H12-711_V3.0 HUAWEI Exam Questions and Free Practice Test

Question 7

- (Exam Topic 2)
aboutNATPolicy processing flow, which of the following options are correct? (multiple choice)

A. Server-mapProcess after state detection

B. sourceNATPolicy queries are processed after the session is created

C. sourceNATPolicies are processed after a security policy match

D. Server-mapProcess before security policy match

Correct Answer:ACD

Question 8

- (Exam Topic 1)
The preservation of electronic evidence is directly related to the legal validity of the evidence. Only when the preservation conforms to legal procedures, can its authenticity and reliability be guaranteed. Which of the following is not an evidence preservation technology?

A. Encryption Technology

B. digital certificate technology

C. digital signature technology

D. Packet Tag Tracking Technology

Correct Answer:D

Question 9

- (Exam Topic 2)
Huawei's Agile-Controller products belong to _______ in the HiSec solution.[fill in the blank]
Solution:
control

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 10

- (Exam Topic 3)
In symmetric encryption algorithms, the algorithm is generally used on data communication channels, browsers or network links (). (fill in the blank)
Solution:
Stream cipher encryption

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 11

- (Exam Topic 3)
Regarding NAT technology. Which of the following descriptions is false?

A. In Huawei firewalls, source NAT technology refers to the translation of the source address in the IP header of the connection that initiates the connection.

B. In the Huawei firewall, Easy IP directly uses the public network address of the interface as the translated address, and does not need to configure a NAT address pool.

C. In Huawei firewalls, the NAT No-PAT technology needs to be implemented by configuring a NAT address pool.

D. In Huawei firewalls, the only NAT technology with port translation is NAPT.

Correct Answer:D

Question 12

- (Exam Topic 2)
About intrusion prevention systems (IPS), which of the following is false?

A. IDSThe device needs to be linked with the firewall to block intrusion

B. IPSThe device cannot be deployed in bypass mode in the network

C. IPSDevices can be connected in series at the network boundary and deployed online

D. IPSOnce the device detects intrusion behavior, it can achieve real-time blocking

Correct Answer:B

START H12-711_V3.0 EXAM