DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free Huawei H12-711 Practice Questions & Answers 2026 Part4 | HCIA-Security

Are you preparing for the Huawei H12-711 certification exam? SPOTO offers the Huawei H12-711 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams
Question #1
In the first stage of IKE negotiation, which of the following IKE exchange mode does not provide identity protection features?
A. Main Mode
B. Aggressive Mode
C. quick mode
D. passive mode
View answer
Correct Answer: B
Question #2
Network administrators set up networking as follows:LAN_A --------- (G0/0) USG_A (G0/1) --------- (G0/0) USG_B (G0/1) -------------- LAN_BUSG_A divides firewall security zones, connects LAN_A areas Trust, connects USG_B area’s Untrust, according to the above description, which of the followingstatement is correct?
A. USG_B G0/0 must join Untrust zone
B. USG_B G0/0 must join the Trust zone
C. USG_B G0/1 must join the Trust zone
D. USG_B G0/0 can join any regional
View answer
Correct Answer: D
Question #3
Firewall usagehrp standby config enableAfter the command to enable the configuration function of the standby device, all the information that can be backed up can be configured directly on the standby device, and the configuration on the standby device can be synchronized to the active device.
A. rue
B. alse
View answer
Correct Answer: A
Question #4
Which of the following statements are correct about single sign-on (SSO) in user management and authentication? (Choose all that apply.)
A. n SSO, the authentication point is the firewall, which authenticates users and through which users connect to the network
B. eceiving PC messages is an AD SSO mode
C. n AD server security log query mode, the administrator needs to deploy the AD SSO service on the AD monitor and configure AD SSO parameters on the firewall to receive user login information sent by the AD SSO service
D. n SSO, the firewall is not an authentication point
View answer
Correct Answer: BCD
Question #5
Which of the following encryption algorithm, encryption and decryption keys are the same?
A. DES
B. RSA(1024)
C. MD5
D. SHA-1
View answer
Correct Answer: A
Question #6
Database operation records can be used as ___ evidence to backtrack security events.[fill in the blank]*
A. electronic
B. phases
View answer
Correct Answer: A
Question #7
A VRRP group has three states: Initialize, Master, and Backup.
A. ALSE
B. RUE
View answer
Correct Answer: B
Question #8
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?
A. Hold a summary meeting of the project in the information security management stage
B. Determine risk disposal measures and implement rectification plans
C. Determine risk tolerance and risk appetite
D. System integration and information security management system document preparation
View answer
Correct Answer: A
Question #9
What is the security level of the Untrust zone in Huawei firewalls?
A. 10
B. 20
C. 5
D. 15
View answer
Correct Answer: C
Question #10
Which of the following types of attacks does the DDos attack belong to?
A. raffic attack
B. pecial packet attack
C. alformed packet attack
D. nooping scanning attack
View answer
Correct Answer: A
Question #11
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?
A. Hold a summary meeting of the project in the information security management stage
B. Determine risk disposal measures and implement rectification plans
C. Determine risk tolerance and risk appetite
D. System integration and information security management system document preparation
View answer
Correct Answer: A
Question #12
What are the correct entries in the following description of firewall security zones?
A. he DMZ security zone solves the problem of server placement well, and this security area can place devices that need to provide network services to the outside world
B. he Local zone is the highest security zone with a priority of 99
C. ata flows between security domains are directional, including Inbound and Outbound
D. ormally, the two communicating parties must exchange messages, that is, there are messages transmitted in both directions between security domains
View answer
Correct Answer: ACD
Question #13
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?
A. Hold a summary meeting of the project in the information security management stage
B. Determine risk disposal measures and implement rectification plans
C. Determine risk tolerance and risk appetite
D. System integration and information security management system document preparation
View answer
Correct Answer: A
Question #14
At what layer does packet filtering technology in the firewall filter packets?
A. Transport layer
B. Network layer
C. Physical layer
D. Data link layer
View answer
Correct Answer: B
Question #15
For which of the following parameters can the packet filtering firewall filter?
A. Port packet payload
B. IP address of the port source destination
C. The MAC address of the source destination
D. Port number and protocol number of the port source
View answer
Correct Answer: BD
Question #16
Which of the following types of encryption technology can be divided into? (multiple choice)
A. Symmetric encryption
B. Symmetric encryption
C. fingerprint encryption
D. data encryption
View answer
Correct Answer: AB
Question #17
For which of the following parameters can the packet filtering firewall filter?
