Huawei H12-721_V3.0-ENU HCIP-Security-CISN V3.0 Online Training
Huawei H12-721_V3.0-ENU Online Training
The questions for H12-721_V3.0-ENU were last updated at Dec 23,2024.
- Exam Code: H12-721_V3.0-ENU
- Exam Name: HCIP-Security-CISN V3.0
- Certification Provider: Huawei
- Latest update: Dec 23,2024
Which of the following resource allocation methods does Huawei USG6000 product resource allocation support? (Multiple choice)
- A . Quota allocation
- B . Automatic allocation
- C . Manual distribution
- D . Indefinite allocation
The networking of an enterprise is shown in the figure. Dual-system hot backup is configured on USG_A and USG_B, and USG_A is the master device. The administrator wants to configure SSL VPN on the firewall so that branch office employees can access the headquarters through SSL VPN. What should be the virtual gateway address of the SSL VPN?
- A . 202.38.10.2/24
- B . 202.38.10.3/24
- C . 202.38.10.1/24
- D . 10.100.10.2/24
GRE Over IPSec tunnel can realize the transmission of IPX packets.
- A . TRUE
- B . FALSE
Huawei UMA products can be deployed in a logical series connection. Which of the following statements regarding the logical mode of this deployment method is correct?
- A . Logical mode: person -> slave account -> authorization -> master account -> target system.
- B . Logical mode: person -> master account -> authorization -> slave account -> target system.
- C . Logical mode: authorization -> slave account -> person -> master account -> target system.
- D . Logical mode: target system -> slave account -> authorization -> master account -> person.
Global route selection means that when there are multiple equal-cost routes to the destination network, the Huawei USG6000 firewall can dynamically select the outgoing interface according to the link bandwidth, weight, priority set by the administrator or the automatically detected link quality to realize the reasonable utilization of link resources and improvement of user experience.
- A . TRUE
- B . FALSE
When the traffic is finally sent from the outgoing interface, it is limited by the bandwidth of the outgoing interface. If the traffic is greater than the bandwidth of the outgoing interface, which of the following will the traffic be queued to ensure that high-priority packets are sent first?
- A . Remark DSCP priority
- B . Forwarding Priority
- C . Bandwidth Policy Matching Order
- D . QoS
Regarding server load balancing, which of the following technologies can be used to sense changes in server status and ensure that user requests will not be sent to faulty servers?
- A . VGMP Hello message
- B . VRRP packets
- C . DPD
- D . Service Health Check
As shown in the figure, BFD is bound to a static route, and the administrator has made the following configuration on firewall A:
[USG6000_A] bfd
[USG6000_A-bfd] quit
[USG6000_A] bfd as bind peer-ip 1.1.1.2
[USG6000_A-bfd-session-aa] discriminator local 10
[USG6000_A-bfd-session-aa] discriminator remote 20
[USG6000_A-bfd-session-aa] commit
[USG6000_A-bfd-session-aa] quit
Which of the following statements about this configuration is true? (Multiple Choice)
- A . The command "bfd as bind peer-ip 1.1.1.2" is used to create a BFD session binding policy for link status detection
- B . The [USG6000_A] bfd configuration in this command is incorrect, it should be changed to [USG6000_A] bfd enable to enable the BFD function
- C . [USG6000_A-bfd-session-aa] commit is an optional configuration. If not configured, the system will submit the configuration by default and generate BFD session log information, but will not create a session table
- D . The command on the firewall also needs to bind the BFD session to the static route:
[USG6000_A] ip route-static 0.0.0.0 0 1.1.1.2 track bfd-session aa
Use the web page to log in to the SSL VPN gateway, and it will automatically log out after a period of time. The possible reason is that the session of the VPN gateway has timed out.
- A . TRUE
- B . FALSE
Which of the following scenarios can achieve bandwidth multiplexing? (Multiple choice)
- A . Multiple flows are matched to the same bandwidth policy, and bandwidth multiplexing can be achieved between multiple flows.
- B . Multiple bandwidth policies refer to the bandwidth channel in the way of policy sharing, so that bandwidth multiplexing can be achieved among multiple flows that match the bandwidth policy.
- C . Bandwidth multiplexing can be achieved between multiple flows that match multiple child policies in the parent-child policy.
- D . Multiple bandwidth policies refer to the bandwidth channel in a policy-exclusive manner, and bandwidth multiplexing can be achieved among multiple flows that match the bandwidth policy.