Huawei H12-721 HCIP-Security-CISN V3.0 HCIP-Security-CISN Exam Practice Test

Page: 1 / 14
Total 217 questions
Question 1

The NAT/ASPF log in the session log and the DPI traffic monitoring log provide a ''binary'' output technology for this type of log. The use of binary input output can greatly reduce the impact on system performance, but The binary form output needs to be configured with the elog log management system.



Answer : A


Question 2

The network administrator of a company discards traffic that exceeds the throughput of the device. The USG discards the traffic that exceeds the device throughput. The USG discards the traffic that exceeds the device throughput. The following command can achieve this function?



Answer : B


Question 3

Which of the following is not a message sent during ip-link detection?



Answer : B, D

Answer : BD Note: ip-link will periodically improve icmp and arp detection messages to


Question 4

On the web configuration page, choose System --> High Reliability --> Hot Standby and click Check for HRP Configuration Consistency. Button. The following window pops up. Which of the following configurations can solve the problem (assuming the heartbeat is added to the DMZ area)?



Answer : D


Question 5

Virtual firewall virtualizes multiple logical firewalls on a physical firewall device and implements multiple instances?



Answer : A, B, C

Note: Virtual firewalls are a combination of VPN instances (Instances), instances of multiple instances, and configuration of multiple instances. The virtual firewall provides the following multiple instances: one is VPN multi-instance; the other is secure multi-instance; the third is to configure multiple instances; the fourth is NAT multi-instance; the fifth is routing multi-instance; the sixth is UTM multi-instance.


Question 6

The static fingerprint filtering function is to defend the attack traffic by configuring a static fingerprint to process the packets that hit the fingerprint. Generally, the anti-DDoS device capture function can be used to input fingerprint information to static fingerprint filtering.



Answer : A


Question 7

The dual-system hot standby networking environment is as shown in the following figure: VRRP group 1 and 2 are added to the VGMP management group, USG_A is the master device, and USG_B is the standby device. When the USG_A has a fault Status, such as power failure, the USG_B status is switched from Slave to Master. After the USG_A is faulty, its status is switched back to Master and the USG_B status is still Master. What is the reason for this now?



Answer : C


Page:    1 / 14   
Total 217 questions