Easily To Pass New H12-731-ENU Premium Exam Updated [Jul 20, 2023]
H12-731-ENU Certification All-in-One Exam Guide Jul-2023
NEW QUESTION # 17
Which of the following options can be used as conditions for Portal push ?
- A. Endpoint IP address range
- B. Terminal device type
- C. MAC address of the access AP
- D. SSID of the access AP
- E. MAC address of the connected AC
- F. Terminal browser type
Answer: A,B,C,D
NEW QUESTION # 18
VGMP unified management of VRRP backup group status, the priority of VGMP management group Active is 65001, and the priority of Standby is 65000. When the VGMP management group monitors the interface Down through the VRRP backup group or directly, the priority of the VGMP management group will be recalculated. When each interface is Down, the priority of the VGMP management group decreases by 2.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 19
USGA G0/0/2 (30.1.1.2) ----------------------------- (30.1.1.1) G0/0/2 USGB
A network adopts the above topology and establishes BFD with USGA and USGB, but it is found that the BFD session cannot be Up. The most probable cause is:
<USGA> display bfd session all
-------------------------------------------------- -------------------------------------------------- -------------
Local Remote Peer IP Address Interface Name State Type
-------------------------------------------------- -------------------------------------------------- ------------
60 20 30.1.1.1 GigabitEthernet0/0/2 Down Static
-------------------------------------------------- -------------------------------------------------- ------------
<USGB> display bfd session all
-------------------------------------------------- -------------------------------------------------- -------------
Local Remote Peer IP Address Interface Name State Type
-------------------------------------------------- -------------------------------------------------- ------------
60 20 30.1.1.2 GigabitEthernet0/0/2 Down Static
-------------------------------------------------- -------------------------------------------------- ------------
- A. BFC session configuration not committed
- B. Identifiers at both ends of the BFC session do not correspond
- C. BFD session with unbound outbound interface
- D. The shutdown command is configured on one side of the BFC session
Answer: B
NEW QUESTION # 20
For some large IP data packets, in order to meet the requirements of the MTU (Maximum Transmission Unit) of the link layer, it needs to be fragmented and divided into several IP packets during the transmission process. In each IP header there is an offset field and a split flag (MF), where the offset field indicates the location of the fragment in the entire IP packet. If the attacker sets the offset field to an incorrect value after intercepting the IP data packet, the receiver cannot correctly combine the values of the offset field in the data packet after receiving the split data packets. In this way, the receiver will keep trying, and the operating system will crash due to resource exhaustion.
What is this attack method?
- A. Teardrop Attack
- B. WinNuke Attack
- C. Ip Fragmented Packet Attack
- D. TCP packet flag attack
Answer: A
NEW QUESTION # 21
MAC authentication is applicable in which of the following situations?
- A. Mobile clients, such as smartphones, etc.
- B. Linux host for testing
- C. Office Windows host
- D. network printer
Answer: D
NEW QUESTION # 22
In the dual-system hot-standby network, the management group status on the two USGs is Active. What is the possible reason?
- A. set a long preemption delay
- B. Backup channel interface not configured
- C. Fast session backup not set
- D. The physical line of the heartbeat has failed
Answer: D
NEW QUESTION # 23
A company has the following requirements:
The intranet users in the Trust area are on the 192.168.1.0/24 network segment and can access the Internet. There are a total of 50 hosts (192.168.1.1-192.168.1.50) with a total curtain of 500M.
The following plans are reasonable:
- A. The overall belt curtain is limited to 500M, the guaranteed belt curtain is 500M, and the maximum belt curtain per IP is 10M.
- B. The overall bandwidth is limited to 500M, and the maximum bandwidth of 192.168.1.1-192.168.1.50 per IP is 12M.
- C. The overall bandwidth is limited to 500M, and the maximum bandwidth of each IP is 12M.
- D. The overall bandwidth is limited to 400M, and the maximum bandwidth per IP is 12M.
Answer: B
NEW QUESTION # 24
Which statement about MTU and PMTU is correct?
- A. PMTU detection is to obtain the PMTU value of the specified destination IPv4 address through detection, and then use the MTU value to send packets.
- B. In an IP network, interfaces with different MTU values may be passed from the source address to the destination address, and the largest MTU value is the PMTU of the path.
- C. MTU (Maximum Transfer Unit) refers to the size of the largest data packet that can be transmitted in the network, in bytes.
- D. The device will check the MTU on the inbound interface, and if the packet size exceeds the MTU value, it will be discarded.
Answer: A,C
NEW QUESTION # 25
What are the mechanisms for implementing intrusion prevention?
- A. Response handling
- B. feature matching
- C. Protocol identification and protocol resolution
- D. Blacklist match
Answer: A,B,C
NEW QUESTION # 26
A company has the following requirements:
The intranet users in the Trust area are on the 192.160.1.0/24 network segment and can access the Internet.
Which of the following configurations are correct:
traffic-policy
profile trust_tountrust
bandwidth downstream
maximum-bandwidth 400000
bandwidth downstream
guaranteed-bandwidth 50000
bandwidth ip-car downstream
maximum-bandwidth per-ip 2000
rule name trust_to_untrust
source-zone trust
destination-zone untrust
source-address 192.160.1.0 24
action qos profile
trust_to_untrust
#
- A. This configuration will implement speed limit for Internet addresses to actively access the intranet segment.
- B. This configuration will implement the download traffic in the direction from Trust to Untrust, and the maximum bandwidth per IP is 2M.
- C. This configuration will achieve an overall upload bandwidth of 50M for intranet 192.168.1.0/24 users.
