Free Huawei H12-711_V3.0 Exam Dumps Questions & Answers

In order to obtain criminal evidence, it is necessary to master the technology of intrusion tracking. Which of the following options are correct for the description of tracking technology? (multiple choice)

• A.  Shallow mail behavior analysis can achieveIPAnalysis of addresses, sent time, sending frequency, number of recipients, shallow email headers, and more.
• B.  Link testing technology determines the information of the attack source by testing the network link between routers
• C.  Packet logging technology through the tracedIPInsert trace data into packets to mark packets on each router they pass through
• D.  Packet marking technology extracts attack source information by logging packets on routers and then using data drilling techniques

aboutNATPolicy processing flow, which of the following options are correct? (multiple choice)

• A.  Server-mapProcess before security policy match
• B.  sourceNATPolicy queries are processed after the session is created
• C.  Server-mapProcess after state detection
• D.  sourceNATPolicies are processed after a security policy match

As shown in the figure, nat server global202.106.1.1 inside10.10.1.1 is configured on the firewall. Which of the following is the correct configuration for interzone rules? ( )[Multiple choice]*

• A.  rule name b, source- zone untrust, destination- zone trust, source- address10.10.1.1 32, action permit
• B.  rule name d, source- zone untrust. destination- zone trust. destination- address10.l0.1.1 32, action permit
• C.  rule name c. source-zone untrust. destination-zone trust. destination-address 202.106.1.132, action permit
• D.  rule name b, source-zone untrust, destination-zone trust, source-address202.106.l.1 32, action permit

Which of the following is not the business scope of the National Internet Emergency Response Center?

• A.  Warning and notification of security incidents
• B.  Provide security evaluation services for government departments, enterprises and institutions
• C.  Emergency handling of security incidents
• D.  Cooperate with other institutions to provide training services

After a network intrusion event occurs, the identity of the intrusion, the source of the attack and other information are obtained according to the plan, and the intrusion behavior is blocked. The above actions belong to PDRR. What are the links in the network security model? (multiple choice)

• A.  Detection link
• B.  recovery link
• C.  Protection link
• D.  response link