HCIA-Security V3.0 H12-711_V3.0 Questions and Answers

1. H12-711_V3.0 Free Questions H12-711_V3.0 Free Questions HCIA-Security V3.0 HCIA-Security V3.0 https://www.passquestion.com/ https://www.passquestion.com/H12-711_V3.0 H12-711_V3.0.html .html

2. Question 1 Question 1 When connecting to Wi-Fi in public places, which of the following is relatively safer? When connecting to Wi-Fi in public places, which of the following is relatively safer? A. Connect to unencrypted Wi-Fi hotspots A. Connect to unencrypted Wi-Fi hotspots B. Connect to the paid Wi-Fi hotspot provided by the operator and only browse the B. Connect to the paid Wi-Fi hotspot provided by the operator and only browse the Internet Internet C. Connect to unencrypted free Wi-Fi for online shopping C. Connect to unencrypted free Wi-Fi for online shopping D. Connect to encrypted free Wi-Fi for online transfer operations D. Connect to encrypted free Wi-Fi for online transfer operations Answer: B Answer: B

3. Question 2 Question 2 Which of the following is the action to be taken in the summary phase of cybersecurity Which of the following is the action to be taken in the summary phase of cybersecurity emergency response? (Multiple choice) emergency response? (Multiple choice) A. Establish a defense system and specify control measures A. Establish a defense system and specify control measures B. Evaluate the implementation of emergency plans and propose follow-up improvement B. Evaluate the implementation of emergency plans and propose follow-up improvement plans plans C. Judging the effectiveness of isolation measures C. Judging the effectiveness of isolation measures D. Evaluate the members of the emergency response organization D. Evaluate the members of the emergency response organization Answer: BD Answer: BD

4. Question 3 Question 3 Regarding port mirroring, which of the following descriptions are correct? (Multiple choice) Regarding port mirroring, which of the following descriptions are correct? (Multiple choice) A. The mirror port copies the packet to the observing port A. The mirror port copies the packet to the observing port B. The observation port sends the received message to the monitoring device B. The observation port sends the received message to the monitoring device C. The mirror port sends the received message to the monitoring device C. The mirror port sends the received message to the monitoring device D. The observing port copies the packet to the mirror port D. The observing port copies the packet to the mirror port Answer: AB Answer: AB

5. Question 4 Question 4 Which of the following options is the protocol number of GRE? Which of the following options is the protocol number of GRE? A. 46 A. 46 B. 47 B. 47 C. 89 C. 89 D. 50 D. 50 Answer: B Answer: B

6. Question 5 Question 5 Which of the following descriptions of the VGMP protocol is wrong? Which of the following descriptions of the VGMP protocol is wrong? A. VGMP adds multiple VRRP backup groups on the same firewall to a management group, and the A. VGMP adds multiple VRRP backup groups on the same firewall to a management group, and the management group manages all VRRP backup groups in a unified manner management group manages all VRRP backup groups in a unified manner B. VGMP uniformly controls the switching of the status of each VRRP backup group to ensure that B. VGMP uniformly controls the switching of the status of each VRRP backup group to ensure that the status of all VRRP backup groups in the management group is consistent. the status of all VRRP backup groups in the management group is consistent. C. VGMP group devices in Active state will periodically send hello messages to the opposite end, and C. VGMP group devices in Active state will periodically send hello messages to the opposite end, and the stdandby end is only responsible for listening to hello messages and will not respond the stdandby end is only responsible for listening to hello messages and will not respond D. By default, when the standby end does not receive the hello message sent by the opposite end for D. By default, when the standby end does not receive the hello message sent by the opposite end for three hello message cycles, it will consider the opposite end to be faulty and switch itself to the Active three hello message cycles, it will consider the opposite end to be faulty and switch itself to the Active state. state. Answer: C Answer: C

