Question 1

After you divide an interface of the firewall into the Untrust security domain, the interface belongs to the

Untrust zone and no longer belongs to the Local zone.

Options :

A : TRUE

B : FALSE

Answer: B

Question 2

The following about BGP routing, what is the wrong description?

Options :

A : Non-aggregate routes take precedence over aggregate routes.

B :

In the case of PrefVal, Local_Preference equality, if the BGP preference of the locally generated route,

IBGP route, EBGP route is equal, the valid reference of this generation is preceded by priority.

C :

See the following entry in the BGP routing table: • *172 16 1. 11/32 0 00010 0? Indicates that the route

is available non-optimal.

D :

For next_hop unreachable routes are invalid cat by and do not participate in the preference. Flogging

case

Answer: A

Question 3

Regarding the FTP protocol, which of the descriptions below is correct?

Options :

A : In FTP Passive mode, the client completes the initialization of the TCP session for control and data

B : In FTP Active mode, the server tells the client which port it expects to send data on by commanding "PORT"

C : FTP always uses a TCP session to transmit control information and data information

D : FTP always uses TCP port 20 to establish a data session, and ICP port 21 to establish control will always use

E : FTP TCP port 21 to establish a data session, TCP port 20 to establish a control session

Answer: A

Question 4

The means of the LAND attack is that the attacker sends an SVN packet message with the same source and destination addresses to the target host, the source port and the destination port are the same, and the receiver waits for the final ACK packet to be sent , the connection is always in a semi-connected state, resulting in a full limited TCP reception Waste of resources

Options :

A : True

B : False

Answer: A

Question 5

Which of the following does the digital certificate not contain?

Options :

A : Digital envelopes

B : Issued by

C : Digital signature

D :

Public key information

Answer: A

Higher Test Marks with Free Online H12-891_V1.0 Exam Practice

Buying Options: