[Feb 08, 2024] Lesson Brilliant PDF for the H12-711_V4.0 Tests Free Updated Today
Get New 2024 Valid Practice Huawei Certified ICT Associate H12-711_V4.0 Q&A - Testing Engine
NEW QUESTION # 51
Digital envelope technology means that the sender uses the receiver's public key to encrypt the data, and then sends the ciphertext to the receiver ( )[Multiple choice]*
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 52
Which of the following is the numbering range of Layer 2 ACLs?
- A. The 1000~1999
- B. The 4000~4999
- C. @2000~2999
- D. The 3000~3999
Answer: D
NEW QUESTION # 53
Which of the following descriptions of server authentication is correct?
- A. The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the FW.
- B. Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.
- C. The visitor sends the username and password that identifies his identity to FW through the portal authentication page, there is no password stored on F7, FT sends the username and password to a third-party authentication server, and the verification process is carried out on the authentication server.
- D. The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor's identity information to FW.
Answer: C
NEW QUESTION # 54
Which of the following operating modes does NTP support?
- A. Mouth client/server mode
- B. Mouth broadcast mode
- C. Mouth peer mode
- D. Mouth multicast mode
Answer: A,B,C,D
NEW QUESTION # 55
The following description of investigation and evidence collection, which one is correct
- A. In all investigation and evidence collection, it is best to have law enforcement agencies involved.
- B. Evidence obtained by wiretapping is also valid.
- C. Documentary evidence is required in computer crime.
- D. Evidence is not necessarily required in the course of the investigation.
Answer: A
NEW QUESTION # 56
Please classify the following security defenses into the correct classification.
Answer:
Explanation:
NEW QUESTION # 57
IPSec VPN uses an asymmetric algorithm to calculate the ___ key to encrypt data packets.[fill in the blank]
- A. TRUE
- B. symmetry
Answer: B
NEW QUESTION # 58
Using the ___ method of the Web proxy, the virtual gateway will encrypt the real URL that the user wants to access, and can adapt to different terminal types.[fill in the blank]*
- A. reb rewrite
- B. web rewrite
Answer: B
NEW QUESTION # 59
When the Layer 2 switch receives a unicast frame and the MAC address table entry of the switch is empty, the switch discards the unicast frame.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 60
As shown in the figure, the administrator needs to test the network quality of the 20.0.0/24 CIDR block to the 40.0.0/24 CIDR block on Device B, and the device needs to send large packets for a long time to test the network connectivity and stability.
- A. tracert -a 20.0.0.1 -c 500 -w 9600 40.0.0.2
- B. tracert -a 20.0.0.1 -f 500 -q 9600 40.0.0.2
- C. ping -s 20.0.0.1 -h 500-f 9600 40.0.0.2
- D. ping -a 20.0.0.1 -c 500 -s 9600 40.0.0.2
Answer: D
NEW QUESTION # 61
The following description of the AH protocol in IPSec VPN, which one is wrong?
- A. Supports packet encryption
- B. Support anti-message replay
- C. Supports data source validation
- D. Supports data integrity checking
Answer: A
NEW QUESTION # 62
As shown in the figure, what is the authentication range of the AH protocol in tunnel mode?
- A. The4
- B. The1
- C. The2
- D. The3
Answer: A
NEW QUESTION # 63
The following description of digital certificates, which one is wrong
- A. Digital certificates contain the owner's public key and related identity information.
- B. The simplest certificate consists of a public key, a name, and a digital signature from a certificate authority.
- C. Digital certificates do not solve the problem of digital signature technology where the public key cannot be determined to be the designated owner.
- D. In general, the key of a digital certificate has an expiration date.
Answer: C
NEW QUESTION # 64
When IPSec VPN uses tunnel mode to encapsulate packets, which of the following is not within the encryption scope of the ESP security protocol? ( )[Multiple choice]*
- A. Raw IP Header
- B. ESP Header
- C. ESP Tail
- D. TCP Header
Answer: B
NEW QUESTION # 65
Which of the following is not included in the Business Impact Analysis (BIA).
- A. Impact assessment
- B. Risk identification
- C. Business priorities
- D. Incident handling priority
Answer: A
NEW QUESTION # 66
What type of ACL does ACL number 3001 correspond to?
- A. Layer 2 ACL
- B. Advanced ACLs
- C. interface ACL
- D. Basic ACL
Answer: B
NEW QUESTION # 67
IP packets using the AH+ESP protocol? ( )[Multiple choice]*
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION # 68
DES is a stream encryption algorithm, because the cipher capacity is only 56 bits, so it is not enough to deal with the weakness of insufficient security, and later 3DES was proposed.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 69
Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution. 1. Inhibition stage, 2. recovery phase, 3. Detection stage, 4. eradication phase[fill in the blank]*
- A. 0
- B. 1
Answer: A
NEW QUESTION # 70
The network environment is becoming more and more complex, and network security incidents occur frequently. While accelerating the construction of informatization, enterprises must not only resist external attacks, but also prevent internal management personnel from being involved in data leakage and operation and maintenance accidents due to operational errors and other issues. Which of the following options might reduce operational risk?
- A. Oral Each department system is independently authenticated and uses a single static password for authentication.
- B. According to the administrator configuration, the O&M user corresponds to the background resource account, and restricts the unauthorized use of the account. mouth Based on the password security policy, the O&M security audit system automatically modifies the password of the background resource account at regular intervals.
- C. Each system is independently operated, maintained and managed, and the access process is not audited and monitored.
Answer: B
NEW QUESTION # 71
Huawei Firewall only supports the inter-domain persistent connection function for TCP packets.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 72
In the authentication policy of the firewall, _____ allows the user to not need to enter the user name and password, but can obtain the corresponding relationship between the user and the IP, so as to carry out policy management based on the user[fill in the blank]*
- A. Certification
- B. Certification-free
Answer: B
NEW QUESTION # 73
What is correct about the following description of device management in the operating system?
- A. Whenever a process makes an I/O request to the system, as long as it is secure, the device allocator will assign the device to the process according to a certain policy.
- B. In order to alleviate the problem of speed mismatch between CPU and I/O devices and improve the parallelism of CPU and I/O devices, in modern operating systems, almost all I/O devices are exchanging numbers with processors
- C. Device management can virtualize a physical device into multiple logical devices through virtualization technology, providing multiple user processes to use.
- D. The main task of port device management is to complete the I/O requests made by users and classify I/O devices for users.
Answer: A,B,C,D
Explanation:
Buffers are used at all times.
NEW QUESTION # 74
The following description of the construction of a digital certificate, which item is wrong
- A. The simplest certificate consists of a public key, a name, and a digital signature from a certificate authority.
- B. The structure of the certificate follows the specification of the X.509 v3 version.
- C. The issuer signs the certificate information with the private key.
- D. The name of the device that issued the certificate can be different from the subject name in the issuer certificate.
Answer: D
NEW QUESTION # 75
......
H12-711_V4.0 Dumps PDF - 100% Passing Guarantee: https://pass4sure.guidetorrent.com/H12-711_V4.0-dumps-questions.html