We're so confident of our products that we provide no hassle product exchange.
Huawei H12-731-ENU Exam Overview:
| Certification Vendor: | Huawei |
|---|---|
| Exam Name: | HCIE-Security Written Exam |
| Exam Number: | H12-731-ENU |
| Exam Format: | Multiple response, Multiple choice |
| Available Languages: | English |
| Related Certifications: | Huawei Certified Network Professional (HCNP) Security Huawei Certified Network Associate (HCNA) Security |
| Recommended Training: | Huawei HCIE-Security Training Resources |
| Exam Registration: | Huawei Talent Online Certification Platform |
| Sample Questions: | Huawei H12-731-ENU Sample Questions |
| Exam Way: | Computer-based testing at authorized Huawei testing centers or online proctored exam (varies by region) |
| Pre Condition: | It is recommended to have prior knowledge equivalent to HCNP Security or equivalent networking/security experience. |
| Official Syllabus URL: | https://e.huawei.com/en/talent/ |
Huawei H12-731-ENU Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Perimeter Security Technologies | - Firewall technologies and deployment - VPN technologies (IPSec / SSL VPN) |
| Network Defense and Intrusion Prevention | - Anti-DDoS technologies - IDS/IPS systems |
| Secure Network Access Control | - AAA and RADIUS systems - 802.1X authentication |
| Network Security Fundamentals | - Security principles and models - Common attack types and defense mechanisms |
| Security Operations and Maintenance | - Security policies and logs - Security monitoring and incident response |
Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) Sample Questions:
The correct description of the no-reverse parameter in the firewall NAT Server configuration command is:
- A. Configure nat server without the no-reverse parameter. When a public network user accesses the server, the firewall can convert the server's public network address into a private network address; when the server actively accesses the public network, the firewall can also convert the server's public network address. The private network address is converted into a public network address.
- B. Configure the nat server with the parameter no-reverse. When the public network user accesses the server, the firewall can convert the server's public network address into a private network address; when the server actively accesses the public network, the firewall can also convert the server's public network address. Convert the private network address to the public network address.
- C. Configure the nat server without the no-reverse parameter, the device only converts the public network address to the private network address, and cannot convert the private network address to the public network address.
- D. Configure the nat server with the parameter no-reverse, the device only converts the public network address to the private network address, and cannot convert the private network address to the public network address.
Correct Answer: A,D π³οΈ
In the scenario of dual-system hot backup, what is wrong about the description of the main firewall device and the standby device?
- A. By default, the configuration of the active device will be backed up to the standby device immediately.
- B. Configure the master device to define HRP_A, configure the slave device to define HRP_S, and it does not change with the priority.
- C. When the dual-system hot backup works in the active/standby state, the command prompt of the active device displays HRPA, and the command prompt of the standby device displays HRP_S.
- D. Only the master device can perform command configuration, and the standby device command cannot be configured.
Correct Answer: B,D π³οΈ
There are hundreds of people in a medium-sized enterprise network accessing the Internet through the company's firewall, and the company has deployed a corporate portal website in the firewall DMZ. Which of the following criteria should be followed as an IT security professional for purchasing and deploying Internet access auditing products.
- A. ISO27002
- B. Order No. 82 of the Ministry of Public Security
- C. State Office issued No. 28
- D. NIST800-53
Correct Answer: B π³οΈ
A customer network topology is shown in the figure.
An LZTP tunnel is established between the PC and the FW, with the PC as the client and the FW as the LNS side. After the administrator completes the configuration, it is found that the L2TP tunnel cannot be established successfully.
Execute the command debug l2tp packet in the user view to enable the debug switch, and see the following debug information:
USG %%01L2TP/8/L2TDBG (d): L2TP::Check SCCRQ MSG Type 1
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Protocol version: 100
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Framing capability: 1
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Bearer capability, value: 0
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Firmware revision, value: 1200
USG %%01L2TP/8/L2TDBG (d): L2TP::Parse AVP Host name, value: maple-54b160e59
USG %%01L2TP/8/L2TDBG (d): L2TP::requested Host isn't in the define l2tp group, refuse the requested
USG %%01L2TP/8/L2TDBG (d): L2TP::Clear Calls On Tunnel ID=1 Reason=1
Based on the above information, which failure analysis option is correct?
- A. The Virtual Template interface is not added to the security domain
- B. LNS remote tunnel name configuration is incorrect
- C. Client LNS IP address configuration error
- D. L2TP Group tunnel authentication failed
Correct Answer: B π³οΈ
In the networking shown in the figure, the traffic from the PC to access the Web Server must go through the firewall, and the traffic from the Web Server to the PC must go through the firewall.
With intra-domain bidirectional NAT properly configured on the firewall, the following descriptions of packet IP addresses may be correct:
- A. The source IP address of the data packet received by the PC from the web server is 10.1.1.2.
- B. The source IP address of the data packet received by the web server for PC access to its web service is 10.1.1.5.
- C. The source IP address of the data packet received by the factory PC from the web server is the IP address of the interface (2).
- D. The source IP address of the data packet received by the web server for accessing its web service from the PC is the IP address of the interface (1).
Correct Answer: C,D π³οΈ
Viewing page 1 out of 41 pages.
Viewing questions 1-5 out of 205 questions.
By Valerie
