Download HCIP-Security-CISN V3.0 H12-721_V3.0 Real Questions

test2022-07-08T06:49:30+00:00

To pass the H12-721_V3.0 HCIP-Security-CISN V3.0 exam on the first try, you must have accurate syllabus information and an excellent study guide. The most recent H12-721_V3.0 Real Questions are available here. FreeTestShare H12-721_V3.0 Real Questions are based on the most recent objectives and are 100 percent guaranteed to help you pass your exam. Candidates for the H12-721_V3.0 exam benefit from using the H12-721_V3.0 Real Questions, which allows them to study more efficiently and in less time. FreeTestShare H12-721_V3.0 Real Questions are exactly the right study tools that contain latest questions and answers to help you pass the H12-721_V3.0 exam on the first try!

To put your skills to the test, try free H12-721_V3.0 sample test!

Page 1 of 9

1. The USG firewall bandwidth policy can match both traffic from source-zone to destination-zone and traffic from destination-zone to source-zone

True

False

2. For the SVN single-arm networking scenario, which of the following descriptions is correct? (Multiple choice)

In the single-arm networking mode, the SVN arm is mounted on the firewall, router or switch, and both the intranet and the Internet communicate with the SVN through this network port.

In order for users to access the SVN device, the IP address of the SVN must be the IP address of the public network.

The nat server needs to be configured on the firewall to map the SVN address to a public IP of the firewall.

The port number that needs to be mapped to SVN on the firewall is 445.

3. Which of the following descriptions about the USG firewall bandwidth policy is wrong?

Bandwidth policy can configure both service and time period as matching conditions

Bandwidth policy can configure both the source security zone and the inbound interface as matching conditions

Bandwidth policy can configure source region and user as matching conditions at the same time

Bandwidth policy can configure both application and destination address as matching conditions

4. Which one of the following descriptions about the bandwidth channel limitation configured by the parent-child policy in the firewall is wrong?

The connection limit of the child policy cannot be smaller than that of the parent policy

In the same parent-child policy, the same bandwidth channel cannot be referenced

The maximum bandwidth of the child policy cannot be greater than that of the parent policy

In the same group of parent-child policies, the current limiting method can only be "Set the upstream and downstream bandwidth separately" or "Set the total bandwidth" at the same time, and the two cannot coexist

5. Company A and Company B are in the same office building. The network exits of Company A and Company B are managed by the service provider of the building. Both company A and Company B want to ensure that their services are independent and that their employees on business trips can access the company network through SSL VPN. Which of the following solutions can solve this problem?

The firewall is virtualized into multiple virtual systems, and the SSLVPN gateway under each virtual system corresponds to a company's SSL VPR access gateway

The load sharing networking solution through the firewall

Create multiple virtual gateways on the firewall, and each business department independently uses its own virtual gateway to provide SSL VPN access services to the outside world

Solve the problem through the firewall's active and standby networking

6. One FW device can create multiple virtual gateways, and each virtual gateway has an independent administrator.

True

False

7. Huawei UMA unified operation and maintenance audit product can effectively reduce the internal operation and maintenance risks of network equipment, servers, databases, business systems and other resources by centrally managing, monitoring and auditing the operation behavior of all operation and maintenance personnel in the enterprise.

Which of the following descriptions about Huawei UMA products is wrong?

After the automatic filling of the business system account, each operation and maintenance personnel can manage multiple accounts to avoid the risk of borrowing multiple accounts

Support fine-grained query, avoid malicious operation and maintenance operations, and achieve responsibility positioning

Realize text records and video records of operation and maintenance operations such as command line characters, graphics operations, file transfers, databases, KVM, etc.

Provide functions such as regular modification of business systems, encrypted transmission, backup download and other functions to reduce the workload of password maintenance

8. There are three outgoing interface links ISP1, ISP2, and ISP3 from the firewall to the Internet, with bandwidths of 20OM, 100M, and 100M respectively. Enable intelligent route selection based on link bandwidth load balancing on the firewall, and set the overload protection thresholds of the three links to 80%, 90%, and 90% respectively.

The traffic from the firewall to the Internet is 340M. Which of the following is the traffic of the final three links? (Multiple choice)

ISP1 200M, ISP2 70M, ISP3 70M

ISP1 200M, ISP2100M, ISP3 40M

ISP1 170M, IPS2 85M, ISP3 85M

ISP1 160M, ISP2 90M, ISP3 90M

9. Digital signature is to generate digital fingerprint by using hash algorithm, so as to ensure the integrity of data transmission.

