H12-711_V3.0 HUAWEI Exam Questions and Free Practice Test

Question 139

- (Exam Topic 2)
Regarding the NAT policy processing flow, which of the following options are correct? ( )*

A. Server-map is processed before the security policy is matched

B. Source NAT policy is processed after security policy match

C. Source NAT policy queries are processed after the session is created

D. Server-map is processed after state detection

Correct Answer:ABD

Question 140

- (Exam Topic 3)
The administrator is connected to the firewall through the G1/0/0 interface (the interface has been added to the Trust Zone). If the administrator is allowed to perform configuration management through the G1/0/0 login image firewall, how to configure the security policy to release flow direction? ( )[Multiple choice]*

A. allows traffic from Trust Zone to Trust Zone

B. allows traffic from the Trust Zone to the Untrust Zone

C. allows traffic from Local Zone to Local Zone

D. allows traffic from the Trust Zone to the Local Zone (I)

Correct Answer:ABC

Question 141

- (Exam Topic 3)
In the TCP/P protocol core, which of the following protocols works at the application layer? ( )[Multiple choice]*

A. IGMP

B. ICMP

C. RIP

D. ARP

Correct Answer:C

Question 142

- (Exam Topic 2)
at HuaweiSDSecIn the solution, which of the following is an analysis layer device?

A. CIS

B. Agile Controller

C. switch

D. Firehunter

Correct Answer:D

Question 143

- (Exam Topic 2)
When using the ______ function of SSL VPN, the virtual gateway will assign an intranet IP address to the access user, which is used for the access user to access the P resources of the intranet[fill in the blank]*
Solution:
network extension

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 144

- (Exam Topic 3)
Digital envelope technology means that the sender uses the receiver's public key to encrypt the data, and then sends the ciphertext to the receiver ( )[Multiple choice]*

A. TRUE

B. FALSE

Correct Answer:B

START H12-711_V3.0 EXAM