Huawei H12-731-ENU Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Perimeter Security Technologies | - Firewall technologies and deployment - VPN technologies (IPSec / SSL VPN) |
| Network Defense and Intrusion Prevention | - IDS/IPS systems - Anti-DDoS technologies |
| Secure Network Access Control | - AAA and RADIUS systems - 802.1X authentication |
| Network Security Fundamentals | - Security principles and models - Common attack types and defense mechanisms |
| Security Operations and Maintenance | - Security monitoring and incident response - Security policies and logs |
Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) Sample Questions:
Question #1
Which of the following functions are functions of SSL VPN?
A. port forwarding
B. Web Proxy
C. port mapping
D. network extension
E. file proxy
Question #2
When the IPsec negotiation fails, turn on the debug switch of IKE, and the following information is displayed: got NOTIFY of type INVALID_ID_INFORMATION or drop message from ABCD due to notification type INVALID_ID_INFORMATION, what does it mean?
A. IKE proposals at both ends do not match
B. LOCAL-ID-TYPE at both ends are inconsistent
C. ACL configurations on both ends do not match
D. IPsec proposals at both ends do not match
Question #3
Which of the following functional blocks can be used in conjunction with the IP-Link function?
A. VRRP
B. Routing Policy
C. OSPF
D. DHCP
Question #4
The following HWTACACS configuration has been made on the firewall:
<sysname> system-view
[sysname] hwtacacs-server template server1
[sysname-hwtacacs-server1] hwtacacs-server authentication 3.3.3.3 10000
[sysname-hwtacacs-server1] hwtacacs-server accounting 3.3.3.3 10010
Please point out the problem in this configuration:
A. Authentication and accounting servers should not use the same IP address.
B. The authorization server is not configured.
C. The port number used by the configured authentication server is incorrect.
D. The port number used to configure the accounting server is incorrect.
Question #5
As shown in the figure, the routing example between the virtual firewall vpn1 and the root firewall needs to be configured.
Which of the following is correct:
A. [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 public [USG] ip route-static 10.1.1.0 255.255.255.0 vpn-instance vpn1 10.1.2.2.2 [USG] ip route-static 202.168 .10.0 255.255.255.0 250.168.20.3
B. [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 202.168.20.3 vpn-instance vpn1 [USG] ip route-static 10.1.1.0 255.255.255.0 vpn-instance vpn1 10.1.2.2.2
C. [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 202.168.20.3 public [USG] ip route-static 10.1.1.0 255.255.255.0 10.1.2.2.2
D. [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 202.168.20.3 [USG] ip route-static 10.1.1.0 255.255.255.0 vpn-instance vpn1 10.1.2.2.2
Solutions:
| Question #1 Correct Answer: A,B,D | Question #2 Correct Answer: C | Question #3 Correct Answer: A,D | Question #4 Correct Answer: B | Question #5 Correct Answer: A |
1061 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