True

False

10. Radius is a distributed information exchange protocol based on client/server architecture. The protocol defines the Radius packet format and transmission mechanism based on UDP (User Datagram Protocol), and specifies UDP ports 1712 and 1713 as the default authentication and billing port respectively.

True

False

Page 2 of 9

11. Which of the following options are the main factors that the firewall needs to consider when choosing a load balancing algorithm? (Multiple choice)

Server performance

Service Type of the Server

Number of Servers

The model of the server

12. HWTACACS can only encrypt the password part, while the Radius protocol can encrypt the body of the message except the Radius header.

True

False

13. Which of the following descriptions about the output information of the USG firewall diversion table is wrong?

<FW> display firewall import-flow public 10.1.1.1

Import Flow Tables:

Source Instance Destination Address Destination Instance

public 10.1.1.1 vsysa Total: 1

The packet with a source address of 10.1.1.1 sent from the virtual system vsysa to the root system will hit the traffic diversion table in the reverse direction

Drainage table can be divided into two types: forward hit and reverse hit

If the diversion table is hit, the session will only be created on the root system

The packet sent from the root system to the virtual system vsysa with the destination address of 10.1.1.1 hits the diversion table in the forward direction

14. The networking of an enterprise is shown in the figure. Dual-system hot backup is configured on USG_A and USG_B, and USG_A is the master device. The administrator wants to configure SSL VPN on the firewall so that branch office employees can access the headquarters through SSL VPN. What should be the virtual gateway address of the SSL VPN?

202.38.10.2/24

202.38.10.3/24

202.38.10.1/24

10.100.10.2/24

15. Regarding server load balancing technology, which of the following is correct? (Multiple choice)

The IP address of the real server can be the same as the IP address of the virtual firewall.

After configuring the server load balancing function, you need to configure the IP address of the virtual server when configuring the interzone security policy. When configuring routing, you need to configure the IP address of the real server.

After configuring the service health check function, you need to configure the security policy between the FW and the security zone where the real server is located to allow probe packets to pass, otherwise the health check will fail.

The IP address of the real server cannot be the same as the IP address of the virtual firewall.

16. When an access user establishes a tunnel with the LNS using Client-Initiated VPN, a tunnel can carry ( ) PPP connections.

17. When the traffic is finally sent from the outgoing interface, it is limited by the bandwidth of the outgoing interface. If the traffic is greater than the bandwidth of the outgoing interface, which of the following will the traffic be queued to ensure that high-priority packets are sent first?

Remark DSCP priority

Forwarding Priority

Bandwidth Policy Matching Order

QoS

18. Bandwidth policies support nested relationships. How many levels of bandwidth policies are currently supported?

Three

Two

Four

one

19. The USG6000 firewall is configured with the load balancing function for the three FTP servers. The addresses and weights of the three real servers respectively are 10.1.1.3/24 (weight 16), 10.1.1.4/24 (weight 32), and 10.1.1.5/24 (weight 16), the virtual server address is 202.152.26.123/24. A PC that host address is 202.152.26.3/24 initiates access to the FTF server. Run the display firewall session table command on the firewall. Which of the following conditions indicates that the negative balancing function has been successfully implemented?

<USG> display firewall session table Current total sessions: 1 ftp VPN: public --> public 202.152.26.3:3327 --> 10.1.1.4:21

<USG> display firewall session table Current total sessions: 3 ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21 [10.1.1.3:21] ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21 [10.1.1.4:21] ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21 [10.1.1.5:21]

<USG> display firewall session table Current total sessions: 1 ftp VPN: public --> public 202.152.26.3:3327 -->202.152.26.123:21

<USG> display firewall session table Current total sessions: 3 ftp VPN: public --> public 202.152.26.3:3327 -->10.1.1.3:21 ftp VPN: public --> public 202.152.26.3:3327 -->10.1.1.4:21 ftp VPN: public --> public 202.152.26.3:3327 -->10.1.1.5:21

20. When the administrator assigns the interface G1/0/0 to the virtual system vsysa, it is found that the assignment fails. What is the reason for the impossibility?

Port G1/0/0 has been allocated to other virtual systems.

This interface is a Layer 2 interface and cannot be directly assigned to a virtual system.

The interface has been added to the security zone of other virtual systems.

The interface is not in the UP state.

