Free HCIA Security V3.0 Exam H12-711 Exam Practice Test

Which of the following is not the business scope of the National Internet Emergency Response Center?

• Emergency handling of security incidents
• Warning and notification of security incidents
• Provide security evaluation services for government departments, enterprises and institutions
• Cooperate with other institutions to provide training services

An employee of a company accesses the internal web server of the company through the firewall. The web page of the website can be opened by using a browser, but the reachability of the web server is tested by using the Ping command, and it shows that it is unreachable. What are the possible reasons?

• The security policy deployed on the firewall allows the TCP protocol, but not the ICMP protocol
• The web server is down
• The security policy deployed on the firewall allows the HTTP protocol, but not the ICMP protocol
• The interface of the firewall connecting to the server is not added to the security zone

aboutIKE SA, which of the following descriptions is false?

• IKE SAis bidirectional
• IKEis based onUDPapplication layer protocol
• IKE SAit's forIPSec SAServices
• The encryption algorithm used by user data packets isIKE SADecide

Regarding the statement of firewall security policy, which of the following options is false?

• If the security policy ispermit, the discarded packets will not be accumulated'Hits'
• When configuring a security policy name, the same name cannot be reused
• Adjust the order of security policies without saving configuration files and take effect immediately
• HuaweiUSGThe security policy entries of the series firewall cannot exceed128strip

IPSec VPNs use pre-shared keys, ( ) and digital envelopes to authenticate peers. (fill in the blank)

existUSGIn the system firewall, you can use------------The function provides well-known application services for non-well-known ports.

• Port Mapping
• MACandIPaddress binding
• packet filtering
• Long connection

Which of the following options isL2TPThe port number used by the packet?

• 17
• 500
• 1701
• 4500

Which of the following is not a key technology of antivirus software?

• Shelling technology
• self protection
• format the disk
• Update virus database in real time

Regarding the description of risk assessment, which of the following is false? ( )[Multiple choice]

• Risk assessment requires training in asset collection and risk assessment methods
• Risk assessment entails identifying threats, vulnerabilities, and scanning for security vulnerabilities.
• Risk assessment requires assessing risks and classifying risk levels
• Risk assessment requires monitoring system operation.

aboutwindowslog, which of the following descriptions is false?

• System logs are used to record events generated by operating system components, mainly including crashes of drivers, system components and application software, and data
• windows server 2008The system logs are stored inApplication.evtxmiddle
• The application log contains events recorded by applications or system programs, mainly recording program operation events
• windows server 2008The security log is stored insecurity.evtxmiddle