A. ort packet payload
B. P address of the port source destination
C. he MAC address of the source destination
D. ort number and protocol number of the port source
View answer
Correct Answer: BD
Question #18
ARP man-in-the-middle attacks are a type of spoofing attack technique.
A. TRUE
B. FALSE
View answer
Correct Answer: A
Question #19
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?
A. Hold a summary meeting of the project in the information security management stage
B. Determine risk disposal measures and implement rectification plans
C. Determine risk tolerance and risk appetite
D. System integration and information security management system document preparation
View answer
Correct Answer: A
Question #20
Regarding SSL VPN technology, which of the following options is wrong?
A. SL VPN technology can be perfectly applied to NAT traversal scenarios
B. SL VPN requires a dial-up client
C. SL VPN technology extends the network scope of the enterprise
D. SL VPN technology encryption only takes effect on the application layer
View answer
Correct Answer: B
Question #21
Which of the following are HRP(Huawei Redundancy Protocol) protocol can back up state information? (multiple choice)
A. session table
B. ServerMapentry
C. Dynamic blacklist
D. routing table
View answer
Correct Answer: ABC
Question #22
Which layer of the protocol stack does SSL provide end-to-end encrypted transmission services?
A. pplication layer
B. ata link layer
C. etwork layer
D. ransport layer
View answer
Correct Answer: D
Question #23
As shown in the figure, the administrator needs to test the network quality of the 20.0.0/24 CIDR block to the 40.0.0/24 CIDR block on Device B, and the device needs to send large packets for a long time to test the network connectivity and stability.
A. tracert - a 20
B. ping - a 20
C. ping - s 20
D. tracert - a 20
View answer
Correct Answer: A
Question #24
SSL VPN supported file sharing types can be divided into two kinds of SMB and NFS, SMB correspond Windows hosts, NFS correspond Linux host
A. True
B. False
View answer
Correct Answer: A
Question #25
Which layer of the protocol stack does SSL provide end-to-end encrypted transmission services?
A. Application layer
B. Data link layer
C. Network layer
D. Transport layer
View answer
Correct Answer: D
Question #26
Which of the following types of malicious code on your computer includes?
A. Oral virus
B. Trojan horses
C. Port SQL injection
D. Oral spyware
View answer
Correct Answer: ABCD
Question #27
At what layer does packet filtering technology in the firewall filter packets?
A. Transport layer
B. Network layer
C. Physical layer
D. Data link layer
View answer
Correct Answer: B
Question #28
What are the correct entries in the following description of firewall security zones?
A. AThe DMZ security zone solves the problem of server placement well, and this security area can place devices that need to provide network services to the outside world
B. BThe Local zone is the highest security zone with a priority of 99
C. CData flows between security domains are directional, including Inbound and Outbound
D. DNormally, the two communicating parties must exchange messages, that is, there are messages transmitted in both directions between security domains
View answer
Correct Answer: ACD
Question #29
Which of the following types of malicious code on your computer includes?
A. Oral virus
B. Trojan horses
C. Port SQL injection
D. Oral spyware
View answer
Correct Answer: ABCD
Question #30
When using passive mode to establish an FTP connection, the control channel uses port 20 and the data channel uses port 21.
A. rue
B. alse
View answer
Correct Answer: B
Question #31
pass throughdisplay ike sa The results you see are as follows. Which of the following statements is false?
A. PSec SAhas been established
B. KE SAhas been established
C. KEused isV1Version
D. eighbor address is2
View answer
Correct Answer: A
Question #32
What type of ACL does ACL number 3001 correspond to?
A. ayer 2 ACL
B. nterface ACL
C. asic ACL
D. dvanced ACLs
View answer
Correct Answer: D
Question #33
Which of the following types of malicious code on your computer includes?
A. Oral virus
B. Trojan horses
C. Port SQL injection
D. Oral spyware
View answer
Correct Answer: ABCD
Question #34
A Web server is deployed in an enterprise intranet to provide Web access services to Internet users, and in order to protect the access security of the server, it should be divided into the _____ area of the firewall.
