SSH is a secure protocol that establishes tunnels for users on insecure networks. Which of the following statements is false about SSH login?
Answer(s): A
By default, the port number of the SSH server is 23. This statement is false. The default port for SSH is 22, not 23. Port 23 is the default port for Telnet, not SSH. It is correct to change the port number to a non-well- known port to reduce vulnerability to scanning and attacks, but the default for SSH is always port 22.
DRAG DROP (Drag and Drop is not supported)CPU attack defense uses a multi-level security mechanism to implement hierarchical device protection. Match the following levels with the corresponding protection functions.Select and Place:
Level 1:The device rate-limits all the packets sent to the CPU and randomly discards excess packets to ensure CPU security.Level 2:The device uses a blacklist to filter out unauthorized packets sent to the CPU.Level 3:The device schedules packets sent to the CPU based on the protocol priority to ensure that packets with higher protocol priorities are preferentially processed.Level 4:The device rate-limits the packets sent to the CPU based on the protocol type to prevent excess packets of a protocol from being sent to the CPU.
Security policy is the core feature of firewalls. Only valid traffic that complies with security policies can be forwarded by firewalls. Which of the following statements are true about security policy matching rules? (Choose all that apply.)
Answer(s): A,B,D
The system has a default security policy named default, where all matching conditions are any and the default action is permit.Many firewalls have a default security policy that allows all traffic unless specifically denied, with conditions being broad (any) and the action being permit.When multiple security policy rules are configured, they are sorted in a list by configuration sequence by default. A security policy rule configured earlier is placed higher in the list and has a higher priority.Firewall policies are generally processed top-down, with the first matching rule taking precedence.Multiple values can be configured for a single matching condition, and the values are logically ANDed.In some firewalls, when multiple values are provided for a condition (e.g., multiple source IPs), they are logically ANDed, meaning all conditions must match.
Which of the following statements are false about VRRP timers? (Choose all that apply.)
Answer(s): A,C
By default, the VRRP preemption delay is 1s.default, the VRRP preemption delay is 0 seconds, meaning preemption can occur immediately when a higher- priority router comes online.Master_Down = (3 x Adverjnterval) + Skew_TimeThe correct formula for the Master Down timer is (3 × Advertisement Interval) + Skew_Time. The formula in the question contains a typo (Adverjnterval instead of Advertisement Interval).
Which of the following statements is false about BFD?
Answer(s): C
The asynchronous mode is the primary BFD operating mode.The primary operating mode of BFD (Bidirectional Forwarding Detection) is synchronous mode, where both systems actively exchange BFD Control packets. Asynchronous mode is an alternative but not the primary mode.
The BFD Echo function checks the connectivity of the forwarding link by looping back packets. Which of the following statements are true about this function? (Choose all that apply.)
In the BFD Echo function, the device uses the IP address of the outbound interface as the source IP address by default.When using the BFD Echo function, the device typically uses the IP address of the outbound interface as the source IP address for the Echo packets.When configuring a BFD session supporting the BFD echo function, you need to configure both the local and remote discriminators.To configure a BFD session with the Echo function, both the local and remote discriminators must be specified to properly track and identify the BFD session on both ends.If URPF is enabled on the peer end, BFD packets may be incorrectly discarded on the peer end.If Unicast Reverse Path Forwarding (URPF) is enabled on the peer device, it may incorrectly discard BFD Echo packets if the source of the packet does not match the expected return path, causing potential connectivity issues.
DRAG DROP (Drag and Drop is not supported)In VRRP networking, devices assume the Master and Backup roles after election. Match the two roles with their working mechanisms. (Token is reusable)Select and Place:
Master:Periodically send VRRP Advertisement packets.The Master router periodically sends VRRP Advertisement packets to inform the Backup routers of its status.Backup:Respond to an ARP request destined for a virtual IP address with an ARP reply carrying the virtual MAC address.The Backup router responds to ARP requests for the virtual IP address by providing the virtual MAC address.Master:Transition from Master to Backup immediately if a VRRP Advertisement packet with a higher priority is received.The Master router will transition to Backup if it receives an Advertisement packet from a router with a higher priority.Backup:Discard IP packets destined for the virtual IP address.The Backup router does not forward packets destined for the virtual IP address; it only takes over the forwarding role if the Master router fails.
During routine maintenance, an enterprise administrator runs a command to check VRRP group information. Which of the following statements is false about the command output?
This VRRP group is an mVRRP group.The command output does not indicate that this is an mVRRP (multi-VRRP) group. The output only shows information for Virtual Router 1, which is a standard VRRP group. mVRRP groups are used when multiple virtual routers are configured, which is not specified in the output.
Post your Comments and Discuss Huawei H12-821_V1.0 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the H12-821_V1.0 content, but please register or login to continue.