H12-711_V4.0

H12-711_V4.0 practice questions, page 7 of 11, with answer review and explanations.

Question 31

Which of the following statements is correct about the heartbeat link and heartbeat interface of a firewall?

  1. The management interface (Meth0/0/0) cannot be used as a heartbeat interface.
  2. The heartbeat interfaces of two firewalls can be added to different security zones.
  3. An interface configured with the vrrp virtual-mac enable command can be used as a heartbeat interface.
  4. An interface whose MTU value is less than 1500 can be used as a heartbeat interface.

Question 32

Which of the following is not the matching mode of the firewall security protection whitelist rules?

  1. Prefix matching
  2. Suffix matching
  3. Keyword matching
  4. Fuzzy matching

Question 33

Which of the following statements is incorrect about PKI?

  1. PKI enables users to verify the validity of access devices, ensuring that users connect to secure and legitimate networks.
  2. PKI ensures that data is accessible only to authorized devices and users, protecting data privacy.
  3. PKI protects data against tampering and eavesdropping, ensuring the privacy of data transmitted on the network.
  4. PKI prevents attacks initiated by malicious users resending obtained packets.

Question 34

Which of the following statements is incorrect about L2TP over IPsec?

  1. L2TP is used for dial-up and obtaining private IP addresses on a headquarters network. However, L2TP lacks sufficient security. In this case, IPsec can ensure communication security.
  2. An L2TP over IPsec tunnel only transmits traffic from users to intranet servers and does not affect Internet access of users.
  3. L2TP over IPsec applies to scenarios where branch networks access VPNs through LAC dial-up for secure access.
  4. L2TP over IPsec packets are encapsulated using IPsec and then transmitted using L2TP.

Question 35

Huawei devices save certificates in PKCS#12 format and must contain private keys.

  1. TRUE
  2. FALSE