Easily To Pass New Huawei H12-711_V3.0 Dumps with 466 Questions [Q235-Q253] : Latest Exam Prep : http://certify.vceprep.com

QUESTION 235
Information security precautions include both management and technical measures. Which of the following measures is not a precautionary method for information security technology?

Information security training for employees

Scan the server for vulnerabilities

Authenticate employees

Turn on the anti-virus function on the firewall

QUESTION 236
An employee of a company accesses the company’s internal Web server through a firewall. The web page of the website can be opened using a browser, but the Pina command is used to test the reachability of the Web server, and it is displayed as unreachable.
What is the possible reason? ()

The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol

The interface of the firewall connecting to the server is not added to the security zone

The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol

WEB server is down

QUESTION 237
in deploymentIPSec VPN, which of the following is the main application scenario of tunnel mode?

between host and host

Between the host and the security gateway

between security gateways

between host and server

QUESTION 238
Which is the order of the four stages of the Information Security Management System (ISMS) in the following options?

Plan->Check->Do->Action

Check->Plan->Do->Action

Plan->Do->Check->Action

Plan->Check->Action->Do

QUESTION 239
Which of the following options belong to the technical characteristics of the intrusion prevention system? (Multiple choices)

Online mode

Real-time blocking

Self-learning and self-adaptation

Straight route deployment

QUESTION 240
Which of the following descriptions about the characteristics of the HWTACACS protocol is wrong?

Use UDP protocol

Separation of Authentication and Authorization

In addition to the standard HWTACACS header. Encrypt all the message body

Suitable for conducting security controls.

QUESTION 241
Social engineering is a kind of harmful means such as deception and harm through psychological traps such as psychological weakness, instinctual reaction, curiosity, trust, and greed of the victim.

TURE

FALSE

QUESTION 242
Which of the following options is not a sign of IPSec SA?

SPI

Destination address

Source address

Security protocol

QUESTION 243
The process of electronic forensics includes: protecting the scene, obtaining evidence, preserving evidence, identifying evidence, analyzing evidence, tracking and presenting evidence.

True

False

QUESTION 244
Which of the following is true about the command to view the number of times security policy matches?

display firewall session table

display security-policy all

display security-policy count

count security-policy hit

QUESTION 245
about Internet users andVPNIn the description of access user authentication, which of the following is false?

Internet users andVPNAccess to user shared data, user attribute check (user status, account expiration time, etc.) VPNAccess takes effect

The process of online users using local authentication or server authentication is basically the same.
Both users are authenticated through the authentication domain, and the user triggering method is also the same.

VPNAfter users access the network, they can access the network resources of the enterprise headquarters, and the firewall can control the network resources that can be accessed based on the user name

VPNAfter the access user is authenticated, it will go online in the user online list at the same time

QUESTION 246
Which of the following options are available for IPSec VPN peer authentication?

Digital signature

Digital certificate

Digital envelope

asymmetric key

QUESTION 247
Which of the following is not a quintuple range?

Source IP

Source Mac

Destination IP

Destination port

QUESTION 248
Data Analysis Technology is to find, match keywords or key phrases, and analyze the correlation of time in data streams or information streams that have been obtained.
Which of the following does not belong to evidence analysis technology?

Password decipherment, data decryption technology

File Digital Summary Analysis Technology

Exploring the technology of the connection between different evidence

Spam tracking technology

QUESTION 249
Which of the following configurations can achieveNAT ALGFeatures?

nat alg protocol

alg protocol

nat protocol

detect protocol

QUESTION 250
Please order the following steps according to the graded protection process.[fill in the blank]

QUESTION 251
Which of the following options is correct regarding the actions of the security policy and the description of the security profile? (multiple choice)

Prohibited if the action of the security policy is”prohibit”, the device will discard this traffic, and will not perform content security checks in the future.

The security profile can take effect even if the action is allowed under the security policy

The security profile must be applied under the security policy whose action is Allowed to take effect.

If the security policy action is”allow”, the traffic will not match the security profile

QUESTION 252
The leakage of personal information belongs to the destruction of the ________ characteristics of the information.

Confidential

QUESTION 253
In the Linux system, which of the following is the command to query the P address information? ( )[Multiple choice]*

ifconfig)

display ip interface brief

ipconfig

display ip