Free Huawei H12-731-ENU Exam Dumps Questions & Answers

The networking of a network is as follows: PC----ADSL router-----USG-----LAN
The key configurations of the USG are as follows:
l2tp enable
interface Virtual-Template1
ppp authentication-mode pap
ip address 4.1.1.1 255.255.255.0
remote address pool 1
l2tp-group 1
mandatory-Icp
allow 12tp virtual-template 1
#
user-ma page user pc1
password admin@123
aaa
domain default
ip pool 1 4.1.1.1 4.1.1.99
Assuming that other configurations are complete and correct, what is the problem with this configuration in actual work?

• A.  You can dial successfully, and you can also access the intranet server.
• B.  The dial-up is successful, but the intranet server cannot be accessed.
• C.  Failed to dial successfully.
• D.  Disconnect immediately after successful dialing.

IKE V1 - Phase negotiation is unsuccessful, what information needs to be checked, and what may be the reasons?

• A.  Check if the ACL configuration matches.
• B.  Check the IPsec proposal parameter configuration.
• C.  Check whether the physical link is normal.
• D.  View IKE debug information and UDP port 500 packet session statistics.

Which of the following conditions does not trigger re-authentication for the 802.1x process?

• A.  In the post-authentication domain state, the user performs business system authentication.
• B.  In the isolated state, the end user manually repairs it, then clicks logout, and then clicks the authentication operation.
• C.  In the post-authentication domain state, the Agile Controller AGENT periodically checks the security state of the terminal and needs to be isolated.
• D.  In isolation, the end user clicks the repair operation (complete the repair of serious violations).

For the admission control of the existing wired network, the SACG authentication scheme is recommended. What are the advantages?

• A.  Can support all types of terminals.
• B.  No need to change the existing network topology.
• C.  Fault escape can be achieved with proper policy configuration.
• D.  Client installation is not required.

Which of the following is a correct description of the stateful inspection firewall forwarding principle:

• A.  The non-first packet forwarding is based on the session table, which can only be forwarded if it matches the session table.
• B.  Establish a connection for this UDP data stream when processing UDP protocol packets.
• C.  The firewall does not support the stateful inspection mechanism when deployed as a Layer 2 device.
• D.  Session state detection based on TCP connection three-way handshake.
• E.  ICMP packets will not be checked for status.