Huawei H12-711_V3.0 問題集

質問 1：
After a network intrusion event occurs, the identity of the intrusion, the source of the attack and other information are obtained according to the plan, and the intrusion behavior is blocked. The above actions belong to PDRR. What are the links in the network security model? (multiple choice)
A. Detection link
B. response link
C. recovery link
D. Protection link
正解：A,B

質問 2：
EuropeTCSECThe guidelines are divided into two modules, functional and evaluation, and are mainly used in the military, government and commercial fields
A. False
B. True
正解：B

質問 3：
After the company network administrator configures the dual-system hot backup, he wants to check the status of the current VGMP group, so he typed the command and displayed the following information HRP_M<FW_A>_ Role: active, peer: active Running priority:45000, peer:45000 Backup channel1 usage: 30x Stab1 e time: 1days, 13 hours, 35 minutes Last state change information: 2020-03-22 16:01:56 HRP core state changed, old_state=normal (active), new_state=normal (active).local priority F 4 peer_priority 45000.
Configuration:
hello interval: 1000ms
preempt: 60s
mirror configuration:off
mirror session:on
track trunk member:on
auto-sync configuration:on
auto-sync connection- status:on
adjust ospf cost:on
adjust ospfv3-cost:on
adjust bgp-cost:on
nat resource: off
Detail information on:
Gigabi tEthernet0/0/1:up
Gigabi tEthernet0/0/3:up
ospf-cost: +0
then the command he typed in the blank is[fill in the blank]*
正解：
display hrp state verbose

質問 4：
Which of the following DDoS attack types is an attack?
A. snooping scan attack
B. Malformed Packet Attack
C. special packet attack
D. traffic attack
正解：D

質問 5：
aboutNATAddress translation, which of the following statements is europium false??
A. for some non-TCP,UDPprotocol (such asICMP,PPTP), cannot doNATconvert
B. Address translation can be provided in the local area network according to the needs of usersFTP,WWW,Telnetand other services
C. Some application layer protocols carry in the dataIPaddress information, make themNATWhen modifying the data in the upper layerIPAddress information
D. sourceNATconfiguration in technologyNATaddress pool, you can configure only one address poolIPaddress
正解：A

質問 6：
Which of the following is false for a description of an intrusion detection system?.
A. Intrusion detection system can collect a large amount of key information dynamically through network and computer.And can analyze and judge the current state of the entire system environment in time
B. Once the intrusion detection system finds that there is a behavior that violates the security policy or the system has traces of being attacked, it can implement blocking operations.
C. Intrusion detection system includes all hardware and software systems used for intrusion detection
D. The immersion detection system can be linked with firewalls and switches, making it a powerful tool for firewalls"assistant", better and more precise control of traffic access between domains
正解：C