New Year Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Huawei H12-721 Practice Exam with Questions & Answers | Set: 3

Questions 21

By default, GigabitEthernet0/0/0 can be used as an out-of-band management interface in the USG2200 series.

Options:
A.

TRUE

B.

FALSE

Huawei H12-721 Premium Access
Questions 22

Which attack method is CC attack?

Options:
A.

denial of service attack

B.

scan snooping attack

C.

malformed packet attack

D.

System-based vulnerability attacks

Questions 23

What are the three elements of an abnormal flow cleaning solution?

Options:
A.

cleaning center

B.

Testing Center

C.

Management Center

D.

Collection Center

Questions 24

IPSec VPN uses digital certificates for authentication. It has the following steps: 1. verify the certificate signature; 2. find the certificate serial number in the CRL; 3. share the entity certificate between the two devices; 4. verify the validity period of the certificate; . Establish a VPN tunnel. Which of the following is correct?

Options:
A.

3 2 1 4 5

B.

1 3 2 4 5

C.

3 1 4 2 5

D.

2 4 3 1 5

Questions 25

IP address scanning attack defense not only prevents ICMP packet detection target addresses, but also prevents TCP/UDP scanning detection target addresses.

Options:
A.

TRUE

B.

FALSE

Questions 26

When using the optical bypass interface, the Bypass link has two working modes, automatic mode and forced mode.

Options:
A.

TRUE

B.

FALSE

Questions 27

The PC A in the Trust zone is 192.168.3.1. You cannot access the Internet server in the Untrust zone. The configuration between the Trust zone and the Untrust zone is as follows. What are the most likely causes of the following faults?

H12-721 Question 27

Options:
A.

security policy application direction configuration error, should be outbound

B.

Since the firewall default packet-filter is deny is executed first, the subsequent policies are not executed.

C.

policy source 192.168.3.0 0.0.0.255 configuration error, need to be modified to policy source 192.168.3.0 0.0.255.255

D.

policy destination any configuration error, a clear destination IP address must be established

Questions 28

About load balancing, the following configuration is available: [USG] slb enable [USG]slb [USG-slb] rserver 1 rip 10.1.1.3 weight 32 [USG-slb] rserver 2 rip 10.1.1.4 weight 16 [USG-slb] rserver 3 rip 10.1.1.5 weight 32 [USG-slb] group test [USG-slb-group-test]metric srchash [USG-slb-group-test] add rserver 1 [USG-slb-group-test] add rserver 2 [ USG-slb-group-test] add rserver 3 Which of the following statements is correct?

Options:
A.

load balancing algorithm is a polling algorithm

B.

This configuration is a complete load balancing configuration

C.

determines which server the data stream should flow to based on the weight value. The smaller the weight value, the weaker the processing power of the corresponding real server.

D.

weight represents the weight of the real server

Questions 29

The following are traffic-type attacks.

Options:
A.

IP Flood attack

B.

HTTP Flood attack

C.

IP address scanning attack

D.

ICMP redirect packet attack

Questions 30

In the client-initial mode, the L2TP dialup fails. From the debug information below, it can be seen that the most likely cause is the dialup failure.

H12-721 Question 30

Options:
A.

username and password are inconsistent with aaa configuration

B.

Ins name configuration error

C.

tunnel password is not configured

D.

is not enabled l2tp

Exam Code: H12-721
Certification Provider: Huawei
Exam Name: Huawei Certified ICT Professional - Constructing Infrastructure of Security Network
Last Update: Mar 28, 2025
Questions: 217