QUESTION 41
A basic ACL rule is configured as follows:
#
rule permit source 1.1.1.0 0.0.0.255 #
Given this, which of the following statements is correct?

A. Packets with source address 1.1.1.1 and destination address 2.2.2.2 are discarded
B. Packets with source address 1.1.200.200 and destination address 2.2.2.2 are allowed to pass through
C. Packets with source address 1.1.1.200 and destination address 2.2.2.2 are allowed to pass through
D. Packets with source address 1.1.1.10 and destination address 2.2.2.2 are discarded

Correct Answer: B
QUESTION 42
What is the security level of the DMZ on a Huawei firewall?

A. 50
B. 85
C. 70
D. 15

Correct Answer: A
QUESTION 43
The following figure shows the firewall session authentication process. Sort the following access processes.

Select and Place:

Correct Answer:

QUESTION 44
Which of the following are intrusion behaviors?

A. Viewing private data
B. Cracking the system password
C. Data corruption
D. Web page tampering

Correct Answer: ABCD
QUESTION 45
Which of the following statements are correct about manual batch backup in hot standby of firewall?

A. Manual batch backup is enabled by default.
B. Each time the manual batch backup command is executed, the active device immediately synchronizes the configuration commands and status information to the standby device.
C. Manual batch backup is triggered when the hrp sync config command is executed on either firewall in hot standby networking.
D. In manual batch backup mode, the active device periodically backs up status information that can be backed up to the standby device.

Correct Answer: ABCD
QUESTION 46
Which of the following statements is incorrect about IPsec VPN?

A. IPSec VPN supports identity authentication at both ends of communication.
B. It can encrypt the communication data that needs to be encrypted on the intranet at both ends of a tunnel.
C. In the Client-Site scenario, the client does not need to be installed on the PC.
D. It supports multiple symmetric encryption methods used separately or in combination, providing powerful data encryption functions.

Correct Answer: C
QUESTION 47
Which of the following digital certificate formats are supported by Huawei devices?

A. DER
B. TXT
C. PEM
D. PKCS#12

Correct Answer: ACD
QUESTION 48
A PKI manages the entire lifecycle of digital certificates, including applying for, issuing, and using digital certificates. During the lifecycle, PKI uses the symmetric key encryption, public key encryption,                           ,and digital signature. (Enter lowercase letters.)

Correct Answer: digital envelope
QUESTION 49
Which of the following is an advantage of public key encryption?

A. The encrypted packet is short.
B. The algorithm is very simple.
C. The private key cannot be derived from the public key.
D. It takes a short time to encrypt a large amount of data.

Correct Answer: C

QUESTION 50
The PKI encryption technology ensures the privacy of data transmitted on the network and prevents data from being tampered with or snooped.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 51
Which of the following statements is Incorrect about L2TP?

A. L2TP VPN is tunneling technology used to transmit PPP packets.
B. L2TP VPN can provide remote access services for employees on business trips, regardless of whether they access the Internet through traditional dial-up or Ethernet.
C. L2TP VPN is mainly used in remote office scenarios to provide remote intranet resource access for employees on business trips.
D. PPP packets can be directly transmitted on the Internet.

Correct Answer: D
QUESTION 52
Asymmetric encryption algorithms are more secure than symmetric encryption algorithms.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 53
In its simplest form, a certificate contains a public key, name, and                           of a CA. (Enter lowercase letters.)
Correct Answer: digital signature
QUESTION 54
Arrange the following processes in the correct order based on the PKI lifecycle.
Select and Place:

Correct Answer:

QUESTION 55
Match the following concepts with their implementation process.
Select and Place:

Correct Answer:

QUESTION 56
Digital signature technology is used in digital certificates.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 57
Which of the following is not an asymmetric encryption algorithm?

A. DSA
B. DH
C. RSA
D. DES

Correct Answer: D

QUESTION 58
Hash algorithms are designed to be collision resistant. That is, the output hash values of different input data cannot be the same.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 59
A message indicating an invalid user name or password is displayed when a user logs in to an SSL VPN gateway. Which of the following are possible causes of this fault?

A. The account is locked out after incorrect passwords are entered multiple consecutive times.
B. The authentication mode is incorrect.
C. The user name or password is incorrect.
D. The authentication server configuration is incorrect.

Correct Answer: ABCD
QUESTION 60
SSL is a security protocol. It provides secure connections for TCP-based application layer protocols.

A. TRUE
B. FALSE

Correct Answer: A