Weekend Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

H12-721 Exam Dumps - Huawei Certified Network Professional HCNP Questions and Answers

Question # 14

An administrator can view the status of the device components by the following command: The status of the Slot3 board is Abnormal. What are the possible causes of the following faults?

Options:

A.

This slot is not supported in this slot of device A.

B.

interface card is damaged

C.

The pin on the backplane or motherboard is damaged. If the incorrect board is installed, the pin is tilted.

D.

ADSL telephone line failure

Buy Now
Question # 15

An attack source will spoof the server and send a large number of SYN-ACK packets to the attacking target network or server. If the destination port of the packet is the TCP service port of the attacked server, the TCP protocol stack of the server will be abnormal. What is it?

Options:

A.

SYN Flood

B.

SYN-ACK Flood

C.

ACK-Flood

D.

Connection Flood

Buy Now
Question # 16

L2TP is a tunneling protocol set up for transparent transmission of PPP packets between users and enterprise servers. Which of the following features are included?

Options:

A.

L2TP protocol uses the TCP protocol

B.

supports private address allocation and does not occupy public IP addresses.

C.

and PPP configurations support authentication and work with Radius to support flexible local and remote AAA After combining with IPSec,

D.

supports encryption of packets.

Buy Now
Question # 17

Run the display ike sa command to check the IKE SA information. The following statement is correct?

Options:

A.

phase 1 and phase 2 have been established

B.

negotiates through the IKE V2 protocol

C.

VPN instance name is public

D.

IPSec SA status is Ready

Buy Now
Question # 18

The branch firewall of an enterprise is configured with NAT. As shown in the figure, USG_B is the NAT gateway. The USG_B is used to establish an IPSec VPN with the headquarters. Which parts of the USG_B need to be configured?

Options:

A.

Configure the nat policy. The reference rule is to allow the source and destination of the intranet to be all ACLs.

B.

Configure the IKE peer, use the name authentication, and remote-address is the outbound interface address of the headquarters.

C.

Configure the nat policy. The reference rule is to protect the data flow from the enterprise intranet to the headquarters intranet in the first deny ipsec, and then permit the data flow from the intranet to the internet.

D.

Configure an ipsec policy template and reference ike peer

Buy Now
Question # 19

The constraints of the policy in the traffic limiting policy include quintuple, time period, user identity, and application protocol.

Options:

A.

TRUE

B.

FALSE

Buy Now
Question # 20

In the active/standby mode of the USG dual-system hot backup, the service interface works at Layer 3, and the upstream and downstream routers are connected. The administrator checks that the USG_A state has been switched to HRP_M[USG_A] and the USG_B state is also HRP_M[USG_B]. What are the most likely reasons?

Options:

A.

uses the wrong HRP channel interface

B.

Heartbeat connectivity is problematic

C.

does not configure session fast backup

D.

no hrp enable

Buy Now
Question # 21

USG A and USG B are configured with a static BFD session. The following is true about the process of establishing and tearing down a BFD session.

Options:

A.

USG A and USG B each start the BFD state machine. The initial state is Down and the BFD packet is Down. The value of Your Discriminator is 0.

B.

After the local BFD status of B USG B is Init, if you continue to receive packets with the status Down, you can re-process and update its local status.

C.

After receiving the BFD packet in the init state, C USG B switches the local state to Up.

D.

After the state transition of "DOWN-->INIT" occurs on D USG A and USG B, a timeout timer is started. If the BFD packet is in the Init or Up state, the local state is automatically switched back to Down.

Buy Now
Question # 22

Which of the following methods is used to switch between active and standby links in the IPSec backup and backup system?

Options:

A.

hot standby

B.

link-group

C.

Eth-trunk

D.

ip-link

Buy Now
Question # 23

The DHCP snooping function needs to maintain the binding table. What are the contents of the binding table?

Options:

A.

MAC

B.

Vlan

C.

interface

D.

DHCP Server IP

Buy Now
Exam Code: H12-721
Exam Name: HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network)
Last Update: Feb 23, 2025
Questions: 245
H12-721 pdf

H12-721 PDF

$25.5  $84.99
H12-721 Engine

H12-721 Testing Engine

$28.5  $94.99
H12-721 PDF + Engine

H12-721 PDF + Testing Engine

$40.5  $134.99