Use H12-731-ENU Exam Dumps (2023 PDF Dumps) To Have Reliable H12-731-ENU Test Engine
H12-731-ENU PDF Recently Updated Questions Dumps to Improve Exam Score
NEW QUESTION # 90
Regarding the firewall IP-Link feature, the following description is incorrect:
- A. ARP detection mode only supports detection of direct links.
- B. The ICMP detection method can be used to detect the reliability of the chromium road across the network segment.
- C. The firewall continuously sends ARP request packets to the target network segment, and when it receives ARP response packets, it considers the link to be normal.
- D. The firewall continuously sends ICMP packets to the specified destination address, and if no ICMP echo reply is received for 3 seconds (default), the link is considered to be faulty.
Answer: C
NEW QUESTION # 91
Regarding SACG's built-in ACL, which of the following statements are correct?
- A. The default ACL rule group number can be arbitrarily specified.
- B. The administrator needs to customize the ACL (number 3100~3999) rules to control the permissions of different access users.
- C. The default ACL rule group number can only be 3099.
- D. Since SACG needs to use ACL3099~3999 to receive the rules issued by the TSM system, it is necessary to ensure that these ACLs are not referenced by other functions before configuring TSM linkage.
Answer: C,D
NEW QUESTION # 92
VGMP unified management of VRRP backup group status, the priority of VGMP management group Active is 65001, and the priority of Standby is 65000. When the VGMP management group monitors the interface Down through the VRRP backup group or directly, the priority of the VGMP management group will be recalculated. When each interface is Down, the priority of the VGMP management group decreases by 2.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 93
The user cannot log in to the management device through SSH, and the following configuration information is obtained. Please analyze the possible causes:
aaa
manager-user sshuser
password cipher Admin@123
service-type ssh
ssh authentication-type password
ssh service-type stelnet
authentication-scheme admin_local
#
user-interface vty o 4
authentication-mode aaa
protocol inbound ssh
#
return
- A. The administrator has not configured the stelnet server enable command in the system view
- B. The domain of aaa is not configured and its authentication method is specified as local
- C. level 3 not configured for sshuser user
- D. If the login interface is not the device management interface, you need to execute service-manager ssh permit under the interface
Answer: A,C,D
NEW QUESTION # 94
Regarding the authentication mode of 802.1X, which of the following descriptions are correct?
- A. From the point of view of the authentication requirements for all access users, the port-based mode is more secure than the MAC-based mode.
- B. Under the same interface, port-based and MAC-based modes can be enabled at the same time.
- C. 802.1X authentication mode is divided into interface-based and MAC-based.
- D. From the point of view of the authentication requirements for all access users, the MAC-based mode is more secure than the port-based mode.
Answer: C,D
NEW QUESTION # 95
USGA G0/0/2 (30.1.1.2) ----------------------------- (30.1.1.1) G0/0/2 USGB
A network adopts the above topology and establishes BFD with USGA and USGB, but it is found that the BFD session cannot be Up. The most probable cause is:
<USGA> display bfd session all
-------------------------------------------------- -------------------------------------------------- -------------
Local Remote Peer IP Address Interface Name State Type
-------------------------------------------------- -------------------------------------------------- ------------
60 20 30.1.1.1 GigabitEthernet0/0/2 Down Static
-------------------------------------------------- -------------------------------------------------- ------------
<USGB> display bfd session all
-------------------------------------------------- -------------------------------------------------- -------------
Local Remote Peer IP Address Interface Name State Type
-------------------------------------------------- -------------------------------------------------- ------------
60 20 30.1.1.2 GigabitEthernet0/0/2 Down Static
-------------------------------------------------- -------------------------------------------------- ------------
- A. BFD session with unbound outbound interface
- B. BFC session configuration not committed
- C. Identifiers at both ends of the BFC session do not correspond
- D. The shutdown command is configured on one side of the BFC session
Answer: C
NEW QUESTION # 96
What aspects need to be checked for IPS (Intrusion Prevention) failures?
