Both AH and ESP protocols of IPSec support NAT traversal

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

The default interval for sending VGMP hello packets is 1 second. That is, when the hello packet sent by the peer is not received within the range of three hello packets, the peer is considered to be faulty. Master status.

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

Policy strategy limiting constraints include quintuple, time, user identity and application protocols.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *

The USG limited flow policy configuration is as follows:
[USG] car-class class1 type shared
[USG-shared-car-class-class1] car 1000
[USG-shared-car-class-class1] quit
[USG-traffic-policy-interzone-trust-untrust-outbound-shared
[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy 1
[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy car-class class1
[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy source
192.168.1.0.0.0.0.255
[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy destination
1 92.168.2.0 0.0.0.255
[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] action car Based on this information, which of the following statements is correct?

• A.Policy1 traffic will match without limiting the direct release
• B.The 192.168.1.0/24 hosts tthat access the data flow will be limited
• C.Class1 limits the definition of the overall car-class, and limits to 1000bps
• D.Matching Policy1 traffic will be flow controlled for each source IP

Comment: *

Name: *

Email: *

Verification: *

What actions will be performed when the firewall hot standby sends the active/standby switchover?

• A.send free ARP
• B.related switch automatically updates the MAC table
• C.VRRP backup group virtual address is unavailable
• D.Send proxy ARP

Comment: *

Name: *

Email: *

Verification: *