Huawei H12-721 Exam
HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) (Page 5 )

Updated On: 9-Feb-2026

A man in the middle attack refers to an intermediate that sees the data exchange between server and client. To the server, all messages appear to be sent to or received from the client; and to the client all the packets appear to have been sent to or received from the server. If a hacker is using the man-in-the-middle attack, the hacker will send at least two data packets as shown to achieve this attack.

Which of the following packet 1 and packet 2 Field Description is correct? (Choose two answers)

  1. Packet 1:
    Source IP 1.1.1.1 Source MAC C-C-C
    The purpose of IP 1.1.1.2 The purpose of Mac B-B-B
  2. Packet 1: Source IP 1.1.1.3
    Source MAC C-C-C
    The purpose of IP 1.1.1.2 The purpose of Mac B-B-B
  3. Packet 2:
    Source IP 1.1.1.2 Source MAC C-C-C
    The purpose of IP 1.1.1.1 The purpose of Mac A-A-A
  4. Packet 2:
    Source IP 1.1.1.3 Source MAC C-C-C
    The purpose of IP 1.1.1.1 The purpose of Mac A-A-A

Answer(s): A,C



In an Eth-Trunk interface, you can achieve load balancing by configuring different weights on each member link.

  1. TRUE
  2. FALSE

Answer(s): A



A SSL VPN login authentication is unsuccessful, and the prompt says "wrong user name or password." What is wrong?

  1. The username and password entered incorrectly.
  2. There is a user or group filter field configuration error.
  3. There is a certificates filter field configuration error.
  4. The administrator needs to configure the source IP address of the terminal restriction policy.

Answer(s): D



SSL works at the application layer and is encrypted for specific applications, while IPsec operates at which layer and provides transparent encryption protection for this level and above?

  1. The data link layer
  2. Network Layer
  3. Transport Layer
  4. Presentation Layer

Answer(s): B



The IP-MAC address binding configuration is as follows:
[USG] firewall mac-binding 202.169.168.1 00e0-fc00-0100

When the data packets travel through the Huawei firewall device, and other strategies such as packet filtering, attack prevention are not considered, the following data ttravels hrough the firewall device? (Choose two answers)

  1. Packet source IP: 202.169.168.1 Packet source MAC: FFFF-FFFF-FFFF
  2. Packet source IP: 202.169.168.2 Packet source MAC: 00e0-fc00-0100
  3. Packet source IP: 202.1.1.1 Packet source MAC: 00e0-fc11-1111
  4. Packet source IP: 202.169.168.1 Packet source MAC: 00e0-fc00-0100

Answer(s): C,D






Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:

Join the H12-721 Discussion