Huawei H12-711_V3.0 Exam Questions
HCIA-Security V3.0 (Page 12 )

Updated On: 17-Feb-2026

Which of the following options are correct regarding configuring firewall security zones? (multiple choice)

  1. The firewall has four security zones by default, and the priority of the four security zones cannot be modified
  2. A firewall can have up to12safe area
  3. Firewall can create two security zones of the same priority
  4. When data flows between different security zones, the security check of the device will be triggered and the corresponding security policy will be implemented

Answer(s): A,D



Digital certificates can be divided into local certificates,CAcertificates, root certificates, self-signed certificates, etc.

  1. True
  2. False

Answer(s): A



About the rootCACertificate, which of the following descriptions is incorrect?

  1. Issuer isCA
  2. The certificate subject name isCA
  3. public key information isCA's public key
  4. signature isCAgenerated by public key encryption

Answer(s): D



Which of the following configurations can achieveNAT ALGFeatures?

  1. nat alg protocol
  2. alg protocol
  3. nat protocol
  4. detect protocol

Answer(s): D



About firewall gateways forHTTPWhich of the following statements is false about the protocol's antivirus response?

  1. When the gateway device blocksHTTPAfter connecting, push to the clientwebpage and generate log
  2. Response methods include announcement and blocking
  3. In alarm mode, the device only generates logs, which is not correct.HTTPThe files transmitted by the protocol are processed and sent out
  4. Blocking means that the device is disconnected from theHTTPserver connection and block file transfer

Answer(s): B






Post your Comments and Discuss Huawei H12-711_V3.0 exam dumps with other Community members:

Join the H12-711_V3.0 Discussion