最新のH12-731-ENU問題集で試験を準備する

Huawei H12-731-ENU 試験概要:

Huawei H12-731-ENU 試験シラバストピック:

Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) 認定 H12-731-ENU 試験問題：

1. A network deploys the AntiDdos cleaning equipment at the network nodes in a bypass mode, and conducts bidirectional drainage and cleaning for the traffic drawn to the cleaning equipment.
The following networking is correct:

A)

B)

C)

D)

2. When the firewall runs GRE, both the physical port and the tunnel port need to be added to the security zone.

A) TRUE
B) FALSE

3. A customer uses multiple branch devices to connect with the USG_A device in the headquarters for IPsec connection, and uses point-to-multipoint IPsec and sub-policy to establish a VPN. Multiple branches have fixed IP addresses, most of the branches can communicate with the headquarters IPsec link normally, and the intranet (branch to headquarters) can communicate with each other, except that the intranet PC of one branch and the headquarters intranet can communicate with each other. can not communicate normally, but the IPsec VPN tunnel has been negotiated successfully.
What could be the reasons?

A) The IPsec proposal algorithms at both ends are inconsistent, so the packets cannot be decrypted.
B) The headquarters does not have a backhaul route to the failed branch.
C) ACL scope configuration error.
D) It may be negotiated using IKEv2 at one end and IKEv1 at the other end.

4. When the dual-system hot backup network is used, according to this configuration, PC2 sends an ARP request to the Mac of IP10.100.30.8. Which of the following options is correct?
sysname NGFW_A
#
hrp enable
hrp interface GigabitEthernet 0/0/3
#
interface GigabitEthernet0/0/1
ip address 192.168.10.2 255.255.255.0
vrrp vrid 1 virtual-ip 192.168.10.1 active
#
interface GigabitEthernet0/0/2
ip address 10.100.30.2 255.255.255.0
vrrp vrid 2 virtual-ip 10.100.30.1 active
#
Nat address-group 1
section 0 10.100.30.8 10.100.30.9
#
nat-policy
rule name trust to untrust
source-zone trust
destination-zone untrust
source-address 192.2163.10.0 24
action nat address-group 1

A) The MAC of the NGFW_A interface responds to this ARP
B) The MAC of the NGFW_B interface responds to this ARP
C) NGFW_B responds to this ARP with VMAC
D) NGFW_A responds to this ARP with VMAC

5. Determine which QoS technology the USG device uses according to the following status information:
[USG_A] display qos policy interface tunnel 1
Interface: GigabitEthernet0/0/1
Direction: Outbound
Policy: dscp
Classifier: default-class
Matched: 0/0
(Packets/Bytes)
Rule(s): if-match any
Behavior: be
-none-
Classifier: server
Matched: 480154/41293244
(Packets/Bytes)
Offered rate: 7244746 bps, drop
rate: 242352 bps
Operator: AND
Rule(s): if-match acl 2001
Behavior: server
Assured Forwarding:
Bandwidth 40000
(Kbps)
Matched:
713659/71365900 (Packets/Bytes)
Enqueued:
36606/3660600 (Packets/Bytes)
Discarded:
677053/67705300 (Packets/Bytes)
Classifier: pc
Matched: 478498/41150828
(Packets/Bytes)
Offered rate: 7344746 bps, drop
rate: 342352
Operator: AND
Rule(s): if-match acl 2002
Assured Forwarding:
Bandwidth 40000 (Kbps)
Matched:
765394/76539400 (Packets/Bytes)
Enqueued:
39235/3923500 (Packets/Bytes)
Discarded:
726159/72615900 (Packets/Bytes)
Classifier: telephone
Matched: 550057/47304902
(Packets/Bytes)
Offered rate: 8244746 bps, drop
rate: 252352 bps
Operator: AND
Rule(s): if-match acl 2003
Behavior: telephone
Expedited Forwarding:
Bandwidth 240000
(Kbps), CBS 600000 (Bytes)
Matched:
765644/76564400 (Packets/Bytes)
Enqueued:
70553/7055300 (Packets/Bytes)
Discarded:
695091/69509100 (Packets/Bytes)

A) WRED
B) CAR
C) GTS
D) CBWFQ

質問と回答：