Page 3 of 9

21. Which of the following is not a parameter of intelligent routing link quality detection?

Delay Jitter

Delay

Throughput

Packet Loss Rate

22. Which of the following commands are not commonly used in IPSec troubleshooting?

display ipsec statistics

display ipsec session

display ike sa

display ipsec sa

23. Regarding the description of IKE, which of the following is correct? (Multiple choice)

IKE is a protocol carried by UDP and is the signaling protocol of IPSec

IKE negotiates SAs for IPSec, and passes the established parameters and SAs to IPSec

IPSec uses the SA negotiated by IKE to encrypt or authenticate packets

IPSec must use IKE for key exchange

24. The server load balancing technology uses the Server-map table and the session table to realize the mapping between the virtual server and the real server. What type of server-map table is generated?

NAT NO-PAT

Forward STUN protocols such as QQ/MSN and TFTP

Static server-map table

Dynamic server-map table

25. Which of the following options cannot be used as matching conditions for policy routing?

Source safe area

Incoming interface

DSCP priority

Next hop address

26. Which of the following encryption methods does IPsec VPN use to encrypt the communication data flow?

Public key encryption

Private key encryption

Symmetric Key Encryption

Pre-Shared Key Encryption

27. Based on the configuration information of the ISP routing on the following firewall, which of the following options are correct? (Multiple choice)

A total of 2 csv files are configured.

There are two ISP routing files.

The china-unicom.csv file is bound to two outgoing interfaces on the firewall.

Both outgoing interfaces of china-unicom.csv have routes delivered in the routing table.

28. When the performance difference between servers is large, which of the following algorithms can be used for load balancing?

Simple polling algorithm

Weighted Round Robin Algorithm

Least Connection Algorithm

Source IP hash algorithm

29. Which of the following descriptions about firewall intelligent routing configuration is correct? (Multiple choice)

Multi-interfaceMode priority-of-link-qualityPriority-of-link-qualityParameter lossPriority-of-link-quality protocol tcp-simpleAdd interface GigabitEthernetl/0/4Add interface GigabitEthernet1/0/5

There are 2 links involved in routing

A complete TCP three-way handshake will be completed during link quality detection

The mode of intelligent route selection is load sharing based on link quality

The quality parameter of link quality detection is the packet loss rate

30. Which of the following statements is true about the stream of interest defined by IPSec? (Multiple choice)

The ACL method defines the flow of interest in IPSec. The permit keyword in the ACL rule indicates that the matching traffic needs IPSec protection, and the deny keyword indicates that the matching traffic does not need to be protected.

The advantage of the ACL method to define the flow of interest is that the packets can be filtered according to the IP address, port information, protocol type (TCP, UDP, ICMP, IP, etc.) and other information

Defining IPSec interest flows by routing method increases the complexity of IPSec configuration

IPSec streams of interest can be defined by ACL and routing

Page 4 of 9

31. IPSec uses asymmetric encryption algorithms to encrypt transmitted data.

True

False

32. When IPSec VPN uses digital certificate for authentication, which of the following is not required to verify whether the digital certificate is legal?

Certificate Signing

CRL certificate serial number

Certificate public key

Certificate Validity Period

33. After session persistence is enabled, after the first intelligent route selection for traffic selects an interface link, the Huawei USG6000 firewall will generate corresponding session retention entries. If the new traffic hits the session retention entry, then the traffic is forwarded according to the outbound interface recorded in the entry. This ensures that the user's traffic is always forwarded using the same interface link. Which of the following options is not included in the parameters recorded in the session hold table entry?

Source address

Destination address

Outgoing interface

Next hop address

34. In a dual-system hot-standby network, when configuring an HRP heartbeat interface, if the address of the peer heartbeat interface is specified, which of the following types of VGMP Hello packets are sent between firewalls?

Unicast message

Broadcast message

Multicast message

UDP packets

35. Regarding L2TP over IPSec VPN, which of the following statements is correct? (Multiple Choice)

IPSec packets trigger L2TP tunnel

L2TP packets trigger IPSec SA

The L2TP tunnel is established first

IPSec tunnel is established first

36. In dual-system hot backup, how many cycles does the Slave consider that the peer is faulty when it does not receive the HRP HELLO message sent by the peer?

