Huawei HCIA-Security V3.0 認定 H12-711_V3.0 試験問題:
1. Use the Ping command on the firewall to test the reachability to the server (the security zone where the server is located is the DMZ). If a security policy is configured to allow the test traffic, the source security zone is _____.[fill in the blank]*
2. A company's employee account has expired, but the account can still be used to access the company's server.
Which security risks do the above scenarios belong to? (multiple choice)
A) Manage security risks
B) access security risk
C) system security risk
D) physical security risk
3. at HuaweiSDSecIn the solution, which of the following is an analysis layer device?
A) Firehunter
B) CIS
C) switch
D) Agile Controller
4. When A and B communicate with each other in data communication, if an asymmetric encryption algorithm is used for encryption, when A sends data to B, which of the following keys will be used for data encryption?
A) B's public key
B) A's private key
C) B's private key
D) A's public key
5. aboutNATAddress translation, which of the following statements is false?
A) for someTCP,UDPagreement (such asICMP,PPTP), cannot doNATconvert
B) Address translation can be provided in the local area network according to the needs of usersFTP,WWW,Telnetand other services
C) Some application layer protocols carry in the dataIPaddress information, make themNATWhen modifying the data in the upper layerIPAddress information
D) sourceNATconfiguration in technologyNATaddress pool, you can configure only one address poolIPaddress
質問と回答:
質問 # 1 正解: メンバーにのみ表示されます | 質問 # 2 正解: A、B、C | 質問 # 3 正解: A | 質問 # 4 正解: A | 質問 # 5 正解: A |