The main method of caching servers DNS Request Flood defense is the use of DNS source authentication.

Answer(s): A

Refer to the following diagram in regards to Bypass mode.

Which of the following statements is correct a few? (Choose two answers)

When the interface is operating in a non-Bypass state, the flow from the inflow of USG Router_A interfaces from GE0, GE1 after USG treatment from the interface flow Router_B.
When the Interface works in Bypass state, traffic flow from the interface by the Router_A GE0 USG, USG without any treatment, flows directly Router_B flows from the GE1 interfaces.
When there are firewall requirements to achieve security policies, while working at the interface Bypass state to operate without interruption. Therefore, the device can be maintained in the
Bypass state job.
Power Bypass interface can work in bridge mode, and can work with the bypass circuit.

Answer(s): A,B

With the Huawei abnormal flow cleaning solution, deployed at the scene of a bypass, drainage schemes can be used to have? (Choose three answers)

Answer(s): A,B,C

Regarding IKE main mode and aggressive modes, which of the following statements is correct?

In savage mode with the the first phase of negotiation, all packets are encrypted
All main mode packts under the first phase of negotiation are encrypted
The DH algorithm is used in aggressive mode
Whether the negotiation is successful or not, IKE will enter into fast mode

Answer(s): C

Free H12-721 Exam Braindumps (page: 2)

Pass your HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) exam with these free Actual Questions and Answers