H12-711_V4.0 Free Exam Study Guide! (Updated 942 Questions)
H12-711_V4.0 Dumps for Huawei Certified ICT Associate Certified Exam Questions and Answer
The HCIA-Security V4.0 certification is ideal for IT professionals who are interested in pursuing a career in cybersecurity or who are already working in the field and want to enhance their skills and knowledge. HCIA-Security V4.0 certification is also suitable for individuals who work in other IT-related fields and want to expand their knowledge of IT security.
NEW QUESTION # 344
() is a flaw in the specific implementation of hardware, software, protocols, or system security policy, which allows an attacker to access or destroy the system without authorization.
Answer:
Explanation:
Vulnerability
NEW QUESTION # 345
Man-in-the-middle attacks are data security threats.
- A. False
- B. True
Answer: B
NEW QUESTION # 346
During anti-virus processing, which of the following exception actions can be performed by application exceptions? (Multiple Choice)
- A. Allow
- B. Alarm
- C. Delete attachments
- D. Block
Answer: A,B,D
NEW QUESTION # 347
Regarding the characteristics of TCP-based attacks, which of the following descriptions are correct?
(Multiple Choice)
- A. TCP session hijacking refers to an attack method in which an attacker snoops on user messages and forges TCP messages with legal sequence numbers.
- B. TCP SYN Flood means that an attacker forges a large number of syn messages to force normal users to close TCP connections.
- C. TCP SYN Flood is an attack method in which an attacker forges a large number of SYN messages to occupy TCP session connections during the three-way handshake process, thus exhausting server resources.
- D. TCP session hijacking can control the TCP session, but it does not count as tampering with user data.
Answer: A,C,D
NEW QUESTION # 348
Which of the following protection levels are included in the TCSEC standard? (Multiple Choice)
- A. Passive protection level
- B. Verify protection level
- C. Mandatory protection level
- D. Autonomous protection level
Answer: B,C,D
NEW QUESTION # 349
Which of the following is the number range of Layer 2 ACL?
- A. 2000~2999
- B. 4000~4999
- C. 3000~3999
- D. 1000~1999
Answer: B
NEW QUESTION # 350
In USG6000E, the initial priority of VGMP is ()
Answer:
Explanation:
45000
NEW QUESTION # 351
When configuring security policies, traffic can be controlled based on the user's ().
Answer:
Explanation:
Application
NEW QUESTION # 352
Which of the following options are included for encryption technology to protect data during data transmission? (Multiple Choice)
- A. Controllability
- B. Source verification
- C. Confidentiality
- D. Completeness
Answer: B,C,D
NEW QUESTION # 353
If you want to implement the "anti-virus function" in the security policy, you must activate the license.
- A. False
- B. True
Answer: B
NEW QUESTION # 354
An employee of a company received an email about the company's salary adjustment and saved the email attachment. A few days later, the company administrator discovered that most of the company's employees' computers were infected with viruses and could not operate properly.
Which of the following attack methods might the hacker use in this case? (Multiple Choice)
- A. Social engineering
- B. Denial of Service Attack
- C. Worm virus
- D. Phishing emails
Answer: C,D
NEW QUESTION # 355
Which of the following traffic will not trigger authentication even if it matches the authentication policy? (Multiple Choice)
- A. OSPF
- B. Traffic of users accessing HTTP services
- C. LDP
- D. Traffic accessing the device
Answer: A,C,D
NEW QUESTION # 356
Use a large number of controlled hosts to send a large number of network data packets to the attacked target to occupy the bandwidth of the attacked target and consume the network data processing capabilities of the server and network equipment to achieve the purpose of denial of service.
Which of the following options are common denial-of-service attacks? (Multiple Choice)
- A. UDP f1ood
- B. Man-in-the-middle attack
- C. SYN F1ood
- D. CC attack
Answer: C,D
NEW QUESTION # 357
Which of the following items does IKE's identity authentication mechanism include? (Multiple Choice)
- A. Two-factor authentication
- B. Digital certificate authentication
- C. Pre-shared key authentication
- D. Digital Envelope Authentication
Answer: A,B,C
NEW QUESTION # 358
An engineer needs to back up the firewall configuration. Now he wants to use one command to view all the current configurations of the firewall. What is the command he uses () (use the complete command)
Answer:
Explanation:
display current-configuration
NEW QUESTION # 359
SSL VPN routing mode determines the route of messages sent by customers. In () mode, no matter what resource is accessed, the data will be intercepted by the virtual network card and forwarded to the virtual gateway for processing.
Answer:
Explanation:
Full routing
NEW QUESTION # 360
Which of the following items does the information output by the display firewall session table verbose command include? (Multiple Choice)
- A. Session ID
- B. Agreement name
- C. TTL
- D. NextHop
Answer: A,B,C,D
NEW QUESTION # 361
Because a server is a type of computer, we can use our personal computers as servers in enterprises.
- A. False
- B. True
Answer: A
NEW QUESTION # 362
SSL is a security protocol that provides secure connections for TCP-based application layer protocols.
- A. False
- B. True
Answer: B
NEW QUESTION # 363
In tunnel encapsulation mode. When configuring IPsec, there is no need to have a route to the destination private network segment, because the data will be re-encapsulated and the new IP header will be used to look up the routing table.
- A. False
- B. True
Answer: A
NEW QUESTION # 364
Please sort the following project implementation steps starting from project launch.
- A. Project Initiation and Gap Analysis
- B. System design and release
- C. System operation and monitoring
- D. Certification and Continuous Improvement
- E. Risk assessment
Answer: A,B,C,D,E
NEW QUESTION # 365
The firewall security group supports up to three levels of nesting, namely parent security group, security group, and child security group.
- A. False
- B. True
Answer: B
NEW QUESTION # 366
Which of the following descriptions of the characteristics of free ARP are correct? (Multiple Choice)
- A. The gratuitous ARP message type is an ARP reply message.
- B. The gratuitous ARP message type is an ARP request message.
- C. Sending free ARP can confirm whether the IP address conflicts
- D. Attackers can use forged free ARP packets to conduct man-in-the-middle attacks
Answer: B,C
NEW QUESTION # 367
......
The H12-711_V4.0 exam is a comprehensive and challenging test that requires a deep understanding of network security concepts and technologies. It consists of multiple-choice questions and simulations that test the candidate's ability to apply their knowledge to real-world scenarios. H12-711_V4.0 exam is conducted online and is proctored to ensure the integrity of the testing process.
Use Real H12-711_V4.0 Dumps - 100% Free H12-711_V4.0 Exam Dumps: https://www.real4dumps.com/H12-711_V4.0_examcollection.html
Realistic Verified H12-711_V4.0 exam dumps Q&As - H12-711_V4.0 Free Update: https://drive.google.com/open?id=1sF_Q3tvGVPb6bv3-NlpQDW73xw-LjKys
