H12-711 Online Practice Questions and Answers

Which of the following algorithms in IPSec encryption algorithm does not belong?

A. DES

B. SHA1

C. 3DES

D. AES

Which of the following key management techniques are often applied to the VPN environment?

A. IKE

B. Authentication

C. IPSec

D. PKI / CA

Firewall configured nat server global 202.106.1.1 inside 10.10.1.1, and now need to filter through the interface technology package allows users of the public network WWW server access is correcT.

A. rule permit TCP source 202.106.1.1 0 source-port 80

B. rule permit TCP source 10.10.1.1 0 source-port 80

C. rule permit TCP destination 202.106.1.1 0 destination-port 80

D. rule permit TCP destination 10.10.1.1 0 destination-port 80

TCP / IP V4 version,there are security risks there?(Choose three)

A. Lack of data origin authentication mechanism

B. Lack of data packet acknowledgment mechanism

C. Lack of data integrity verification mechanism

D. Lack of confidentiality safeguards

After the firewall interface is added to a security zone,the interface will no longer belong to the Local area

A. True

B. False

Which of the following ways L2TP VPN, the tunnel is established between the client and the LNS Client side?

A. Client-Initialized L2TP way

B. NAS-Initialized L2TP way

C. Unsolicited L2TP

D. VPDN

Note that when the Clear to clear ISAKMP SA SA Stage 1,and then remove IPSEC SA Phase 2.

A. True

B. False

Execution acl 3000 match-order auto configured, the data flow will match what way the ACL?

A. Matching automatically sorted according tothe "depth-first" principle to match.

B. Match the order configured.That is according to the order the user to configure the ACL match.

C. Press the automatic sorting match,then match the order configured.

D. The firewall is not configured

Following on TSM deployments statement is correct?(Choose three)

A. Centralized deployment of SM and SCcannotbe installed on the same server

B. SC centralized deployment can be madeinto a cluster approach to achieve system redundancy

C. The size of the terminal is quite large, consider using a distributed network,to avoid a large number of terminal access TSM server,take up a lot of network bandwidth

D. When distributed deployment,TSM security agents to select the nearest control server,access authentication and access control,and other business.

Single TSM server system supports a maximum concurrent users.

A. 5000

B. 10000

C. 20000

D. 40000