Free H12-711_V3.0 Exam Dumps

Question 31

- (Exam Topic 1)
useiptablesWrite a rule that doesn't allow172.16.0.0/16Which of the following rules is correct?

A. iptables -t fielter -A INPUT -s 172.16.0.0/16 -p all -j DROP
B. iptables -t fielter -P INPUT -s 172.16.0.0/16 -p all -j DROP
C. iptables -t fielter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT
D. iptables -t fielter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

Correct Answer:A

Question 32

- (Exam Topic 3)
The trigger authentication method for firewall access user authentication does not include which of the following? ( )[Multiple choice]*

A. MPLS VPN
B. SSL VPN
C. IPSec VPN
D. L2TP VPN

Correct Answer:A

Question 33

- (Exam Topic 2)
The attacker sends a SYN message with the same source address and destination address, or the source address is the loopback address to the target host (the source port and destination port are the same, causing the attacker to send a SYN-AKY message to its own address) What kind of attack is this behavior black? ()[Multiple choice]*

A. Smurf attack
B. SYN Flood Attack
C. TCP Spoofing Attack
D. Land attack

Correct Answer:D

Question 34

- (Exam Topic 1)
Which of the following options are at risk from traffic-based attacks? (multiple choice)

A. network down
B. Server down
C. data stolen
D. The web page has been tampered with

Correct Answer:AB

Question 35

- (Exam Topic 3)
Regarding the description of the GRE VPN tunnel configuration, which of the following options are correct?

A. The tunnel interface numbers of the devices at both ends must be the same
B. The tunnel address must ensure that the network layer is reachable
C. The tunnel interface must be configured with an IP address
D. The tunnel interface must be added to the security zone

Correct Answer:ABCD

The certification names are the trademarks of their respective owners. testpreplab.com certstest.com