7. Question 6 Question 6 Regarding GRE encapsulation and decapsulation, which of the following descriptions is wrong? Regarding GRE encapsulation and decapsulation, which of the following descriptions is wrong? A. In the encapsulation process, the original data packet is sent to the Tunnel interface through the A. In the encapsulation process, the original data packet is sent to the Tunnel interface through the route search, and then GRE encapsulation is started. route search, and then GRE encapsulation is started. B. In the encapsulation process. After encapsulation by the GRE module, the data packet will enter B. In the encapsulation process. After encapsulation by the GRE module, the data packet will enter the IP module for further processing the IP module for further processing C. In the decapsulation process. After receiving the GRE message, the destination end passes the C. In the decapsulation process. After receiving the GRE message, the destination end passes the data packet to the Tunnel interface by searching for a route, and then starts GRE decapsulation. data packet to the Tunnel interface by searching for a route, and then starts GRE decapsulation. D. In the decapsulation process, after the GRE module decapsulates, the data packet will enter the IP D. In the decapsulation process, after the GRE module decapsulates, the data packet will enter the IP module for further processing module for further processing Answer: C Answer: C

8. Question 7 Question 7 Which of the following does not belong to the classification of cybersecurity incidents? Which of the following does not belong to the classification of cybersecurity incidents? A. Major cybersecurity incidents A. Major cybersecurity incidents B. Special cybersecurity incidents B. Special cybersecurity incidents C. General cybersecurity incidents C. General cybersecurity incidents D. Major cybersecurity incidents D. Major cybersecurity incidents Answer: B Answer: B

9. Question 8 Question 8 Regarding single sign on, which of the following statements are correct? (Multiple choice) Regarding single sign on, which of the following statements are correct? (Multiple choice) A. The device can identify users who have passed the authentication by the identity authentication A. The device can identify users who have passed the authentication by the identity authentication system system B. There is only one deployment mode for AD domain single sign on B. There is only one deployment mode for AD domain single sign on C. Although there is no need to enter the user password, the authentication server needs to interact C. Although there is no need to enter the user password, the authentication server needs to interact with the user password and the device to ensure that the authentication is passed with the user password and the device to ensure that the authentication is passed D. AD domain single sign on can be synchronized to the firewall by mirroring the login data stream D. AD domain single sign on can be synchronized to the firewall by mirroring the login data stream Answer: AD Answer: AD

10. Question 9 Question 9 Regarding the relationship and role of VRRP/VGMP/HRP, which of the following statements are Regarding the relationship and role of VRRP/VGMP/HRP, which of the following statements are correct? (Multiple choice) correct? (Multiple choice) A. VRRP is responsible for sending gratuitous ARP to direct traffic to the new master device when A. VRRP is responsible for sending gratuitous ARP to direct traffic to the new master device when the master device is switched. the master device is switched. B. VGMP is responsible for monitoring equipment failures and controlling the fast switching of B. VGMP is responsible for monitoring equipment failures and controlling the fast switching of equipment equipment C. HRP is responsible for data backup during dual-system hot backup operation C. HRP is responsible for data backup during dual-system hot backup operation D. The VGMP group in the Active state may contain the VRRP group in the Standby state D. The VGMP group in the Active state may contain the VRRP group in the Standby state Answer: ABC Answer: ABC

11. Question 10 Question 10 The administrator PC is directly connected to the management port of the USG firewall The administrator PC is directly connected to the management port of the USG firewall and uses the web method to perform initialization operations. Which of the following and uses the web method to perform initialization operations. Which of the following statements is correct? (Multiple choice) statements is correct? (Multiple choice) A. The browser of the management PC visits http://192.168.0.1 A. The browser of the management PC visits http://192.168.0.1 B. The IP address of the management PC is manually set to 192.168.0.2-192.168.0.254 B. The IP address of the management PC is manually set to 192.168.0.2-192.168.0.254 C. The browser of the management PC visits http://192.168.1.1 C. The browser of the management PC visits http://192.168.1.1 D. Set the network card of the management PC to automatically obtain an IP address D. Set the network card of the management PC to automatically obtain an IP address Answer: ABD Answer: ABD