H12-731-ENU：最新的Huawei認證H12-731-ENU考題，HCIE-Security (Huawei Certified Internetwork Expert-Security)認證

問題1
The main differences between the RADIUS and HWTACACS protocols include:

A. RADIUS uses TCP protocol, network transmission is more reliable, HWTACACS uses UDP protocol.

B. HWTACACS encrypts the entire body of the message, and RADIUS only encrypts the password field in the authentication message.

C. RADIUS authentication and authorization are separated, and HWTACACS authentication and authorization are processed together.

D. HWTACACS supports authorization of configuration commands, RADIUS does not support authorization of configuration commands.

正確答案: B,D

問題2
The correct statement of the principle of virtual firewall technology is:

A. Independent allocation of virtual system resources, independent provision of security services, and support for multiple VPN instances.

B. Each virtual firewall system can support TRUST, UNTRUST, DMZ, LOCAL and other security zones, with flexible interface division and allocation.

C. Virtual firewall and root firewall cannot be accessed.

D. Different virtual firewalls have the same way-in-table, so address overlap is not supported on different virtual firewalls.

正確答案: A,B

問題3
What are the URL matching methods in the URL filtering function of the USG?

A. exact

B. parameter

C. prefix

D. suffix

E. keyword

正確答案: A,C,D,E

問題4
What functions does content filtering include in the Huawei USG firewall?

A. mail filtering

B. file extension filter

C. Apply content filtering

D. file content filtering

正確答案: C,D

問題5
In Agile Controller, what is the correct statement about the screen saver check policy ?

A. You can check if the screen saver is enabled on the terminal

B. Only supports Windows OS

C. Screen saver settings cannot be fixed automatically

D. Can check if the screen saver password is enabled

正確答案: A,B,D

問題6
Regarding the firewall IP-Link feature, the following description is incorrect:

A. The firewall continuously sends ARP request packets to the target network segment, and when it receives ARP response packets, it considers the link to be normal.

B. ARP detection mode only supports detection of direct links.

C. The ICMP detection method can be used to detect the reliability of chromium paths across network segments.

D. The firewall continuously sends ICMP packets to the specified destination address, and if no ICMP echo reply is received for 3 seconds (default), the link is considered to be faulty.

正確答案: A

問題7
In the scenario of dual-system hot backup, what is wrong about the description of the main firewall device and the standby device?

A. By default, the configuration of the active device will be backed up to the standby device immediately.

B. When the dual-system hot backup works in the active/standby state, the command prompt of the active device displays HRPA, and the command prompt of the standby device displays HRP_S.

C. Only the master device can perform command configuration, and the standby device command cannot be configured.

D. Configure the master device to define HRP_A, configure the slave device to define HRP_S, and it does not change with the priority.

正確答案: C,D

問題8
In the dual-system hot-standby network, the service interface works at Layer 3, and the uplink and downlink are connected to the switches:

A. When USG1 fails or restarts, if USG2 fails to receive VGMP Hello packets sent by USG1 for 5 consecutive times, it considers that USG1 has failed and immediately switches to the master device.

B. When the master/slave state switch occurs, the Active device publishes the free VARP of the virtual IP address of the VRRP backup group, and the Standby device also publishes the free ARP.

C. VGMP management group status is Active, priority is 65001, VGMP management group status is Standby, priority is 65000.

D. When the link between USG1 and Switch3 is interrupted, the priority of the VGMP management group is reduced by 2.

正確答案: C,D

問題9
When using which of the following functions of UTM, it is necessary to ensure that the device is connected to the security service center?

A. Load IPS engine

B. Scan the transferred files for viruses

C. Online upgrade of IPS signature library

D. Remote URL Filtering

E. Online update virus database

正確答案: C,D,E

問題10
What protocols and ports need to be opened when the firewall uses the IPsec function?

A. UDP packet with destination port 1701.

B. IP packets whose protocols are AH and ESP.

C. UDP packets with destination ports 500 and 4500.

D. UDP packets with source ports 500 and 4500.

正確答案: B,C

問題11
The ARP protocol is used to map the IP address to the correct MAC address, so that the device can encapsulate the correct frame header on the data frame to complete the data forwarding.
If the ARP table is abnormal, it will directly cause the device to fail to forward packets. In the dual-system hot backup scenario, which of the following descriptions are correct when the active and standby firewalls respond to ARP?

A. Request the real IP address of the interface and reply with the real MAC of the interface.

B. Configure the ARP proxy to request ARP source IP and destination IP in the same network segment at the same time.

C. Request VRRP virtual IP address, the current master device responds with virtual MAC, and the standby device does not respond.

D. Request the IP address of the NAT address pool, the current master device responds with a virtual MAC, and the standby device does not respond.

正確答案: A,B

問題12
For some large IP data packets, in order to meet the requirements of the MTU (Maximum Transmission Unit) of the link layer, it needs to be fragmented and divided into several IP packets during the transmission process. In each IP header there is an offset field and a split flag (MF), where the offset field indicates the location of the fragment in the entire IP packet. If the attacker sets the offset field to an incorrect value after intercepting the IP data packet, the receiver cannot correctly combine the values of the offset field in the data packet after receiving the split data packets. In this way, the receiver will keep trying, and the operating system will crash due to resource exhaustion.
What is this attack method?

A. Ip Fragmented Packet Attack

B. Teardrop Attack

C. WinNuke Attack

D. TCP packet flag attack

正確答案: B

問題13
Which of the following is a correct description of the stateful inspection firewall forwarding principle:

A. The firewall does not support the stateful inspection mechanism when deployed as a Layer 2 device.

B. Establish a connection for this UDP data stream when processing UDP protocol packets.

C. ICMP packets will not be checked for status.

D. Session state detection based on TCP connection three-way handshake.

E. The non-first packet forwarding is based on the session table, which can only be forwarded if it matches the session table.

正確答案: B,D,E

最新的Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) - H12-731-ENU免費考試真題

專業認證

品質保證

輕松通過

免費試用