Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721 Exam Practice Test

A. 202.38.10.1/24

B. 202.38.10.2/24

C. 10.100.10.2/24

D. 202.38.10.3/24

A. One

B. Three

C. Two

D. Five

A. Closed the status monitoring function

B. Specify the wrong heartbeat port

C. The session synchronization is not enabled

D. Heartbeat bandwidth is insufficient

A. After the remote user virtual network adapter obtained the private IP address, it need to manually configure the route to the intranet server so that the internal network resources can be accessed normally.

B. The remote user's local PC automatically generates a virtual network adapter. The virtual gateway randomly selects an IP address from the address pool and assigns it to the remote user's virtual network adapter.

C. After the network extension function is triggered, an SSL VPN tunnel needs to be established first between the remote user and the virtual gateway.

D. The remote user sends a business request packet to the Server on the intranet. The packet arrives to the virtual gateway through the SSL VPN tunnel.

A. False

B. True

A. Bandwidth reuse

B. Dynamic sharing

C. Exclusive strategy

D. Strategy Sharing

A. Parameter of link quality detection has the delay, jitter, and packet loss rate

B. Use the way of bandwidth-based load sharing

C. Selected 3 links for sharing

D. Use the TCP protocol to detect

A. False

B. True

A. security-policy rule name trust_dmz source-zone trust dmz destination-zone trust dmz action permit

B. security-policy rule name untrust_dmz source-zone untrust dmz destination-zone untrust dmz action permit

C. security-policy rule name trust_local source-zone trust local destination-zone trust local action permit

D. security-policy rule name local_dmz source-zone local dmz destination-zone local dmz action permit

A. Network Expansion Service the remote client will automatically install a virtual network card to obtain a virtual IP address, just as it can use various services on the LAN, and can freely access any intranet resources.

B. Web proxy service implements clientless page access. An HTTP session is established between the remote user and the firewall virtual gateway, and then the firewall virtual gateway establishes an HTTPS session with the Web Server.

C. Port forwarding is to obtain the specified destination IP address and port UDP packets on the client to access the specified resources on the intranet.

D. The file sharing service provides the shared resources of different system servers to the user in the form of web pages.

A. If the username and PIN are correct, the RADIUS server sends a successful authentication message to the firewall.

B. If the username and PIN are incorrect, the RADIUS server sends an authentication failure message to the firewall.

C. If the username and PIN are correct, the RADIUS server sends a Challenge message to the firewall requesting a dynamic verification code.

D. If the username and PIN are incorrect, the RADIUS server client sends a message with "Illegal username, wrong password, or locked user".

A. Encrypt an account when transferring user accounts and passwords using the Radius protocol

B. Transmission of Radius messages using UDP protocol

C. Authentication and Authorization port number can be 1645

D. The authentication and authorization port number can be 1812

A. The command to bind the BFD session to the static route is also required on the firewall: [USG6000_A] ip route-static 0.0.0.0 0 1.1.1.2 track bfd-session aa

B. In this command, [USG6000_A] bfd is incorrectly configured. Change it to [USG6000_A] bfd enable to enable BFD function.

C. Use the command of "bfd as bind peer-ip 1.1.1.2" to create a BFD session binding policy for detecting the link status.

D. [USG6000_A-bfd-session-aa] commit is optional. If you do not configure, the system default submits configuration and generates BFD session log information but does not create a session table.

A. The on-demand detection mode of DPD only sends an inquiry before the encrypted packet is sent and when the duration of the last IPSec packet received from the peer has exceeded the DPD idle time.

B. Periodic DPD detection mode: If the current IPSec packet received by the remote end has exceeded the DPD idle time, the local end actively sends DPD request packet to the peer end.

C. Used for the detection of IKE neighbor state.

D. Periodically send DPD packets between IKE peers.

A. False

B. True