H12-711 試験問題を無料オンラインアクセス

When the IPSec VPN tunnel mode is deployed, the AH protocol is used for packet encapsulation. In the new IP packet header field, which of the following parameters does not require data integrity check?

• A.Destination IP address
• B.Idetification
• C.Source IP address
• D.TTL

If the administrator uses the default authentication domain to authenticate a user, you only need to enter a user name when the user logs, if administrators use the newly created authentication domain to authenticate the user, the user will need to enter login "username @ Certified domain name"

• A.False
• B.True

Which of the following options are correct about the NAT policy processing flow? (Multiple Choice)

• A.Source NAT policy query is processed after the session is created
• B.The source NAT policy is processed after the security policy is matched.
• C.Server-map is processed before the security policy matches
• D.Server-map is processed after status detection

For the description of ARP spoofing attacks, which the following statements is wrong?

• A.The ARP implementation mechanism only considers the normal interaction of the service and does not verify any abnormal business interactions or malicious behaviors.
• B.ARP static binding is a solution to ARP spoofing attacks. It is mainly applied to scenarios where the network size is small.
• C.When a host sends a normal ARP request, the attacker will respond preemptively, causing the host to establish an incorrect IP and MAC mapping relationship.
• D.ARP spoofing attacks can only be implemented through ARP replies and cannot be implemented through ARP requests.

Some applications, such as Oracle database application, there is no data transfer for a long time, so that firewall session connection is interrupted, thus resulting in service interruption, which of the following technology can solve this problem?

• A.Configure default session aging time
• B.Optimization of packet filtering rules
• C.Turn fragment cache
• D.Configure a long business connection