GB0-283-LAB Free Demo Download

Certinside offers free demo for GB0-283-LAB 6 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-283-LAB dumps Pdf Demo

Download GB0-283-LAB dumps iEngine Demo

Real questions and answers

Real questions and answers
　
　
Exam : H3C GB0-540
Title : H3C Certified Senior Engineer for Security – IPS

1. TippingPoint对BT下载进行限流，依靠的是TippingPoint的哪种保护功能？
A. 应用层保护
B. 基础设施保护
C. 性能保护
Answer: C

2. 在SMS操作中，当TippingPoint检测到接入客户端的非法活动时，SMS进行基于策略的门限控制，SMS发送Trap到NMS或者根据配置执行相应的动作。
A. True
B. False
Answer: A

3. 使用Web方式登陆TippingPoint，每次最多只能同时登录一个用户。
A. True
B. False
Answer: B

4. TippingPoint设备支持的网管设备只有SMS，其它网管设备不支持。
A. True
B. False
Answer: B

5. 客户想下载最新的数字疫苗，可以从下列哪个网站获取？
A. www.huawei-3com.com
B. www.3com.com
C. www.huawei.com
D. www.tippingpoint.com
Answer: D

6. TippingPoint支持单设备管理LSM和企业级集中管理SMS两种管理架构。
A. True
B. False
Answer: A

7. Notification Contacts包括的组合有（ ）。
A. SMS + Remote system log + LSM
B. Remote System Log + Management Console
C. Management Console + SMS
D. LSM + Management Console + SMS
Answer: AB

8. TippingPoint IPS对应用保护的过滤器分为哪几类？
A. Attack Pretection, Reconnaissance, Security Policy, Informational
B. Attack Pretection, Scan, Security Policy, Informational
C. Attack Pretection, Reconnaissance, Misuser&Abuse, Informational
D. Attack Pretectio, Scan, Security Policy, Misuser&Abuse
Answer: A

Real questions and answers
　
　
Exam : H3C GB0-520
Title : Building Secure Virtual Private Networks

1. 若L2TP VPN接入方式形如"移动员工-PSTN-LAC-Internet-LNS-总部内网"，对这种接入方式，正确的说法有（ ）。
A. LAC 设备多由 ISP 提供； LNS 设备多由总部提供
B. 用户接入的 AAA 服务由 LAC 设备完成
C. 用户的最终授权和验证工作由 LNS 完成
D. L2TP 隧道由 LAC 发起，由 LNS 终结
E. PPP 通道最终建立在移动员工和 LAC 之间
Answer: ABCD

2. 网络通信对安全性的要求包括（ ）。
A. 一致性
B. 私密性
C. 完整性
D. 身份验证
Answer: BCD

3. AH 和 ESP 均可以穿越 NAT 。
T. True
F. False
Answer: F

4. SecPath系列安全网关支持多种 VPN 业务，其中能提供数据机密性的是（ ）。
A. L2TP VPN
B. IPSec VPN
C. SSL VPN
D. GRE VPN
Answer: BC

5. 密钥长一倍，安全强度就提高一倍。
T. True
F. False
Answer: F

6. 只有将报文加密才能保证不被篡改，除此之外其他办法均无效。
T. True
F. False
Answer: F

7. SecPath防火墙产品的 HT 加密卡不可以热插拔。
T. True
F. False
Answer: T

8. L2TP 隧道的建立是一个三次握手的过程，而 L2TP 会话的建立是一个四次握手的过程。
T. True
F. False
Answer: F

Real questions and answers
　
　
Exam : H3C GB0-500
Title : Implementing Secure Firewalls

1. SecPath500F防火墙可以实现（ ）个MIM接口扩展。
A. 0
B. 1
C. 2
D. 3
Answer: C

2. 以下关于安全区域描述不正确的是（ ）。
A. 不同安全区域的安全级别可以相同
B. 一个接口可以添加到多个安全区域中
C. 一个安全区域中可以添加无限个接口
D. Inloopback0接口可以添加到任何安全区域中
Answer: ABCD

3. 下列哪些功能是无法通过Web网管进行配置的？
A. GRE 相关配置
B. L2TP相关配置
C. PPPoE相关配置
D. 网页过滤相关配置
Answer: AC

