Free Online Huawei H12-721 Practice Test

Prepare Your Huawei H12-721 Exam Questions with Free online H12-721 Practice Test. Get Brilliant HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) Exam Results with Valid H12 721 Exam Dumps.

Page: 1 / 50

Total 246 Questions | Updated On: May 14, 2024

Add To Cart

Question 1

In L2TP over IPsec scenarios, The USG device will first use the original data packet that is

encrypted using IPsec, and then encapsulates the data packets using L2TP.

A : TRUE

B : FALSE

Answer: B

Question 2

In the firewall DDos attack prevention technology, the Anti-DDoS prevents attacks based

on what?

A : Based on the ability of the application to authenticate the source address of the packet,the application, and the cleaning equipment source by sending probe packets to preventthe attack traffic source.

B : session-based concurrent connections to the defense, where the new connection orabnormal connections exceeds the threshold levels..

C : Mainly by fingerprint analysis to study and get traffic capture feature to prevent bots orinitiate the attack traffic through a proxy to distinguish normal user access behavior.

D : By detecting the session using filter scanning packets and special control packets.

Answer: B

Question 3

A static BFD session is configured between USG A and USG B. Which of the following

statements about BFD session creation and removal are correct? (Select 2 Answers)

A : Both USG A and USG B enable the BFD state machine. The initial status of the statemachine is Down. They transmit BFD control packets whose status is Down. The value ofYour Discriminator is 0.

B : If the local BFD status of USG B becomes Init and USG B still receives packets whosestatus is Down, USG B will update its local BFD status.

C : After receiving the BFD control packet whose status is Init, USG B switches the localBFD status to Up.

D : After the status transfers from Down to Init, a timeout timer is enabled respectively onUSG A and USG B. If the timer does not receive any BFD packet whose status is Init or Upwithin the timeout, the local BFD status automatically switches to Down.

Answer: C,D

Question 4

When an attack occurs, the attacked host (1.1.128.4) was fooled. Host found many packets

as shown. Based on an analysis what type of attack is this?

A : Smurf attack

B : Land Attack

C : WinNuke

D : TCP packet flag attack

Answer: D

Question 5

A network is as follows:

LAN---------------G0/0/0 USG G0/0/1--------------Server.

After administrators analyze a possible attack on the LAN networking G0/0/0 connection

and want to enable ARP Flood attack prevention, restricting ARP traffic to 100 packs / min.

What should be configured to enable this?

A : firewall defend arp-flood enablefirewall defend arp-flood interface GigabitEthernet 0/0/0 max-rate 100

B : firewall defend arp-flood enablefirewall defend arp-flood interface GigabitEthernet 0/0/0 max-rate 6000

C : firewall defend arp-flood enablefirewall defend arp-flood interface GigabitEthernet 0/0/1 max-rate 100

D : firewall defend arp-flood enablefirewall defend arp-flood interface GigabitEthernet 0/0/1 max-rate 6000

Answer: B

Page: 1 / 50

Total 246 Questions | Updated On: May 14, 2024

Add To Cart