Free Huawei Certified ICT Professional - Constructing Infrastructure of Security Network Practice Questions

A.  

intranet server does not open web service

B.  

virtual gateway policy configuration error

C.  

The connection between the virtual gateway and the intranet server is incorrect.

D.  

Virtual gateway and intranet server are unreachable

A.  

routing mode + switch

B.  

routing mode + router

C.  

exchange mode + switch

D.  

exchange mode + router

A.  

cleaning center

B.  

Testing Center

C.  

Management Center

D.  

Collection Center

A.  

load balancing algorithm is a polling algorithm

B.  

This configuration is a complete load balancing configuration

C.  

determines which server the data stream should flow to based on the weight value. The smaller the weight value, the weaker the processing power of the corresponding real server.

D.  

weight represents the weight of the real server

A.  

user PC and virtual gateway are unreachable

B.  

The IP address of the virtual gateway has been changed.

C.  

uses a shared virtual gateway

D.  

client browser set proxy server

A.  

TRUE

B.  

FALSE

A.  

UDP protocol does not have a retransmission mechanism, so the first packet drop technique cannot be used.

B.  

The first packet is discarded in combination with source authentication to prevent false source attacks.

C.  

matches the packet based on the triplet (source IP address, source port, protocol), and judges the first packet by the interval of the packet.

D.  

The packet sending interval is lower than the first packet detection rate lower limit, or the packet higher than the first packet detection rate upper limit is considered to be the first packet.

A.  

MAC

B.  

Vlan

C.  

interface

D.  

DHCP Server IP

A.  

IKE V2 establishes a pair of IPSec SAs. Normally, an IKE SA and a pair of IPSec SAs can be completed by exchanging 4 messages twice.

B.  

IKE V2 does not have the concept of master mode and barb mode

C.  

To establish a pair of IPSec SAs, only 6 messages need to be exchanged in the IKE V1 master mode.

D.  

When the IPSec SA established by D IKE V2 is greater than one pair, each pair of SAs needs only one additional exchange, that is, two messages can be completed.

A.  

security is high, VPN users access through the firewall authentication and authorization, access after access is to use a separate virtual firewall system to manage users, the resources of different VPN users are completely isolated

B.  

VPN access mode is flexible and reliable. It can support from public network to VPN, and can also support from VPN to VPN.

C.  

is easy to maintain, users can manage the entire firewall (including each virtual firewall) without a system administrator account with super user privileges.

D.  

The access control authority is strict. The firewall can control the access rights of the VPN according to the user name and password. This allows different users such as travel employees and super users (need to access different VPN resources) to have different access rights.