Try and practice the latest Huawei : H12-731-ENU real questions & answers

Huawei H12-731-ENU Exam Overview:

Huawei H12-731-ENU Exam Syllabus Topics:

Huawei HCIE-Security (Huawei Certified Internetwork Expert-Security) Sample Questions:

1. When the IPsec negotiation fails, turn on the debug switch of IKE, and the following information is displayed: got NOTIFY of type INVALID_ID_INFORMATION or drop message from ABCD due to notification type INVALID_ID_INFORMATION, what does it mean?

A) ACL configurations on both ends do not match
B) LOCAL-ID-TYPE at both ends are inconsistent
C) IKE proposals at both ends do not match
D) IPsec proposals at both ends do not match

2. The firewall single sign-on authentication process as shown in the figure includes the following main links:
a. Find user group information on AD server
b. The device has created an online user list, and the user directly accesses external resources
c. Send information such as username and group to the device
d. User requests authentication
e. Actively send a message to the AD monitoring service (username, user IP address)
f . Server authentication passed
Please select the correct correspondence between letters and numbers ?

A) ① -> d ② -> e ③ -> d ④ -> f ⑤ -> C ⑥ -> b
B) ① -> d ② -> f ③ -> d ④ -> e ⑤ -> C ⑥ -> b
C) ① -> d ② -> f ③ -> e ④ -> d ⑤ -> C ⑥ -> b
D) ① -> d ② -> e ③ -> f ④ -> a ⑤ -> C ⑥ -> b

3. A company has the following requirements:
The intranet users in the Trust area are on the 192.160.1.0/24 network segment and can access the Internet.
Which of the following configurations are correct:
traffic-policy
profile trust_tountrust
bandwidth downstream
maximum-bandwidth 400000
bandwidth downstream
guaranteed-bandwidth 50000
bandwidth ip-car downstream
maximum-bandwidth per-ip 2000
rule name trust_to_untrust
source-zone trust
destination-zone untrust
source-address 192.160.1.0 24
action qos profile
trust_to_untrust
#

A) This configuration will enable Trust intranet users to actively access the Internet outside the Internet and limit the total maximum download bandwidth to 400M.
B) This configuration will achieve an overall upload bandwidth of 50M for intranet 192.168.1.0/24 users.
C) This configuration will implement speed limit for Internet addresses to actively access the intranet segment.
D) This configuration will implement the download traffic in the direction from Trust to Untrust, and the maximum bandwidth per IP is 2M.

4. In the dual-system hot-standby network, the management group status on the two USGs is Active. What is the possible reason?

A) Backup channel interface not configured
B) Fast session backup not set
C) The physical line of the heartbeat has failed
D) set a long preemption delay

5. As shown in the figure, the routing example between the virtual firewall vpn1 and the root firewall needs to be configured.
Which of the following is correct:

A) [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 202.168.20.3 vpn-instance vpn1 [USG] ip route-static 10.1.1.0 255.255.255.0 vpn-instance vpn1 10.1.2.2.2
B) [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 public [USG] ip route-static 10.1.1.0 255.255.255.0 vpn-instance vpn1 10.1.2.2.2 [USG] ip route-static 202.168 .10.0 255.255.255.0 250.168.20.3
C) [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 202.168.20.3 [USG] ip route-static 10.1.1.0 255.255.255.0 vpn-instance vpn1 10.1.2.2.2
D) [USG-vpn1] ip route-static 202.168.10.0 255.255.255.0 202.168.20.3 public [USG] ip route-static 10.1.1.0 255.255.255.0 10.1.2.2.2

Solutions: