Free H12-721 Exam Braindumps
HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) Questions 51–55 (page: 12)

Updated On: 10-Feb-2026

Which of the following attack is SYN Flood attack?

  1. An attacker sends a large number of SYN packets, resulting in a large number of not fully established TCP connections, occupying resources.
  2. It refers to the attacker and the attacked object the establishment of a normal full TCP connection, but no follow-up messages.
  3. It refers to the attacker sending a large number of ICMP packets (such as Ping) consuming link bandwidth.
  4. It refers to the attacker sending a large number of UDP packets to the server consuming link bandwidth.

Answer(s): A



In a Link-group with three physical interfaces, when either one of the interfaces fail, which of the following descriptions of what happens is correct? (Choose two answers)

  1. With any interface failure within the group, the system will set the other interface state to Down.
  2. When any interface group fails, the other interface status within the group does not change.
  3. When the group returned to normal with one of the interfaces up, the interface status within the entire group will be re-set to Up.
  4. When the group returns to normal after all the interfaces are up, the interface status within the entire group was re-set to Up.

Answer(s): A,D



Load balancing to ensure that the same user traffic will access the IP address assigned to different servers uses what technology? (Choose three answers)

  1. Virtual Services Technology
  2. Server Health Check
  3. Hot Standby Technology
  4. Flow-based forwarding

Answer(s): A,B,D



USG firewall supports which of the load balancing algorithms? (Choose three answers)

  1. The source address hashing algorithm (srchash)
  2. Polling simple algorithm (roundrobin)
  3. Weighted Round Robin algorithm (weightrr)
  4. ratio (Ratio)

Answer(s): A,B,C



With the Huawei Anti-DDoS equipment first packet discard technology, the defense is constantly changing the source IP address or source port number of attack packets.
Regarding the first packet discard technology, which of the following is not correct?

  1. UDP protocol does not have retransmission mechanism, so you can not use the first packet discard techniques
  2. The first packet discarding used in conjunction with source authentication, prevents false source of attacks.
  3. Based triples (source IP address, source port, and protocol) to match packets and packets by time interval to determine the first packet
  4. The packet transmission interval is less than the lower limit of the first packet detection rate, or the rate is higher than the upper limit of the first packet inspection packets believed to be the first package.

Answer(s): A



Viewing page 12 of 50
Viewing questions 56 - 60 out of 245 questions


Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!