H12-721-ENU by Huawei Valid Free Exam Practice Test

Question 1

When configuring the IPSec VPN certificate authentication mode, if you select "RSA signature" authentication, need to configure which of the following steps?

A. Upload local certificate B. Upload the peer device certificate C. Create local and public private key pair D. Upload CA certificate

Correct Answer: A,B,D

Question 2

The following figure shows the networking of BFD for OSPF:
1. OSPF is running among the three devices FW_A, FW_B, and FW_C. They are neighbors.
2. When the neighbor status reaches the FULL state, and BFD and OSPF are configured as ganged, BFD completes the establishment of BFD session.
Which of the following statements are correct? (Multiple Choices)

A. BFD can provide second-level fault detection mechanism B. When link a fails, OSPF automatically converges and informs BFD C. When the link a fails, the BFD first percieves, and the FWA and FWB converge immediately. D. After the BFD finds the event of neighbor Down, rerunning the routing calculation between the devices, the new route is link b.

Correct Answer: C,D

Question 3

In hot standby, what is the number of cycles does not receive the HRP HELLO packet from the peer end, the Slave peer considers the peer end to be faulty?

A. One B. Three C. Five D. Two

Correct Answer: B

Question 4

Which of the following encryption methods is used by IPsec VPN to encrypt the communication data stream?

A. Public key encryption B. Symmetric key encryption C. Pre-shared key encryption D. Private key encryption

Correct Answer: B

Question 5

Huawei Any Office provides an effective balance plan for the conflict between individual needs of employees and corporate policy compliance.
What are the issues that mobile security and management essentially solve? (Multiple choices)

A. Integrity B. Data Privacy C. Identity and Device Identities D. Device Compliance

Correct Answer: B,C,D

Question 6

The following figure shows the L2TP over IPSec application scenario. Which of the following is correct about the configuration of the IPSec protection data flow?

A. [LNS] acl number 2001 [LNS-acl-basic-2001] rule permit udp source 10.10.1.0 0.0.0.255 B. [LNS] acl number 3001 [LNS-acl-adv-3001] rule permit udp source-port eq 1701 C. [LNS] acl number 3001 [LNS-acl-adv-3001] rule permit source 10.10.1.0 0.0.0.255 destination 10.10.2.0 0.0.0.255 D. [LNS] acl number 3001 [LNS-acl-adv-3001] rule permit tcp source-port 1701

Correct Answer: B

Question 7

Which statement is correct when the BFD session status is "Init"?

A. The session has been established successfully B. The local end wants to put the session in the Up state C. The session was just created D. Session is in administratively down state

Correct Answer: B

Question 8

Based on the following ISP routing configuration information on a firewall, which of the following options are correct? (Multiple choices)

A. The china-unicom.csv file has two outgoing interfaces bound to the firewall. B. The two outgoing interfaces of china-unicom.csv are all routed in the routing table. C. There are two files that have been issued by the ISP. D. Configure a total of 2 csv files.

Correct Answer: A,C

Question 9

When the Huawei LogCenter product is deployed in distributed deployment, the log collector and analyzer are installed on different physical servers. How many collectors can an analyzer manage at most?

A. 16 B. 15 C. 13 D. 14

Correct Answer: B

Question 10

On a hot standby networking, if the peer heartbeat interface address is specified when the HRP heartbeat interface is configured, which of the following types of packets is the VGMP hello packet sent between the firewalls?

A. Unicast packets B. Broadcast packets C. UDP packets D. Multicast packets

Correct Answer: A

Question 11

Huawei UMA products can be deployed in a logically concatenated manner. Which of the following statements is true about the logical mode of this deployment?

A. Logical Mode: Person -> Master Account -> Authorization -> Slave Account -> Target System. B. Logical Mode: Target System -> Slave Account -> Authorization -> Master Account -> Person. C. Logical Mode: Person -> Slave Account -> Authorization -> Master Account -> Target system. D. Logical Mode: Authorization -> Slave Account -> Person -> Master Account -> Target System.

Correct Answer: A

Question 12

To implement the dual-system hot standby function of the USG6000 firewall, which of the following protocols is not required?

A. VGMP B. VRRP C. IGMP D. HRP

Correct Answer: C

Question 13

Intelligent route selection based on link quality load sharing can dynamically adjust traffic allocation according to the real-time transmission quality of each link.
Which of the following options can't be used as a measure of link quality?

A. Delay jitter B. Packet loss rate C. Delay D. Bandwidth

Correct Answer: D

Question 14

What actions are performed when the Huawei USG6000 series switches between active and standby switches in a dual-system hot backup deployment?

A. VRRP backup group virtual address is unavailable B. USG_B sends gratuitous ARP packets C. USG_B sends proxy ARP packets D. After the related switch receives the ARP packet, it refreshes the MAC address table and directs traffic to the USG_B.

Correct Answer: B,D

Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721-ENU Exam Practice Test