In tunnel encapsulation mode.IPSecThere is no need to have a route to the destination private network segment during configuration, because the data will be re-encapsulated to use the newIPThe header looks up the routing table.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Common scanning attacks include: port scanning tools, vulnerability scanning tools, application scanning tools and database scanning tools, etc.

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

The triggering methods of the built-in Portal authentication of the firewall include pre-authentication and ______ authentication

• A.Conversation

Comment: *

Name: *

Email: *

Verification: *

VGMPIn which of the following situations occurs in the group, the group will not actively send the message to the peerVGMPmessage/

• A.Dual-system hot backup function enabled
• B.Session table entry changes
• C.Firewall service interface failure
• D.Manually switch the active and standby status of the firewall

Comment: *

Name: *

Email: *

Verification: *

If users from the external network (where the security zone is Untrust) are allowed to access the intranet server (where the security zone is DMZ), the destination security zone selected when configuring the security policy is ______.[fill in the blank]*

Comment: *

Name: *

Email: *

Verification: *