H12-711_V4.0 HCIA-Security V4.0 Questions and Answers

Risk identification

Impact assessment

Incident handling priority

Business priorities

rule name c. source-zone untrust. destination-zone trust. destination-address 202.106.1.132, action permit

rule name d, source- zone untrust. destination- zone trust. destination- address10.l0.1.1 32, action permit

rule name b, source- zone untrust, destination- zone trust, source- address10.10.1.1 32, action permit

rule name b, source-zone untrust, destination-zone trust, source-address202.106.l.1 32, action permit

Port When a packet matches multiple entries in the routing table, it is forwarded based on the route entry with the largest metric.

Port In the global routing table, there is at most one next hop to the same destination CIDR block.

There may be multiple next hops in the global routing table to the same destination.

Port When a packet matches multiple entries in the routing table, it is forwarded according to the longest mask.

manual and IKE.

IPSec SA is uniquely identified by a triple.

IPSec SA is a one-way logical connection, usually established in pairs (Inbound and Outbound).

Security Alliance SA is a communication peer agreement for certain elements that describes how peers can communicate securely using secure services such as encryption.

The port IPS can be concatenated at the network boundary.

The IPS cannot prevent intrusion from occurring in real time.

The port IPS can be attached to the switch and port mirrored through the switch.

Oral IPS has the ability to customize intrusion prevention rules.

10

20

5

15

The3

The4

The2

The1

TRUE

FALSE

The 3000~3999

The 4000~4999

The 1000~1999

@2000~2999