Huawei H12-721 HCIP-Security-CISN Exam Questions Instant Access

Question 1

The virtual firewall forwards multiple instances. The firewall has multiple routing tables and forwarding tables. The addresses are overlapped and are implemented on the same configuration interface. Users with configuration rights can configure and view all data.

ATRUE

BFALSE

Answer : A

Question 2

On the USG, you need to delete sslconfig.cfg in the hda1:/ directory. Which of the following commands can complete the operation?

Acd hda 1:/remove sslconfig.cfg

Bcd hda 1:/delete sslconfig.cfg

Ccd hda 1:/rmdir sslconfig.cfg

Dcd hda 1:/mkdir sslconfig.cfg

Answer : B

Question 3

SSL VPN authentication is successful. Using the file sharing function, you can view directories and files, but you cannot upload, delete, and rename files. What are the possible reasons?

AIf the file server type is NFS, the user UID and GID attributes do not allow the user to upload, delete, or rename files.

BIf the type of the file server is SMB, the currently logged-in user has only read permission for the file share resource, but no write permission.

COnly the viewing function is enabled in the SSL file sharing function configuration of the C firewall.

DSome TCP connections between the virtual gateways of the D file server are blocked by the firewall

Answer : A, B

Question 4

The malformed packet attack technology uses some legitimate packets to perform reconnaissance or data detection on the network. These packets are legal application types, but only normal network packets are rarely used.

ATRUE

BFALSE

Answer : B

Note: Malformed message attack: By sending a defective message to the target system, the target system will make an error when processing such an IP packet, or cause a system crash, which affects the normal operation of the target system. The main attack methods are: SMURF attack; Second, LAND attack; Third, Fraggle attack; Fourth, IP Fragment attack; Fifth, IP Spoofing attack; Six, Ping of Death attack; Seven, TCP Flag attack; Eight, Tear Drop attack; Nine is the WinNuke attack.

Question 5

Three physical interfaces have been added to the link-group group. When any one of the interfaces fails, what are the following descriptions correct?

AIf any interface in group A fails, the system sets the status of other interfaces in the group to down.

BAny interface in group B fails, and the status of other interfaces in the group does not change.

CAfter the interfaces in the group are restored to normal, the interfaces in the entire group are reset to up.

DAfter all the interfaces in the group are restored, the interfaces in the entire group are reset to up.

Answer : A, D

Question 6

When an attack occurs, many packets are found on the attacked host (1.1.129.32) as shown in the figure. According to the analysis of the attack, what kind of attack is this attack?

ASmurf

BLand

CWinNuke

DPing of Death

Answer : B

Note: Land attack: It is to set the source address and destination address of the TCP SYN packet to the IP address of a certain victim. This will cause the victim to send a SYN-ACK message to its own address, which in turn will send back an ACK message and create an empty connection, each of which will remain until timeout. Various victims react differently to Land attacks, many UNIX hosts will crash, and NT hosts will become extremely slow.

Question 7

What are the load balancing algorithms supported by the USG firewall?

Asource address hash algorithm

Bsimple polling algorithm (roundrobin)

Cweighted rounding algorithm (weightff)

Dratio (Ratio)

Answer : A, B, C

Note There are three types of load balancing algorithms supported by the USG firewall: one is the source address hash algorithm; the other is the simple polling algorithm; the third is the weighted round robin algorithm.

Huawei HCIP-Security-CISN V3.0 H12-721 HCIP-Security-CISN Exam Questions