- A. Whether to enable IPS global switch.
- B. Whether to configure the IPS policy and apply it to the interzone.
- C. Whether the configured policy is submitted for compilation.
- D. Whether the overlay signature is configured.
- E. Check whether the IPS blacklist is configured.
Answer: A,B,C
NEW QUESTION # 97
Which of the following packets can be unicast packets
- A. HRP Hello
- B. VRRP Hello
- C. OSPF Hello
- D. VGMP Hello
- E. BFD
Answer: A,C,D
NEW QUESTION # 98
A PC receives a fragmented package as shown in the figure below. According to the following package information, which of the following options is correct?
- A. The protocol number in the IP header is 2
- B. The flag bit in the Layer 3 IP header is 1
- C. There are subsequent IP fragments
- D. offset bit is 0
Answer: C,D
NEW QUESTION # 99
The difference between IKEv1 and IKEv2, which of the following descriptions are correct?
- A. IKEv2 is compatible with IKEv1 protocol.
- B. IKEv1 uses the IKE_AUTH exchange for user authentication, and IKEv2 uses the X_AUTH exchange.
- C. Both IKEv1 and IKEv2 use INITIAL_CONTACT to synchronize the SAs of the local and peer ends.
- D. NAT traversal is an optional feature of both IKEv1 and IKEv2.
- E. IKEv2 supports EAP authentication, IKEv1 does not.
Answer: C,D,E
NEW QUESTION # 100
The following figure shows the IKEv1 negotiation process. What information is negotiated in the ① and ② messages?
- A. IKE Security Proposal
- B. Swap temporary random numbers
- C. ID payload
- D. AUTH payload
Answer: A,B
NEW QUESTION # 101
In the abnormal traffic cleaning solution, automatic drainage means that the detection device reports abnormal traffic to the management center, and the management center automatically generates drainage tasks and automatically sends drainage tasks to the cleaning device.
Which specific drainage technology is generally required to achieve automatic drainage?
- A. Static route diversion
- B. BGP drainage
- C. GRE Drainage
- D. Policy routing diversion
Answer: B
NEW QUESTION # 102
A company is engaged in e-commerce through the Internet, and the enterprise network trading platform supports online settlement of credit cards. In order to meet the payment card industry data security standard PCI-DSS, the enterprise needs to deploy Huawei's firewall, VPN, log design and other security products.
At present, the project has completed the project design and product procurement. What necessary work needs to be done before it is officially launched for commercial use?
- A. Black-box penetration testing of solutions and products.
- B. Risk assessment of existing systems in the network.
- C. Open-box penetration testing of solutions and products.
- D. Security hardening of solutions and products.
Answer: A,D
NEW QUESTION # 103
According to the "GB/T 22240-2008 Information Security Technology Information System Security Level Protection Grading Guide", information systems are divided into five levels according to different levels, of which the protection capabilities of the five levels include:
- A. Able to protect the system from malicious attacks from external small organizations, threat sources with few resources, general natural disasters, and other threats of considerable damage to important resources, and to discover important security Vulnerabilities and security incidents, after the system is compromised, can restore some functions for a period of time.
- B. It can protect the system from malicious attacks from external organized groups, threat sources with relatively rich resources, serious natural disasters, and other major threats caused by relatively harmful threats under a unified security strategy. Resource damage can find security loopholes and security incidents, and after the system is damaged, most functions can be restored.
- C. undefined
- D. Resources that can protect the system from malicious attacks, severe natural disasters, and other threats of considerable severity from national-level, hostile organizations, and resource-rich threat sources under a unified security strategy Damage, can find security breaches and security incidents, after the system is damaged, can quickly restore all functions.
Answer: C
NEW QUESTION # 104
The correct deployment recommendations for the abnormal traffic cleaning system are:
- A. The management server uses Telnet to monitor network devices.
- B. The testing center and cleaning center report logs to the collector.
