2022 New Training Course H12-711_V3.0 Tutorial Preparation Guide [Q146-Q162]

Q146. After the company ‘ s network administrator has configured the dual-system hot backup, he wants to check the status of the current VGMP group, so he typed in the command to display the following information
HRP_M<FW_A>__
Role: active, peer: active
Running priority: 45000, peer: 45000
Backup channel usage: 30X
Stable time: 1 days, 13 hours, 35 minutes
Last state change information: 2020-03-2216:01:56 HRP core state changed, old_state = normal ( active ) , new_state=normal ( active ) .1ocalpriority F 4
peer_priority = 45000.
Configuration:
hello interval: 1000ms
preempt: 60s
mirror configuration: off
mirror session: on
track trunk member: on
auto-sync configuration: on
auto-sync connection-status: on
adjust ospf cost: on
adjust ospfv3-cost: on
adjust bgp-cost: on
nat resource: off
Detail information:
Gigabit Ethernet 0/0/1: up
Gigabit Ethernet 0/0/3: up
ospf-cost: +0
Then the command he typed in the blank is________.

Q147. Regarding the problem that users with two-way binding in authentication-free mode cannot access network resources, which of the following options are possible reasons? (Multiple choices)

Q148. In the VGMP group state, if the device’s own VGMP group priority is equal to the peer device’s VGMP group priority, the device’s VGMP group state is ( ). (answer in letters) (fill in the blank)

Q149. We should choose the encryption algorithm according to our own characteristics. When we need to encrypt a large amount of data, it is recommended to use the _____ encryption algorithm to improve the speed of encryption and decryption.

Q150. The interface on the firewall cannot forward traffic until it is added ( ). (fill in the blank)

Q151. Regarding the firewall security strategy, which of the following is wrong?

Q152. The world’s first worm virus-“Morris worm” makes people realize that as people’s dependence on computers increases, the possibility of computer networks being attacked is increasing, and it is necessary to establish a complete emergency response system.

Q153. When configuring the security policy on the firewall, the optional content security options are ( ). (fill in the blank)

Q154. In the construction of information security system, it is necessary to accurately describe the relationship between important aspects of security and system behavior through security models.

Q155. existUSGIn the series firewall system view, execute the commandreset saved-configurationAfter that, the device configuration will be restored to the default configuration, and it will take effect without any other operations.

Q156. Regarding the description of the operating system, which of the following is wrong?

Q157. Which of the following sequence for incident response management is correct?
1 Detection 2 Report 3 Mitigation 4 Summarize experience 5 Repair 6 Recovery 7 Response

Q158. IPSec VPNAn asymmetric encryption algorithm is used to encrypt the transmitted data

Q159. Digital signature is to generate digital fingerprint by using hash algorithm, so as to ensure the integrity of data transmission

Q160. Which of the following does not belong toUSGUser authentication method in firewall?

Q161. which of the followingIPSec VPNnecessary configuration? (multiple choice)

Q162. IPSec VPN technology does not support NAT crossing when using the ESP security protocol package, because ESP encrypts the header of the packet.