Free HCIA-Security V3.0 Exam H12-711_V3.0 Exam Practice Test

The protocol number of the transport layer protocol TCP is ( ) (fill in the blank)

some applications such asOracleFor database applications, the firewall session connection is interrupted due to no data flow transmission for a long time, resulting in service interruption. Which of the following is the optimal solution?

• Configure a long-term connection for a service
• turn onASPFFeatures
• Optimize security policies
• Enable shard cache

existUSGOn the series firewall, configurewebAfter the redirection function is enabled, the authentication page cannot pop up. Which of the following is not the cause of the failure?

• The authentication policy is not configured or the authentication policy is incorrectly configured
• UnopenedwebAuthentication function
• browserSSLVersion and Firewall Authentication PageSSLversion mismatch
• The port number of the authentication page service is set to8887

There are two ways for a PKI entity to apply for a local certificate from a CA: ( ). (fill in the blank)

Which of the following attacks is not a malformed packet attack?

• Teardropattack
• Smurfattack
• TCPFragmentation attack
• ICMPUnreachable Packet Attack

A digital envelope refers to the data obtained by the sender using the receiver's _____ to encrypt the symmetric key[fill in the blank]*

existUSGIn the series firewall system view, execute the commandreset saved-configurationAfter that, the device configuration will be restored to the default configuration, and it will take effect without any other operations.

• True
• False

The attacker sendsICMPAnswer the request and set the destination address of the request packet as the broadcast address of the victim network. What kind of attack is this behavior?

• IPspoofing attack
• Smurfattack
• ICMPredirect attack
• SYN floodattack

againstARPDescription of spoofing attack, which of the following is false

• ARPThe implementation mechanism only considers normal business interactions, and does not perform any verification on abnormal business interactions or malicious behaviors
• ARPSpoofing attacks can only be done byARPReply to achieve, can not passARPrequest fulfillment
• When a host sends normalARPWhen the request is made, the attacker will preemptively answer, causing the host to establish an erroneousIPandMACMapping relations
• ARPStatic binding is the solutionARPA scheme of spoofing attack, mainly used in scenarios with small network scale

Which of the following options is not included in the survey respondents in the security assessment method?

• network system administrator
• security administrator
• HR
• Technical director