Pre-Winter Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Passed Exam Today H12-821_V1.0

Page: 7 / 30
Total 394 questions

HCIP-Datacom-Core Technology V1.0 Questions and Answers

Question 25

The main objective of security policies is to reduce the intrusion success rate and detect attackers. To ensure that detection and prevention are performed throughout the attack lifecycle, a series of plans need to be made. Which of the following statements is false about security policy planning?

Options:

A.

If possible, do not reference the content security profile in all security policy rules whose action is permit, so as to facilitate quick check.

B.

Files with unknown threats can be sent to the sandbox for inspection. The firewall periodically reads the inspection result from the sandbox and blocks subsequent traffic based on the inspection result.

C.

To further reduce the attack surface, enable URL filtering and file blocking on the basis of the security policy that permits an application, so as to prevent users from accessing high-risk websites and downloading high-risk files.

D.

Before setting security policies, the administrator must fully understand the applications, users, and contents on the network. This is necessary for properly setting security policies so that the firewall can check the corresponding user traffic.

Question 26

On an IP network, both PBR and routing policies are commonly used for routing and traffic control, but they are different from each other. Match PBR and routing policy with their functions.(Token is reusable)

Options:

Question 27

GRE is a VPN technology that can implement packet transmission over heterogeneous networks. Which of the following statements are true about GRE?

Options:

A.

GRE is a Layer 2 VPN encapsulation technology.

B.

GRE enables encapsulated data packets to be transmitted over another network layer protocol, but cannot encapsulate multicast data.

C.

GRE tunnels can work with IPsec to ensure the security of multicast services such as voice and video.

D.

GRE tunnels can extend the working range of network protocols with hop limits.

Question 28

As shown in the figure, R1 imports the direct route 10.1.1.0/24 to OSPF. An engineer enables bidirectional route re-advertisement on R2 and R3.

After the network becomes stable, which of the following is the Pre (preference) value of the route 10.1.1.0/24 in the routing table of R3?

Options:

A.

0

B.

10

C.

150

D.

15

Page: 7 / 30
Total 394 questions