Free HCIA-Security V4.0 Exam H12-711_V4.0 Exam Practice Test

Which of the following protocols is a file transfer protocol?

• Mouth POP3
• Mouth NFS
• Mouth HITP
• Mouth DFTP

Regarding the characteristics of the routing table, which of the following items is described correctly

• Port When a packet matches multiple entries in the routing table, it is forwarded based on the route entry with the largest metric.
• Port In the global routing table, there is at most one next hop to the same destination CIDR block.
• There may be multiple next hops in the global routing table to the same destination.
• Port When a packet matches multiple entries in the routing table, it is forwarded according to the longest mask.

IKE SA is a one-way logical connection, and only one IKE SA needs to be established between two peers.

• TRUE
• FALSE

Under normal circumstances, the Emai1 protocols we often talk about include ____, POP3, and SMTP.[fill in the blank]*

• IMAP
• IMAE

In cases where some configurations alter existing session table entries and want them to take effect immediately, you can regenerate the session table by clearing the session table information. All session table information can be cleared by executing the _____firewall session table command.

• reset
• set

Which of the following descriptions about the heartbeat interface is wrong ( )?[Multiple choice]*

• It is recommended to configure at least two heartbeat interfaces. - One heartbeat interface is used as the master, and the other heartbeat interface is used as the backup.
• The interface MTU value is greater than 1500 and cannot be used as a heartbeat interface
• The connection method of the heartbeat interface can be directly connected, or it can be connected through a switch or router
• MGMT interface (Gigabi tEtherneto/0/0) cannot be used as heartbeat interface

What is correct in the following description of Security Alliance in IPSec?There are two ways to set up an IPSec SA

• manual and IKE. IPSec SA is uniquely identified by a triple.
• IPSec SA is a one-way logical connection, usually established in pairs (Inbound and Outbound).
• Security Alliance SA is a communication peer agreement for certain elements that describes how peers can communicate securely using secure services such as encryption.

Which of the following descriptions of server authentication is correct?

• The visitor sends the username and password that identifies his identity to FW through the portal authentication page, there is no password stored on F7, FT sends the username and password to a third-party authentication server, and the verification process is carried out on the authentication server.
• Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.
• The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor's identity information to FW.
• The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the FW.

Digital envelope technology means that the sender uses the receiver's public key to encrypt the data, and then sends the ciphertext to the receiver ( )[Multiple choice]*

• TRUE
• FALSE

Database operation records can be used as ___ evidence to backtrack security events.[fill in the blank]*

• electronic
• phases