- C. The management server sends policies to network devices through SNMP protocol.
- D. Side-by-side deployment or in-line deployment at the network egress.
Answer: B,D
NEW QUESTION # 105
In Portal authentication, what Portal parameters must be configured on the switch?
- A. Portal protocol version
- B. The port number on which the device listens for Portal protocol packets
- C. shared-key
- D. Portal page URL
- E. Portal server IP
Answer: C,D,E
NEW QUESTION # 106
A firewall is associated with an Agile Controller. Which of the following statements is correct:
HRP A<NGFW A> display right-manager online-users
User name: lee
IP address: 10.1.6.3
Serverip: 192.168.1.2
Login time: 192.168.1.2
Login time: 10.14.11 2011/09/06
(Hour: Minute: Second Year/Month/Day)
--------------------------------------------
Role id Rolename
2
DefaultPermit
5 Deny_____1
225
Last
---------------------------------------------------------
HRP_A <NGFW_A> display right-manager role-info
All Role count: 8
Role ID ACL number Role name
-------------------------------------------------- -----------------------
Role 0 3099 default
Role 1 3100 DefaultDeny
Role 2 3101 DefaultPermit
Role 3 3102 Deny_____0
Role 4 3103 Permit___0
-------------------------------------------------- -----------------------
Role 5 3104 Deny_____1
Role 6 3105 Permit___1
Role 225 3354 Last
Advanced ACL 3099, 4 rules, not binding with vpn-instance
Ad's step is 1
rule 1001 permit ip destination 192.168.1.2 0 (0 times matched)
rule 1002 permit ip destination 192.168.1.3 0 (0 times matched)
rule 1003 permit ip destination 192.168.3.3 0 (0 times matched)
rule 1004 deny ip (0 times matched)
Advanced ACL 3100, 1 rule, not binding with vpn-instance
Ad's step is 1
rule 1 deny ip (0 times matched)
Advanced ACL 3101, 1 rule, not binding with vpn-instance
Ad's step is 1
rule 1 permit ip (0 times matched)
Advanced ACL 3104, 1 rule, not binding with vpn-instance
Ad's step is 1
rule 1 deny ip destination 172.16.1.10 0 (0 times matched)
Advanced ACL 3105, 1 rule, not binding with vpn-instance
Ad's step is 1
rule 1 permit ip destination 172.16.1.10 0 (0 times matched)
Advanced ACL 3354, 3 rules, not binding with vpn-instance
Acl's step is 1
rule 1 permit ip (0 times matched)
Advanced ACL 3104, 1 rule, not binding with vpn-instance
Ad's step is 1
rule 1 deny ip destination 172.16.1.10 0 (0 times matched)
Advanced ACL 3105, 1 rule, not binding with vpn-instance
Ad's step is 1
rule 1 permit ip destination 172.16.1.10 0 (0 times matched)
Advanced ACL 3354, 3 rules, not binding with vpn-instance
Ad's step is 1
rule 1 permit ip destination 192.168.1.2 0 (0 times matched)
rule 2 permit ip destination 192.168.1.3 0 (0 times matched)
rule 3 permit ip destination 192.168.3.3 0 (0 times matched)
- A. The administrator sets the default prohibition rules. In the "Control Mode" in the quarantine domain and the back domain, select "Only allow the resources in the controlled domain in the access list to prohibit access to others".
- B. Assuming that there is a server 10.1.1.1 in the domain after authentication, after the Agent client completes the security authentication, the firewall will allow it to pass.
- C. Agent client cannot access 192.168.1.2.
- D. The linkage between the price firewall and the Agile Controller is unsuccessful.
Answer: B
NEW QUESTION # 107
When the firewall runs GRE, both the physical port and the tunnel port need to be added to the security zone.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 108
......
H12-731-ENU Dumps Full Questions with Free PDF Questions to Pass: https://actualanswers.testsdumps.com/H12-731-ENU_real-exam-dumps.html
