Huawei H12-731-ENU 問題集

質問 1：
In a new campus network of an enterprise, there is a requirement for ordinary PC users and dumb terminal users to connect to the Internet at the same time under an access switch.
Which authentication method is recommended to be deployed on this switch?
A. MAC Authentication
B. 802.1X Authentication
C. MAC bypass authentication
D. Portal Authentication
正解：C

質問 2：
Which statement about MTU and PMTU is correct?
A. PMTU detection is to obtain the PMTU value of the specified destination IPv4 address through detection, and then use the MTU value to send packets.
B. MTU (Maximum Transfer Unit) refers to the size of the largest data packet that can be transmitted in the network, in bytes.
C. The device will check the MTU on the inbound interface, and if the packet size exceeds the MTU value, it will be discarded.
D. In an IP network, interfaces with different MTU values may be passed from the source address to the destination address, and the largest MTU value is the PMTU of the path.
正解：A,B

質問 3：
For the networking shown in the figure, one end of the IPsec tunnel uses two devices for dual-system hot backup. When the master-slave switchover occurs, which of the following descriptions is correct?

A. Configure the dpd mechanism on USG_A, USG_B, and USG_C to increase the reliability of IPsec dual-system hot backup.
B. Packets from USG_C to HQ will trigger renegotiation, and services will not be affected.
C. The Keepalive mechanism consumes less CPU resources than the DPD mechanism.
D. The IPsec tunnel does not require renegotiation.
正解：A,D

質問 4：
Comparing the two technologies of mail content filtering and RBL filtering, the correct statement is:
A. RBL filtering only filters messages sent by male POP3.
B. Mail Content Filtering supports filtering of webmail or mail transmitted via SMTP/POP3.
C. RBL filtering is based on the destination IP address of the SMTP connection.
D. Mail content filtering Filters the mail content.
正解：B,D

質問 5：
Which statement is correct about the Portal authentication process?
A. Portal authentication flow is only used in web authentication.
B. The server will only send an authentication message to one Portal device for Portal authentication of one terminal.
C. When the switch receives the Portal online message, it will send a Radius authentication request to the Radius server.
D. The result information of the security check will not be carried in the Portal authentication process.
正解：C

質問 6：
Intranet users can access the Internet normally, and dual links are used for master and backup backup.
For Internet users, the FTP server can be accessed through the public network address. Two public network addresses are announced, 200.1.1.200 and 202.1.1.200.
Which of the following configuration is correct?

A. [USG] nat server s1 zone untrust1 protocol global 200.1.1.200 ftp inside 192.168.1.254 ftp [USG] nat server s2 zone untrust2 protocol global 202.1.1.200 ftp inside 192.168.1.254 ftp
B. USG] ip-link check enable [USG] ip-link 1 destination 200.1.1.2 interface GigabitEthernet 0/0/2 mode icmp [USG] ip route-static 0.0.0.0 0.0.0.0 200.1.1.2 track ip- link 1 [USG] ip route-static 0.0.0.0 0.0.0.0 200.1.1.2 preference 70
C. [USG] ip-link check enable [USG] ip-link 1 destination 202.1.1.2 interface GigabitEthernet 0/0/2 mode icmp [USG] ip route-static 0.0.0.0 0.0.0.0 200.1.1.2 [USG ] ip route-static 0.0.0.0 0.0.0.0 200.1.1.2 preference 70 track ip-link 1
D. [USG] nat server s1 protocol tcp global 200.1.1.200 ftp inside 192.168.1.254 ftp [USG] nat server s2 protocol tcp global 202.1.1.200 ftp inside 192.168.1.254 ftp
正解：A,B