Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Huawei
  5. H12-721

Huawei H12-721 Exam
HCNP-Security-CISN (Huawei Certified Network Professional - Constructing Infrastructure of Security Network) (Page 8 )

Updated On: 9-Feb-2026
Page 8 of 50
PDF with 245 Questions

When an attack occurs, the attacked host (1.1.129.32) was able to capture many packets as shown. Based on the information shown, what kind of attack is this?

  1. Smurf attack
  2. Land Attack
  3. WinNuke
  4. Ping of Death attack

Answer(s): B



Refer to the following NIP firewall intrusion detection actions:

1 records the invasion process, alarm logging
2. NIP attack detection
3 reconfigure the firewall 4 Termination invasion

Which of the following is the correct sequence of events?

  1. 1 -> 2 -> 3 -> 4
  2. 2 -> 1 -> 3 -> 4
  3. 3 -> 1 -> 2 -> 4
  4. 1 -> 2 -> 4 -> 3

Answer(s): B



An administrator views the status information and IPsec Debug information as follows:

What is the most likely reason for failure?

  1. The end ike ike peer strategies and policies do not match
  2. The end ike remote name and peer ike name does not match
  3. The end ipsec proposal and peer ipsec proposal does not match
  4. The end of the Security acl or does not match the peer Security acl

Answer(s): D



PCA has an IP address of 192.168.3.1 in the Trust area. In the Untrust zone users cannot access the Internet server.


Based on the configuration of the Trust and Untrust fields above, what is the most likely cause of the failure?

  1. A misconfigured security policies, the direction should be Outbound.
  2. Since the first rule of the firewall is the default packet-filter deny, the configuration is not implemented.
  3. The policy source of 192.168.3.0 0.0.0.255 is incorrect; you need to modify a policy source 192.168.3.0 0.0.255.255.
  4. The policy destination any is incorrect; you must define a clear destination IP address.

Answer(s): A



Which of the following is a drawback of an L2TP VPN?

  1. It cannot be routed in two layers
  2. You must use L2TP Over IPsec
  3. No authentication
  4. No encryption

Answer(s): D






Post your Comments and Discuss Huawei H12-721 exam prep with other Community members:

Join the H12-721 Discussion