Ace the Huawei H12-721 Exam: Ultimate Preparation Guide

The HRP preemption time configured on the firewall is smaller than the convergence time of OSPF.

is not configured to adjust the COST value of OSPF according to the HRP status.

The session fast backup function is not configured on the USG. The packets cannot be forwarded normally if the back and forth paths are inconsistent.

does not enable hrp track on the upstream and downstream interfaces of the firewall.

public network route is unreachable

Intermediate line device disables UDP port 500

Intermediate line device disables UDP 4500 port

Intermediate line device disables ESP packets

server does not open web service

policy restricts user access

device and intranet server are unreachable

SSL VPN users reach the maximum limit

The attacker sends an ICMP request with the destination address or the source address as the broadcast address, causing all hosts or designated hosts of the attacked network to answer, eventually causing the network to crash or the host to crash.

The attacker sends the SYN-ACK message to the attacker's IP address.

The attacker can send UDP packets to the network where the attacker is located. The source address of the packet is the address of the attacked host. The destination address is the broadcast address or network address of the subnet where the attacked host resides. The destination port number is 7 or 19.

The attacker uses the network or the host to receive unreachable ICMP packets. The subsequent packets destined for this destination address are considered unreachable, thus disconnecting the destination from the host.

device does not have a route to the intranet

. The ACL referenced by the security policy configured on the gateways at both ends is incorrect.

The IPSec proposal configured on the gateways at both ends is inconsistent.

is not configured with DPD at both ends

strict mode requires not only the corresponding entry in the forwarding table, but also the interface must match to pass the URPF check.

If the source address of the packet does not exist in the FIB table of the USG, and the default route is configured, the packet will be forwarded through the URPF check.

URPF strict mode is recommended in a

route symmetric environment.

Loose mode does not check whether the interface matches. As long as the source address of the packet exists in the FIB table of the USG, the packet can pass.

command bfd aa bind peer-ip 1.1.1.2 is used to create a BFD session binding policy for detecting link status.

"[USG9000_A] bfd" is incorrectly configured in this command and should be changed to [USG9000_A] bfd enable to enable BFD function.

[USG9000_A-bfd session-aa] commit is optional. If no system is configured, the system will submit the BFD session log information by default.

The command to bind a BFD session to a static route is also required: [USG9000_A]ip route-static 0.0.0.0 0 1.1.1.2 track bfd-session aa

TRUE

FALSE

working on layer 2 cannot be routed

must use L2TP Over IPSec to use

has no authentication function

no encryption

TRUE

FALSE