[2026] Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network)

문제1

According to the dual-system hot backup networking diagram, which of the following statements is incorrect regarding the dual-system hot backup preemption function?

A. After the VRRP backup group is added to the VGMP management group, the original preemption function on the backup group will become invalid. The preemption behavior must be determined by the VGMP management group.

B. The VRRP backup group has its own preemption function. As shown in the figure, after USG_A fails and recovers, USG_A uses the preemption function to revert to the master state.

C. The preemption function of the VGMP management group is similar to that of the VRRP backup group. When the fault of a backup group in the management group recovers, the priority of the management group is also restored.

D. By default, preemption function is disabled

정답: D

문제2

Which of the following VPN encapsulation protocols that do not provide encryption? (Multiple choices)

A. AH

B. ESP

C. L2TP

D. GRE

정답: A,C,D

문제3

For the FireHunter 6000 Sandbox to detect files transmitted on the network in a virtual environment, which of the following file types can be detected? (Multiple choice)

A. MP4 file

B. Staff's game account

C. word file or PDF document

D. Web page content, such as JavaScript, Flash, Java Applet, etc.

정답: C,D

문제4

What are the load balancing algorithms supported by the Huawei USG6000 firewall?

A. Weighted polling algorithm

B. Source IP hash algorithm

C. Ratio

D. Simple polling algorithm

정답: A,B,D

문제5

When traffic is finally sent from the outgoing interface, it is limited by the bandwidth of the outgoing interface. If the traffic is greater than the outbound interface bandwidth, which of the following will be used to do queue scheduling for traffic to ensure that high-priority packets are sent preferentially?

A. Remark DSCP priority

B. Bandwidth policy matching order

C. QoS

D. Forwarding priority

정답: D

문제6

What actions are performed when the Huawei USG6000 series switches between active and standby switches in a dual-system hot backup deployment?

A. After the related switch receives the ARP packet, it refreshes the MAC address table and directs traffic to the USG_B.

B. USG_B sends proxy ARP packets

C. VRRP backup group virtual address is unavailable

D. USG_B sends gratuitous ARP packets

정답: A,D

문제7

Which of the following is not the purpose of bandwidth management?

A. Limit the number of connections

B. Limit bandwidth

C. Guaranteed bandwidth

D. Guaranteed number of connections

정답: D

문제8

Which of the following options cannot be used as a matching condition for a policy route?

A. Next hop address

B. Source security area

C. DSCP priority

D. Inbound interface

정답: A

문제9

Which of the following are the limiting elements of bandwidth management? (Multiple choices)

A. P2P protocol data flow restrictions

B. 1M protocol data flow restrictions

C. Bandwidth

D. Connections

정답: C,D

문제10

Which of the following resource allocation methods are supported by Huawei USG6000 product resource allocation?

A. Manual allocation

B. Automatic allocation

C. Quota allocation

D. Non-quota allocation

정답: A,C

문제11

Which of the following is the possible cause of the failure?

A. SSL VPN is deployed on the firewall next to the one-arm deployment. You need to use NAT to map the private address of the SSL VPN gateway to public network address. The address mapping is incorrect.

B. The route between the gateway and intranet server is unreachable.

C. The security policy does not allow traffic from the external network to the intranet server.

D. The user is not assigned to the Web proxy resources.

정답: D

문제12

The virtual system instance bound to the interface by the ip binding vpn-instance vpn-instance name is generated as the virtual system is created.

A. True

B. False

정답: B

문제13

There are three physical interfaces in the Link-Group group. When any of these interfaces fails, which of the following statements is correct? (Multiple Choice)

A. If any interface in the group fails, the system sets the status of other interfaces in the group to Down.

B. After some interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

C. After all the interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

D. If any interface in the group fails, the status of other interfaces in the group does not change.

정답: A,C

Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721-ENU무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트