Weekend Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

H12-721 Exam Dumps - Huawei Certified Network Professional HCNP Questions and Answers

Question # 4

Load balancing implements the function of distributing user traffic accessing the same IP address to different servers. What are the main technologies used?

Options:

A.

virtual service technology

B.

server health test

C.

dual hot standby technology

D.

stream-based forwarding

Buy Now
Question # 5

An intranet has made a network, the old equipment is offline, the new network equipment is brought online, and after the service test, it is found that most of the original service traffic cannot work normally. What is the quickest way to restore the business?

Options:

A.

layering method

B.

segmentation method

C.

replacement method

D.

block method

Buy Now
Question # 6

Comparing URPF strict mode and loose mode, which of the following statements is incorrect?

Options:

A.

strict mode requires not only the corresponding entry in the forwarding table, but also the interface must match to pass the URPF check.

B.

If the source address of the packet does not exist in the FIB table of the USG, and the default route is configured, the packet will be forwarded through the URPF check.

URPF strict mode is recommended in a

C.

route symmetric environment.

D.

Loose mode does not check whether the interface matches. As long as the source address of the packet exists in the FIB table of the USG, the packet can pass.

Buy Now
Question # 7

Which attack method is CC attack?

Options:

A.

denial of service attack

B.

scan snooping attack

C.

malformed packet attack

D.

System-based vulnerability attacks

Buy Now
Question # 8

About load balancing, the following configuration is available: [USG] slb enable [USG]slb [USG-slb] rserver 1 rip 10.1.1.3 weight 32 [USG-slb] rserver 2 rip 10.1.1.4 weight 16 [USG-slb] rserver 3 rip 10.1.1.5 weight 32 [USG-slb] group test [USG-slb-group-test]metric srchash [USG-slb-group-test] add rserver 1 [USG-slb-group-test] add rserver 2 [ USG-slb-group-test] add rserver 3 Which of the following statements is correct?

Options:

A.

load balancing algorithm is a polling algorithm

B.

This configuration is a complete load balancing configuration

C.

determines which server the data stream should flow to based on the weight value. The smaller the weight value, the weaker the processing power of the corresponding real server.

D.

weight represents the weight of the real server

Buy Now
Question # 9

A user wants to limit the maximum bandwidth of the 192.168.1.0/24 network segment to 500M, and limit all IP addresses in the network segment to maintain a bandwidth of 1M. How should I configure a current limiting policy for this requirement?

Options:

A.

Configure per-IP traffic limiting. The maximum bandwidth of the host on the 192.168.1.0/24 network segment is 500M.

B.

Configure overall traffic limiting. The maximum bandwidth of the host on the network segment 192.168.1.0/24 is 1M.

C.

Configure the overall traffic limiting. The maximum bandwidth of the host on the 192.168.1.0/24 network segment is 500M.

D.

Configure the overall traffic limiting. The maximum bandwidth of the host on the network segment 192.168.1.0/24 is 500M. Then use the per-IP traffic limiting to ensure that the server bandwidth is 1M.

Buy Now
Question # 10

In the IPSec VPN, the digital certificate is used for identity authentication. If the IKE main mode is used for negotiation, the certificate verification is completed in message 5 and message 6.

Options:

A.

TRUE

B.

FALSE

Buy Now
Question # 11

The preemption function of the VGMP management group is enabled by default, and the delay time is 60s.

Options:

A.

TRUE

B.

FALSE

Buy Now
Question # 12

The dual-system hot backup load balancing service interface works at Layer 3, and the upstream and downstream routers are connected to each other. The two USG devices are active and standby. Therefore, both the hrp track master and the hrp track slave must be configured on the morning service interface.

Options:

A.

TRUE

B.

FALSE

Buy Now
Question # 13

Which of the following attacks is a SYN Flood attack?

Options:

A.

attacker sends a large number of SYN packets, which causes a large number of incomplete TCP connections to occupy the resources of the attacker.

B.

means that the attacker and the attacked object normally establish a TCP full connection, but there is no subsequent message.

C.

means that the attacker sends a large number of ICMP packets, such as ping, to the attacker.

D.

means that the attacker occupies the link bandwidth of the server by sending a large number of UDP packets to the attacker.

Buy Now
Exam Code: H12-721
Exam Name: HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network)
Last Update: Feb 22, 2025
Questions: 245
H12-721 pdf

H12-721 PDF

$25.5  $84.99
H12-721 Engine

H12-721 Testing Engine

$28.5  $94.99
H12-721 PDF + Engine

H12-721 PDF + Testing Engine

$40.5  $134.99