[Q84-Q101] 2022 Updated H12-721 PDF for the H12-721 Tests Free Updated Today! : Latest Exam Prep : http://certify.vceprep.com

NEW QUESTION 84
The VGMP HELLO packets default time is 1 second, that is, when the end of the three HELLO Slave cycle range, if packets do not received HELLO packets sent to the client, it will consider the peer as dead, and it will switch them to Master-like State.

TRUE

FALSE

NEW QUESTION 85
There are three physical interfaces in the Link-Group group. When any of these interfaces fails, which of the following statements is correct? (Multiple Choice)

If any interface in the group fails, the system sets the status of other interfaces in the group to Down.

If any interface in the group fails, the status of other interfaces in the group does not change.

After some interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

After all the interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

NEW QUESTION 86
Regarding GRE Over IPSec, which of the following statements is wrong?

IP header added in the IPSec encapsulation process is the source IP address of the interface to which the IPSec gateway applies the IPSec policy. The destination address is the address of the interface to which the IPSec policy is applied in the IPSec peer.

The data flow that IPSec needs to protect is the data flow from the GRE starting point to the GRE destination.

IP header added in the GR encapsulation process is the source address of the GRE tunnel, and the destination address is the destination address of the GRE tunnel.

When GRE over IPSec is used between gateways, IPSec encapsulation is performed before GRE encapsulation.

NEW QUESTION 87
87. The SSL VPN scenario under dual-system hot standby is shown in the following figure. The administrator has enabled the SSL network extension function. The following is about the configuration of the SSL VPN function.

virtual gateway created on the master side will not be synchronized to the slave side.

Bind the address pool to VRRP backup group 2 when configuring network extensions.

The virtual gateway IP address of the SSL VPN in C USG_A must use 202.38.10.2

The virtual gateway IP address of the SSL VPN in D USG_B must use 10.100.10.2.

NEW QUESTION 88
What is the correct statement about the ip-link feature?

ip-link is a function to detect link connectivity

ARP detection mode only supports detecting direct links (or forwarding through Layer 2 devices in the middle)

The firewall sends ICMP or ARP packets to a probe destination address to determine whether the destination address is reachable.

ip-link is associated with VGMP, the ip-link status is down, and the VGMP management group priority is lowered by default.

NEW QUESTION 89
In Hot standby, the backup channel must be the primary interface to the interface board.
Which type is not supported?

Ethernet

GigabitEthernet

vlan-if

NEW QUESTION 90
In the USG firewall, which two commands can be used to view the running status and memory/CPU usage of the device components (main control board, board, fan, power supply, etc.)?

display device

display environment

display version

dir

NEW QUESTION 91
The following figure shows the L2TP over IPSec application scenario. Which of the following is correct about the configuration of the IPSec protection data flow?

[LNS] acl number 2001 [LNS-acl-basic-2001] rule permit udp source 10.10.1.0 0.0.0.255

[LNS] acl number 3001 [LNS-acl-adv-3001] rule permit source 10.10.1.0 0.0.0.255 destination 10.10.2.0 0.0.0.255

[LNS] acl number 3001 [LNS-acl-adv-3001] rule permit tcp source-port 1701

[LNS] acl number 3001 [LNS-acl-adv-3001] rule permit udp source-port eq 1701

NEW QUESTION 92
On the USG, you need to delete sslconfig.cfg in the hda1:/ directory. Which of the following commands can complete the operation?

cd hda 1:/remove sslconfig.cfg

cd hda 1:/delete sslconfig.cfg

cd hda 1:/rmdir sslconfig.cfg

cd hda 1:/mkdir sslconfig.cfg

NEW QUESTION 93
The global routing means that when there are multiple equal-cost routes to the destination network, the Huawei USG6000 firewall can dynamically select the outbound interface according to the link bandwidth, weight, priority, or automatically detected link quality set by the administrator, to achieve the reasonable use of link resources and improve the user experience.

True

False

NEW QUESTION 94
Which of the following security services can a secure multi-instance provide for a virtual firewall?

address binding

blacklist

ASPF

VPN routing

NEW QUESTION 95
Hot Standby networking environment is shown in Figure 1 and 2 backup group joined VGMP management group, USG_A main equipment, USG_B as a backup device.

When USG_A is in failed state, such as power failure, this time USG_B state switched from Slave to Master.
When USG_A firewall recovers, it switches back to its state Master, and USG_B status remains as Master.
What has caused this phenomenon?

Two firewall load balancing mode, both in the same backup set is configured to master, also configure the Slave

USGA after the failure to restore its priority VRRP backup group did not recover in time

After the USGA recover from a failure, malfunction heartbeat

No configuration hrp track

NEW QUESTION 96
Ensure that the traffic is not affected by the server or link failure. The administrator has configured the link health check. However, after the configuration is complete, the health check status is still Down. What are the possible causes? (Multiple Choice)

The peer device did not release the corresponding protocol and port

Security policy did not release traffic

The link for the health check has failed

Health check is not invoked on the interface

NEW QUESTION 97
Which of the following are the contents of quota allocation? (Multiple choices)

SSL VPN virtual gateway

Security area

Interface

vlan

NEW QUESTION 98
Before using SSL VPN to communicate, the client and server establish a session through the Handshake protocol to negotiate the relevant security parameters to be used in data transmission.

True

False

NEW QUESTION 99
When configured behind a firewall stateful failover, in the Web configuration interface, select “System> High Reliability> hot standby”, click “Check HRP configuration consistency” corresponding “check” button.

Pop-up window, as shown, which of the following configurations can solve the problem (assuming heartbeat interface is added to the DMZ zone)?

firewall packet-filter default permit interzone trust locaI

firewall packet-filter default permit interzone trust dmz

firewall packet-filter default permit interzone untrust dmz

firewall packet-filter default permit interzone local

NEW QUESTION 100
Below displays the IKE V1 first stage pre-shared key mode during the main mode packet switching crawl. Based on the information shown, the crawl occurs under which packet?

IKE first or second Message

IKE third or fourth Message

IKE fifth or sixth Message

IKE seventh or eighth Message

NEW QUESTION 101
If you use SSL VPN to provide file sharing, all files in the shared directory are visible to end users.
Which of the following descriptions is correct for the configuration of the file share path?

The format of the SMB type resource is: //IP address (host name)/shared folder. The SMB type resource path can be a multi-level shared folder directory.

The format of the NFS type resource is: //IP address (host name)/dir1/dir2/shared folder. The NFS type resource path can only have one-level shared folder directory.

Select SMB for file sharing resources under Windows.

Select SMB for file sharing resources under Linux.