Huawei H12-711_V4.0 Actual Free Exam Questions & Community Discussion
Devices that need to provide network services externally, such as WWW servers and FTP servers, can be placed in the DMZ.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
The following description of asymmetric encryption algorithms, which item is wrong?
Correct Answer: C
Vote an answer
Which of the following functions help implement IPsec secure transmission of user service data on the Internet by means of encryption and authentication?
Correct Answer: A,B,C,D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following attack methods is to construct special SQL statements and submit sensitive information to exploit program vulnerabilities
Correct Answer: A
Vote an answer
Which of the following statements are correct about SYN flood attack defense technologies on Huawei firewalls?
Correct Answer: A,B,C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Match the following single-packet attack types with their corresponding descriptions.
Correct Answer:
Explanation:
A. Scanning attacks # Attackers use ICMP packets to probe the target IP address to identify active hosts that connect to the target network.
B. Malformed packet attacks # Attackers send considerable malformed packets in an attempt to crash targeted hosts or servers.
C. Special packet control attacks # Such attacks are reconnaissance activities for attacks but not real attacks.
That is, attackers send special packets to probe network structures.
In HCIA-Security, single-packet attacks are commonly categorized by the purpose and structure of the packets being sent. Scanning attacks are mainly used to discover targets and collect information before a real attack begins. A common example is using ICMP probe packets to identify whether hosts are alive and reachable on a network. This makes the ICMP host-discovery description the correct match for scanning attacks.
Malformed packet attacks involve sending packets with abnormal, invalid, or deliberately corrupted structures. Their purpose is to exploit weaknesses in protocol handling or operating system processing so that the target host, device, or server becomes unstable, crashes, or stops responding. Therefore, the description about sending many malformed packets to crash targets clearly matches this category.
Special packet control attacks are also more related to probing than direct destruction. In this case, attackers send specially crafted control or probe packets to learn network structure, device behavior, or service characteristics. These activities are considered reconnaissance rather than full attacks. That is why the description about probing network structures with special packets belongs to special packet control attacks.
Which of the following descriptions of single sign-on is correct?
Correct Answer: A
Vote an answer
A three-way handshake is required to establish a TCP connection, and a four-way handshake is required to end a TCP connection.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following descriptions about the main implementation of single sign-on is wrong?
Correct Answer: B
Vote an answer
The traffic direction of a firewall is based on the zone priority. The _____ direction refers to the direction from a low-priority zone to a high-priority zone. Capitalize the first letter.
Correct Answer:
Inbound
Explanation:
On Huawei firewalls, traffic direction is determined according to the priority of security zones . When traffic moves from a low-priority zone to a high-priority zone , that direction is called Inbound . For example, traffic going from the Untrust zone to the Trust zone is considered inbound because Untrust has a lower security priority than Trust.
By contrast, traffic moving from a high-priority zone to a low-priority zone is called Outbound . A common example is internal users in the Trust zone accessing resources on the Internet in the Untrust zone.
This zone-priority concept is important because firewall security policies, packet filtering behavior, and session control are all evaluated according to the source zone and destination zone.
Understanding inbound and outbound directions is essential when configuring interzone security policies.
Administrators must know whether traffic is flowing from low to high priority or high to low priority in order to apply the correct permit, deny, NAT, and inspection rules. Since the question specifically asks for the direction from a low-priority zone to a high-priority zone, the correct answer is Inbound .
Explanation:
On Huawei firewalls, traffic direction is determined according to the priority of security zones . When traffic moves from a low-priority zone to a high-priority zone , that direction is called Inbound . For example, traffic going from the Untrust zone to the Trust zone is considered inbound because Untrust has a lower security priority than Trust.
By contrast, traffic moving from a high-priority zone to a low-priority zone is called Outbound . A common example is internal users in the Trust zone accessing resources on the Internet in the Untrust zone.
This zone-priority concept is important because firewall security policies, packet filtering behavior, and session control are all evaluated according to the source zone and destination zone.
Understanding inbound and outbound directions is essential when configuring interzone security policies.
Administrators must know whether traffic is flowing from low to high priority or high to low priority in order to apply the correct permit, deny, NAT, and inspection rules. Since the question specifically asks for the direction from a low-priority zone to a high-priority zone, the correct answer is Inbound .
Information security aims to protect data in hardware, software, and their systems on information networks to prevent data damage, tampering, or breach due to occasional or malicious reasons and ensure proper system running and non-stop information services.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
0
0
0
10