support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Huawei
  4. H12-721

Free H12-721 Exam Braindumps
HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) Questions 86–90 (page: 19)

Updated On: 10-Feb-2026
Page 19 of 50
PDF with 245 Questions

In a Dual hot standby SSL VPN scenario as shown, the network administrator has enabled SSL extensions. Which of the following information about the configuration of SSL VPN functionality is correct?

  1. When you create a virtual gateway the Master will not be synchronized to the Slave.
  2. When configuring the network extension, the address pool with binds to the VRRP backup group number 2.
  3. USG_ A virtual SSL VPN gateway must use IP address 202.38.10.2
  4. USG_B virtual SSL VPN gateway must use IP address 10.100.10.2

Answer(s): B



IPSec with AH and ESP support NAT traversal.

  1. TRUE
  2. FALSE

Answer(s): B



The three abnormal flow cleaning solution include? (Choose three answers)

  1. Cleaning Center
  2. Testing Center
  3. Management Center
  4. Acquisition Center

Answer(s): A,B,C



Shown below is an IPSec standby scenario, with main link A and backup link B. Assuming that on link B the next-hop IP address is 10.10.1.2 and 10.10.1.3, and we want to ensure that the primary and redundant backup link via IP-Link is configured.


Which of the following is the correct cstatic routeonfiguration from the headquarters to the branch office?

  1. [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.2
    [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.3
  2. [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.2 ip-link 1
    [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.3 ip-link 2
  3. [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.2 track ip-link 1
    [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.3 preference 70 track ip-link 2
  4. [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.2 preference 70 track ip-link 1 [USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.3 track ip-link 2

Answer(s): C



An enterprise branch firewall is configured for NAT. As shown in the figure, USG_B is the NAT gateway. In order to establish an IPSec VPN to USG_B, you need to configure what on USG_B? (Choose two answers)

  1. Configure a NAT Policy, citing the rule to allow the network segment’s source and destination IP addresses for the ACL.
  2. Configuration the IKE peer, use name authentication, and remote-address of the interface address on USG_A.
  3. Configure a NAT Policy, where there is first a deny IPsec rule within the enterprise network to protect the data flow from within the headquarters of the network, and then permit the enterprise network to the Internet network data stream.
  4. Configure a IPSec policy template, citing the IKE peer.

Answer(s): B,C



  PDF
Viewing page 19 of 50
Viewing questions 91 - 95 out of 245 questions


Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!