Which of the following statements is correct about the function of lateral movement in network penetration?

Which of the following is a private IP address?

Which of the following statements is correct about the characteristics of a DDoS attack?

Network penetration simulates hackers’ intrusion behaviors and thought patterns to perform non-destructive security tests on customer systems. Which of the following is the correct sequence of the network penetration process?

Which of the following statements is incorrect about TTL in IP packets?

In tunnel mode of IPsec, to authenticate a new IP header, which of the following IPsec protocols needs to be used?

Which of the following attacks is not a network-layer attack?

Which of the following statements is correct about a firewall’s interzone security policies?

Which of the following statements is incorrect about the RADIUS protocol?

Hot Standby Redundancy Protocol (HRP) is used to synchronize data such as the key configurations and connection status of the active firewall to the standby firewall. Which of the following data is beyond the synchronization scope?

Which of the following messages can provide error information and IP packet processing information for source ends?

If packet loss occurs when hosts A and B communicate with each other through TCP, how does TCP ensure reliability?

Which one of the following parts is not included in a digital certificate?

When an administrator wants to configure a USG series firewall through the console port, which of the following configurations should be made in the putty?

On a USG firewall, which of the following commands is used to view current session entries?

Which of the following values is the default security level of the Trust zone on a Huawei USG firewall?

Which of the following statements is correct about firewall security zones?

Which of the following steps is optional for configuring intrusion prevention?

Which of the following values is the default port number of the SSH protocol?

The digital certificate technology addresses the problem from the digital signature technology that the owner of a public key cannot be determined. Which of the following are types of digital certificates?

Which of the following ports are used as the default authentication and accounting ports of the RADIUS protocol?

If the administrator has configured the Telnet service on the firewall but a user still cannot access the firewall remotely, which of the following are possible causes of the access failure?

Select all that apply: Which of the following methods can be used to implement the SSL VPN web proxy?

Select all that apply: Which of the following are components of a PKI system?

Select all that apply: Which of the following security functions can be provided by the AH protocol in IPsec?

Select all that apply: Which of the following algorithms are symmetric encryption algorithms?

Select all that apply: Which of the following are common network topologies?

Select all that apply: Which of the following statements are correct about the decapsulation of data packets in the TCP/IP protocol stack?

Select all that apply: Which of the following VPNs are suitable for employees on business trips to access the enterprise intranet from the public network?

Select all that apply: Which of the following principles must be adhered to when you configure the security levels of the firewall security zones?

Select all that apply: Users are network access subjects and basic units for network behavior control and network permission assignment by firewalls. Which of the following are involved in the user organizational structure?

Select all that apply: Which of the following TCP ports are used by the FTP service by default?

Select all that apply: Which of the following backup modes are supported by the HRP mechanism?

Which of the following can be used to implement AAA on Huawei devices?

Which of the following VPNs are Layer 3 VPNs?

Which of the following protocol technologies are used when firewalls are deployed in hot standby mode?

Which of the following authentication modes are available for Internet access users?

Which of the following parameters comprise an IPsec SA?

A session-based stateful inspection firewall processes the first packet and subsequent packets differently. Which of the following statements are correct?

The web redirection password authentication function of a USG firewall enables a user to access services without being proactively authenticated, and the device pushes the authentication page to the user.

In an IP sweep attack, an attacker sends ICMP packets to probe the IP address of the target network and obtain the topology of the target network and active devices.

When a USG firewall serves as an out-of-path detection device, you need to configure the detection interface as a Layer 3 interface.

The intrusion prevention function of the firewall detects and terminates intrusions (such as buffer overflow attacks, Trojan horses, and worms) in real time to protect enterprises' information systems and network architectures.

During the ARP process, ARP reply packets are sent in broadcast mode. All hosts on the same Layer 2 network can receive these packets and learn the mapping between IP and MAC addresses.

When the stateful inspection function is disabled, the firewall creates a session for subsequent packets.

If the IKE negotiation mode of the IPsec VPN is the main mode, the ID type must be an IP address.

True or False: With a large number of network users, large enterprises usually use a hierarchical structure to support network expansion and growing number of users.

True or False: The heartbeat link is a channel through which two firewalls exchange messages to learn about each other’s status and back up configuration commands and entries. The MGMT interface can be used as the heartbeat interface.

True or False: SSL is a security protocol that provides secure connections for TCP-based application layer protocols like HTTP.

True or False: FTP is used for long-distance file transfer between two hosts and can ensure the reliability and confidentiality of data transmission.

True or False: Huawei Redundancy Protocol (HRP) is used to synchronize information such as key configurations, connection status, routing tables, and interface addresses between the active and standby firewalls.

True or False: On the CLI, users can view the running status and statistics in the user view, but not in the system view.

True or False: After receiving a packet, the LNS checks whether the TCP destination port number is 1701. If so, the LNS sends the packet to the L2TP processing module for further processing. If not, the LNS processes the packet as a normal IP packet.

True or False: A USG firewall is usually deployed between the external network and the network to be protected. It generates threat logs when detecting viruses, intrusions, botnets, Trojan horses, or worms.

True or False: A network device searches the routing table according to the destination IP address field in the IP packet header, and then forwards the data based on the search result.

True or False: IKEv1 negotiation phase 1 aims to establish an IKE SA, and supports two negotiation modes: main mode and aggressive mode.

True or False: The persistent connection function of the firewall allows you to set a long aging time for specific TCP and UDP data flows, ensuring that the session information does not age out for a long time.

True or False: NAT in Easy IP mode translates only private IP addresses. It cannot translate port numbers.

True or False: Proactive preemption is a process in which the active firewall takes over services when it recovers from a fault. Proactive preemption is enabled by default.