Huawei H12-711-ENU Actual Free Exam Questions & Community Discussion

Exam Code/Number: H12-711-ENU
Exam Name/Title: HCIA-Security V3.0
Certification Provider: Huawei
Corresponding Certification: HCNA-Security

Exam Questions: 290
Updated On: Jul 10, 2026

Question #10

Regarding the description of the vulnerability scanning, which of the following is wrong?

A. Vulnerability scanning is a technology based on network remote monitoring of target network or host security performance vulnerability, which can be used for simulated attack experiments and security audits.

B. Vulnerability scanning is used to detect whether there is a vulnerability in the target host system. Generally, the target host is scanned for specific vulnerabilities.

C. Vulnerability scanning can be done based on the results of ping scan results and port scan

D. Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks.

Discussion 0

Correct Answer: D Vote an answer

Question #11

W hich of the following are the characteristics of a symmetric encryption algorithm? (Multiple choice)

A. Fast encryption

B. Confidential speed is slow

C. Key distribution security is high

D. Key distribution is not secure

Discussion 0

Correct Answer: A,D Vote an answer

Question #12

Which of the following options belong to the necessary configuration for the firewall double hot standby scenario? (Multiple Choice)

A. hrp enable

B. hrp interface interface-type interface-number

C. hrp mirror session enable

D. hrp preempt [delay interval]

Discussion 0

Correct Answer: A,B Vote an answer

Question #13

Which of the following does not belong to the user authentication method in the USG firewall?

A. Single sign-on

B. Fingerprint authentication

C. Free certification

D. Password authentication

Discussion 0

Correct Answer: B Vote an answer

Question #14

Use iptables to write a rule that does not allow the network segment of 172.16.0.0/16 to access the device. Which of the following rules is correct?

A. iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP

B. iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

C. iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP

D. iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT

Discussion 0

Correct Answer: C Vote an answer

Question #15

Which of the following is correct about firewall IPSec policy?

A. By default, IPSec policy only controls unicast packets.

B. By default, IPSec policy can control multicast.

C. By default, IPSec policy can control unicast packets, broadcast packets, and multicast packets 。

D. By default, IPSec policy can control unicast packets and broadcast packets.

Discussion 0

Correct Answer: A Vote an answer

Question #16

Which of the following are the main implementations of gateway anti-virus? (Multiple choice)

A. File killing method

B. Agent scanning method

C. Package inspection method

D. Stream scanning method

Discussion 0

Correct Answer: B,D Vote an answer

Question #17

Which of the following are the ways in which a PKI entity applies for a local certificate from CA? (Multiple Choice)

A. Online application

B. Network application

C. Local application

D. Offline application

Discussion 0

Correct Answer: A,D Vote an answer

Question #18

About the description of firewall active-standby, which of the following is correct? (Multiple Choice)

A. It requires the state of all the VRRP backup groups in the same VGMP management group on the same firewall should be consistent.

B. When a plurality of regions on the firewall need to provide dual-machine backup function, you need to configure multiple VRRP backup groups on the firewall.

C. The firewall active-standby requires the information such as the session table, MAC table, routing table and so on synchronous backup between primary devices and slave devices.

D. VGMP is to ensure all VRRP backup groups' consistency of switching

Discussion 0

Correct Answer: A,B,D Vote an answer

Download Free Huawei H12-711-ENU Demo

Simply submit your e-mail address below to get started with our free demo of your Huawei H12-711-ENU exam.