最新のH12-731-ENU問題集で試験を準備する

Huawei H12-731-ENU 試験概要:

Huawei H12-731-ENU 試験シラバストピック:

Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) 認定 H12-731-ENU 試験問題：

1. The USG and the Router establish a Site-to-Site IPsec VPN. Based on the following information, which of the following options may be correct?
<USG> display ike sa
current ike sa number: 0
<USG> display ipsec statistics
the security packet statistics:
......
negotiate about packet statistics:
IP packet ok: 0, err: 0, drop: 0
IP rcv other cpu to ike: 0, drop:
0
IKE packet inbound ok: 0, err: 0
IKE packet outbound ok: 0, err: 0
SoftExpr: 0, HardExpr: 0,
DPDOper: 0, SwapSa: 0
ModpCnt: 0, SaeSucc: 0,
SoftwareSucc: 0

A) Interzone packet filtering configuration error
B) NAT policy interferes with IPsec protected traffic
C) Route reachability problem of IKE peer private network
D) IPsec proposal configuration is inconsistent

2. What are the methods for firewalls to diagnose forwarding faults?

A) Packet loss statistics based on 5-tuple
B) Debug IP Packet
C) View session table
D) message missing
E) Statistics of detailed packet loss classification

3. NIP5000 devices support setting some interfaces to IDS mode.

A) TRUE
B) FALSE

4. In Portal authentication, what Portal parameters must be configured on the switch?

A) shared-key
B) Portal page URL
C) Portal server IP
D) The port number on which the device listens for Portal protocol packets
E) Portal protocol version

5. Which of the following statements about hot standby is correct?

A) If the preemption time is set too long, the switch operation will not be performed immediately when the USG fails.
B) The preemption operation is always started only after the failure recovery or the restart of the primary USG is completed.
C) hrp auto-sync config , which will manually back up the commands configured on the primary USG to the secondary USG.
D) The vrrp vrids of the interfaces corresponding to the heartbeat lines on the two USGs may be different.

質問と回答：