Huawei H12-731-ENU HCIE-Security (Huawei Certified Internetwork Expert-Security) Online Training
Huawei H12-731-ENU Online Training
The questions for H12-731-ENU were last updated at Jan 12,2025.
- Exam Code: H12-731-ENU
- Exam Name: HCIE-Security (Huawei Certified Internetwork Expert-Security)
- Certification Provider: Huawei
- Latest update: Jan 12,2025
In the abnormal flow cleaning scheme, automatic drainage means that the detection equipment reports abnormal flow to the management center, and the management center automatically generates drainage tasks and automatically sends drainage tasks to the cleaning equipment.
Which specific drainage technology is generally required to achieve automatic drainage?
- A . BGP drainage
- B . Static route diversion
- C . Policy routing diversion
- D . GRE drainage
If you use a mobile terminal (Android or Apple system) to access intranet resources through a web proxy, which of the following methods should be recommended?
- A . Only use web link
- B . Can only be rewritten using the web
- C . You can use web link or web rewrite
- D . Such mobile phones cannot access intranet resources through web proxy at all
If you use a mobile terminal (Android or Apple system) to access intranet resources through a web proxy, which of the following methods should be recommended?
- A . Only use web link
- B . Can only be rewritten using the web
- C . You can use web link or web rewrite
- D . Such mobile phones cannot access intranet resources through web proxy at all
168.100.28:1036 [58.251.159.112:2048] –> 111.206.79.100:80
Which of the following descriptions is incorrect?
- A . The firewall interface GigabitEthernet0/0/1 belongs to the untrust zone.
- B . The MAC address of the outgoing interface of the firewall is 00-0f-e2-a2-a2-61.
- C . The internal network 192.168.100.28 host establishes an http connection with the external network 111.206.79.100.
- D . The address after NAT translation is 58.251.159.112.
Which of the following applications cannot be secured using packet filtering alone? (Multiple Choice)
- A . WWW service
- B . Telnet Service
- C . FTP service
- D . H.323
A network needs to replace the dual-system hot-standby USG_A and USG_B due to the network upgrade of the new hardware USG. On the premise of not affecting the business, how to upgrade:
USG_A is the Active device, and USG_B is the Standby device.
Which of the following are the correct cutover steps?
① Connect the 5th line to the new USG_B in sequence.
② Connect lines 1, 2, and 3 from the old USG_A to the new USG A in turn,
③ Power on the new USG_B and the new USG_A, and import the configuration.
④ Enter undo hrp enable in USG_B, and cut off lines 4, 5, and 3 in turn.
⑤ Adjust the routing cost so that all traffic passes through USB_B.
⑥ Enter hrp enable for the new USG_A and new USG_B, and adjust the routing cost to meet the expectations.
- A . ③ -> ④ -> ① -> ⑤ -> ② -> ⑥
- B . ③ -> ④ -> ① -> ② -> ⑥ -> ⑤
- C . ④ -> ① -> ⑤ -> ③ -> ② -> ⑥
- D . ③ -> ④ -> ⑤ -> ① -> ② -> ⑥
An enterprise has the following requirements:
The intranet users in the Trust zone are on the 192.168.1.0/24 network segment and can access the Internet. There are a total of 50 hosts (192.168.1.1-192.168.1.50) with a total curtain size of 500M.
Which of the following plans are reasonable?
- A . The overall bandwidth is limited to 500M, and the maximum bandwidth of each IP is 12M.
- B . The overall bandwidth is limited to 400M, and the maximum bandwidth per IP is 12M.
- C . The overall bandwidth is limited to 500M, and the maximum bandwidth of 192.168.1.1-192.168.1.50 per IP is 12M.
- D . The overall belt curtain is limited to 500M, the guaranteed belt curtain is 500M, and the maximum belt curtain per IP is 10M.
Do the following configuration on the firewall:
[USG-policy-security] rule name Trust Local
[USG-policy-security-rule-Untrust Local] source-zone trust
[USG-policy-security-rule-Untrust Local] destination-zone local
[USG-policy-security-rule-Untrust Local] source-address 192.168.5.2 32
[USG-policy-security-rule-Untrust Local] destination-address 192.168.5.1 32
[USG-policy-security-rule-Untrust Local] service http
[USG-policy-security-rule-Untrust Local] service telnet
[USG-policy-security-rule-Untrust Local] action permit
Please select the correct description below: (Multiple Choice)
- A . Allow the firewall to log in to the device at 192.168.5.1 through Telnet.
- B . Allow the IP address 192.168.5.2/24 to log in to the firewall through Telnet.
- C . Allow the firewall to log in to the device at 192.168.5.1 through the Web.
- D . Allow the 192.168.5.2/24 address segment to log in to the firewall through the Web.
The IPsecVPN tunnel is successfully established, but the speed of accessing the peer’s private network web page is slow or the access is intermittent. The influence of the Internet network quality has been eliminated. The following possible faults are: (Multiple Choice)
- A . The problem of packet fragmentation
- B . The CPU usage of the egress gateway is too high
- C . There is a NAT device in the middle of the network
- D . The packet filtering policy is not enabled
When using the SSL VPN network extension function, the virtual IP address pool can be set to the same network segment as the IP address of the internal network interface of the device.
If the virtual IP address pool and the IP address of the internal network interface are not on the same network segment, manually configure the route to the address pool on the device. The outbound interface is the internal network interface, and the next hop is the next hop of the internal network interface.
- A . TRUE
- B . FALSE
Latest H12-731-ENU Dumps Valid Version with 206 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
