Huawei Exam 2022 H12-711 Dumps Updated Questions UPDATED Nov-2022 [Q48-Q66]

Rate this post

Huawei Exam 2022 H12-711 Dumps Updated Questions UPDATED Nov-2022

Get The Most Updated H12-711 Dumps To HCNA-Security Certification

NEW QUESTION 48
For the description of ARP spoofing attacks, which the following statements is wrong?

The ARP implementation mechanism only considers the normal interaction of the service and does not verify any abnormal business interactions or malicious behaviors.

ARP spoofing attacks can only be implemented through ARP replies and cannot be implemented throughARP requests

When a host sends a normal ARP request, the attacker will respond preemptively, causing the host to establish an incorrect IP and MAC mapping relationship.

ARP static binding is a solution to ARP spoofing attacks. It is mainly applied to scenarios where the network size is small.

NEW QUESTION 49
IPS (Intrusion Prevention System) is a defense system that can block in real time when intrusion is discovered

True

False

NEW QUESTION 50
Intrusion Prevention System (IPS) is a defense system that can block in real time when an intrusion is discovered

True

False

NEW QUESTION 51
What do VLAN port types include? (Choose three.)

Access Port

Trunk port

Hybrid port

Ethernet port

NEW QUESTION 52
Which of the following are in the certification area of ISO27001? (Multiple choice)

Access control

Personnel safety

Vulnerability management

Business continuity management

NEW QUESTION 53
Which of the following is the encryption technology used by digital envelopes?

Symmetric encryption algorithm

Asymmetric encryption algorithm

NEW QUESTION 54
Which level is the corresponding warning for major network security incidents that occur?

Red warning

Orange warning

Yellow warning

Blue warning

NEW QUESTION 55
IPSec VPN uses an asymmetric encryption algorithm to encrypt the transmitted data

True

False

NEW QUESTION 56
In Huawei SDSec solution, which layer of equipment does the firewall belong to?

Analysis layer

Control layer

Executive layer

Monitoring layer

NEW QUESTION 57
Which of the following behaviors is relatively safer when connecting to Wi-Fi in public places?

Connect Wi-Fi hotspots that are not encrypted

Connect to the paid Wi-Fi hotspot provided by the operator and only browse the web

Connect unencrypted free Wi-Fi for online shopping

Connect encrypted freeWi-Fi for online transfer operations

NEW QUESTION 58
Which of the following is the analysis layer device inthe Huawei SDSec solution? r a.

cis

Agile Controller

switch

Firehunter

NEW QUESTION 59
Which of the following is true about the description of the TCP/IP protocol stack packet decapsulation? (Multiple choice)

The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as IP.

After the transport layer (TCP) receives the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol, such as UDP, is known according to the parsing information.

After receiving the data packet, the network layer is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such as HTTP.

After the application layer receives the data packet, the application layer information is stripped after parsing, and the user data displayed at the end is exactly the same as the data sent by the sender host.

NEW QUESTION 60
Which of the following guarantees “should detect and protect spam at critical network nodes and maintain upgrades and updates of the spam protection mechanism” in security 2.0?

Malicious code prevention

Communication transmission

Centralized control

Border protection

NEW QUESTION 61
When the following conditions occur in the VGMP group, the VGMPmessage will not be sent to the peer end actively?

Dual hot backup function enabled

Manually switch the active and standby status of the firewall.

Firewall service interface failure

Session table entry changes

NEW QUESTION 62
After the network attack event occurs, set the isolation area, summary data, and estimated loss according to the plan. Which stagedoes the above actions belong to the work contents of in the network security emergency response?

Preparation stage

Detection phase

Inhibition phase

Recovery phase

NEW QUESTION 63
Winch of the following is the encryption technology used in digital envelopes?

Symmetric encryption algorithm

Asymmetric encryption algorithm

NEW QUESTION 64
The content of intrusion detection covers authorized and unauthorized intrusions. Which of the following is not in the scope of intrusion detection?

Pretending to be another user

Administrator mistakenly delete configuration

Planting worms and Trojans

Leaking data information

NEW QUESTION 65
Which of the following addresses can be used for web management address of USG product? (Choose three.)

Interface Address

Sub-interface address

Slave IP address of the interface

AUX interface address

NEW QUESTION 66
During the configuration of NAT, which of the following will the device generate a Server-map entry? (Multiple Choice)?

Automatically generate server-map entries when configuring source NAT.

After the NAT server is configured successfully, the device automatically generates a server map entry.