- D. This configuration will enable Trust intranet users to actively access the Internet outside the Internet and limit the total maximum download bandwidth to 400M.
Answer: B,D
NEW QUESTION # 27
When configuring the address set on the firewall, the configuration command is as follows:
[sysname] ip address-set abc type object
[sysname-object-address-set-abc] address 192.168.1.1 0
[sysname-object-address-set-abc] address 192.168.2.0 mask 24
The following descriptions are correct:
- A. The addresses in the address set must not contain or overlap each other.
- B. The matching network segment can be added to the address set abc by nesting the address set.
- C. After the address set abc is created successfully, no new address or address segment can be added directly, and an address set must be re-created.
- D. address 192.168.2.0 mask 24 can be replaced with the command address 192.168.2.0 0.0.0.255.
- E. The address set abc matches the 192.168.1.1 host and the 192.168.2.0/24 network segment.
Answer: B,D,E
NEW QUESTION # 28
What aspects need to be checked for IPS (Intrusion Prevention) failures?
- A. Whether the overlay signature is configured.
- B. Whether to enable IPS global switch.
- C. Check whether the IPS blacklist is configured.
- D. Whether the configured policy is submitted for compilation.
- E. Whether to configure the IPS policy and apply it to the interzone.
Answer: B,D,E
NEW QUESTION # 29
Which of the following commands cannot be backed up in the command backup function of the firewall's dual-system hot backup?
- A. Forwarding Policy Commands
- B. IP address configuration
- C. IPS command
- D. routing table
Answer: B,D
NEW QUESTION # 30
In Agile Controller, what is the correct statement about the screen saver check policy ?
- A. Only supports Windows OS
- B. You can check if the screen saver is enabled on the terminal
- C. Can check if the screen saver password is enabled
- D. Screen saver settings cannot be fixed automatically
Answer: A,B,C
NEW QUESTION # 31
The following configuration commands are executed on the normal running USG firewall on the live network, but the interaction of ARP packets is still not seen. Which of the following commands need to be supplemented?
<USG> system-view
[USG] info-center enable
[USG] info-center source arp channel console debug level debugging
[USG] info-center console channel console
<USG> debugging arp packet
- A. <USG> info-center console channel 0
- B. <USG> info-center source default channel 0
- C. <USG> terminal debugging
- D. <USG> terminal monitor
Answer: C,D
NEW QUESTION # 32
Regarding the firewall IP-Link feature, the following description is incorrect:
- A. The ICMP detection method can be used to detect the reliability of chromium paths across network segments.
- B. ARP detection mode only supports detection of direct links.
- C. The firewall continuously sends ARP request packets to the target network segment, and when it receives ARP response packets, it considers the link to be normal.
- D. The firewall continuously sends ICMP packets to the specified destination address, and if no ICMP echo reply is received for 3 seconds (default), the link is considered to be faulty.
Answer: C
NEW QUESTION # 33
Which interfaces does the firewall support to configure IPsec policies?
- A. Virtual Template port
- B. normal physical port
- C. Tunnel port
- D. Dialer mouth
- E. Virtual Ethernet interface
Answer: B,C,D
NEW QUESTION # 34
A PC receives a fragmented package as shown in the figure below. According to the following package information, which of the following options is correct?
- A. The flag bit in the Layer 3 IP header is 1
- B. offset bit is 0
- C. The protocol number in the IP header is 2
- D. There are subsequent IP fragments
Answer: B,D
NEW QUESTION # 35
When the network traffic is heavy, if you do not want the downstream network to be congested or directly discard a large number of packets due to the excessive data traffic sent by the upstream, you can limit and cache the traffic on the outbound interface of the upstream device, so that such packets can be compared with each other. Send out at an even speed.
This technique can be:
- A. CBWFQ
- B. GTS
- C. WRED
- D. Car
Answer: B
NEW QUESTION # 36
In the process of IPsec negotiation failure, turn on the debug switch of IKE and display the following information: got NOTIFY of type NO_PROPOSAL CHOSEN or drop message from ABCD due to notification type NO_PROPOSAL CHOSEN , what should I do?
- A. If the negotiation is not successful in the first stage, it may be that the ike proposal does not match.
- B. If the negotiation is not successful in the second phase, it may be that the ipsec proposal does not match.
- C. If the negotiation is not successful in the second phase, it may be that the ACL does not match.
- D. If the negotiation is not successful in the first phase, the pre-share-key may be configured incorrectly.
Answer: A,B
NEW QUESTION # 37
In the networking shown in the figure, the default gateway for accessing the external network is not configured on the Web server. To ensure that users on the external network can normally access the Web server through the NAT Server, which one of the following configuration plans for the firewall is correct:
- A. It is necessary to configure the source NAT from Untrust to the DMZ on the firewall to translate the source address of the data packets from the external network users accessing the Web server to 192.168.1.1.
- B. It is necessary to configure destination-nat for external network users on the firewall to convert the public network address of the accessed web server into the internal network address
- C. It is necessary to configure the source NAT in the direction from DMZ to Untrust on the firewall, so that the web server can access the external network, so that the response message of the web server can be returned to the external network user.
- D. It is necessary to configure nat server on the firewall to ensure that external network users can access the Web server by accessing 202.20.1.5.
Answer: A,D
NEW QUESTION # 38
When configuring an IKE proposal, which of the following three parameters must be configured?
- A. Hash algorithm
- B. DH-group
- C. security acl
- D. PFS
- E. encryption algorithm
Answer: A,B,E
NEW QUESTION # 39
......
Last H12-731-ENU practice test reviews: Practice Test Huawei dumps: https://pass4sure.dumptorrent.com/H12-731-ENU-braindumps-torrent.html