Logo ExamsQA
Exit
Official Bank 0/217

HCNP-Security-CISN (Huawei Certified Network Professional – Constructing Infrastructure of Security Network) (H12-721) - Huawei Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
217 Total Questions
1
Question
What are the load balancing algorithms supported by the USG firewall?
Select 3
Options
A simple polling algorithm (roundrobin)
B weighted rounding algorithm (weightff)
C source address hash algorithm
D ratio (Ratio)
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
The PC A in the Trust zone is 192.168.3.1. You cannot access the Internet server in the Untrust zone. The configuration between the Trust zone and the Untrust zone is as follows. What are the most likely causes of the following faults?

Exhibit
Options
A Since the firewall default packet-filter is deny is executed first, the subsequent policies are not executed.
B security policy application direction configuration error, should be outbound
C policy source 192.168.3.0 0.0.0.255 configuration error, need to be modified to policy source 192.168.3.0 0.0.255.255
D policy destination any configuration error, a clear destination IP address must be established
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
What are the following VPN protocols that do not provide encryption?
Select 3
Options
A AH
B L2TP
C ESP
D GRE
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which is incorrect about IPSec NAT Traversal?
Options
A IPSec NAT traversal does not support IKE main mode (pre-shared mode)
B IPSec ESP packets are encapsulated through NAT using UDP packets.
C Both A AH and ESP support NAT traversal
D All IKE messages exchanged with the initiator use 4500 port communication
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
The server health check mechanism is enabled on the USG firewall of an enterprise to detect the running status of the back-end real server (the three servers are Server A, Server B, and Server C).

When the USG fails to receive the response from Server B multiple times. When the message is received, Server B will be disabled and the traffic will be distributed to other servers according to the configured policy.
Options
A FALSE
B TRUE
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.