Free Huawei H12-711 Exam Dumps Questions & Answers

Which of the following statement about the NAT is wrong?

• A.Some application layer protocols carry IP address information in the data, but also modify the IP address information in the data of the upper layer when they are as NAT
• B.NAT technology can effectively hide the hosts of the LAN, it is an effective network security protection technology
• C.For some non-TCP, UDP protocols (such as ICMP, PPTP), unable to do the NAT translation
• D.Address Translation can follow the needs of users, providing FTP, WWW, Telnet and other services outside the LAN

When the user single sign-on is configured, the receiving PC message mode is adopted. The authentication process has the following steps: 1 The visitor PC executes the login script and sends the user login information to the AD monitor. 2 The firewall extracts the correspondence between the user and the IP from the login information. Add to the online user table 3 AD monitor connects to the AD server to query the login user information, and forwards the queried user information to the firewall. 4 The visitor logs in to the AD domain. The AD server returns the login success message to the user and delivers the login script. which of the following order is correct?

• A.1-4-3-2
• B.4-1-3-2
• C.3-2-1-4
• D.1-2-3-4

In the USG series firewall system view, the device configuration will be restored to the default configuration after the reset saved-configuration command is executed. No other operations are required.

• A.False
• B.True

Digital signature is to achieve the integrity of data transmission by using a hash algorithm to generate digital fingerprints.

• A.False
• B.True

Which of the following is not part of the method used in the Detection section of the P2DR model?

• A.Alarm
• B.Real-time monitoring
• C.Shut down the service
• D.Testing