Practice H12-721 Exam Online

Question 1

An enterprise branch firewall is configured for NAT. As shown in the figure, USG_B is the

NAT gateway. In order to extablish an IPSec VPN to USG_B, you need to configure what

on USG_B? (Choose two answers)

A :

Configure a NAT Policy, citing the rule to allow the network segment’s source and

destination IP addresses for the ACL.

B :

Configuration the IKE peer, use name authentication, and remote-address of the

interface address on USG_A.

C :

Configure a NAT Policy, where there is first a deny IPsec rule within the enterprise

network to protect the data flow from within the headquarters of the network, and then

permit the enterprise network to the Internet network data stream.

D : Configure a IPSec policy template, citing the IKE peer.

Answer: B,C

Question 2

Three FTP servers are configured with load balancing on a USG firewall. The address and

weights of the three real servers are 10.1.1.3/24 (weight 16), 10.1.1.4/24 (weight 32),

10.1.1.5 / 24 (weight 16), while the virtual server address is 202.152.26.123/24. A host

address with the IP address 202.152.26.3/24 initiates access to the FTP server.

On the firewall running the display firewall session table command detection configuration,

which of the following situations illustrate the successful implementation of load balancing?

A :

<USG> display firewall session table

Current total sessions: 1

ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.4:21

B :

<USG> display firewall session table

Current total sessions: 3

ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 [10.1.1.3:21]

ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 [10.1.1.4:21]

ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21 [10.1.1.5:21]

C :

<USG> display firewall session table

Current total sessions: 1

ftp VPN: public -> public 202.152.26.3:3327 -> 202.152.26.123:21

D :

<USG> display firewall session table

Current total sessions: 3

ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.3:21

ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.4:21

ftp VPN: public -> public 202.152.26.3:3327 -> 10.1.1.5:21

Answer: B

Question 3

An SSL VPN user authenticates, has enabled network expansion on the PC, and has been

assigned an IP addresses. However, the user can not access resources within theintermal

network server. Which of the following are possible reasons for this? (Choose three)

A : Configuration error in the "Routing Client mode" configuration.

B : User access is limited

C : The network server is unreachable.

D : The PC's physical interface and assigned VPN addresses overlap.

Answer: A,B,C

Question 4

What do we want to achieve with Virtual firewalls on a single physical firewall device where

we create virtual multiple logical firewalls and multiple instances? (Choose three answers)

A : Security multiple instances

B : VPN multi-instance

C : configure multiple instances

D : exchange multiple instances

Answer: A,B,C

Question 5

In Client-initial mode, it can be seen from the following debug information that L2TP dial

husband is lost. What is most likely cause of failure of dial-up?

A : username and password aaa configuration inconsistencies.

B : LNS name configuration error.

C : tunnel password is not configured.

D : It is not enabled for l2tp.

Answer: A

Name:	HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network)
Exam Code:	H12-721
Certification:	HCNP
Vendor:	Huawei
Total Questions:	246
Last Updated:	Apr 22, 2024

Huawei H12-721