Free H12-721 Exam Braindumps
HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) Questions 71–75 (page: 16)

Updated On: 10-Feb-2026

An IPsec VPN connection established by two USG firewalls in NAT traversal mode fail to see any information from the “display ike sa” command. Neither session information nor UDP port 500 information is displayed. What are possible reasons for this? (Choose two answers)

  1. public network unreachable.
  2. middle device blocking UDP 500 port.
  3. middle device blocking UDP 4500 port.
  4. middle device blocking ESP packets.

Answer(s): A,B



Which of the following is the role of Message5 and Message6 with the main mode IKE negotiation process?

  1. Runs the DH algorithm
  2. negotiate set of proposals
  3. mutual authentication
  4. negotiate IPsec SA

Answer(s): C



In the firewall DDos attack prevention technology, the Anti-DDoS prevents attacks based on what?

  1. Based on the ability of the application to authenticate the source address of the packet, the application, and the cleaning equipment source by sending probe packets to prevent the attack traffic source.
  2. session-based concurrent connections to the defense, where the new connection or abnormal connections exceeds the threshold levels..
  3. Mainly by fingerprint analysis to study and get traffic capture feature to prevent bots or initiate the attack traffic through a proxy to distinguish normal user access behavior.
  4. By detecting the session using filter scanning packets and special control packets.

Answer(s): B



Which of the following does an IPSec VPN use to encrypt the communication data stream?

  1. Public Key Encryption
  2. Private key encryption
  3. Symmetric key encryption
  4. Pre-shared key encryption

Answer(s): C



In IKE V1 stage 1 pre-shared key with Main Mode exchange process, the SA is established after which messages?

  1. message 1 and message 2
  2. message 3 and message 4
  3. message 5 and message 6
  4. message 7 and message 8

Answer(s): A



Viewing page 16 of 50
Viewing questions 76 - 80 out of 245 questions


Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!