To ensure the normal forwarding of large traffic, a network administrator of a company uses two firewalls to implement hot standby. As shown in the following figure, when the configuration is complete, it is found that when A of the two firewalls fails, the data stream being transmitted before the fault has been seriously lost, but the newly transmitted data stream can work normally after the fault. What could be the cause of this phenomenon?

• A.is not configured to adjust the COST value of OSPF according to the HRP status.
• B.The session fast backup function is not configured on the USG. The packets cannot be forwarded normally if the back and forth paths are inconsistent.
• C.does not enable hrp track on the upstream and downstream interfaces of the firewall.
• D.The HRP preemption time configured on the firewall is smaller than the convergence time of OSPF.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the role of Message5 and Message6 with the main mode IKE negotiation process?

• A.negotiate set of proposals
• B.negotiate IPsec SA
• C.Runs the DH algorithm
• D.mutual authentication

Comment: *

Name: *

Email: *

Verification: *

In Client-initial mode, it can be seen from the following debug information that L2TP dial husband is lost. What is most likely cause of failure of dial-up?

• A.username and password aaa configuration inconsistencies.
• B.It is not enabled for l2tp.
• C.tunnel password is not configured.
• D.LNS name configuration error.

Comment: *

Name: *

Email: *

Verification: *

A certain network is as follows: LAN----G0/0/0 USG G0/0/1 ----Server. After the administrator analyzes the Attarcker on the LAN network connected to G0/0/0, if you want to prevent ARP flood attacks, limit the ARP traffic to 100 packets/minute. Which is the correct configuration?

• A.firewall defend arp-flood enable firewall defend arp-flood interface GigabitEthernet 0/0/0 max-rate 100
• B.firewall defend arp-flood enable firewall defend arp-flood interface GigabitEthernet 0/0/0 max-rate 6000
• C.firewall defend arp-flood enable firewall defend arp-flood interface GigabitEthernet 0/0/1 max-rate 100
• D.firewall defend arp-flood enable firewall defend arp-flood interface GigabitEthernet 0/0/1 max-rate 6000

Comment: *

Name: *

Email: *

Verification: *

71. Which option is incorrect about the HTTP Flood defense principle?

• A.HTTP Flood source authentication
• B.load check
• C.fingerprint learning
• D.URI detection of destination IP

Comment: *

Name: *

Email: *

Verification: *