Huawei H12-721 HCIP-Security-CISN Exam Questions Instant Access

Question 1

On an Eth-Trunk interface, traffic load balancing can be implemented by configuring different weights on member links.

ATRUE

BFLASE

Answer : A

Question 2

What is the correct statement about the ip-link feature?

Aip-link is a function to detect link connectivity

BARP detection mode only supports detecting direct links (or forwarding through Layer 2 devices in the middle)

CThe firewall sends ICMP or ARP packets to a probe destination address to determine whether the destination address is reachable.

Dip-link is associated with VGMP, the ip-link status is down, and the VGMP management group priority is lowered by default.

Answer : A, B, C

Note: VGMP management group priority is lowered by default 2

Question 3

Which of the following is incorrect about IKE V1 and IKE V2?

AIKE V2 establishes a pair of IPSec SAs. Normally, an IKE SA and a pair of IPSec SAs can be completed by exchanging 4 messages twice.

BIKE V2 does not have the concept of master mode and barb mode

CTo establish a pair of IPSec SAs, only 6 messages need to be exchanged in the IKE V1 master mode.

DWhen the IPSec SA established by D IKE V2 is greater than one pair, each pair of SAs needs only one additional exchange, that is, two messages can be completed.

Answer : C

Note: To establish a pair of IPSec, IKE V1 needs to go through two phases: 'main mode + fast mode' or 'barbaric mode + fast mode'. The former needs to exchange at least 9 messages, and the latter requires at least 6 messages. In IKE V2, an IKE SA and a pair of IPSecs can be completed by using a total of four messages in two exchanges. If the required IPSec SA is greater than 1 pair, the first pair of SAs only needs to add 1 additional exchange, that is, 2 messages can be completed. This is much easier than IKE V1. IKE V2 defines three types of exchanges: initial exchange, creation of SA exchange, and notification exchange.

Question 4

134. Which of the following is the connection status data to be backed up in the HRP function?

AServerMap entry

Bport mapping table

Cdynamic blacklist

DSession entry

Answer : A, C, D

Note: The connection status data to be backed up in the HRP function includes: TCP/UDP session table, Server-Map entry, dynamic blacklist, No-PAT entry, and ARP entry.

Question 5

On the USG, you need to delete sslconfig.cfg in the hda1:/ directory. Which of the following commands can complete the operation?

Acd hda 1:/remove sslconfig.cfg

Bcd hda 1:/delete sslconfig.cfg

Ccd hda 1:/rmdir sslconfig.cfg

Dcd hda 1:/mkdir sslconfig.cfg

Answer : B

Question 6

In the firewall DDoS attack defense technology, the data packet of the session table is not defended. If the data packet of the session has been established, it is directly released.

ATRUE

BFALSE

Answer : B

Question 7

In the abnormal traffic cleaning solution of Huawei, in the scenario of bypass deployment, dynamic routing and drainage does not require manual intervention. If an abnormality is detected, the management center generates an automatic drainage task. The traffic is sent to the cleaning device.

ATRUE

BFALSE

Answer : A

Huawei HCIP-Security-CISN V3.0 H12-721 HCIP-Security-CISN Exam Questions