Online Access Free H12-721-ENU Practice Test

After the firewall is configured for dual-system hot backup, on the web configuration page, choose System> High Reliability> Hot Standby, and click Check for the HRP configuration consistency.A pop-up window appears. Which of the following configurations can solve the problem (assuming that the heartbeat interface has been added to the DMZ area)?

• A.security-policy rule name local_dmz source-zone local dmz destination-zone local dmz action permit
• B.security-policy rule name trust_local source-zone trust local destination-zone trust local action permit
• C.security-policy rule name trust_dmz source-zone trust dmz destination-zone trust dmz action permit
• D.security-policy rule name untrust_dmz source-zone untrust dmz destination-zone untrust dmz action permit

For the SVN single-arm networking scenario, which of the following descriptions is correct? (Multiple choices)

• A.In the single-arm networking mode, the SVN is attached to a firewall, router, or switch on one arm. Both the internal network and the Internet communicate with the SVN through this network interface.
• B.The port number on the firewall that needs to map the SVN is 445.
• C.Configure the nat server on the firewall to map the address of the SVN to a public IP address on the firewall.
• D.In order for the user to access the SVN device, the IP of the SVN must be the IP address of the public network.

A large-scale enterprise has three departments, a marketing department, a research and development department, and a sales department. Each business department has its own internal resources. The company hopes that when employees on business trips of each department use SSL VPN to access intranet resources, they can use different departments according to their needs. Employees allocate different resource access rights and are isolated from each other. How can this problem be solved?

• A.Assign different roles to employees in different departments.
• B.Solve the problem through one-armed firewall networking.
• C.Solve the problems through the firewall network.
• D.Create multiple virtual gateways on the firewall. Each service department independently uses its own virtual gateway to provide SSL VPN access services.

After a new virtual system is created on the firewall, the virtual system does not have any security zone. The administrator needs to plan the configuration by self.

• A.TRUE
• B.FALSE

As shown in the figure, the remote user uses the Web proxy to access the intranet resources. Which of the following options is wrong for the Web proxy analysis? (Multiple options)

• A.The implementation of the web link has an encryption function, which can ensure remote users secure access to intranet resources.
• B.After the remote user establishes an HTTP session with the FW virtual gateway, it then establishes an HTTPS session with the Web Server.
• C.If you want to implement the Web proxy function, the remote user must first establish an HTTPS session with the FW virtual gateway.
• D.The web proxy is implemented using the web link.