H12-731-ENU試験2023 Huawei Specialist Unlimited 205 Questions [Q67-Q90]の最高の準備

新しい質問 67
The correct statement about UDP Flood and TCP Flood attack prevention is:

新しい質問 68
Which of the following is a correct description of the stateful inspection firewall forwarding principle:

新しい質問 69
In the dual-system hot-standby network, the management group status on the two USGs is Active. What is the possible reason?

新しい質問 70
Which of the following IPsec modes and encapsulation methods can be used in the application scenarios of IPSEC NAT traversal?

新しい質問 71
Huawei NIP5000 products are based on signature security.

新しい質問 72
A network expects to use URPF technology to improve network security. Which mode of URPF is used in the following networking scenarios:

新しい質問 73
In the Remote Access VPN scenario, the remote PC uses the Secoway VPN Client and the firewall to establish a VPN. Which of the following statements is correct?

新しい質問 74
When configuring the firewall security policy, which of the following configuration commands is correct to match the data packets sent from the 192.168.10.0 network segment?

新しい質問 75
Which of the following descriptions about dual-system hot standby is incorrect?

新しい質問 76
In the dual-system hot-standby network, the service interface works at Layer 3, the upstream and downstream are connected to the router, the firewall and the upstream and downstream run an OSPF process, which provides the dual-system hot-standby burden sharing network, and the firewall provides the NAT function. The following Incorrect planning deployment advice:

新しい質問 77
Use NGFW for SSL VPN connection, use certificate authentication, certificate can be selected, but after clicking login, you cannot log in to the resource page. After using debug check on NGFW, it prompts that the certificate is wrong.
<NGFW>debugging ssl error
<NGFW>terminal debugging
<NGFW>terminal monitor
*0.10012266 USG2130 SSL/7/error:
SSL 3.0, Alert, write, fatal bad certificate
But check that the certificate is complete and the contents of the certificate are correct.
What are the possible reasons for this certificate validation error?

新しい質問 78
In the networking shown in the figure, the traffic from the PC to access the Web Server must go through the firewall, and the traffic from the Web Server to the PC must go through the firewall.
With intra-domain bidirectional NAT properly configured on the firewall, the following descriptions of packet IP addresses may be correct:

新しい質問 79
In the scenario of using Remote access VPN access, the VPN-Client configuration is as shown in the figure, as indicated by the red box, what is the main function?

新しい質問 80
Which interfaces does the firewall support to configure IPsec policies?

新しい質問 81
Which of the following options can be used as conditions for Portal push ?

新しい質問 82
A company’s egress gateway dual links are connected to different operators, and have the following requirements:
Users can access the Internet through two operators. When the links to the two operators work normally, all traffic is forwarded by the primary link (ISP1), and when the primary link fails, all traffic is transmitted by the backup link. Road (ISP2) forwarding.
Which of the following options is correct?

新しい質問 83
The USG and the Router establish a Site-to-Site IPsec VPN. Based on the following information, which of the following options may be correct?
<USG> display ike sa
current ike sa number: 0
<USG> display ipsec statistics
the security packet statistics:
……
negotiate about packet statistics:
IP packet ok: 0, err: 0, drop: 0
IP rcv other cpu to ike: 0, drop:
0
IKE packet inbound ok: 0, err: 0
IKE packet outbound ok: 0, err: 0
SoftExpr: 0, HardExpr: 0,
DPDOper: 0, SwapSa: 0
ModpCnt: 0, SaeSucc: 0,
SoftwareSucc: 0

新しい質問 84
MAC authentication is applicable in which of the following situations?

新しい質問 85
If the hardware security access control gateway adopts the next generation firewall, in “Policy > Admission Control > SAC Configuration > Hardware SACG”, select the “Controlled Domain” tab, and add the controlled domain ERP (172.10.11.1/32 ) and DB_Oracle ( 172.10.12.32/32 ), then query the firewall configuration through the CLI to obtain the following information:
display acl all
…………
Advanced ACL 3100, 1 rule, not binding with vpn-instance
Acl’s step is 1
rule 1 deny ip (0 times matched)
Advanced ACL 3101, 1 rule, not binding with vpn-instance
Acl’s step is 1
rule 1 permit ip (0 times matched)
Advanced ACL 3102, 1 rule, not binding with vpn-instance
Acl’s step is 1
rule 1 deny ip destination 172.13.11.10 (0 times matched)
Advanced ACL 3103, 1 rule, not binding with vpn-instance
Ad’s step is 1
rule 1 permit ip destination 172.13.11.10 (0 times matched)
Advanced ACL 3354,
Which of the following statements is correct about the above ACL configuration?

新しい質問 86
Which of the following options fall under the scope of visitor management?

新しい質問 87
For border network security, which of the following options are recommended for planning and deployment priorities?

新しい質問88
The ARP protocol is used to map the IP address to the correct MAC address, so that the device can encapsulate the correct frame header on the data frame to complete the data forwarding.
If the ARP table is abnormal, it will directly cause the device to fail to forward packets. In the dual-system hot backup scenario, which of the following descriptions are correct when the active and standby firewalls respond to ARP?

新しい質問 89
When the firewall uses WEB redirection password authentication, the user does not take the initiative to authenticate, but first accesses the business, and the firewall redirects the page to the “authentication page”. After successful authentication, it automatically jumps to the page the user visited before.

新しい質問 90
There are hundreds of people in a medium-sized enterprise network accessing the Internet through the company’s firewall, and the company has deployed a corporate portal website in the firewall DMZ. Which of the following criteria should be followed as an IT security professional for purchasing and deploying Internet access auditing products.