Free Access Huawei.H12-731-ENU.v2023-02-09.q68 Practice Test (Page 12)

Question 51

Which of the following commands cannot be backed up in the command backup function of the firewall's dual-system hot backup?

A.IPS command

B.IP address configuration

C.routing table

D.Forwarding Policy Commands

Question 52

The following configuration commands are executed on the normal running USG firewall on the live network, but the interaction of ARP packets is still not seen. Which of the following commands need to be supplemented?
<USG> system-view
[USG] info-center enable
[USG] info-center source arp channel console debug level debugging
[USG] info-center console channel console
<USG> debugging arp packet

A.<USG> terminal monitor

B.<USG> terminal debugging

C.<USG> info-center console channel 0

D.<USG> info-center source default channel 0

Question 53

In order to ensure the normal operation of the device and prevent security threats, it is necessary to strengthen the security of the device. The correct consideration is:

A.Set the console password, and set the login timeout and authentication times limit of the administrator interface.

B.The security policy from Untrust, Trust, DMZ zone to Local zone only opens ports that allow ICMP, SSH login, SNMP, etc.

C.SNMPv2 version and network management communication.

D.Use Telnet protocol for device management.

Question 54

Regarding SACG's built-in ACL, which of the following statements are correct?

A.The default ACL rule group number can only be 3099.

B.The administrator needs to customize the ACL (number 3100~3999) rules to control the permissions of different access users.

C.Since SACG needs to use ACL3099~3999 to receive the rules issued by the TSM system, it is necessary to ensure that these ACLs are not referenced by other functions before configuring TSM linkage.

D.The default ACL rule group number can be arbitrarily specified.

Question 55

Mobile employees access the headquarters through an L2TP over IPsec tunnel. The correct statement about planning and deployment is:

A.L2TP generally uses NAS-Initialized mode.

B.The NAT traversal function cannot be used.

C.Since IKE V1 cannot assign addresses to remote users, address assignment must be achieved through L2TP.

D.The security ACL of the USG gateway at the headquarters should be [USG] acl 3000 [USG-acl-adv-3000] rule permit udp source-port eq 1701

Latest Upload: 111Oracle.1z0-1196-25.v2025-09-12.q18; 110NetworkAppliance.NS0-162.v2025-09-12.q86; 151OCEG.GRCP.v2025-09-11.q211; 110HP.HPE0-V27.v2025-09-11.q78; 126Oracle.1Z0-1057-23.v2025-09-10.q47; 169Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 140SAP.C-S4EWM-2023.v2025-09-08.q83; 186TheSecOpsGroup.CNSP.v2025-09-08.q20; 283CFAInstitute.ESG-Investing.v2025-09-08.q173; 279PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 51

Question 52

Question 53

Question 54

Question 55

Download PDF File