H12-711_V4.0 무료 덤프문제 온라인 액세스

Which of the following statements are correct about SYN flood attack defense technologies on Huawei firewalls?

• A.Interzone security policies can be configured to defend against SYN flood attacks.
• B.SYN cookie technology can be used to defend against SYN flood attacks.
• C.The TCP connection establishment rate can be limited to defend against SYN flood attacks.
• D.The number of half-open TCP connections can be limited to defend against SYN flood attacks.

Which of the following types of packets cannot be filtered by a packet filtering firewall?

• A.Initial fragments
• B.Forged ICMP error packets
• C.Non-initial fragments
• D.Non-fragmented packets

How frequently should antivirus signature databases be updated to ensure the effectiveness of an antivirus program or software?

• A.Every month
• B.Half a month
• C.Every day
• D.Three months

As shown in the figure, nat server global202.106.1.1 inside10.10.1.1 is configured on the firewall. Which of the following is the correct configuration for interzone rules?

• A.rule name c. source-zone untrust. destination-zone trust. destination-address 202.106.1.132, action permit
• B.rule name b, source-zone untrust, destination-zone trust, source-address202.106.l.1 32, action permit
• C.rule name d, source- zone untrust. destination- zone trust. destination- address10.l0.1.1 32, action permit
• D.rule name b, source- zone untrust, destination- zone trust, source- address10.10.1.1 32, action permit

Which type of NAT applies to the scenario where there are a small number of Internet access users and the number of public IP addresses is the same as the number of concurrent Internet access users?

• A.NAT No-PAT
• B.NAPT
• C.3-tuple NAT
• D.Easy IP