37. An IPSec tunnel can use GRE over IPSec to transmit multicast packets.

TRUE

FALSE

38. Which of the following descriptions about the output of the firewall's display eth-trunk are correct? (Multiple choice)

<FW> display eth-trunk 1

Eth-Trunk1's state information is:

WorkingMode: NORMAL Hash arithmetic: According to flow

Least Active-linknumber:2 Max Bandwidth-affected-linknumber: 8

Operate status: up Number Of Up Port In Trunk:2

----------------------------------------------------------------------------

PortName Status weight

GigabitEthernet1/0/1 Up 1

GigabitEthernet1/0/2 up 2

Eth-Trunk 1 is flow-by-flow load balancing

The working mode of Eth-Trunk1 is manual load sharing mode

The status of Eth-Trunk1 changes to Down only after the two member ports of Eth-Trunk1 become Down.

Eth-Trunk 1 has two member ports

39. Which of the following information is included in the main mode negotiation process in the first phase of IKE v1 negotiation? (Multiple choice)

IKE Proposal Set

IPSec Proposal Set

DH key exchange public information

Identity information of both parties

40. There are three types of frame forwarding behaviors: flooding and ( ) dropping.

Forwarding

Page 5 of 9

41. When the IPSec VPN tunnel fails to be established, the administrator finds that the IKE SA is not established between the devices by checking the SA establishment status of the devices. Which of the following reasons may cause the failure? (Multiple choice)

The route to the IKE peer is unreachable.

The authentication methods and algorithms at both ends are inconsistent.

The IPSec proposal configurations on both ends are inconsistent.

The "peer gateway" of the local end does not match the "local address" of the opposite end.

42. 1. Users cannot access intranet resources when using the network extension function. Which of the following is not the possible cause of the failure?

Has a virtual IP address been obtained on the virtual network card of the user PC?

The route between the firewall and the intranet server is unreachable.

User connection timed out.

The virtual IP address conflicts with the FW interface address, intranet server address, and DHCP address pool address.

43. Which of the following is not part of the overall process for remote users to access intranet resources through SSL VPN?

Access billing

Resource Access

User login

User Authentication

44. Please sort the project implementation steps below from project initiation. ( )

Project initiation and variance analysis, risk assessment, system design and release, system operation and monitoring, certification and continuous improvement

45. In the Huawei Anti-DDoS solution, ( ) is responsible for unified coordination and scheduling, as well as log recording and report presentation

Management Center

46. Resource Access

47. After importing the ISP address file on the Huawei USG6000 firewall, specify that the outbound interface is associated with a certain operator name, then the firewall will generate ISP routes to the operator's network in batches. Which of the following options is correct for the description of this route ?

The source address is the IP address in the ISP address file.

The next hop is the address of the device on the carrier network.

The protocol type displayed in the routing table is UNR (user network route).

The route priority is 60.

48. Typically, the port that FTP active mode servers use for data transfer is the TCP ( ) port.

49. IKE has a set of self-protection mechanisms, which can securely authenticate identities, distribute keys, and establish IPsec SAs on insecure networks. Which of the following do these self-protection mechanisms include? (Multiple choice)

Authentication

Identity Protection

DH key exchange algorithm

Challenge Authentication

50. Which of the following can be used as matching conditions with rules? (Multiple choice)

Source security zone/ingress interface

Sockets

URL Classification

DSCP priority

Page 6 of 9

51. Use digital certificate for identity authentication in IPSec VPN. If IKE v1 main mode is used for negotiation, certificate verification is completed in message 5 and message 6.

TRUE

FALSE

52. Which of the following is the way to divert the virtual system? (Multiple choice)

The interface works at Layer 2 and uses interface-based offloading.

The interface works at Layer 2 and uses vlan-based offloading

The interface works at Layer 3 and uses routing-based offloading.

The interface works at Layer 3 and uses interface-based offloading.

53. Load balancing realizes the function of distributing user traffic accessing the same IP address to different servers. What are the main technologies used? (Multiple choice)

Virtual service technology

Server Health Check

Dual-machine hot-standby technology

Load Balancing Algorithm

54. IP-Link will send a detection packet to the specified IP address. By default, when the detection fails for 3 times, the link to this IP address is considered to be faulty.

TRUE

FALSE

55. Before using SSL VPN to communicate, the client and server establish a session through the Handshake protocol to negotiate the relevant security parameters to be used in data transmission.

True

False

56. If the egress firewall is used to establish IPSec between the branches to realize the intercommunication between the branches, the encapsulation mode of IPSec between the firewalls should use the transmission mode.

True

False

57. Which statement about bandwidth limitations is false?

The public network interface refers to the interface connecting the Huawei USG6000 to the Internet.

Inbound traffic refers to the traffic flowing from the public network interface to the private network interface. Limited by the bandwidth in the inbound direction.

