[2026] Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network)

문제1

Which of the following are the characteristics of the virtual system? (Multiple choice)

A. Resource independence

B. Entries independence

C. Management independence

D. Flow isolation

정답: A,B,C,D

문제2

The following bandwidth policy configuration commands are available on Huawei's USG6000 products:
[USG] traffic-policy
[USG-policy-traffic] profile class1
[USG-policy-traffic-profile-class1] bandwidth maximum-bandwidth whole both 1000
[USG-policy-traffic-profile-class1] quit
[USG-policy-traffic] rule name policy1
[USG-policy-traffic-rule-policy1] source-zone trust
[USG-policy-traffic-rule-policy1] destination-zone untrust
[USG-policy-traffic-rule-policy1] source-address 192.168.1.0 mask 255.255.255.0
[USG-policy-traffic-rule-policy1] destination-address 192.168.2.0 mask 255.255.255.0
[USG-policy-traffic-rule-policy1] action cos profile class1
Which of the following statements are correct? (Multiple choices)

A. 192.168.1.0/24 hosts will be restricted from accessing 192.168.2.0/24 traffic

B. The traffic matching Policy1 is directly released without restriction

C. Class1 defines the overall current limit and limits the 1000kbps

D. Match the traffic of Policy1 and control the flow of each source IP

정답: A,C

문제3

When you create a virtual system, VPN instances of the same name are automatically generated.
And the system will automatically create a logical interface for it, from which value does the logical interface number begin?

A. 0

B. 2

C. 3

D. 1

정답: D

문제4

Which of the following statements about the Radius agreement is correct? (Multiple choices)

A. Transmission of Radius messages using UDP protocol

B. Encrypt an account when transferring user accounts and passwords using the Radius protocol

C. Authentication and Authorization port number can be 1645

D. The authentication and authorization port number can be 1812

정답: A,C,D

문제5

Which of the following resource allocation methods are supported by Huawei USG6000 product resource allocation?

A. Manual allocation

B. Automatic allocation

C. Quota allocation

D. Non-quota allocation

정답: A,C

문제6

Below for USG dual-system hot backup typical application scenario. USG_A is the master device. USG_B is the standby device. The VRRP backup group and heartbeat interfaces have been configured. GE2/0/0 and GE 2/0/1 on firewall A joined the link-group 1.

Which of the following statement is correct? (Multiple Choice)

A. After GE 2/0/1 failure is restored, USG_A functions as a standby device of USG_B.

B. If GE2/0/2 is also added to link-group 1, when GE2/0/1 of firewall A experiences a physical line fault, the backup of the active and standby device information will be interrupted.

C. When GE2/0/1 of firewall A experiences a physical line fault, the link status of GE2/0/0 on USG_A is down and the physical interface indicator is on.

D. After the fault is restored, when the firewall detects that both GE2/0/0 and GE2/0/1 are in the Up state, the USG_A state is switched to master.

정답: B,D

문제7

There are three physical interfaces in the Link-Group group. When any of these interfaces fails, which of the following statements is correct? (Multiple Choice)

A. If any interface in the group fails, the system sets the status of other interfaces in the group to Down.

B. After some interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

C. After all the interfaces in the group are restored to normal, the interface status in the entire group is set to Up again.

D. If any interface in the group fails, the status of other interfaces in the group does not change.

정답: A,C

문제8

The following figure shows the networking of BFD for OSPF:
1. OSPF is running among the three devices FW_A, FW_B, and FW_C. They are neighbors.
2. When the neighbor status reaches the FULL state, and BFD and OSPF are configured as ganged, BFD completes the establishment of BFD session.
Which of the following statements are correct? (Multiple Choices)

A. BFD can provide second-level fault detection mechanism

B. When the link a fails, the BFD first percieves, and the FWA and FWB converge immediately.

C. When link a fails, OSPF automatically converges and informs BFD

D. After the BFD finds the event of neighbor Down, rerunning the routing calculation between the devices, the new route is link b.

정답: B,D

문제9

About Radius certification process, there are the following steps:
1. The Radius client in the network device receives the username and password and sends an authentication request to the Radius server.
2. When the user logs in to a network device such as the USG, the user name and password will be sent to the Radius client.
3. After the Radius server receives a valid request, it completes the authentication and returns the required user authorization information to the Radius client.
Which of the following order is correct?

A. 2-3-1

B. 2-1-3

C. 1-2-3

D. 3-2-1

정답: B

문제10

Which of the following VPN encapsulation protocols that do not provide encryption? (Multiple choices)

A. AH

B. ESP

C. L2TP

D. GRE

정답: A,C,D

문제11

A company has three departments: research, marketing, and finance. The enterprise uses the local authentication of the firewall to perform user authentication for employees in each department. The authentication domain is default. Authenticated users can gain access to the company's internal network.Now companies want their employees to use the Webmail system to send and receive emails when they travel, and use ERP systems to work. How to deploy if using SSL VPN to access the network?

A. It is only necessary to allow external users to access the SSL VPN virtual gateway traffic on the firewall so that employees on business trips can use Webmail and ERP systems.

B. Users can be divided into different user groups according to department attributes, and different SSL VPN services can be authorized for user groups.

C. If employees on business trips use Webmail to send files, they need to enable file sharing.

D. Because both the Webmail system and the ERP system can be accessed using the Web interface, the Web proxy function of the SSL VPN needs to be configured in order to meet employees' needs for accessing the internal server.

정답: B,D

문제12

An enterprise has deployed the eSight platform. Which of the following devices can be managed on this platform? (Multiple Choice)

A. Storage Devices

B. Switch

C. Firewall

D. Access Control

정답: A,B,C

문제13

When the user logs in to the SSL VPN gateway, prompt "Illegal username and wrong password".
Which of the following are the possible causes of this failure? (Multiple Choice)

A. The user entered the wrong password many times and the account was locked.

B. Authentication server configuration error.

C. The user name and password were entered incorrectly.

D. The certificate filtering field configuration error.

정답: B,C,D

문제14

Which of the following statements about IKE v1 main mode and aggressive mode is correct?

A. Bare mode uses DH algorithm

B. Whether the negotiation is successful or not, it will enter the fast mode

C. All negotiation packets in the first phase of the main mode are encrypted

D. All negotiation packets in the first phase in aggressive mode are encrypted

정답: A

Huawei HCIP-Security-CISN(Huawei Certified ICT Professional - Constructing Infrastructure of Security Network) - H12-721무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트