H12-222 Dumps

H12-222 Braindumps H12-222 Real Questions H12-222 Practice Test

H12-222 Actual Questions


killexams.com


Huawei


H12-222


HCNP-R&S-IESN (Implementing Enterprise Routing & Switching)


https://killexams.com/pass4sure/exam-detail/H12-222


QUESTION 44

The Huawei abnormal flow cleaning solution must be deployed in an independent testing center.


  1. TRUE

  2. FALSE


Answer: B


QUESTION 45

Regarding IKE DPD, which statement is incorrect?


  1. IKE is used to detect the state of a neighbor

  2. DPD regularly send messages between IKE peers.

  3. When DPD messages are not received within the specified time DPD sends a request to the remote side and waits for response packets.

  4. DPD sends encrypted queries only when the timer expires.


Answer: B


QUESTION 46

Refer to the following hot standby and IP-link linkage networking environment shown below: Which configuration will enable hot standby configuration key linkage?


  1. hrp mirror ip-link 1

  2. hrp track ip-link 1 master

  3. hrp track ip-link 1 slave

  4. ip-link check enable


Answer: B


QUESTION 47

Virtual firewall technology does not include which of the following characteristics?


  1. Provides multi-instance routing, security, multi-instance, multi-instance configuration, NAT multi-instance, VPN multi-instance application flexibility to meet a variety of networking needs.

  2. Each virtual firewalls can support four separate security zones TRUST, UNTRUST, DMZ, etc., flexible interface partitioning and allocation.

  3. It guarantee that every virtual system and a separate firewall instance, and can be safely implement access between each virtual system.

  4. Each virtual system provides independent administrator privileges.


Answer: C


QUESTION 48

Which statement is correct regarding load checks and fingerprint learning with UDP Flood defenses.


  1. UDP packet data segments are exactly the same content that can be used to check the load defense.

  2. Fingerprint learning is dynamically generated by cleaning equipment, the attack packets after learning some salient features of the fingerprint, fingerprint matching packets will be dropped.

  3. Load inspection checks all UDP packets of data.

  4. Load checks need to set the offset number of bytes, fingerprint learning does not need to set the offset number of bytes.

Answer: D


QUESTION 49

When there is a lot BFD sessions in a system, in order to prevent periodic OFD control packets from affecting the normal operation of the system, you can use what mode of BFD?


  1. Synchronous Mode

  2. Detection Mode

  3. Asynchronous Mode

  4. Query Mode


Answer: D


QUESTION 50

Three FTP servers are configured with load balancing on a USG firewall. The address and weights of the three real servers are 10.1.1.3/24 (weight 16), 10.1.1.4/24 (weight 32), 10.1.1.5 / 24 (weight 16), while the virtual server address is 202.152.26.123/24. A host address with the IP address 202.152.26.3/24 initiates access to the FTP server.

On the firewall running the display firewall session table command detection configuration, which of the following situations illustrate the successful implementation of load balancing?


  1. <USG> display firewall session tableCurrent total sessions: 1

    ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.4:21

  2. <USG> display firewall session tableCurrent total sessions: 3 ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21

    [10.1.1.3:21] ftp VPN: public -> public


    202.152.26.3:3327 -> 202.152.26.123:21

    [10.1.1.4:21]

    ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 [10.1.1.5:21]

  3. <USG> display firewall session tableCurrent total sessions: 1

    ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21

  4. <USG> display firewall session tableCurrent total sessions: 3 ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.3:21 ftp VPN: public -

> public 202.152.26.3:3327 -> 10.1.1.4:21 ftp

VPN: public -> public 202.152.26.3:3327 -> 10.1.1.5:21


Answer: B