QUESTION 39
Which of the following operating modes does NTP support?

Mouth peer mode

Mouth client/server mode

Mouth broadcast mode

Mouth multicast mode

QUESTION 40
Which of the following zones is not the firewall default security zone?

Trust

The Local

DMZ

Management

QUESTION 41
Which of the following descriptions about the heartbeat interface is wrong ( )?[Multiple choice]*

It is recommended to configure at least two heartbeat interfaces. – One heartbeat interface is used as the master, and the other heartbeat interface is used as the backup.

The interface MTU value is greater than 1500 and cannot be used as a heartbeat interface

The connection method of the heartbeat interface can be directly connected, or it can be connected through a switch or router

MGMT interface (Gigabi tEtherneto/0/0) cannot be used as heartbeat interface

QUESTION 42
What is the security level of the Untrust zone in Huawei firewalls?

QUESTION 43
We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the ____ encryption algorithm to improve the encryption and decryption speed.[fill in the blank]*

symmetry

packets

QUESTION 44
The trigger modes of the built-in Portal authentication in the firewall include pre-authentication and ____ authentication[fill in the blank]*

session

Portal

QUESTION 45
SSL VPN is a VPN technology that realizes remote secure access through SSL protocol. Which of the following software must be installed when using SSL VPN?

Browser

Firewall

Client

Antivirus

QUESTION 46
The following description of investigation and evidence collection, which one is correct

Documentary evidence is required in computer crime.

In all investigation and evidence collection, it is best to have law enforcement agencies involved.

Evidence is not necessarily required in the course of the investigation.

Evidence obtained by wiretapping is also valid.

QUESTION 47
In the TCP/P protocol core, which of the following protocols works at the application layer? ( )[Multiple choice]*

IGMP

ICMP

RIP

ARP

QUESTION 48
The following description of the AH protocol in IPSec VPN, which one is wrong?

Supports data source validation

Supports data integrity checking

Supports packet encryption

Support anti-message replay

QUESTION 49
Which of the following is not the default security zone of the firewall ( )[Multiple choice]*

untrust trust

trust zone

dmz zone

isp zone)

QUESTION 50
The following description of asymmetric encryption algorithms, which item is wrong?

Compared with symmetric encryption algorithms, the security factor is higher.

Encryption is faster than symmetric encryption algorithms.

Public keys are generally disclosed to users.

Asymmetric encryption algorithms are a pair of keys, divided into public and private keys.