H12-711 Online Practice Questions and Answers

Which of the following security zones can be conditionally deleted?

A. Regional Security

B. trust region

C. untrust area

D. dmz area

For the end user,SVN equivalent web___________, while the internal servers,SVN has assumed the role of__________ of:

A. Server,

B. The client,the client

C. Client, server

D. Server,the client

What are the main features Secospace DSM product?(Choose three)

A. Encrypt the document management

B. Document Actions behavior records of employees, providing audit logs

C. Control employee access to documents

D. The document archive management,in order to prevent loss of documents

For command tunnel name, statement is correct?(Choose two)

A. Is used to specify the name of the end of the tunnel

B. Is used to specify the name of the end of the tunnel

C. Must be consistent on the side of the tunnel name configured

D. If you do not configure the tunnel name, the tunnel name is the name of the local system

Check the NAT session command?

A. display nat translation

B. display firewall session table

C. display current nat

D. display firewall nat translation

When configuring the firewall packet filtering ACL rules, if we want to 192.168.0.0/24 network is set to match the object ACL rules, the match operation is rejected, the following configuration is correct().

A. rule 0 deny source 192.168.0.0 255.255.255.0

B. rule 2 deny source 192.168.0.0 0.0.0.255

C. rule 3 deny source 192.168.0.0 24

D. rule 4 deny source 192.168.0.0 0.0.255.255

Packet filtering firewall at the application layer for each packet inspection, forwarding or discarding packets according tothe configured security policy:

A. True

B. False

Stateful inspection firewall intercepts packets at the network layer and application layer extracted from each state information security policies need, and save the session table,through the analysis of these sessions tables and data packets associated with the connection request to make a follow-up appropriate decision.

A. True

B. False

For E1/CE1 configuration(1,2 configure virtual serial port IP address,configure virtual serial link layer protocol 3,4 E1 configuration mode,configure timeslot bundling),correct configuration sequence is:

A. 1-2-3-4

B. 2-1-3-4

C. 3-4-2-1

D. 4-3-2-1

After a successful L2TP user authentication,IP address obtained is wrong to say :

A. User address allocation has been assigned an IP address bound and dynamically assigned IP addresses from the address pool in two ways

B. L2TP user-assigned IP address can be any address

C. L2TP user-assigned IP address and the address of the network to be accessed in the same network segment

D. Address assignment plan well in advance to avoid address conflicts exist