Free H12-721 Exam Braindumps
HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) Questions 76–80 (page: 17)

Updated On: 10-Feb-2026

A USG firewall can be divided into several virtual firewalls, and allows the root firewall administrator to manage the virtual firewall administrators allowed access to each virtual firewall.

  1. TRUE
  2. FALSE

Answer(s): A



What is the correct order for packet encapsulation with L2TP?

  1. PPP -> UDP -> L2TP -> IPsec
  2. PPP -> L2TP -> UDP -> IPsec
  3. IPsec -> L2TP -> UDP-> PPP
  4. IPsec -> PPP -> L2TP -> UDP

Answer(s): B



USG5000A has an IPSEC connection to USG5000B and the “display ike sa” command was performed on USG5000A:


Based on the output shown, which of the following is correct?

  1. USG5000A Firewall is a secure channel initiator IKE negotiation
  2. USG5000B is the initiator of IKE negotiation of safe passage
  3. The SA has been successfully established between the firewalls
  4. The SA has not been established between the firewalls successfully.

Answer(s): A,C



USG_A and USG_B are in a hot standby configuration as shown below. The current session table show 1, 500+ sessions, and when a switchover occurs there is a period of traffic interruption. You want to ensure a seamless failover.


Which of the following are valid options that could be done to ensure a seamless failover?

  1. Run the “hrp preempt delay 64” command to make the preemption delay time longer.
  2. Check the connectivity between heartbeats.
  3. Configure session fast backup.
  4. Use the “no Hrp enable” command.

Answer(s): A



In the FTP networ diagram shown below, you want to use the external control port of 21000 on the FTP Server, but the FTP clients can not access the FTP Server.

You have ruled packet filtering, the FTP server itself, and USG connectivity issues. What do you think the most likely problem is? (Choose two answers)

  1. No use of port mapping function, the FTP client request to the FTP Server is sent to port 21000 packets as normal packets and it does not recognize these as FTP packets.
  2. The firewall can identify the FTP traffic on port 21 only, and does not recognize port 21000 FTP traffic.
  3. ASPF function is not configured.
  4. The equipment discards all UDP traffic.

Answer(s): A,C



Viewing page 17 of 50
Viewing questions 81 - 85 out of 245 questions


Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!