support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Huawei
  4. H12-721

Free H12-721 Exam Braindumps
HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) Questions 121–125 (page: 26)

Updated On: 10-Feb-2026
Page 26 of 50
PDF with 245 Questions

Which statement is correct regarding the IP address scanning attack prevention principle? (Choose three answers)

  1. IP address scanning attack attacker attacks using ICMP packets (such as Ping and Tracert command) to detect the target address.
  2. In an IP address scanning attack, the attacker attacks using TCP / UDP packets to detect the target address.
  3. In an IP address scanning attack, prevention is done by detecting the address of a host of behavioral scanning rate, if the rate exceeds the threshold value, and add it to the blacklist.
  4. If the USG open blacklist function, and the associated IP address scanning attack prevention, a source when the scan rate exceeds the set value elaborated beyond the threshold will be discarded packets within the follow-up time for this issue as long as the source is less than threshold can also be forwarded.

Answer(s): A,B,C



On the IP-MAC address binding, when both IP and MAC packets that match, it will go to the next processing firewall whereas the packet is discarded if IP and MAC does not match.

  1. TRUE
  2. FALSE

Answer(s): B



Certain users want to limit the maximum bandwidth for network 192.168.1.0/24 500M, and limit the need for all IP addresses network segment to get 1M bandwidth.
How should you configure limiting policy to meet this demand?

  1. Configure limiting each IP, set for 192.168.1.0 /24 the maximum bandwidth of network hosts to 500M
  2. Configure the overall limit, limit the maximum bandwidth of the network 192.168.1.0/24 to 1M
  3. Configure overall limiting, limiting the maximum bandwidth of the network 192.168.1.0/24 to 500M
  4. By limiting the overall configuration, the maximum limit 192.168.1.0/24 network bandwidth to 500M, and then limiting the use of IP to ensure that each server bandwidth is 1M

Answer(s): D



Which of the following are malformed packet attacks? (Choose two answers)

  1. Smurf attack
  2. Fraggle attack
  3. Large ICMP packet attack
  4. Router IP packet attacks recorded items

Answer(s): A,B



After BFD session is established, control packets are sent periodically to each other. If a system does not receive the packet sent by peer within the detection time, it is assumed that the BFD session is down.
Which Mode is this one?

  1. Synchronous Mode
  2. Detection Mode
  3. Asynchronous Mode
  4. Query Mode

Answer(s): C



  PDF
Viewing page 26 of 50
Viewing questions 126 - 130 out of 245 questions


Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!