[Jan 30, 2022] Pass H12-711 Review Guide, Reliable H12-711 Test Engine
H12-711 Test Engine Practice Test Questions, Exam Dumps
NEW QUESTION 140
Which of the following description about the group management for VGMP is wrong?
- A. Theinterface type and number of two firewalls heartbeat port may be different, as long as they can communicate with each other
- B. Master/slave status change of VRRP backup group needs to notify its VGMP management group
- C. master/slave devices exchange packets to understand each other through the heartbeat line, and backup the related commands and status information
- D. Periodically sends Hello packets between VGMP of master/slave firewall
Answer: A
NEW QUESTION 141
Which of the following is not the certificate save file format supported by the USG6000 series?
- A. PKCS#
- B. PKCS#12
- C. PEM
- D. DER
Answer: A
NEW QUESTION 142
Which of the following are included in the operating system patch violations level of Terminal security system? (Choose two.)
- A. Important
- B. Serious
- C. General
- D. Low
Answer: B,C
NEW QUESTION 143
Which of the following is an action to be t3ken during the summary phase of the cyber security emergency response? (Multiple Choice)
- A. Evaluation of members of the emergency response organization
- B. Establish a defense system and specify control measures
- C. Evaluate the implementation of the contingency plan and propose a follow-up improvement plan
- D. Determine the effectiveness nf the isnhtinn measures
Answer: A,C
NEW QUESTION 144
In a Firewall hot standby configuration, HRP key configuration includes which of the following? (Choose three.)
- A. Preemption delay
hrp preempt [delay interval] - B. Enabling fast backup session summary
hrp mirror session enable - C. Specifies the heartbeat port
hrp interface interface-type interface-number - D. Enable HRP backup
hrp enable
Answer: B,C,D
NEW QUESTION 145
Regarding SSL VPNtechnology, which of the following options is wrong?
- A. SSL VPN technology extends the network scope of the enterprise
- B. SSL VPN requires a dial-up client
- C. SSL VPN technology can be perfectly applied to NAT traversal scenarios
- D. SSL VPN technology encryption only takes effect on the application layer
Answer: B
NEW QUESTION 146
In the USG system firewall, the ________ function can be used to provide well-known application services for non-known ports.
- A. Port mapping
- B. Packet filtering
- C. MAC and IP address binding
- D. Long connection
Answer: A
NEW QUESTION 147
Which ofthe following are the standard port numbers for the FTP protocol? (Multiple choice)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C,D
NEW QUESTION 148
Which of the following addresses can be used for web management address of USG product? (Choose three.)
- A. Interface Address
- B. Slave IP address of the interface
- C. Sub-interface address
- D. AUX interface address
Answer: A,B,C
NEW QUESTION 149
Regarding the relationship and role of VRRP/VGMP/HRP, which of the following statements are correct? (Multiple choice)
- A. HRP is responsible for data backup during hot standby operation.
- B. VGMP group in the active state may include the VRRP group in the standby state.
- C. VGMP is responsible for monitoring equipment failures and controlling fast switching of equipment.
- D. VRRP is responsible for sending free ARP to direct traffic to the new primary device during active/standby switchover.
Answer: A,C,D
NEW QUESTION 150
What problem does IPsec IKE aggressive mode mainly solve?
- A. solve NAT traversal problem
- B. solve because of uncertain originator source address cannot select pre-shared key problem
- C. solve the security problem in the process of negotiation
- D. solve the problem of slow negotiation on both ends of the tunnel
Answer: B
Explanation:
Explanation
NEW QUESTION 151
Which of the following descriptions is wrong about the source of electronic evidence?
- A. Fax data, mobile phone recording is an electronic evidence related to communication technology.
- B. Movies and TV shows belong to electronic evidence related to network technology.
- C. Database operation records, operating system logs are computer-related electronic evidence
- D. Operating system, e-mail, chat records can be used as a source of electronic evidence
Answer: B
NEW QUESTION 152
Which of the following descriptions are correct about the buffer overflow attack? (Multiple Choice)
- A. Buffer overflow attack is the use of software system for memory operation defects, running attack code with high operation authority
- B. Buffer overflow attacks are the most common method of attacking software systems
- C. Buffer overflow attacks are not related to operating system vulnerabilities and architectures
- D. Buffer overflow attack belongs to application layer attack behavior
Answer: A,B,D
NEW QUESTION 153
Through display ike sa to see the result as follows, which statements are correct? (Multiple choice)
- A. The first stage ike sa has been successfully established
- B. The second stage ipsec sa has been successfully established
- C. ike is using version v1
- D. ike is using version v2
Answer: A,C
NEW QUESTION 154
Which of the following statements are correct about thebusiness continuity plan? (Multiple Choice)
- A. BCP needs flexibility because it cannot predict all possible accidents
- B. Not all security incidents must be reported to company executives
- C. Business continuity plan rines nnt require high-level participation Nfthe Company in determining the project scope phase
- D. Business continuity plan does not require high-level participation of the company before forming a formal document
Answer: A,B
NEW QUESTION 155
The matching principle of the security policy is: firstly, find the inter-domain security policy configured manually, and if there is no match, the data packet is directly discarded
- A. True
- B. False
Answer: A
NEW QUESTION 156
Which of the following is true about the description of the TCP/IP protocol stack packet decapsulation? (Multiple choice)
- A. After receiving the data packet, the network layer is stripped after parsing, and the upper layer processing protocol is known according to the parsing information, such as HTTP.
- B. After the application layer receives the data packet, the application layer information is stripped after parsing, and the user data displayed at the end is exactly the same as the data sent by the sender host.
- C. The data packet is first transmitted to the data link layer. After parsing, the data link layer information is stripped, and the network layer information is known according to the parsing information, such as IP.
- D. After the transport layer (TCP) receives the data packet, the transport layer information is stripped after parsing, and the upper layer processing protocol, such as UDP, is known according to the parsing information.
Answer: B,C
NEW QUESTION 157
Which of the following descriptions about windows logs is wrong?
- A. The application log contains events logged by the application or system program, mainly recording events in the running of the program.
- B. windows server 2008 system logs stored in the Application.evtx
- C. The system log is used to record the events generated by the operating system components, including the crash of the driver, system components and application software, and data.
- D. windows server 2008 security log is stored in security.evtx
Answer: B
NEW QUESTION 158
The Protocol field in the IP header identifies the protocol used by the upper layer.
Which of the following field values indicates that the upper layer protocol is UDP protocol?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 159
Which of the following is not included in the design principles of the questionnaire?
- A. Consistency
- B. Openness
- C. Specificity
- D. Integrity
Answer: A
NEW QUESTION 160
The administrator wants to know the current session table. Which of the following commands is correct?
- A. Display firewall session table
- B. Reset firewall session table
- C. Clear firewall session table
- D. Displaysession table
Answer: B
NEW QUESTION 161
Which of the following belongs to multi-channel protocol?
- A. FTP
- B. HTTP
- C. SMTP
- D. Telnet
Answer: A
NEW QUESTION 162
Which of the following descriptions is wrong ebout the source of electron c evidence?
- A. Fax data, mobile phone recording is an electronic evidence related to communication technology.
- B. Movies and TV shows belong to electronic evidence related to network technology.
- C. Operating system, e-mail, chat records car be used as asource of electronic evidence
- D. Database opera'.ion records, operating system logs are computer-related electronic evidence
Answer: B
NEW QUESTION 163
......
100% Free H12-711 Daily Practice Exam With 290 Questions: https://testking.prep4sureexam.com/H12-711-dumps-torrent.html