Outbound traffic refers to the traffic flowing from the private network interface to the public network interface. Limited by outbound bandwidth.

All traffic of the virtual system = inbound traffic + outbound traffic + traffic from private network interface to private network interface + traffic from public network interface to public network interface.

58. Regarding the statement that GRE Over IPSec, which of the following statements is false?

The IP header added in the IPSec encapsulation process means the source address is the interface address of the IPSec gateway to which the IPSec security policy is applied, and the destination address is the interface address of the IPSec peer to which the IPSec security policy is applied.

The data flow that IPSec needs to protect is the data flow from the GRE start point to the GRE end point

The IP header added in the GR encapsulation process means that the source address is the source address of the GRE tunnel, and the destination address is the destination address of the GRE tunnel.

When GRE over IPSec connection is used between gateways, IPSec encapsulation is performed first, and then GRE encapsulation is performed.

59. Drag and drop question: The firewall has 4 outgoing interface links, which belong to different ISPs. Among them, the link weight of ISP1 is 5, the link weight of ISP2 is 6, the link weight of ISP3 is 7, and the link weight of ISP4 is is 8, the bandwidth of each link is 100M, and the overload protection thresholds of the four links are set to 50%, 60%, 70% and 80% respectively. The firewall forwards 250M of traffic. According to the link weight load balancing, please match the links of each ISP with the traffic it transmits.

60. Which of the following IKE v1 negotiation phase 1 main mode negotiation process is the role of Message1 and Message2?

Negotiate the IKE security proposal used between the peers

Mutual identity authentication

Use the DH algorithm to exchange information related to the key and generate the key

Negotiate IPSec SA

Page 7 of 9

61. Which of the following is not the purpose of bandwidth management?

Limit bandwidth

Guaranteed number of connections

Limit the number of connections

Guaranteed bandwidth

62. The command to enable the FTP server function on the USG firewall is ( ).

ftp server enable

63. SSL VPN is basically not restricted by the access location, and can access network resources from many Internet access devices and any remote location.

True

False

64. Which of the following are manually allocated by Huawei's virtual system? (Multiple choice)

Safe area

Users (number of online users, number of users, number of user groups, number of security groups)

The number of concurrent users of SSL VPN

Number of Sessions and Session Rate

65. Which of the following descriptions are correct about the characteristics of VGMP in hot standby? (Multiple choice)

An interface configured with a virtual IP address can be used as a heartbeat

By default, Huawei firewalls reject multicast traffic (VGMP packets without the remote parameter)

If the Layer 2 interface is used as the heartbeat interface, it cannot be configured directly on the Layer 2 interface.

After joining VGMP, the role of the heartbeat line includes status information backup (session table and server-map table) and VGMP status negotiation

66. Which of the following packets can be used for health check in server load balancing? (Multiple Choice)

ICMP packets

UDP packets

TCP packets

DNS packets

67. The server load balancing configuration is as follows:

[USG]s1b

[USG-s1b] group 0 test

[USG-slb-group-test] metric weight-srchash

[USG-slb-group-test] rserver 1 rip 10.1.1.3 weight 32

[USG-slb-group-test] rserver 2 rip 10.1.1.4 weight 16

[USG-slb-group-test] rserver 3 rip 10.1.1.5 weight 32

[USG-s1b] vserver 0 test

[USG-slb-vserver-0] protocol any

[USG-slb-vserver-1] group test

Which of the following descriptions are correct? (Multiple choice)

Determine which server the data stream is going to based on the weight value. The larger the weight value, the stronger the processing capability of the corresponding real server.

Negative Balancing Algorithm for Weighted Session Hold

Negative wear equalization algorithm is a simple polling algorithm

The configuration is a non-complete load balancing configuration

68. Regarding the server load balancing technology, the commands executed on the firewall and the output obtained are as follows:

Which of the following statement is correct?

The load balancing policy enables the service health check function, and the detection packets used are TCP packets.

The load balancing policy uses a weighted round-robin algorithm.

The load balancing policy adopts the weighted least connection algorithm.

The real servers of the load balancing policy are all in the mandatory unavailable state.

69. Huawei UMA products allow operation and maintenance personnel with specific IP and specific accounts to manage IT equipment through the UMA platform. Which of the following steps is involved?

Ex ante control

In-event monitoring

Post audit

Maintenance Preparation

70. After enabling the intelligent routing session hold function, when an intelligent routing interface goes down, all the traffic of the interface will be forwarded on other intelligent routing interfaces. What will happen when the interface is up again?

