H12-721 試験問題を無料オンラインアクセス

When the administrator assigns interface G1/0/0 to virtual system vsysa, it finds that the allocation fails. Which of the following reason is impossible?

• A.The interface is not in the UP state.
• B.This interface is a Layer 2 interface and cannot be directly assigned to a virtual system.
• C.The interface has been added to the security zone of other virtual systems.
• D.The G1/0/0 port has been allocated to other virtual systems.

If the IP address of one of the parties establishing the IPSec VPN tunnel is not fixed, which of the following configuration methods cannot be applied in this scenario?

• A.Name authentication in aggressive mode
• B.Specify the peer address when configuring IKE
• C.Pre-share key authentication in aggressive mode
• D.Strategy template

To prevent link overload and link congestion, the administrator can set an overload protection threshold on the interface. When the bandwidth usage of a link reaches the threshold, the traffic of the established session is still forwarded from the link, but the traffic of the newly established session is no longer forwarded through this link.

• A.True
• B.False

Which of the following statements is correct for virtual service technology?

• A.For multiple real servers, real servers must be in the same network segment and the same security zone
• B.For multiple real servers, real servers may not be in the same security zone but must be on the same network segment
• C.For multiple real servers, real servers may not be in the same network segment but must be in the same security zone
• D.For multiple real servers, the network segment where the real server is located and the security zone do not affect the load balancing function.

Below for USG dual-system hot backup typical application scenario. USG_A is the master device. USG_B is the standby device. The VRRP backup group and heartbeat interfaces have been configured. GE2/0/0 and GE 2/0/1 on firewall A joined the link-group 1.

Which of the following statement is correct? (Multiple Choice)

• A.When GE2/0/1 of firewall A experiences a physical line fault, the link status of GE2/0/0 on USG_A is down and the physical interface indicator is on.
• B.If GE2/0/2 is also added to link-group 1, when GE2/0/1 of firewall A experiences a physical line fault, the backup of the active and standby device information will be interrupted.
• C.After the fault is restored, when the firewall detects that both GE2/0/0 and GE2/0/1 are in the Up state, the USG_A state is switched to master.
• D.After GE 2/0/1 failure is restored, USG_A functions as a standby device of USG_B.