Free Huawei H12-711_V4.0 Exam Dumps Questions & Answers

What are the correct entries in the following description of firewall security zones?

• A.  The Local zone is the highest security zone with a priority of 99.
• B.  The DMZ security zone solves the problem of server placement well, and this security area can place devices that need to provide network services to the outside world.
• C.  Normally, the two communicating parties must exchange messages, that is, there are messages transmitted in both directions between security domains.
• D.  Data flows between security domains are directional, including Inbound and Outbound.

ARP man-in-the-middle attacks are a type of spoofing attack technique.

• A.  TRUE
• B.  FALSE

The following description of digital certificates, which one is wrong

• A.  The simplest certificate consists of a public key, a name, and a digital signature from a certificate authority.
• B.  Digital certificates do not solve the problem of digital signature technology where the public key cannot be determined to be the designated owner.
• C.  Digital certificates contain the owner's public key and related identity information.
• D.  In general, the key of a digital certificate has an expiration date.

IPS signatures describe the characteristics of attack behaviors on the network. The firewall detects and defends against attacks by comparing data flows with IPS signatures.

• A.  TRUE
• B.  FALSE

Regarding the characteristics of the routing table, which of the following items is described correctly

• A.  There may be multiple next hops in the global routing table to the same destination.
• B.  Port When a packet matches multiple entries in the routing table, it is forwarded based on the route entry with the largest metric.
• C.  Port When a packet matches multiple entries in the routing table, it is forwarded according to the longest mask.
• D.  Port In the global routing table, there is at most one next hop to the same destination CIDR block.