IPSec NAT traversal does not support IKE main mode, aggressive mode IP address + pre-shared key mode authentication, because pre-shared key mode authentication needs to extract the source IP address in the IP address to find the pre-shared key corresponding to this address. . The address change caused by the presence of NAT prevents the device from finding the pre-shared key.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the limiting elements of bandwidth management? (Multiple choices)

• A.Bandwidth
• B.1M protocol data flow restrictions
• C.P2P protocol data flow restrictions
• D.Connections

Comment: *

Name: *

Email: *

Verification: *

The ACK flood attack uses a botnet to send a large number of ACK packets, which impacts the network bandwidth and causes network link congestion. If the number of attack packets is large, the server processing performance is exhausted, thus rejecting normal services. Under the Huawei Anti-DDoS device to prevent this attack, compare the two processing methods - strict mode and basic mode, what is correct?

• A.bypass deployment dynamic drainage using strict mode
• B.In strict mode, the cleaning device does not check the established session, that is, the ACK packet does not hit the session, and the device discards the packet directly.
• C.If the cleaning device checks that the ACK packet hits the session, the session creation reason will be checked regardless of the strict mode or the basic mode.
• D.adopts "basic mode". Even if the session is not detected on the cleaning device, the device discards several ACK packets and starts session checking.

Comment: *

Name: *

Email: *

Verification: *

In the overall flow of bandwidth management, traffic first matches the bandwidth policy, and after the bandwidth policy shunting, it enters the corresponding bandwidth channel for processing.
Which of the following are the processing flow of bandwidth channel? (Multiple Choice)

• A.Limit the number of connections for the business.
• B.Drop traffic that exceeds the predefined maximum bandwidth.
• C.Drop traffic that exceeds the predefined interface bandwidth
• D.Mark the priority of traffic as the basis for subsequent queue scheduling

Comment: *

Name: *

Email: *

Verification: *

For a virtual service technology, which of the following statements is correct?

• A.For multiple real servers, network and security zone where the real server load balancing does not affect
• B.For multiple real servers, real servers may not be in the same segment, but must be in the same security zone
• C.For multiple real servers, real servers may not be in the same security zone, but must be in the same segment
• D.For multiple real servers, real servers need to be in the same network and the same security zone

Comment: *

Name: *

Email: *

Verification: *