4. TACL主要用于匹配一个会话中的所有返回的报文，可以为某一应用返回的报文在防火墙的外部接口上建立一个临时的返回通道。
T. True
F. False
Answer: T

5. SecPath防火墙的ASPF作为改进的状态检测安全技术，支持以下哪些应用协议检测？
A. PPTP
B. HTTP
C. TFTP
D. FTP
Answer: ABD

6. ACL可以应用于整机或指定接口上，过滤数据包。除此之外，ACL还可以用于（ ） 。
A. QoS中，对数据流量进行分类；
B. DCC中，用来规定触发拨号的条件；
C. NAT中；
D. 报文转发，提高转发速度。
Answer: ABC

7. 利用HWTACACS协议认证与授权分离的特性，可以使用RADIUS进行认证，而使用HWTACACS进行授权。
T. True
F. False
Answer: T

8. SecPath系列防火墙可以工作在多种模式下, 在（ ）下, 防火墙通过二层对外连接，所有接口无IP地址。
A. 路由模式
B. 透明模式
C. 混合模式
D. 攻击防范模式
Answer: B

GB0-323English Free Demo Download

Certinside offers free demo for GB0-323English 300 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-323English dumps Pdf Demo

Download GB0-323English dumps iEngine Demo

Real questions and answers
　
　
Exam : HuaWei GB0-323English
Title : Constructing Enterprise-level Switching Networks

1. STP is a routing protocol.
A. True
B. False
Answer: B

2. 802.1D defines the Disabled state of STP. Which of the following is correct about the port in the Disabled state? ( )
A. It does not receive/send any packet.
B. It does not receive/forward data. It receives but does not send BPDUs, and does not learn addresses.
C. It does not receive/forward data. It receives and forwards BPDUs, and does not learn addresses.
D. It does not receive/forward data. It receives and forwards BPDUs. It begins to learn addresses.
E. It receives or forwards data. It receives and forwards BPDUs. It begins to learn addresses.
Answer: A

3. In STP, it is suggested to modify the value of Max Age indirectly through setting the network diameter. ( )
A. True
B. False
Answer: A

4. The reason why RSTP can implement fast restoration of the network is that ( ).
A. RSTP reduces the delay from the Blocking state to the Forwarding state.
B. The port will enter the Forwarding state immediately if the old Root port turn in the Blocking state and the remote end of the new Root port is in the Forwarding state.
C. A non-edge Designated port needs only one handshake with the downstream bridge to transfer from the Blocking state to the Forwarding state quickly.
D. Soon after the bridge is started, the edge port enters the Forwarding state without delay.
Answer: ABCD

5. On the H3C S middle-end/low-end switches, STP is enabled by default. ( )
A. True
B. False
Answer: B

6. IGMP is a signaling protocol between hosts and the router, which defines the mechanism to establish and maintain the multicast membership between hosts and the router. ( )
A. True
B. False
Answer: A

7. Multicast protocols fall into group member management protocols and multicast routing protocols. Which of the following is a group member management protocol? ( )
A. GVRP
B. GMRP
C. IGMP
D. PIM
Answer: C

8. Which of the following statements is correct? ( )
A. igmp timer query seconds is used to set the interval of the query packet sending on the switch.
B. igmp timer query seconds is used to set the maximum response time in the query packet.
C. igmp max-response-time seconds is used to set the maximum response time in the query packet.
D. igmp timer other-querier-present seconds is used to set the timeout time of the snooping querier on the switch.
Answer: ACD

GB0-363English Free Demo Download

Certinside offers free demo for GB0-363English 317 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-363English dumps Pdf Demo

Download GB0-363English dumps iEngine Demo

Real questions and answers
　
　
Exam : HuaWei GB0-363English
Title : Designing Enterprise-level Networks

1. The common security equipment includes the Firewall, Intrusion Detection System (IDS) and Intrusion Prevention System (IPS). The IDS serves as the gateway and is deployed on the path of main service traffic, while the Firewall and IPS are deployed on the bypass.
A. True
B. False
Answer: B

2. PIM-SM may not need RP.
A. True
B. False
Answer: B

3. The security services in the Open System Interconnection security architecture include ( ) and anti-DoS.
1) Authentication
2) Access control
3) Data privacy service
4) Data integrity service
A. 1) and 2)
B. 1), 2) and 3)
C. 2) and 4)
D. 1), 2), 3) and 4)
Answer: D

