QUESTION 1
As shown in the figure, the two firewalls work in active/ standby mode. The HRP status on firewall A is as follows:
HRP_M[FW_A] display hrp state
Role: active, peer: unknown
Running priority: 45000, peer: 45000
Backup channel usage: 0.00%
Stable time: 0 days, 5 hours, 49 minutes
Which of the following is not a possible cause?

A. All service interfaces on firewall B are faulty.
B. The heartbeat link is not added to a security zone.
C. The hot standby function is not enabled on the peer device.
D. No heartbeat interface is specified on the peer device.

Correct Answer: A
QUESTION 2
BFD for OSPF enables OSPF to converge routes more quickly.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 3
Which of the following statements is false about BFD?

A. Detects faults only on bidirectional forwarding paths of direct physical links between network devices.
B. Establishes a session between two devices to monitor bidirectional forwarding paths.
C. Speeds up network convergence with a detection duration of less than 1 second.
D. Minimizes application interruptions to improve network reliability.

Correct Answer: A
QUESTION 4
Which of the following statements are true about an Eth-Trunk interface?

A. The total bandwidth of an Eth-Trunk interface is the sum of bandwidths of its member interfaces.
B. In hot standby networking, an Eth-Trunk interface can be used as a heartbeat interface.
C. An interface can be added to different Eth-Trunk interfaces.
D. An Eth-Trunk interface directs traffic to different links to load balance traffic.

Correct Answer: ABD
QUESTION 5
A virtual system administrator of the firewall can manage only the virtual system on which the administrator is created.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 6
Which of the following statements are true about bandwidth resource classification in a virtual system?

A. Traffic from the public network interface to the private network interface is limited by the inbound bandwidth.
B. The public network interface refers to the interface through which the firewall connects to the Internet.
C. In inter-virtual system forwarding scenarios, the Virtual-if interface is a public interface by default.
D. Traffic from the private network interface to the public network interface is limited by the outbound bandwidth.

Correct Answer: ACD
QUESTION 7
Which of the following statements is false about bandwidth resource allocation?

A. The bandwidth limit on a data flow is related to the inbound or outbound interface of the flow.
B. In inter-virtual system forwarding scenarios, the Virtual-if interface is a public interface by default.
C. The public network interface refers to the interface connected to the Internet.
D. Bandwidth resources are classified into inbound bandwidth, outbound bandwidth, and entire bandwidth.

Correct Answer: C
QUESTION 8
Match the description about virtual systems and VPN instances.

Select and Place:

Correct Answer:

QUESTION 9
A bandwidth profile is used by only one policy. Traffic that matches the policy has exclusive use of bandwidth up to the maximum defined in the bandwidth profile. Which of the following is the reference mode of a bandwidth profile?

A. Dynamic even distribution
B. Exclusive broadband
C. Broadband sharing
D. Bandwidth multiplexing

Correct Answer: B
QUESTION 10
Match the functions of the bandwidth management functions with their definitions.
Select and Place:

Correct Answer:

QUESTION 11
Which of the following resources can be managed in a bandwidth profile?

A. Independently controlled upstream and downstream bandwidths
B. Connection limit
C. Overall guaranteed bandwidth
D. Exclusive policy
Correct Answer: ABCD

QUESTION 12
PBR can interwork with IP-link or BFD to enable the firewall to determine the availability of PBR based on the IP-link or BFD status check result.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 13
Which of the following are included in a sticky session entry?

A. Aging time
B. Port number
C. outbound interface
D. Source IP address

Correct Answer: CD
QUESTION 14
Which of the following statements is false about health check?

A. Health check supports DNs detection protocols.
B. The health check function cannot be used together with PBR.
C. In addition to link connectivity detection, health check can also detect the delay, jitter, and packet loss rate of links in real time.
D. Firewalls can detect network connectivity in real time based on the health check result.

Correct Answer: B
QUESTION 15
The figure shows a single-server smart DNS scenario in ISP egress mode. Sort the descriptions in the correct sequence.

Select and Place:

Correct Answer:

QUESTION 16
IPsec VPN is a Layer 3 VPN and provides encryption protection for the IP network layer.

A. TRUE
B. FALSE
Correct Answer: A
QUESTION 17
Match common IPsec diagnosis commands with their functions.
Select and Place:

Correct Answer:

QUESTION 18
Which of the following is not a feature of AH?

A. Data encryption
B. Integrity check
C. Anti-replay
D. Data origin authentication

Correct Answer: A
QUESTION 19
Packets are encapsulated using GRE over IPsec, and IPsec uses the AH tunnel mode. Which of the following are payload contents of GRE encapsulation?

A. New IP header
B. Original packet header
C. Payload
D. AH header

Correct Answer: BC

QUESTION 20
Which of the following is not a feature of ESP?

A. Data integrity
B. Data availability
C. Data origin authentication
D. Data encryption

Correct Answer: B