2022 Realistic H12-731-ENU Dumps are Available for Instant Access [Q30-Q45]

18Dec 2022 by admin No Comments

Rate this post

2022 Realistic H12-731-ENU Dumps are Available for Instant Access

Download Exam H12-731-ENU Practice Test Questions with 100% Verified Answers

NEW QUESTION 30
What functions are included in the firewall UTM feature?

IPS

content filtering

URL filtering

Traffic-based attack defense

NEW QUESTION 31
Next-generation firewalls perform content inspection at each UTM module (AV, IPS, URL filtering).

TRUE

FALSE

NEW QUESTION 32
The firewall is deployed between the mobile terminal of the wireless user and the WAP gateway, the mobile terminal is in the trust zone, and the WAP gateway is in the untrust zone, and the following configurations are made:
[USG] ad 3000
[USG-acl-adv-3000] rule permit ip destination 202.10.10.2 0
[USG-acl-adv-3000] quit
[USG] fir-all zone trust
[USG-zone-trust] destination-nat 3000 address 200.10.10.2
[USG-zone-trust] quit
The following descriptions are correct:

This configuration can also be applied to server address mapping scenarios

The command firewall zone trust should be changed to firewall interzone trust untrust outbound

The firewall translates the destination address of the packet accessing the gateway address of 202.10.10.2 to 200.10.10.2

The command firewall zone trust should be changed to firewall interzone untrust trust

NEW QUESTION 33
Which of the following descriptions about dual-system hot standby is incorrect?

After automatic backup is enabled, all sessions on the host will be automatically backed up to the standby.

After enabling fast backup, the configuration of the host can also be backed up to the standby.

VGMP is currently in the active state. After the VRRP interface belonging to the VGMP goes down, the VGMP state will definitely switch to the standby state.

The firewall configuration backup direction must be from the VGMP master state device to the backup state device.

NEW QUESTION 34
According to the “GB/T 22240-2008 Information Security Technology Information System Security Level Protection Grading Guide”, information systems are divided into five levels according to different levels, of which the protection capabilities of the five levels include:

Able to protect the system from malicious attacks from external small organizations, threat sources with few resources, general natural disasters, and other threats of considerable damage to important resources, and to discover important security Vulnerabilities and security incidents, after the system is compromised, can restore some functions for a period of time.

It can protect the system from malicious attacks from external organized groups, threat sources with relatively rich resources, serious natural disasters, and other major threats caused by relatively harmful threats under a unified security strategy. Resource damage can find security loopholes and security incidents, and after the system is damaged, most functions can be restored.

Resources that can protect the system from malicious attacks, severe natural disasters, and other threats of considerable severity from national-level, hostile organizations, and resource-rich threat sources under a unified security strategy Damage, can find security breaches and security incidents, after the system is damaged, can quickly restore all functions.

undefined

NEW QUESTION 35
In Agile Controller, what is the correct statement about the screen saver check policy ?

You can check if the screen saver is enabled on the terminal

Can check if the screen saver password is enabled

Only supports Windows OS

Screen saver settings cannot be fixed automatically

NEW QUESTION 36
The following are application layer attacks:

buffer overflow

Teardrop Attack

Smurf attack

CC attack

NEW QUESTION 37
The following configuration, when the physical state of interface G0/0/1 goes down, what will happen to the switch switch?
PC —————– (G0/0/1) FW (G0/0/2) —————- Switch
#
interface GigabitEthernet0/0/1
link-group 1
interface GigabitEthernet0/0/2
link-group 1
#

No change.

The ARP entry of the Switch interface address will be aged out.

The ARP entry of the Switch interface address is immediately deleted.

The firewall sends gratuitous ARP to the upstream device Switch to update the MAC address.

NEW QUESTION 38
Huawei next-generation firewall can scan the transmitted files for viruses. Which of the following statements is correct?

NGFW supports virus detection for files in different transfer directions.

If the virus exception is hit, and the application exception is also hit, the virus exception action will be executed.

NGFW supports virus detection of HTTP and HTTPS transmitted files.

Supports anti-virus detection for resuming files from breakpoints.

NEW QUESTION 39
Which of the following conditions does not trigger re-authentication for the 802.1x process?

In isolation, the end user clicks the repair operation (complete the repair of serious violations).

In the isolated state, the end user manually repairs it, then clicks logout, and then clicks the authentication operation.

In the post-authentication domain state, the Agile Controller AGENT periodically checks the security state of the terminal and needs to be isolated.

In the post-authentication domain state, the user performs business system authentication.

NEW QUESTION 40
According to the following networking, a customer uses the BGP traffic diversion policy route back injection method. Which of the following configurations must be configured on the cleaning device?

interface GigabitEthernet2/0/2 anti-ddos flow-statistic enable

ip route-static 0.0.0.0 0 10.1.3.1

firewall ddos bgp-next-hop 10.1.3.1

firewall ddos bgp-next-hop fib-filter

NEW QUESTION 41
A customer uses multiple branch devices to connect with the USG_A device in the headquarters for IPsec connection, and uses point-to-multipoint IPsec and sub-policy to establish a VPN. Multiple branches have fixed IP addresses, most of the branches can communicate with the headquarters IPsec link normally, and the intranet (branch to headquarters) can communicate with each other, except that the intranet PC of one branch and the headquarters intranet can communicate with each other. can not communicate normally, but the IPsec VPN tunnel has been negotiated successfully.
What could be the reasons?

The headquarters does not have a backhaul route to the failed branch.

The IPsec proposal algorithms at both ends are inconsistent, so the packets cannot be decrypted.

ACL scope configuration error.

It may be negotiated using IKEv2 at one end and IKEv1 at the other end.

NEW QUESTION 42
In NGFW, to use the RBL blacklist, which of the following key options need to be configured by the network administrator?

DNS server

Reply Code

RBL server IP address

SMTP server IP address

NEW QUESTION 43
The difference between IKEv1 and IKEv2, which of the following descriptions are correct?

IKE SA and IPsec SA are established, using 4 messages for IKEv2 and 9 messages for IKEV1 main mode.

IKEv2 can use AAA server to assign private IP address, IKEv1 cannot provide this function.

The integrity algorithm of the IKE SA is only supported by IKEv1.

IKEv1 supports DPD by default. As long as DPD is configured on one end, the other end can respond to DPD packets. IKEv2 cannot.

NEW QUESTION 44
Which of the following applications cannot be secured using packet filtering alone?

WWW service

Telnet service

FTP service

H.323

NEW QUESTION 45
Which of the following commands cannot be backed up in the command backup function of the firewall’s dual-system hot backup?

IPS command

Forwarding Policy Commands

routing table

IP address configuration

Positive Aspects of Valid Dumps H12-731-ENU Exam Dumps! : https://www.practicematerial.com/H12-731-ENU-exam-materials.html

Leave a Reply Cancel reply