Free HC-711 Exam Braindumps
HCNA Huawei Certified Network Associate - Constructing Basic Security Network (HCNA-CBSN) Questions 178–182 (page: 17)

Updated On: 10-Feb-2026

About the VLAN tag processing, the following description of the error is?

  1. When Trunk port receives a frame, if the frame does not contain 802.1Q tag header, will be marked with PVID port; If the frame contains the 802.1Q tag header, no change.
  2. When Trunk port to send the frame, when the port's PVID VLAN ID of the frame is not the same, discarded; When PVID VLAN ID and port with the same time frame, the pass-through
  3. When Access port receives a frame, if the frame does not contain 802.1Q tag header, will be marked with PVID port; If the frame contains the 802.1Q tag header, the switch does not deal with them directly discarded.
  4. When Access port to send frames, stripping 802.1Q tag header, frame issued ordinary Ethernet frames

Answer(s): B



About domain NAT statement is correct (
Note: the internal network IP address is a private address, the IP address of the network boundary public address) (Choose two)

  1. First NAT within the user's source IP address of the request packet into the network server IP address
  2. Will request packets based on source and destination IP address conversion
  3. The request packet destination IP address into the IP address of the network server
  4. After the data within the network server will receive a packet processing, packet destination IP address back to convert that into a public IP address (the IP address of the network boundary)

Answer(s): B,C



Hardware packet filtering ACL number ranges?

  1. 2000-2999
  2. 3000-3999
  3. 4000-4999
  4. 9000-9499

Answer(s): D



Proxy firewall to check request from the user, the user checks the security policy through the firewall on behalf of external users to establish a connection to the real server, forwarding an external user request, and returns a response back to the real server to the external user.

  1. True
  2. False

Answer(s): A



GRE VPN itself does not have to provide data integrity verification and confidentiality of transmission capacity.

  1. True
  2. False

Answer(s): A



Viewing page 17 of 64
Viewing questions 81 - 85 out of 415 questions


Post your Comments and Discuss Huawei HC-711 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!