Free Huawei H12-721 Exam Dumps Questions & Answers

About the description of the process of network expansion, which statement is wrong?

• A.  After the network extension function is triggered, an SSL VPN tunnel needs to be established first between the remote user and the virtual gateway.
• B.  The remote user's local PC automatically generates a virtual network adapter. The virtual gateway randomly selects an IP address from the address pool and assigns it to the remote user's virtual network adapter.
• C.  After the remote user virtual network adapter obtained the private IP address, it need to manually configure the route to the intranet server so that the internal network resources can be accessed normally.
• D.  The remote user sends a business request packet to the Server on the intranet. The packet arrives to the virtual gateway through the SSL VPN tunnel.

Below for USG dual-system hot backup typical application scenario. USG_A is the master device. USG_B is the standby device. The VRRP backup group and heartbeat interfaces have been configured. GE2/0/0 and GE 2/0/1 on firewall A joined the link-group 1.

Which of the following statement is correct? (Multiple Choice)

• A.  After the fault is restored, when the firewall detects that both GE2/0/0 and GE2/0/1 are in the Up state, the USG_A state is switched to master.
• B.  When GE2/0/1 of firewall A experiences a physical line fault, the link status of GE2/0/0 on USG_A is down and the physical interface indicator is on.
• C.  After GE 2/0/1 failure is restored, USG_A functions as a standby device of USG_B.
• D.  If GE2/0/2 is also added to link-group 1, when GE2/0/1 of firewall A experiences a physical line fault, the backup of the active and standby device information will be interrupted.

As shown in the figure, BFD is bound to a static route. The administrator configures firewall A as follows:
[USG6000_A] bfd
[USG6000_A-bfd] quit
[USG6000_A] bfd as bind peer-ip 1.1.1.2
[USG6000_A-bfd-session-aa] discriminator local 10
[USG6000_A-bfd-session-aa] discriminator remote 20
[USG6000_A-bfd-session-aa] commit
[USG6000_A-bfd-session-aa] quit
Which of the following statements is correct for this configuration? (Multiple Choices)

• A.  In this command, [USG6000_A] bfd is incorrectly configured. Change it to [USG6000_A] bfd enable to enable BFD function.
• B.  The command to bind the BFD session to the static route is also required on the firewall: [USG6000_A] ip route-static 0.0.0.0 0 1.1.1.2 track bfd-session aa
• C.  Use the command of "bfd as bind peer-ip 1.1.1.2" to create a BFD session binding policy for detecting the link status.
• D.  [USG6000_A-bfd-session-aa] commit is optional. If you do not configure, the system default submits configuration and generates BFD session log information but does not create a session table.

Regarding L2TP over IPSec VPN, which of the following statements is correct? (Multiple Choices)

• A.  L2TP packets trigger IPSec SAs
• B.  L2TP tunnel is established first
• C.  IPSec packets trigger the L2TP tunnel
• D.  IPSec tunnel is established first

Web Link has high security and applicability due to encryption and adaptation.

• A.  False
• B.  True