Free H12-721 – HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) Practice Test Question

Select all that apply, then click Submit answer.

• ○

  IKE proposal set

• ○

  IPsec proposal set

• ○

  DH key exchange public information

• ○

  Both sides identity
  

Select all that apply, then click Submit answer.

• ○

  IPsec security policy should be applied to the tunnel interface

• ○

  Protocol for the Tunnel Interface must be GRE.

• ○

  Tunnel interface needs to be configured on the IP address and the IP address of the gateway. The external network IP address of the outgoing interface must be in the same network segment.

• ○

  Tunnel interfaces can be added to any security zone, provided they have the appropriate inter-domain security policies.
  

Select all that apply, then click Submit answer.

• ○

  public network unreachable.

• ○

  middle device blocking UDP 500 port.

• ○

  middle device blocking UDP 4500 port.

• ○

  middle device blocking ESP packets.
  

Select all that apply, then click Submit answer.

• ○

  BFD control packets are encapsulated in TCP packets

• ○

  BFD provides two detection modes: asynchronous and synchronous mode

• ○

  After the establishment of a BFD session, both systems periodically send BFD control packets

• ○

  At the beginning of the session, the two sides negotiate through the control system carried in the packet parameters
  

Select all that apply, then click Submit answer.

• ○

  safe, VPN user authentication and authorization access through the firewall, after a visit with independent access virtual firewall system for users to manage different resources VPN users are completely isolated.

• ○

  VPN flexible and reliable access to support from the public network to the VPN, can also support VPN to VPN from two modes.

• ○

  easy to maintain, the user does not have superuser privileges on the system administrator account can manage the entire firewall (including each virtual firewall service).

• ○

  strict access control permissions, firewall can control access VPN access permissions based on user name, password, so that employees can make a business trip, the super user (VPN require access to different resources), such as different users with different access rights.
  

Select all that apply, then click Submit answer.

• ○

  routing strategy

• ○

  MPLS VPN tunnel mode

• ○

  routing

• ○

  Layer 2 VPN mode
  

Select all that apply, then click Submit answer.

• ○

  Packet 1:
  Source IP 1.1.1.1
  Source MAC C-C-C
  The purpose of IP 1.1.1.2
  The purpose of Mac B-B-B
  

• ○

  Packet 1:
  Source IP 1.1.1.3
  Source MAC C-C-C
  The purpose of IP 1.1.1.2
  The purpose of Mac B-B-B
  

• ○

  Packet 2:
  Source IP 1.1.1.2
  Source MAC C-C-C
  The purpose of IP 1.1.1.1
  The purpose of Mac A-A-A
  

• ○

  Packet 2:
  Source IP 1.1.1.3
  Source MAC C-C-C
  The purpose of IP 1.1.1.1
  The purpose of Mac A-A-A
  

Select an option, then click Submit answer.

• ○

  Connect the user interface to configure the firewall to be trusted.

• ○

  DHCP Server firewall connection to untrusted interface configuration mode.

• ○

  Untrusted mode interface receives a DHCP Relay packets will all be discarded.

• ○

  Trusted DHCP Relay interface to receive packets, and can only be checked by DHCP Snooping through.
  

Select an option, then click Submit answer.

• ○

  TRUE

• ○

  FALSE
  

Select an option, then click Submit answer.

• ○

  TRUE

• ○

  FALSE
  

Select an option, then click Submit answer.

• ○

  message 1 and message 2

• ○

  message 3 and message 4

• ○

  message 5 and message 6

• ○

  message 7 and message 8
  

Select an option, then click Submit answer.

• ○

  TRUE

• ○

  FALSE
  

Select an option, then click Submit answer.

• ○

  1 -> 2 -> 3 -> 4

• ○

  2 -> 1 -> 3 -> 4

• ○

  3 -> 1 -> 2 -> 4

• ○

  1 -> 2 -> 4 -> 3
  

Select an option, then click Submit answer.

• ○

  ① = J +1
  ② = J +1
  ③ = K +1

• ○

  ① = J
  ② = K +1
  ③ = J +1

• ○

  ① = J +1
  ② = K +1
  ③ = J +1

• ○

  ① = J +1
  ② = J
  ③ = K +1
  

Select an option, then click Submit answer.

• ○

  IKEv2 builds a pair of IPsec SA, normally used twice to exchange four messages that can be used to establish a pair of IPsec Security Associations.

• ○

  IKE version 2 does not support master mode, it uses the concept of savage mode.

• ○

  To create the next pair of IPsec SA IKEv1 Main Mode requires only six messages.

• ○

  IKEv2 IPsec SA established more than a pair, each additional SA on just one exchange, that is, two messages can be completed.