H12-721-ENU 무료 덤프문제 온라인 액세스

Which of the following is incorrect about IPsec?

• A.AH can only verify that data packets cannot be encrypted
• B.AH protocol uses 3DES algorithm for data validation
• C.ESP can support NAT traversal
• D.ESP does not verify IP headers in transmission mode

Which of the following statements is wrong about firewall bandwidth policy?

• A.For maximum bandwidth and the number of connections limit, the sub-policy cannot be greater than the parent policy.
• B.If bandwidth management and source NAT are used at the same time, specify the address after conversion when configuring source address/region matching conditions for the bandwidth policy.
• C.If bandwidth management and source NAT are used at the same time, specify the address before conversion when configuring source address/region matching conditions for bandwidth policy.
• D.In the same set of parent-child policies, the same bandwidth channel cannot be referenced.

After enabled session retention, the traffic is intelligently routed for the first time. After an interface link is selected, the Huawei USG6000 firewall generates a corresponding session retention entry. If new traffic matches the session retention entry, then forward traffic according to the outbound interface recorded in the entry. So that the user's traffic is always forwarded using the same interface link. Which of the following options does not include the parameters recorded in the session retention entry?

• A.Outbound interface
• B.Source address
• C.Destination address
• D.Next hop address

Digital certificates are used for identity authentication in IPSec VPN. If the IKE v1 main mode is used for negotiation, the certificate is verified in messages 5 and 6.

• A.False
• B.True

About server load balancing, there is the following configurations:
[USG] slb
[USG-slb] group 0 test
[USG-slb-group-test] metric weight-srchash
[USG-slb-group-test] rserver 1 rip 10.1.1.3 weight 32
[USG-slb-group-test] rserver 2 rip 10.1.1.4 weight 16
[USG-slb-group-test] rserver 3 rip 10.1.1.5 weight 32
[USG-slb] vserver 1 test
[USG-slb-vserver-1] protocol any
[USG-slb-vserver-1] group test
Which of the following statements are correct? (Multiple choice)

• A.The load balancing algorithm is a simple polling algorithm.
• B.The load balancing algorithm is weighted session maintenance.
• C.This configuration is a complete load balancing configuration.
• D.According to the weight value, it is judged which server the data flow goes to. The smaller the weight value is, the weaker the corresponding real server processing capacity is.