Online Access Free HC-711 Exam Questions

Difference IPSEC security protocol that AH AH and ESP can achieve data encryption,data validation to support a wider range of ESP?

• A.False
• B.True

In ipsec vpn configuration if you use pre-shared key authentication mode,you can choose whether to configure the key for the end,but if you configure a key,the key must be the same on both sides.

• A.False
• B.True

Meaning as access control listsare:
[USG(or Eudemon)] acl number 3100
[USG(or Eudemon)-acl-3100] rule deny icmp source 10.1.10.10 0.0.255.255 destination any icmp-type host-unreachable

• A.The serial number is 3100 rule prohibiting all 10.1.0.0/16 that host unreachable packets
• B.The serial number is 3100 rule prohibited from 10.1.0.0/16 to all hosts on the network unreachable packets
• C.The serial number is 3100 rule prohibited to 10.1.10.10 host unreachable packets to all hosts
• D.Rules of the serial number is 3100,banned from all hosts 10.1.10.10 host unreachable packets

Which of the following security protocols IPSec NAT traversal(middle ipsec vpn tunnels circumstances nat device)?

• A.ESP
• B.AH
• C.AES
• D.AH + ESP

LNS through what information(protocol field)to determine the packet as L2TP packet and sent L2TP protocol processing module for processing?

• A.Source UDP port 1701
• B.LAC client source IP address
• C.The LNS destination IP address
• D.UDP port 1701