Huawei HC-711 Exam Practice Test Instant Access

Question 1

Meaning as access control lists are:

[USG (or Eudemon)] acl number 3100

[USG (or Eudemon)-acl-3100] rule deny icmp source 10.1.10.10 0.0.255.255 destination any icmp-type host-unreachable

AThe serial number is 3100 rule prohibited to 10.1.10.10 host unreachable packets to all hosts

BThe serial number is 3100 rule prohibiting all 10.1.0.0/16 that host unreachable packets

CThe serial number is 3100 rule prohibited from 10.1.0.0/16 to all hosts on the network unreachable packets

DRules of the serial number is 3100, banned from all hosts 10.1.10.10 host unreachable packets

Answer : C

Question 2

The following types of interfaces can handle PPP protocol packets?

Ainterface Virtual-Template 1

Binterface Ethernet 0/0 (within the network)

Cinterface Ethernet 0/0 (external network)

Dinterface loopback 1

Answer : A

Question 3

ASPF makes firewall to support multiple data channels of a control on the channel protocol, but also to facilitate the formulation of policies in various security applications are very complex situation.

ATrue

BFalse

Answer : A

Question 4

After the LAC configure the Ethernet interface to bind the virtual template interface, Ethernet interface may configure the IP address.

ATrue

BFalse

Answer : A

Question 5

Which of the following options are part of the 5-tuple integral part? (Choose three)

ASource IP address

BDestination IP address

CAgreement No.

DSource MAC Address

Answer : A, B, C

Question 6

For firewall access control process : 1, 2 routing table lookup, find interzone packet filtering rules 3, 4 session table lookup, find the blacklist, the correct order?

A1-3-2-4

B3-2-1-4

C3-4-1-2

D4-3-1-2

Answer : D

Question 7

For firewall security zone statement is correct?

ADifferent firewall security zones, priority can be the same

BFirewall with an interface can belong to different security zones

CDifferent interfaces of the firewall may belong to the same security zone

DBuilt-in firewall security zones can be deleted

Answer : C

Huawei HC-711 HCNA Huawei Certified Network Associate - Constructing Basic Security Network (HCNA-CBSN) Exam Practice Test