H12-721 試験問題を無料オンラインアクセス

If the firewall works at Layer 2 and is directly connected to the intranet or connected through a Layer 2 switch, which of the following cannot be used as a matching condition for the policy route?

• A.MAC address
• B.IP address
• C.Inbound interface
• D.DSCP priority

Which of the following information is involved in the process of the first stage main mode negotiation in IKE v1 negotiation? (Multiple Choice)

• A.IKE proposal set
• B.DH key exchanges public information
• C.IPSec proposal set
• D.Both parties' identity information

Intelligent route selection based on link quality load sharing can dynamically adjust traffic allocation according to the real-time transmission quality of each link.
Which of the following options can't be used as a measure of link quality?

• A.Delay
• B.Packet loss rate
• C.Delay jitter
• D.Bandwidth

The following figure shows the L2TP over IPSec application scenario. Which of the following is correct about the configuration of the IPSec protection data flow?

• A.[LNS] acl number 3001 [LNS-acl-adv-3001] rule permit tcp source-port 1701
• B.[LNS] acl number 3001 [LNS-acl-adv-3001] rule permit source 10.10.1.0 0.0.0.255 destination 10.10.2.0 0.0.0.255
• C.[LNS] acl number 3001 [LNS-acl-adv-3001] rule permit udp source-port eq 1701
• D.[LNS] acl number 2001 [LNS-acl-basic-2001] rule permit udp source 10.10.1.0 0.0.0.255

Which of the following options are correct regarding server load balancing technology?

• A.After configuring the service health check function, you need to configure the security policy between the FW and the real zone where the real server resides. Allow the probe packets to pass; otherwise, the health check fails.
• B.After configuring the server load balancing function, configure the IP address of the virtual server when configuring the interzone security policy. When configuring routes, configure the IP address of the real server.
• C.The real server IP address can be the same as the virtual firewall IP address.
• D.IP address of the real server can't be the same as the IP address of the virtual firewall.