With IP address scanning attack prevention, not only can it be used to prevent the ICMP packet destination address detection, it can also prevent the use of TCP / UDP scanning probe target addresses.
Answer(s): A
The USG limited flow policy configuration is as follows:[USG] car-class class1 type shared[USG-shared-car-class-class1] car 1000[USG-shared-car-class-class1] quit[USG-traffic-policy-interzone-trust-untrust-outbound-shared[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy 1[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy car-class class1[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy source 192.168.1.0.0.0.0.255 [USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] policy destination 192.168.2.0 0.0.0.255[USG-traffic-policy-interzone-trust-untrust-outbound-shared-1] action carBased on this information, which of the following statements is correct?
Answer(s): C
A network is as follows:LAN---------------G0/0/0 USG G0/0/1 Server.After administrators analyze a possible attack on the LAN networking G0/0/0 connection and want to enable ARP Flood attack prevention, restricting ARP traffic to 100 packs / min. What should be configured to enable this?
Answer(s): B
As shown below, the address pool for domain abc is the L2TP VPN user's address pool.Based on the information, which of the following statements is wrong?
After the firewall creates a new security instance, the firewall does not have any security zones assigned to the new instance and the administrator needs to configure them.
Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the H12-721 content, but please register or login to continue.