4. To transit a SOHO network to IPv6, we should ( ).
A. Choose an appropriate tunnel technology to access the IPv6 Internet according to the access mode provided by the ISP
B. Use the dual-stack technology to enable all the hosts to access IPv6 and IPv4 network concurrently
C. Use 6to4 technology to access the IPv6 Internet if the ISP does not provide any IPv6 access
D. Use the 6PE technology to access the IPv6 Internet if the ISP provides 6PE access
Answer: AC

5. In a Layer 2 switching network, if only IGMP Snooping is enabled on the switch, what will happen? ( )
A. Multicast fails.
B. Multicast works properly, but IGMP Snooping cannot correctly record the member port information.
C. Multicast works properly, and IGMP Snooping can correctly record the member port information.
D. IGMP Snooping will work properly if IGMP Spoofing is enabled.
Answer: A

6. Which of the following port states is/are defined in both STP and RSTP? ( )
A. Disabled
B. Blocking
C. Listening
D. Learning
E. Forwarding
Answer: DE

7. To prevent route spoofing, it is preferred to set the OSPF enabled interface that is connected to the users intranet to the Silent state and enable MD5 authentication.
A. True
B. False
Answer: B

8. Which of the following descriptions about dynamic routing protocol is correct? ( )
A. The fundamentals of RIPng are the same as those of RIP, but RIPng speeds up convergence compared with RIP.
B. The packet format of OSPFv3 is the same as that of OSPF, but OSPFv3 can support IPv6.
C. MBGP is the unique EGP routing protocol in the IPv6 network.
D. IS-IS supports multiple protocols so that it can support IPv6 without any modification.
Answer: C

GB0-283English Free Demo Download

Certinside offers free demo for GB0-283English 300 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-283English dumps Pdf Demo

Download GB0-283English dumps iEngine Demo

Real questions and answers
　
　
Exam : HuaWei GB0-283English
Title : Constructing Enterprise-level Routing Networks

1. Which of the following descriptions about route aggregation in OSPF is/are wrong? ( )
A. The ABR can automatically summarize routes without manual configuration.
B. Aggregation can be made only on the ABR.
C. The router serving as the ABR and the ASBR concurrently cannot summarize routes.
D. The ASBR can summarize all external routes.
Answer: ABCD

2. The multicast address used by OSPF is ( ).
A. 224.0.0.5
B. 224.0.0.6
C. 224.0.0.9
D. 224.0.0.10
Answer: AB

3. Which of the following descriptions about queue is correct? ( )
A. WFQ discarding mechanism is Tail Drop on each queue, the same as CQ.
B. WFQ classifies data flow by using ACL.
C. CBWFQ is an improvement of WFQ using the same basic scheduling as WFQ.
D. LLQ will first check the low-latency queue and take packets from the queue. Only when there is no packet in the low-delay queue, it will take the packets from other queues. In addition, it uses other mechanisms to avoid starving to death of the queues.
Answer: D

4. The ASBR imports four external routes, 192.168.0.0/24, 192.168.1.0/24, 192.168.2.0/24 and 192.168.3.0/24. These routes are aggregated to one route 192.168.0.0/22 by the ABR. Which routes will the ABR redistribute to the other areas? ( )
A. One aggregation route
B. The four original routes
C. One aggregation route and the four original routes
D. None
Answer: B

5. CAR is realized at the IP layer so that it can only limit the traffic of IP packets. Compared with CAR, LR can limit all the traffic passing through the physical interface.
A. True
B. False
Answer: A

6. 0.0.5
B. 224.0.0.6
C. 224.0.0.9
D. 224.0.0.10
Answer: AB
2. Which of the following descriptions about route aggregation in OSPF is/are wrong? ( )
A. The ABR can automatically summarize routes without manual configuration.
B. Aggregation can be made only on the ABR.
C. The router serving as the ABR and the ASBR concurrently cannot summarize routes.
D. The ASBR can summarize all external routes.
Answer: ABCD

7. Which of the following descriptions about QoS at the access, convergence and core layers is/are correct? ( )
A. QoS is implemented identically in the access, convergence and core layers.
B. Packets are classified and marked in the access layer.
C. No QoS mechanism should be configured in the access layer.
D. Usually, the queuing mechanism (such as CBQ) and the congestion avoidance mechanism (such as WRED) should be used in the convergence layer.
Answer: BD

8. 0.0/24, 192.168.1.0/24, 192.168.2.0/24 and 192.168.3.0/24. These routes are aggregated to one route 192.168.0.0/22 by the ABR. Which routes will the ABR redistribute to the other areas? ( )
A. One aggregation route
B. The four original routes
C. One aggregation route and the four original routes
D. None
Answer: B
4. Which of the following descriptions about the IPSec Security Association (SA) is/are correct? ( )
A. The data security service provided by IPSec is realized through SAs.
B. One SA is a unidirectional logical connection between two IPSec peers.
C. The inbound data flow and outbound data flow are respectively processed by the inbound SA and outbound SA.
D. SAs can be set up by the means of manual configuration or automatic negotiation.
Answer: A

Real questions and answers

GB0-190Chinese Free Demo Download

Certinside offers free demo for GB0-190Chinese 446 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-190Chinese dumps Pdf Demo

Download GB0-190Chinese dumps iEngine Demo

Real questions and answers
　
　
Exam : H3C GB0-190Chinese
Title : Construction Small-and Medium-Sized Enterprise Network

1. 111.77对应的自然分类网段的广播地址为________________。
Answer: 202.135.111.255
4. 在如图所示的TCP连接的建立过程中，SYN中的Z部分应该填入________。
A. a
B. b
C. a+1
D. b+1
Answer: D
5. FTP默认使用的控制协议端口是______。
A. 20
B. 21
C. 23
D. 22
Answer: B

2. 通常情况下，路由器会对长度大于接口MTU的报文分片。为了检测线路MTU，可以带______参数ping目的地址。
A. -a
B. -d
C. -f
D. -c
Answer: C

3. IP地址202.135.111.77对应的自然分类网段的广播地址为________________。
Answer: 202.135.111.255

4. 如果以太网交换机中某个运行STP的端口不接收或转发数据，接收并发送BPDU，不进行地址学习，那么该端口应该处于______状态。
A. Blocking
B. Listening
C. Learning
D. Forwarding
E. Waiting
F. Disable
Answer: B

5. 用______命令可指定下次启动使用的操作系统软件。
A. startup
B. boot-loader
C. bootfile
D. boot startup
Answer: B

6. 以下工作于OSI参考模型数据链路层的设备是______。 （选择一项或多项）
A. 广域网交换机
B. 路由器
C. 中继器
D. 集线器
Answer: A

7. 下列有关光纤的说法中哪些是错误的？
A. 多模光纤可传输不同波长不同入射角度的光
B. 多模光纤的纤芯较细
C. 采用多模光纤时，信号的最大传输距离比单模光纤长
D. 多模光纤的成本比单模光纤低
Answer: BC

8. 在如图所示的TCP连接的建立过程中，SYN中的Z部分应该填入________。
A. a
B. b
C. a+1
D. b+1
Answer: D

GB0-800 Free Demo Download

Certinside offers free demo for GB0-800 866 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-800 dumps Pdf Demo

Download GB0-800 dumps iEngine Demo

Real questions and answers
　
　
Exam : HuaWei GB0-800
Title : Huawei-3Com Certified internet Expert:Routing and Switching

1. 下列关于多链路帧中继说法错误的有（ ）
A. 多链路帧中继（Multilink Frame Relay，简写为MFR）基于帧中继论坛的FRF.16协议
B.多链路帧中继特性提供一种逻辑接口：MFR接口，由多个帧中继物理链路捆绑而成，从而可以在帧中继网络上提供高速率、大带宽的链路
C. 对同一个MFR接口必须捆绑速率一致的物理接口，否则将无法绑定成功
D. 一个MFR接口对应一个捆绑，一个捆绑中可以包含多个捆绑链路，一个捆绑链路对应着一个物理接口或者子接口
Answer: CD

2. 以太网报头中的以太网帧类型字段为0 x 8035时，表示后面数据的类型可能为：（ ）
A. ARP请求
B. ARP应答
C. RARP请求
D. RARP应答
Answer: CD

3. 下列关于HOPE的说法正确的是（ ）
A. HOPE解决了作为下层PE的BGP连接数量大的问题
B. HOPE解决了作为下层PE的VPN路由数量大的问题
C. SPE可以同时作为UPE
D. HOPE支持嵌套
Answer: ABCD