The interface cannot forward traffic

The traffic on this interface increases very slowly

The interface cannot participate in intelligent routing

The physical status of the interface is UP, and the protocol status is error-down. It needs to be manually added to intelligent routing.

Page 8 of 9

71. Mobile office users access the internal web server of the enterprise through the web proxy. Mobile office users are in the Untrust security zone, and the internal web server of the enterprise is in the trust security zone. Which of the following descriptions about the traffic that needs to be released on the firewall is correct?

It is necessary to release the corresponding traffic from Untrust to Local, and from Local to Trust

Just release the corresponding traffic from Untrust to Local

Just release the corresponding traffic from Untrust to Trust

Just release the corresponding traffic from Local to Trust

72. Which of the following is part of the quota distribution? (Multiple choice)

SSL VPN Virtual Gateway

Safe Area

Interface

vlan

73. The HRP module provides the basic data backup mechanism and transmission function. Which of the following options is the backup content of HRP? (Multiple choice)

Server-map entry

No-Pat entry

TCP/UDP session table

Dynamic Blacklist

74. By default, what is the interval for sending VGMP Hello packets?

75. Which of the following statements about the firewall administrator user interface configuration is incorrect? (Multiple choice)

[FW] user interface vty 04

[Fw-ui-vtyo-4] authentication-mode aaa

[Fw-ui-vtyo-4] protocol inbound telnet

[Fw-ui-vtyo-4] user privilege level3

[Fw-ui-vtyo-4] idle-timeout5

[FW-ui-vtyo-4] quit

The timeout period for admin users is 5 minutes

Firewall allows SSH login

The administrator user must log in through server authentication

The administrator user must log in through local authentication

76. Which of the following supports multiple hotlink identification algorithms and can effectively solve information theft such as single-source hotlinking, distributed hotlinking, and malicious website data theft, so as to ensure that website resources can only be obtained through this site access?

Firewall

IPS

Anti-DDos

WAF

77. Using HRP technology, all configuration information of the standby firewall can be synchronized by the main firewall through HRP without any configuration, and the configuration information will not be lost after restarting.

True

False

78. In the L2TP over IPSec application scenario, the Huawei USG6000 product will first use IPsec to encapsulate the original data packet, and then use L2TP to encapsulate the data packet.

True

False

79. As shown in the figure, the dual-system hot standby networking environment, in which backup groups 1 and 2 are added to the VGMP management group, USG_A is the active device, and USG_B is the standby device. If USG_A fails, such as power failure, the state of USG_B will be switched from Slave to Master. When USG_A recovers, the state is switched to Master again, while the state of USG_B is still Master.

What is the cause of this phenomenon?

The two firewalls are in load balancing mode. They are configured as both master and slave in the same backup group.

The priority of the VRRP backup group of USGA is not restored in time after the USGA fault is restored

Heartbeat fails after USGA recovers from failure

No hrp track is configured

80. There are three L2TP authentication methods: proxy authentication, mandatory CHAP authentication and LCP renegotiation. Among them, LCP renegotiation has the lowest priority, and proxy authentication has the highest priority.

True

False

Page 9 of 9

81. Which of the following resource allocation methods does Huawei USG6000 product resource allocation support? (Multiple choice)

Quota allocation

Automatic allocation

Manual distribution

Indefinite allocation

82. GRE Over IPSec tunnel can realize the transmission of IPX packets.

TRUE

FALSE

83. Which of the following log categories do all the threat logs, content logs, policy hit logs, mail filtering logs, URL filtering logs, and audit logs output by the firewall belong to?

Session log

Packet Loss Log

Business log

System log

84. Which of the following log categories does the firewall log, content log, policy hit log, mail filtering log, URL filtering log and audit log all belong to?

Session log

Packet Loss Log

Business log

System log

85. Which of the statements about virtual system shunting are correct? (Multiple choice)

The process of determining the affiliation between a packet and a virtual system is called offloading.

The process of classifying traffic is called offloading.

The packets entering the device can be sent to the correct virtual system for processing by offloading

Packets can be classified and processed by offloading.

86. Which of the following descriptions about mutual access between USG firewall virtual systems is incorrect? (Multiple choice)

In extended mode, when two virtual systems access each other across the shared virtual system, a session will be created on all three virtual systems

In standard mode, two virtual systems access each other across the root system, and a session is also created on the root system

In standard mode, if two virtual systems directly access each other, a session will be created on both virtual systems

In the standard mode, the scenario of mutual access between the intended system across another virtual system and the root system can be realized