A. DMZ
B. DMY
View answer
Correct Answer: A
Question #35
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?
A. Hold a summary meeting of the project in the information security management stage
B. Determine risk disposal measures and implement rectification plans
C. Determine risk tolerance and risk appetite
D. System integration and information security management system document preparation
View answer
Correct Answer: A
Question #36
The following description of the AH protocol in IPSec VPN, which one is wrong?
A. Supports data source validation
B. Supports data integrity checking
C. Supports packet encryption
D. Support anti-message replay
View answer
Correct Answer: C
Question #37
What is the security level of the Untrust zone in Huawei firewalls?
A. 10
B. 20
C. 5
D. 15
View answer
Correct Answer: C
Question #38
Which of the following types of attacks does the DDoS attack belong to?
A. raffic attack
B. pecial message attack
C. alformed packet attack
D. nooping scanning attack
View answer
Correct Answer: A
Question #39
What is the security level of the Untrust zone in Huawei firewalls?
A. 10
B. 20
C. 5
D. 15
View answer
Correct Answer: C
Question #40
Which layer of the protocol stack does SSL provide end-to-end encrypted transmission services?
A. pplication layer
B. ata link layer
C. etwork layer
D. ransport layer
View answer
Correct Answer: D
Question #41
For the process of forwarding the first packet of the session between firewall domains, there are the following steps:1. find the routing table2. find inter-domain packet filtering rules3. find the session table4. find the blacklistWhich of the following is the correct order?
A. ->2->1->4
B. ->4->1->2
C. ->3->1->2
D. ->3->2->4
View answer
Correct Answer: B
Question #42
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?
A. Hold a summary meeting of the project in the information security management stage
B. Determine risk disposal measures and implement rectification plans
C. Determine risk tolerance and risk appetite
D. System integration and information security management system document preparation
View answer
Correct Answer: A
Question #43
In the first stage of IKE negotiation, which of the following IKE exchange mode does not provide identity protection features?
A. Main Mode
B. Aggressive Mode
C. quick mode
D. passive mode
View answer
Correct Answer: B
Question #44
Which of the following is not a common application scenario of digital certificates? ( )[Multiple choice]*
A. TTPS
B. PSEC VPN
C. SL VPN
D. TP
View answer
Correct Answer: D
Question #45
A Web server is deployed in an enterprise intranet to provide Web access services to Internet users, and in order to protect the access security of the server, it should be divided into the _____ area of the firewall.
A. DMZ
B. DMY
View answer
Correct Answer: A
Question #46
Which of the following can be supported by Policy Center access control? (Choose three.)
A. Hardware SACG (hardware security access control gateway)
B. 802
C. ARP control
D. Software SACG (host firewall)
View answer
Correct Answer: ABD
Question #47
Among the various aspects of the risk assessment of IS027001, which of the following does not belong to the system design and release process?
A. Hold a summary meeting of the project in the information security management stage
B. Determine risk disposal measures and implement rectification plans
C. Determine risk tolerance and risk appetite
D. System integration and information security management system document preparation
View answer
Correct Answer: A
Question #48
What is the security level of the Untrust zone in Huawei firewalls?
A. 10
B. 20
C. 5
D. 15
View answer
Correct Answer: C
Question #49
Which of the following isP2DRThe core part of the model?
A. PolicyStrategy
B. Protectionprotection
C. Detectiondetect
D. Responseresponse
View answer
Correct Answer: A
Question #50
Which of the following are the backup items that HRP can provide?
A. Mouth Server-map table entry
B. Mouth No-PAT table entry
C. Mouth ARP table entry
D. Port TCP session table
View answer
Correct Answer: ABCD
Question #51
What is the security level of the Untrust zone in Huawei firewalls?
A. 10
B. 20
C. 5
D. 15
View answer
Correct Answer: C
Question #52
What is the security level of the Untrust zone in Huawei firewalls?
A. 10
B. 20
C. 5
D. 15
View answer
Correct Answer: C
Question #53
For which of the following parameters can the packet filtering firewall filter?
A. Port packet payload
B. IP address of the port source destination
C. The MAC address of the source destination
D. Port number and protocol number of the port source
View answer
Correct Answer: BD
Question #54
What type of ACL does ACL number 3001 correspond to?
