New Year Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Huawei H12-721 Practice Exam with Questions & Answers | Set: 5

Questions 41

What is the correct statement about the ip-link feature?

Options:
A.

ip-link is a function to detect link connectivity

B.

ARP detection mode only supports detecting direct links (or forwarding through Layer 2 devices in the middle)

C.

The firewall sends ICMP or ARP packets to a probe destination address to determine whether the destination address is reachable.

D.

ip-link is associated with VGMP, the ip-link status is down, and the VGMP management group priority is lowered by default.

 

Huawei H12-721 Premium Access
Questions 42

Which of the following statements is correct about the IKE main mode and the aggressive mode?

Options:
A.

All negotiation packets in the first phase of the aggressive mode are encrypted.

B.

All the negotiation packets of the first phase in the main mode are encrypted.

C.

barbarian mode uses DH algorithm

D.

will enter the fast mode regardless of whether the negotiation is successful or not.

Questions 43

Which of the following objects can the current limiting policy limit?

Options:
A.

IP connection limit

B.

IP bandwidth limit

C.

P2P protocol data flow restriction

D.

IM protocol data flow restriction

Questions 44

In the IDC room, a USG firewall can be used to divide into several virtual firewalls, and then the root firewall administrator generates a virtual firewall administrator to manage each virtual firewall.

Options:
A.

TRUE

B.

FALSE

Questions 45

SSL works at the application layer and encrypts specific applications. Which layer does IPSec work on and provides transparent encryption protection for this layer and above?

Options:
A.

data link layer

B.

network layer

C.

transport layer

D.

representation layer

Questions 46

What is the correct statement about the Eth-trunk function?

Options:
A.

Improve the communication bandwidth of the link

B.

Improve data security

C.

traffic load sharing

D.

Improve the reliability of the link

Questions 47

Is the correct statement about TCP proxy and TCP reverse source probing?

Options:
A.

TCP proxy and TCP reverse source probe can prevent SYN Flood

B.

The principle of the TCP proxy is that the device acts as a proxy for the TCP connection between the two ends. When one end initiates the connection, it must first complete the TCP 3 handshake with the device.

C.

Use TCP proxy mode for attack defense, you must enable the state detection mechanism.

D.

TCP reverse source detection detects the source IP by sending a Reset packet.

Questions 48

In dual-system hot backup, the backup channel must be the primary interface on the interface board. Which type is not supported?

Options:
A.

Ethernet

B.

GigabitEthernet

C.

E1

D.

Vlan-if

Questions 49

An intranet has made a network, the old equipment is offline, the new network equipment is brought online, and after the service test, it is found that most of the original service traffic cannot work normally. What is the quickest way to restore the business?

Options:
A.

layering method

B.

segmentation method

C.

replacement method

D.

block method

Questions 50

When attacked, the screenshot of the message captured by a victim host is as follows. According to the analysis, what is the attack?

H12-721 Question 50

Options:
A.

SYN Flood

B.

SYN-ACK Flood

C.

ACK-Flood

D.

Connection Flood

Exam Code: H12-721
Certification Provider: Huawei
Exam Name: Huawei Certified ICT Professional - Constructing Infrastructure of Security Network
Last Update: Feb 17, 2025
Questions: 217