H12-721 Online Practice Questions and Answers

When using optical Bypass Interface, Bypass link has two operating modes, automatic mode and forced mode.

A. TRUE

B. FALSE

With the Huawei abnormal flow cleaning solution, deployed at the scene of a bypass, dynamic routing drainage occurs without human intervention. When an abnormality is detected, the management center will generate a draining task automatically, and the task is done directly after the drainage cleaning equipment is issued if testing equipment.

A. TRUE

B. FALSE

From the branch offices, servers are accessed from the Headquarters via IPsec VPN. An IPSEC tunnel can be established at this time, but communication to the servers fails. What are the possible reasons? (Choose three answers)

A. Packet fragmentation, the fragmented packets are discarded on the link.

B. Presence opf dual-link load balancing, where the path back and forth may be inconsistent.

C. Route flapping.

D. Both ends of the DPD detection parameters are inconsistent.

Dual hot standby, when the client does not receive packets sent by slave, after how many HRP HELLO packets, HRP would think that peer has failed or is dead.

A. 1

B. 2

C. 3

D. 5

About VRRP packets, which of the following statements is correct? (Choose two answers)

A. VRRP packets using TCP

B. VRRP packets using UDP

C. VRRP packet destination address is 224.0.0.18

D. VRRP packet TTL value is 255

An IPsec VPN connection established by two USG firewalls in NAT traversal mode fail to see any information from the "display ike sa" command. Neither session information nor UDP port 500 information is displayed. What are possible reasons for this? (Choose two answers)

A. public network unreachable.

B. middle device blocking UDP 500 port.

C. middle device blocking UDP 4500 port.

D. middle device blocking ESP packets.

When using Radius server to authenticate users, (topology diagram shown below) we not only need to ensure that the user name and password for the account exists on the Radius server, a firewall must be configured on a user name and password.

A. TRUE

B. FALSE

According to the victim host capture shown in Figure, What type of attack is this?

A. ARP Flood attack

B. HTTP Flood Attack

C. ARP spoofing attack

D. SYN Flood attack

A network is shown below.

A dial customer cannot establish a connection via a VPN client PC and USG (LNS) l2tp vpn. What are valid reasons for this failure? (Choose three answers)

A. LNS tunnel tunnel name change is inconsistent with the client name.

B. L2TP tunnel authentication failed.

C. PPP authentication fails, PPP authentication mode set on the client PC and LNS inconsistent.

D. Client PC can not obtain an IP address assigned to it from the LNS.

As shown below, the address pool for domain abc is the L2TP VPN user's address pool.

Based on the information, which of the following statements is wrong?

A. L2TP users can authenticate the domain account.

B. If the value of Used-addr-number field is less than the value of the Pool-length field, the on-line domain does not exceed the maximum number of user access number.

C. From a corporate LAN a PC can obtain an IP address, but not dial L2TP VPN users.

D. The address pool address range is from 100.0.0.2 to 100.0.0.99.