최신 Huawei Specialist H12-731-CN 무료샘플문제:

1. 关于 SACG 内建 ACL ,以下描述正确的是 ?

A) 由于 SACG 需要使用 ACL3099~3999 来接 TSM 系统下发的规则,所以在配置 TSM 联动之前,需要首先保证这些 ACL 不被其他功能引用。
B) 缺省 ACL 规则组号可以任意指定。
C) 缺省 ACL 规则组号只能是 3099 。
D) 管理员需要自定义 ACL （编号 3100~3999 )规则来控制不同接入用户的权限。

2. 某网络 USG 防火墙的 Trust 区域连接终端主机, Untrust 区域连接安全控制器,如果使安全控制器能够向 USG 下发规则,必领配置下列哪些安全策略 ?

A) security-policy rule name local_to_trust source-zone local destination-zone trust action permit
B) security-policy rule name untrust_to_local source-zone untrust destination-zone local action permit rule name local_to_trust source-zone local destination-zone trust action permit
C) security-policy rule name to_local source-zone untrust trust destination-zone local action permit
D) security-policy rule name untrust_to_local source-zone untrust destination-zone local action permit

3. 防火墙在运行 GRE 时, Tunnel 接口必须配置下面哪 3 个参数 ?

A) Tunnel 的目的 IP 地址
B) Tunnel 的协议号为 GRE
C) key
D) GRE 的校验和使能
E) Tunnel 的源 IP 地址

4. 根据以下状态信息判断, USG 设备使用了哪项 QoS 技术:
[USG_A] display qos policy interface tunnel 1
Interface: GigabitEthernet0/0/1
Direction: Outbound
Policy: dscp
Classifier: default-class
Matched: 0/0
(Packets/Bytes)
Rule(s): if-match any
Behavior: be
-none-
Classifier: server
Matched: 480154/41293244
(Packets/Bytes)
Offered rate: 7244746 bps, drop
rate: 242352 bps
Operator: AND
Rule(s): if-match acl 2001
Behavior: server
Assured Forwarding:
Bandwidth 40000
(Kbps)
Matched:
713659/71365900 (Packets/Bytes)
Enqueued:
36606/3660600 (Packets/Bytes)
Discarded:
677053/67705300 (Packets/Bytes)
Classifier: pc
Matched: 478498/41150828
(Packets/Bytes)
Offered rate: 7344746 bps, drop
rate: 342352
Operator: AND
Rule(s): if-match acl 2002
Assured Forwarding:
Bandwidth 40000 (Kbps)
Matched:
765394/76539400 (Packets/Bytes)
Enqueued:
39235/3923500 (Packets/Bytes)
Discarded:
726159/72615900 (Packets/Bytes)
Classifier: telephone
Matched: 550057/47304902
(Packets/Bytes)
Offered rate: 8244746 bps, drop
rate: 252352 bps
Operator: AND
Rule(s): if-match acl 2003
Behavior: telephone
Expedited Forwarding:
Bandwidth 240000
(Kbps), CBS 600000 (Bytes)
Matched:
765644/76564400 (Packets/Bytes)
Enqueued:
70553/7055300 (Packets/Bytes)
Discarded:
695091/69509100 (Packets/Bytes)

A) CBWFQ
B) WRED
C) GTS
D) CAR

5. 根据以下组网,某客户使用了 BGP 引流策略路由回注的方式,在清洗设备上,以下哪个配置是必须配置的 ?

A) firewall ddos bgp-next-hop 10.1.3.1
B) ip route-static 0.0.0.0 0 10.1.3.1
C) firewall ddos bgp-next-hop fib-filter
D) interface GigabitEthernet2/0/2 anti-ddos flow-statistic enable

질문과 대답: