Huawei h19-376 practice test

Question 1

Huawei's new USG6306E AI firewall can provide the following interfaces at the same time.

• A. Gigabit electrical port
• B. 10GE interface
• C. Gigabit optical port
• D. 40GE interface

Question 2

In the admission test project, if a normal test function test fails, what should I do?

• A. Directly tell the customer that the product has a bug and the test fails
• B. Strive for problem resolution time and test it with customers after the problem is resolved
• C. Consult the mentor, whether the configuration is wrong and the corresponding precautions
• D. Consult 400, whether the configuration is wrong and corresponding precautions

Question 3

Common open source network management software includes

• A. eSight
• B. Solorwinds
• C. Orion Network Performance Monitor
• D. MRTG
• E. U2000

Question 4

The features supported by CDN are
A NAT SERVER
B. Content distribution
C. Load sharing
D. Content redirection
E. Content exchange

Question 5

Regarding the application identification of Huawei's USG6000 next-generation firewall, what is the
correct statement?

• A. When the application characteristics change, you need to upgrade the firewall software.
• B. Ability to identify applications based on statistical features and associated features
• C. Identify Shuliang more than 6000
• D. Ability to distinguish between different functions of the application, such as distinguishing uploads and downloads of network disk applications.

Question 6

What is the triple used to identify the IPSec tunnel?

• A. Source IP address
• B. SPI
• C. Destination IP address
• D. Security protocol number

Question 7

Regarding the application identification of Huawei's USG6000 next-generation firewall, what is the
correct statement?

• A. When the application characteristics change, you need to upgrade the firewall software.
• B. Ability to identify applications based on statistical features and associated features
• C. Identify Shuliang more than 6000
• D. Ability to distinguish between different functions of the application, such as distinguishing uploads and downloads of network disk applications.

Question 8

Which of the following are the types of rules supported by host check in terminal security?

• A. Ports and processes
• B. Firewall software
• C. Registry
• D. Operating system
• E. File

Question 9

The mode of SYN Flood source detection in the ANTI-DDOS solution includes

• A. Basic mode
• B. Passive mode
• C. Advanced mode
• D. Active mode

Question 10

Which interfaces are included in the NGFW logical interface?

• A. LOOPBACK
• B. VLANIF
• C. NULL
• D. ETH-TRUNK
• E. Subinterface

Question 11

In the college network, the description about NGFW is correct.

• A. NGFW is mostly deployed at school exits, and is often used for exit isolation, NAT translation, VPN, etc.
• B. NGFW can cooperate with third-party vendors' standard RADIUS / LDAP / AD server for user authentication
• C. In the case of schools with multiple operator exits, NGFW can be routed based on applications, links (bandwidth, weights, priorities, bandwidth utilization, link response), source in, source out, forward DNS, etc.
• D. When the school BRAS is our ME60, NGFW can be linked with ME60. The ME60 synchronizes the authenticated user account to the FW. The FW performs security policies and bandwidth flow control based on the user account.

Question 12

The following description of BGP is correct:

• A. BGP can be used for route delivery between autonomous domains
• B. IBGP anti-ring mechanism includes routes learned from IBGP neighbors are no longer sent to other IBGP neighbors of their own
• C. BGP is a routing protocol based on link state data optimization
• D. EBGP can use the AS-PATH LIST attribute value for anti-ring
• E. BGP is a path vector routing protocol

Question 13

What are the main technologies for NGFW to implement differentiated services?

• A. Traffic shaping
• B. Traffic policing
• C. Congestion avoidance
• D. Congestion management
• E. Traffic classification

Question 14

Which of the following MAC entries should not exist in an NGFW static MAC entry?

• A. Black hole MAC
• B. Local system MAC
• C. Broadcast MAC
• D. Multicast MAC

Question 15

Which of the following types of packet capture tasks can be supported on ATTC?

• A. Globally discard packets
• B. protection object attack capture packet
• C. The protection object is caught abnormally.
• D. ACL capture
• E. Mirror capture