학습 환경은 사람마다 다릅니다. Fast2test은 Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) 대비 205문항을 인쇄 가능한 PDF, 실제 시험 환경을 재현한 데스크톱 테스트 엔진, 브라우저에서 바로 이용하는 온라인 테스트 엔진의 세 가지 형태로 제공하여, H12-731-ENU 수험생이 원하는 방식으로 학습하실 수 있도록 지원합니다.

Huawei H12-731-ENU 시험 개요:

Huawei H12-731-ENU 시험 요강 주제:

H12-731-ENU 수험생을 위한 핵심 질문과 답변

최신 Huawei Specialist H12-731-ENU 무료샘플문제

문제 #1

For internal network security, which of the following options are recommended for planning deployment priorities?

A. Enable DDoS function
B. Firewall and switch virtualization to achieve business isolation
C. Physical separation of computing network and storage network
D. Enable NAT function
E. Application three-tier architecture plane isolation

문제 #2

In the Remote Access VPN scenario, the remote PC uses the Secoway VPN Client and the firewall to establish a VPN. Which of the following statements is correct?

A. use l2tp over ipsec dial by default
B. Tunnel mode is used by default
C. Default use transfer mode
D. use l2tp dialing by default

문제 #3

Regarding the relationship between 802.1X and RADIUS, which of the following descriptions is correct?

A. 802.1X is a technical system, which includes RADIUS.
B. 802.1X and RADIUS are two completely different technologies and are usually not used together.
C. 802.1X and RADIUS are different technologies, but they are often used together to complete access control to end users.
D. 802.1X and RADIUS are different names for the same technology.

문제 #4

Determine which QoS technology the USG device uses according to the following status information:
[USG_A] display qos policy interface tunnel 1
Interface: GigabitEthernet0/0/1
Direction: Outbound
Policy: dscp
Classifier: default-class
Matched: 0/0
(Packets/Bytes)
Rule(s): if-match any
Behavior: be
-none-
Classifier: server
Matched: 480154/41293244
(Packets/Bytes)
Offered rate: 7244746 bps, drop
rate: 242352 bps
Operator: AND
Rule(s): if-match acl 2001
Behavior: server
Assured Forwarding:
Bandwidth 40000
(Kbps)
Matched:
713659/71365900 (Packets/Bytes)
Enqueued:
36606/3660600 (Packets/Bytes)
Discarded:
677053/67705300 (Packets/Bytes)
Classifier: pc
Matched: 478498/41150828
(Packets/Bytes)
Offered rate: 7344746 bps, drop
rate: 342352
Operator: AND
Rule(s): if-match acl 2002
Assured Forwarding:
Bandwidth 40000 (Kbps)
Matched:
765394/76539400 (Packets/Bytes)
Enqueued:
39235/3923500 (Packets/Bytes)
Discarded:
726159/72615900 (Packets/Bytes)
Classifier: telephone
Matched: 550057/47304902
(Packets/Bytes)
Offered rate: 8244746 bps, drop
rate: 252352 bps
Operator: AND
Rule(s): if-match acl 2003
Behavior: telephone
Expedited Forwarding:
Bandwidth 240000
(Kbps), CBS 600000 (Bytes)
Matched:
765644/76564400 (Packets/Bytes)
Enqueued:
70553/7055300 (Packets/Bytes)
Discarded:
695091/69509100 (Packets/Bytes)

A. WRED
B. CBWFQ
C. GTS
D. CAR

문제 #5

Regarding the Internet access area in the data, the correct planning and deployment suggestions are:

A. Deploy IPS devices in the DMZ area bypass. If the defense function is realized, it is necessary to pass policy routing or static routing in the DMZ area switch to allow data to pass through the IPS devices.
B. DDos cleaning and detection equipment must be placed in the external network interface area to ensure that attack traffic is detected first.
C. FW2 mainly prevents internal illegal traffic from accessing the DMZ service area and illegally accessing the Internet.
D. FW1 is mainly used to prevent external illegal traffic from accessing the DMZ service area and to prevent attack traffic from inside the SSL tunnel.

질문과 대답: