Free HCNA Huawei Certified Network Associate – Constructing Basic Security Network (HCNA-CBSN) Exam HC-711 Exam Practice Test

Security Alliance (SA) is bidirectional security associations can be achieved through data streams in both directions for security protection.

• True
• False

IKE negotiation mode include? (Choose two)

• Master Mode
• Aggressive Mode
• Fast mode
• Transfer mode

For command tunnel name, statement is correct? (Choose two)

• Is used to specify the name of the end of the tunnel
• Is used to specify the name of the end of the tunnel
• Must be consistent on the side of the tunnel name configured
• If you do not configure the tunnel name, the tunnel name is the name of the local system

When the device at both ends of the tunnel is using IPSec non-template approach, ACL need to completely mirror configuration?

• True
• False

Which of the following algorithms in IPSec encryption algorithm does not belong?

• DES
• SHA1
• 3DES
• AES

No matter under what circumstances? 2 packets between interfaces must flow through the firewall interzone packet filtering?

• True
• False

In order to ensure the normal remote L2TP dial-up users to access the corporate network, the user is required to assign an IP address within the enterprise network services and resources to be accessed not on the same network segment (without considering the ARP Proxy technology).

• True
• False

Policy Center system can implement two dimensions' management functions: organizational management and regional management

• True
• False

How to see the number of matches the ACL ()

• display current-configuration
• display ACL all
• display startup saved-configuration
• display device

Which of the following IKE exchange mode can only use IP addresses to identify peer manner?

• Master Mode
• Aggressive Mode
• Fast mode
• Passive mode