HC-711-ENU Online Practice Questions and Answers

Matching advanced ACL, you can dimension source IP address, destination IP address, source MAC address, destination MAC address, protocol traffic to match.

A. True

B. False

LAC is to achieve the established L2TP VPN tunnel by what means? (Choose two) A. User Account

B. Domain name

C. ACL

D. Routing Table

When you configure the security level of firewall security zone, the principles to be followed arE. (Choose three)

A. New security zone,the security level is not set before it,the system requirements of its security level to 100

B. Can set the security level for the custom security zones

C. Once you set the security level is not allowed to change

D. The same system,two security zones do not allow the same level of security configuration

Bidirectional NAT usage scenarios include: (Choose two)

A. Common use of NAT outbound and NAT inbound

B. NAT outbound and common use of NAT server

C. NAT Inbound and NAT Server used together

D. Domain used in conjunction with NAT and NAT Server

USG2000 (Eudemon 200E) series firewall default ACL match type

A. auto

B. config

C. predefine

D. custom

For nat inbound direction, the following statement is correct: (Choose two)

A. Mainly used in internal hosts do not need to know the situation of a public network of

B. Is the source address of the external network user request packet,converted to network addresses

C. Is a network user address into internet addresses

D. In order for the internal private network users can access internet address

VLAN tag information which is contained in the message section?

A. Ethernet packet header

B. IP packet header

C. TCP packet header

D. UDP packet header

Local firewall security zones do not contain any interface. Ping firewall on the firewall when an interface IP address, the packet will be given to those inside the firewall module for processing, not to be forwarded. Because they belong to the same security zone, so no need to configure interzone packet filtering can communicate properly.

A. True

B. False

ARP-REPLY packet sent using the broadcast, the host can receive on the same Layer 2 network, and accordingly to the IP and MAC address learning correspondence.

A. True

B. False

When SVN3000 configuration, VPNDB user information to create a single, you can also create a batch file by importing.

A. True

B. False