最新Huawei Certified ICT Associate H12-711_V4.0考試題庫，Huawei H12-711

問題1
The trigger authentication method for firewall access user authentication does not include which of the following?

A. L2TP VPN

B. SSL VPN

C. MPLS VPN

D. IPSec VPN

正確答案: C

問題2
Which of the following statements are correct about the PKI system structure?

A. A PKI system consists of three parts: entity, certificate authority, and certificate registration authority.

B. A PKI entity is an end user of PKI products or services. It can be an individual, an organization, a device such as a router or firewall, or a process running on a computer.

C. A CA is a trusted entity that issues and manages digital certificates.

D. CAs are classified into the root CA and subordinate CAs according to the hierarchy of CAs.

正確答案: A,B,C,D

說明：（僅 NewDumps 成員可見）

問題3
Drag the phases of the cybersecurity emergency response on the left into the box on the right, and arrange them from top to bottom in the order of execution. 1. Inhibition stage, 2. recovery phase, 3. Detection stage, 4. eradication phase.

正確答案:

3142

問題4
What is correct in the following description of Security Alliance in IPSec?
There are two ways to set up an IPSec SA

A. manual and IKE.
IPSec SA is uniquely identified by a triple.

B. IPSec SA is a one-way logical connection, usually established in pairs (Inbound and Outbound).

C. Security Alliance SA is a communication peer agreement for certain elements that describes how peers can communicate securely using secure services such as encryption.

正確答案: A,B,C

問題5
We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the ____ encryption algorithm to improve the encryption and decryption speed.

正確答案:

symmetry

問題6
Which of the following descriptions of server authentication is correct?

A. Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.

B. The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor's identity information to FW.

C. The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the FW.

D. The visitor sends the username and password that identifies his identity to FW through the portal authentication page, there is no password stored on F7, FT sends the username and password to a third- party authentication server, and the verification process is carried out on the authentication server.

正確答案: D

問題7
Which of the following statements is incorrect about Portal authentication?

A. In Portal authentication, users can be authenticated only on the firewall authentication page.

B. In user-initiated authentication, users proactively initiate authentication and can access network resources only after authentication.

C. In session authentication, users do not initiate identity authentication. Instead, they access the HTTP service first and are authenticated during the access. Service access is allowed only after authentication.

D. The built-in Portal authentication triggering modes include session authentication and user-initiated authentication.

正確答案: A

說明：（僅 NewDumps 成員可見）

問題8
Huawei Firewall only supports the inter-domain persistent connection function for TCP packets.

A. FALSE

B. TRUE

正確答案: A

問題9
Digital envelope technology means that the sender uses the receiver's public key to encrypt the data, and then sends the ciphertext to the receiver

A. FALSE

B. TRUE

正確答案: A

問題10
Which of the following descriptions of single sign-on is correct?

A. The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor's identity information to FW. F7 only records the identity information of the visitor and does not participate in the authentication process

B. Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.

C. The visitor recited the Portal authentication page and sent the username and password to FT to identify his/her identity, and the password was not stored on the FT, and the FI sent the username and password to the third-party authentication server, and the authentication process was carried out on the authentication server.

D. The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the FW.

正確答案: A

問題11
Please classify the following security defenses into the correct classification.

正確答案:

問題12
The IPS detects and analyzes all packets passing through a device and determines whether to permit or block the packets in real time based on the comprehensive detection mechanism. Sort the following steps into the correct order based on the basic implementation mechanism of the IPS.

正確答案:

Explanation:
* Protocol identification and analysis
* Application data reassembly
* Signature matching
* Attack response
The correct IPS processing order starts with protocol identification and analysis . Before an IPS can judge whether traffic is malicious, it must first determine what protocol is being used and analyze the packet structure according to the expected protocol behavior. This helps the device understand whether the traffic is HTTP, FTP, SMTP, DNS, or another protocol and prepares it for deeper inspection.
After that, the IPS performs application data reassembly . Many attacks are not visible in a single packet, so the IPS must reconstruct fragmented or segmented traffic into complete application data. This allows the device to inspect the real payload content rather than isolated packet pieces.
Once the data is reassembled, the IPS performs signature matching . At this stage, the traffic content and behavior are compared with known attack signatures, protocol anomalies, and detection rules to determine whether the traffic matches a malicious pattern such as injection, buffer overflow, or directory traversal.
Finally, the IPS performs the attack response . Based on the detection result, it may permit, block, reset, alarm, or log the traffic. Therefore, the correct order is D # A # B # C .

先試後買

購買之前，你可以先嘗試下載一個試用版本。目前我們只提供PDF版本的試用DEMO，軟件版本只提供截圖。

專業認證

品質保證

輕松通過

Try Before Buy

最新的真實試題

相關鏈接

聯繫我們