Free Sales Ending Soon - Use Real H12-711 PDF Questions [Feb 11, 2024]
Updated Feb-2024 Exam H12-711 Dumps - Pass Your Certification Exam
NEW QUESTION # 103
Terminal detection is an important part of the future development of informationsecurity. Which of the following methods belong to the category of terminal detection? (Multiple Choice)
- A. Monitor and remember the external device
- B. Install host antivirus software
- C. Monitorthe host registry modification record
- D. Prevent users from accessing public network search engines
Answer: B,C
NEW QUESTION # 104
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements iscorrect about the standard of evidence identification?
- A. Fairness standard refers to the evidence obtained by the legal subject through egal means, which has the evidence ability.
- B. Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.
- C. Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated
- D. Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to s certain extent, the court should determine that it is relevant.
Answer: D
NEW QUESTION # 105
As shown, when configuring the point-to-multipoint scenarios, the headquarters network segment is
10.1.1.0/24, the segment of branch 1 is 10.1.2.0/24, of branch 2 is 10.1.3.0/24.
About the protected data flow configuration which defined by headquarters and branch offices, which of the following combinations can be the full matched requirements?
- A. 1 2 3 5
- B. 1 2 4 6
- C. 1 2
- D. 3 4 5 6
Answer: A
NEW QUESTION # 106
Social engineering is a means of harm such as deception, injury, etc. through psychological traps such as psychological weakness, instinctive reaction, curiosity, trust, and greed
- A. False
- B. True
Answer: B
NEW QUESTION # 107
The single-point login function of the online user, the user authenticates directly to the AD server, and the device does not interfere with the user authentication process. The AD monitoring service needs to be deployed on the USG device to monitor the authentication information of the AD server.
- A. True
- B. False
Answer: B
NEW QUESTION # 108
Which of the following is not a requirement for firewall double hot standby?
- A. The firewall hardware model is consistent
- B. The type and number of the interface used are the same.
- C. The firewall software version is consistent
- D. The firewall interface has the same IP address.
Answer: D
NEW QUESTION # 109
Which of the following description is wrong aoout the intrusion detection system?
- A. The intrusion detection system can dynamically collect a large amount of key information 3nd materials through the network and computer, and can timely analyze and judge the current state of the entire system environment.
- B. The flood detection system can be linked with firewalls and switches to become a powerfu 'helper' of the firewall, which is better and more precise to control traffic access between domains.
- C. Intrusion detection system includes all hardware and software systems for intrusion detection
- D. The intrusion detection system can perform blocking operation if it finds that there is a violation of the security policy or the system has traces of being attacked.
Answer: C
NEW QUESTION # 110
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements is correct about the standard of evidence identification?
- A. Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.
- B. Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated.
- C. Fairness standard refers to the evidence obtained by the legal subject through legal means, which has the evidence ability.
- D. Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to a certain extent, the court should determine that it is relevant.
Answer: D
NEW QUESTION # 111
Which of the following are correct regarding the matching conditions of the security policy? (Multiple choice)
- A. "The source security zone" is an optional parameter in the matching condition.
- B. "Apply" in the matching condition is an optional parameter
- C. "Service" is an optional parameter in the matching condition
- D. "Time period" in the matching condition is an optional parameter
Answer: A,B,C,D
NEW QUESTION # 112
Regarding the description of the packet in the iptables transmission process, which of the following option is wrong?
- A. If the destination address of the packet is not local, the system sends the packet to the OUTPUT chain.
- B. If the destination address of the packet is not local, the system sends the packet to the FORWARD chain.
- C. If the destination address of the packet is local, the packet will be sent to the INPUT chain.
- D. When a packet enters the network card, it first matches the PREROUTING chain.
Answer: A
NEW QUESTION # 113
Both the GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ. If the area connected to GE1/0/1 can access the area connected to GE1/0/2, which of the following is correct?
- A. Need to configure security policy from DMZ to local
- B. Need to configure an interzone security policy
- C. Need to configure the security policy from Local to DMZ
- D. No need to do any configuration
Answer: D
NEW QUESTION # 114 
Execute the command on the Firewall and display the above information.
Which of the following description is correct? (Choose two.)
- A. This Firewall VGMP group status is Active
- B. If the master device fails, it will not switch
- C. The priority of the VRRP backup group of the firewall VRID 1 is 100
- D. The virtual IP address of the firewall G1/0/1 interface is 202.30.10.2
Answer: A,C
NEW QUESTION # 115
According to the management specifications, the network security system and equipment are regularly checked, the patches are upgraded, and the network security emergency response drill is organized. Which of the following belongs to the MPDRR network security modes of the above actions?
- A. Management link
- B. Response link
- C. Testing link
- D. Protection link
Answer: B,C
NEW QUESTION # 116
Regarding the firewall security policy, which of the following options are wrong?
- A. When configuring the security policy name, you cannot reuse the samename.
- B. If the security policy is permit, the discarded message will not accumulate the number of hits.
- C. The number of security policy entries of Huawei USG series firewalls cannot exceed 128.
- D. Adjust the order of security policies without saving the configuration file.
Answer: B
NEW QUESTION # 117
In the GRE configuration environment, which of the following interface or IP address is the local GRE device configuration of the end private network route required to point to? (Choose two.)
- A. Tunnel Interface
- B. External network (Internet) interface IP address
- C. Tunnel interface IP address
- D. External networks (Internet) Interface
Answer: A,C
NEW QUESTION # 118
The Huawei Redundancy Protocol (HRP) is used to synchronize the main firewall configuration and connection status and other data on the backup firewall to synchronize . Whichof the following options is not in the scope of synchronization?
- A. IPS signature set
- B. Blacklist
- C. NAT policy
- D. Security policy
Answer: A
NEW QUESTION # 119
When the session authentication mode is used to trigger the firewall's built-in Portal authentication, the user does not actively perform identity authentication, advanced service access, and device push "redirect" to the authentication page.
- A. False
- B. True
Answer: B
NEW QUESTION # 120
Which of the following is the correct descriptionof the investigation and evidence collection?
- A. Evidence obtained by eavesdropping is also valid
- B. Document evidence is required in computer crime
- C. Evidence is not necessarily required during the investigation
- D. In the process of all investigation and evidence collection, there are law enforcement agencies involved.
Answer: D
NEW QUESTION # 121
Which of the following is not the scope of business of the National Internet Emergency Center?
- A. Early warning notification of security incidents
- B. Emergency handling of security incidents
- C. Providing security evaluation services for government departments, enterprises and institutions
- D. Cooperate with other agencies to provide training services
Answer: D
NEW QUESTION # 122
Which ofjhe following is the encryption technology used in digital envelopes?
- A. Hash algorithm
- B. Asymmetric encryption algorithm
- C. Streaming algorithm
- D. Symmetric encryption algorithm
Answer: B
NEW QUESTION # 123
......
H12-711 Dumps To Pass HCNA-Security Exam in One Day: https://examcollection.dumpsvalid.com/H12-711-brain-dumps.html