H12-721 Huawei Certified ICT Professional - Constructing Infrastructure of Security Network exact Exam Questions

Huawei Certified ICT Professional - Constructing Infrastructure of Security Network

Last Update 20 hours ago Total Questions : 217

The Huawei Certified ICT Professional - Constructing Infrastructure of Security Network content is now fully updated, with all current exam questions added 20 hours ago. Deciding to include H12-721 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our H12-721 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these H12-721 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Huawei Certified ICT Professional - Constructing Infrastructure of Security Network practice test comfortably within the allotted time.

Question # 11

What are the three elements of an abnormal flow cleaning solution?

cleaning center

Testing Center

Management Center

Collection Center

Question # 12

When an attack occurs, the result of packet capture on the attacked host (1.1.1.1) is as shown in the figure. What kind of attack is this attack?

Smurf attack

Land attack

WinNuke attack

Ping of Death attack

Question # 13

Connecting the internal network interface address from the firewall By pinging the internal network address of the peer, the IPSec tunnel can be successfully triggered. The internal PC cannot trigger the tunnel establishment. What are the possible reasons?

IKE proposal configuration problem

IPSec proposal configuration problem

interested traffic ACL source network segment does not include the PC

packet filtering (inter-domain policy) configuration problem

Question # 14

Which of the following is correct about the configuration of the firewall interface bound to the VPN instance?

ip binding vpn-instance vpn-id

ip binding vpn-instance vpn-instance-name

ip binding vpn-id

ip binding vpn-id vpn-instance-name

Question # 15

When the firewall works in the dual-system hot backup load balancing environment, if the upstream and downstream routers are working in the routing mode, you need to adjust the OSPF cost based on HRP.

TRUE

FALSE

Question # 16

The ip-link sends a probe packet to the specified IP address. By default, after 3 probe failures, the link to this IP address is considered faulty.

TRUE

FALSE

Question # 17

After the link-group is configured on the device, use the display link-group 1 command to obtain the following information. What information can I get?

GigabitEthernet 0/0/2 interface has failed.

GigabitEthernet 0/0/1 has failed.

GigabitEthernet 0/0/2 is forcibly converted to fault state because other interfaces in the group are faulty.

GigabitEthernet 0/0/1 is forcibly converted to fault state because other interfaces in the group are faulty.

Question # 18

What is the correct statement about the binding of local users to VPN instances?

local user can be bound to a VPN instance by using the local-user user-name vpn-instance vpn-instance-name command.

By default, the binding between a local user and a VPN instance is implemented.

. After a local user is bound to a VPN instance, the local user can manage the entire firewall.

Local users cannot be bound to VPN instances.

Question # 19

Site to Site IPSec VPN Tunnel Negotiation Fails. How do I view the establishment and configuration of the IKE Phase 2 security association?

display ike sa

display ipsec sa brief

display ipsec policy

display interface

Question # 20

Which of the following does the virtual firewall technical feature not include?

provides multi-instance, multi-instance, multi-instance, multi-instance, and multi-instance VPN. The application is flexible and can meet multiple networking requirements.

Each virtual firewall can independently support four security zones: Trust, Untrust, DMZ, and Local. The interfaces are flexibly divided and allocated.

technically guarantees that each virtual system and a separate firewall are identical in implementation, and very secure, and can be directly accessed between virtual systems.

Provide independent administrator privileges for each virtual system