In the Client-Initiated VPN configuration, generally it is recommended to plan the address pool and the headquarters of the network address for the different network segments, or need to open proxy forwarding on the gateway device.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following is true about the sequencing of the PKI work process?
1. The communication terminal applies for CA certificate.
2. PKI replies to CA certificate
3. Obtain each other's certificate and verify the validity
4. Communication terminal installs local certificate
5. PKI issues a local certificate
6. The communication terminal applies for a local certificate
7. Communication terminal installs CA certificate
8. Communicate with each other

• A.1-2-6-5-7-4-3-8
• B.6-5-4-3-1-2-7-8
• C.6-5-4-1-2-7-3-8
• D.1-2-7-6-5-4-3-8

Comment: *

Name: *

Email: *

Verification: *

Which of the following statement about the NAT configuration is wrong?

• A.The firewall does not support NAPT conversion for ESP and AH packets.
• B.The IP address in the address pool can overlap with the public IP address of the NAT server
• C.When there is VoIP service in the network, you do not need to configure NAT ALG
• D.Configure source NAT in -.transparent mode, the firewall does not support easy-ip mode

Comment: *

Name: *

Email: *

Verification: *

When using the web configuration type to do the configuration, the correct statements as following are:
(Choose two.)

• A.When configuring the inter-domain security policy, it needs to set the source security area as Untrust, the target security area as DMZ
• B.When configuring the inter-domain security policy, setting the source security area as DMZ, the target security area as Untrust
• C.When configuring the NAT server, the internal address is 200.10.10.1, the external address is 10.1.1.2
• D.When configuring the NAT Server, the internal address is 10.1.1.2, the external address is 200.10.10.1

Comment: *

Name: *

Email: *

Verification: *

Execute the command on the firewall and display the following information, which of the following description is correct? (Multiple Choice) HRP_A [USG_A] display vrrp interfaceGigabitEthernet 0/0/1 \ GigabitEthernet9/0/1 | Virtual Router 1VRRP Group: Active state: Active Virtual IP: 202.38.10.1 Virtual MAC: 0000-5e00-0101 Primary IP: 202 38.10.2 PriorityRun: 100 PriorityConfig: 100 MasterPriority: 100 Preempt: YES Delay Time: 10

• A.This firewall VRID is 1 the VRRP priority to backup g'oup 100
• B.The status of this firewall VGMP group is Active.
• C.This firewall G1 / 0/1 virtual interface IP address 202.30.10.2
• D.Will not switch when the primary device fails

Comment: *

Name: *

Email: *

Verification: *