A. ayer 2 ACL
B. nterface ACL
C. asic ACL
D. dvanced ACLs
View answer
Correct Answer: D
Question #55
For which of the following parameters can the packet filtering firewall filter?
A. Port packet payload
B. IP address of the port source destination
C. The MAC address of the source destination
D. Port number and protocol number of the port source
View answer
Correct Answer: BD
Question #56
Which of the following statements is incorrect about information transmission through the heartbeat link between two firewalls that work in hot standby mode?
A. eartbeat packets are periodically sent by the two firewalls to check whether the peer device is alive
B. GMP packets are sent to check the status of the peer device, so as to determine whether a switchover is required
C. eartbeat packets are sent to synchronize configuration commands and status information between the two firewalls
D. onfiguration consistency check packets are sent to check whether key configurations of the two firewalls are consistent
View answer
Correct Answer: C
Question #57
As shown in the figure, a TCP connection is established between client A and serverB. Which of the following two "?" packet numbers should be?
A. +1: b
B. +1: a
C. +1: a+1
D. : a+1
View answer
Correct Answer: C
Question #58
As shown in the figure, packet obtaining software is used to obtain some packets on a terminal. Which of the following statements is correct about the obtained packet information?
A. he terminal sends a TCP connection termination request to 192
B. he terminal uses Telnet to log in to another device
C. he terminal uses HTTP to log in to another device
D. he terminal sends a TCP connection establishment request to 192
View answer
Correct Answer: D
Question #59
For which of the following parameters can the packet filtering firewall filter?
A. Port packet payload
B. IP address of the port source destination
C. The MAC address of the source destination
D. Port number and protocol number of the port source
View answer
Correct Answer: BD
Question #60
The following description of asymmetric encryption algorithms, which item is wrong?
A. ublic keys are generally disclosed to users
B. ompared with symmetric encryption algorithms, the security factor is higher
C. ncryption is faster than symmetric encryption algorithms
D. symmetric encryption algorithms are a pair of keys, divided into public and private keys
View answer
Correct Answer: C
Question #61
SSL VPN supported file sharing types can be divided into two kinds of SMB and NFS, SMB correspond Windows hosts, NFS correspond Linux host
A. rue
B. alse
View answer
Correct Answer: A
Question #62
What is the security level of the Untrust zone in Huawei firewalls?
A. 10
B. 20
C. 5
D. 15
View answer
Correct Answer: C
Question #63
Which user authentication methods can be supported by Policy Center system? (Choose three.)
A. IP address authentication
B. MAC address authentication
C. Ordinary ID/password authentication
D. LDAP authentication
View answer
Correct Answer: BCD
Question #64
Which layer of the protocol stack does SSL provide end-to-end encrypted transmission services?
A. Application layer
B. Data link layer
C. Network layer
D. Transport layer
View answer
Correct Answer: D
Question #65
Which of the following components do consist of Policy Center system? (Choose three.)
A. Anti-virus server
B. SC control server
C. Access control equipment
D. SM management server
View answer
Correct Answer: BCD
Question #66
Information security level protection is to improve the overall national security level, while rationally optimizing the distribution of security resources, so that it can return the greatest security and economic benefits.
A. rue
B. alse
View answer
Correct Answer: A
Question #67
When the Layer 2 switch receives a unicast frame and the MAC address table entry of the switch is empty, the switch discards the unicast frame.
A. TRUE
B. FALSE
View answer
Correct Answer: B
Question #68
The configuration commands for the NAT address pool are as follows:nat address-group 1section 0 202.202.168.10 202.202.168.20mode no-patOf which, the meaning of no-pat parameters is:
A. o not convert the source port
B. o not convert the destination port
C. o not do address translation
D. erform port multiplexing
View answer
Correct Answer: A
Question #69
Which of the following is not a hash algorithm?
A. HA1
B. M1
C. HA2
D. D5
View answer
Correct Answer: B
Question #70
In the automatic backup mode of hot standby on the second machine, which of the following sessions is backed up?
A. ICMP session
B. TCP half-connection session
C. Self-session to the firewall
D. UDP first packet session
View answer
Correct Answer: A
Question #71
Which of the following types of malicious code on your computer includes?
A. ral virus
B. rojan horses
C. ort SQL injection
D. ral spyware
View answer
Correct Answer: ABCD

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.