Online Access Free H12-721-ENU Exam Questions

Which of the following statement is correct about VRRP packet?

• A.VRRP packets are unicast packets
• B.VRRP uses UDP packets
• C.The destination address of VRRP packet is 224.0.0.18
• D.VRRP uses TCP packets

The following figure shows the L2TP over IPSec application scenario. The client uses the method of pre-shared-key for IPSec authentication. How to configure the IPSec security policy on the LNS port? (Multiple Choice)

• A.Using IKE v1 main mode for negotiation
• B.Configuring IPSec Security Policy
• C.Configuring IPSec Policy Template
• D.Using IKE v2 for negotiation

Only one health check policy can be applied to an interface, but one health check policy can be applied to multiple interfaces.

• A.False
• B.True

According to the dual-system hot backup networking diagram, which of the following statements is incorrect regarding the dual-system hot backup preemption function?

• A.The preemption function of the VGMP management group is similar to that of the VRRP backup group. When the fault of a backup group in the management group recovers, the priority of the management group is also restored.
• B.The VRRP backup group has its own preemption function. As shown in the figure, after USG_A fails and recovers, USG_A uses the preemption function to revert to the master state.
• C.By default, preemption function is disabled
• D.After the VRRP backup group is added to the VGMP management group, the original preemption function on the backup group will become invalid. The preemption behavior must be determined by the VGMP management group.

After the firewall is configured for dual-system hot backup, on the web configuration page, choose System> High Reliability> Hot Standby, and click Check for the HRP configuration consistency.A pop-up window appears. Which of the following configurations can solve the problem (assuming that the heartbeat interface has been added to the DMZ area)?

• A.security-policy rule name local_dmz source-zone local dmz destination-zone local dmz action permit
• B.security-policy rule name untrust_dmz source-zone untrust dmz destination-zone untrust dmz action permit
• C.security-policy rule name trust_local source-zone trust local destination-zone trust local action permit
• D.security-policy rule name trust_dmz source-zone trust dmz destination-zone trust dmz action permit