4. 在OSI七层模型中，两台主机之间进行通信时，其中一台主机的会话层通常只和对端的（ ）进行通信。
A. 物理层
B. 网络层
C. 传输层
D. 表示层
E. 会话层
F. 数据链路层
Answer: E

5. FTP的常用端口号为： （ ）
A. 20，21
B. 21，22
C. 20，22
D. 21，23
Answer: A

6. STP发送配置消息的目的地址是（ ）
A. 01-80-C1-00-00-00
B. 01-80-C2-00-00-00
C. 01-80-C3-00-00-00
D. 01-80-C4-00-00-00
Answer: B

7. 在标签转发过程中，MPLS报文头中的TTL减一，IP报文头中的TTL同时也会减一。
T. True
F. False
Answer: F

8. 在L2TP组网中，假设LAC与LNS都已在公共网上，并实现正确连通的情况下，如果Tunnel建立失败，那么可能的原因有（ ）
A. 在LAC端，LNS的地址设置不正确
B. LAC端设置的用户名与密码有误
C. Tunnel验证不通过
D. LNS（通常为路由器）端没有设置可以接收该隧道对端的L2TP组
Answer: ACD

GB0-323 Free Demo Download

Certinside offers free demo for GB0-323 300 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-323 dumps Pdf Demo

Download GB0-323 dumps iEngine Demo

Real questions and answers
　
　
Exam : HuaWei GB0-323
Title : Constructing Enterprise-level Switching Networks

1. 因特网组管理协议（IGMP）是主机与路由器之间的信令协议，它定义了主机与路由器之间组播成员关系的建立和维护机制，是整个IP组播的基础。
T. True
F. False
Answer: T

2. RSTP之所以能实现网络的快速恢复，在于（ ）
A. RSTP减少了端口从阻塞到转发的时延
B. RSTP中，如果旧根端口进入阻塞状态，且新根端口对端处于转发状态，则立刻进入转发状态
C. 一个非边缘指定端口只需同下游进行一次握手即可快速从阻塞转入转发状态
D. 网桥启动后边缘端口无延时的快速进入转发状态
Answer: ABCD

3. 组播协议分为组成员管理协议和组播路由协议，下列协议属于组成员管理协议的是（ ）
A. GVRP
B. GMRP
C. IGMP
D. PIM
Answer: C

4. 在Quidway S系列中低端交换机上，生成树功能缺省是打开的。
T. True
F. False
Answer: F

5. 802.1D中规定了Disabled端口状态，此状态的端口具有的功能是（ ）
A. 不收发任何报文
B. 不接收或转发数据，接收但不发送BPDU，不进行地址学习
C. 不接收或转发数据，接收并发送BPDU，不进行地址学习
D. 不接收或转发数据，接收并发送BPDU，开始地址学习
E. 接收或转发数据，接收并发送BPDU，开始地址学习
Answer: A

6. 在STP中，Max Age的值一般推荐通过配置网络直径来间接改变这个参数。
T. True
F. False
Answer: T

7. 下面关于配置IGMP时间参数配置命令的解释正确的有（ ）
A. igmp timer query seconds命令用于设置交换机发送查询报文的时间间隔；
B. igmp timer query seconds命令用于设置交换机发送查询报文中的最大响应时间；
C. igmp max-response-time seconds命令用于设置交换机发送查询报文中的最大响应时间；
D. igmp timer other-querier-present seconds命令用于设置交换机监听查询器存在的超时时间。
Answer: ACD

8. STP是一种路由协议。
T. True
F. False
Answer: F

GB0-363 Free Demo Download

Certinside offers free demo for GB0-363 317 Q&As with Expert Real). You can check out the interface, question quality and usability of our practice exams before you decide to get it.



Download GB0-363 dumps Pdf Demo

Download GB0-363 dumps iEngine Demo

Real questions and answers
　
　
Exam : H3C GB0-363
Title : Designing Enterprise-level Networks

1. 在规划小型办公或家用网络过渡到IPv6时，应该（ ）
A. 根据ISP提供的接入方式, 选择合适的隧道技术接入IPv6 Internet
B. 先使用双栈技术，使所有主机能够同时访问IPv6与IPv4
C. 如果ISP不提供任何IPv6接入, 使用6to4连接至IPv6 Internet
D. 如果ISP提供6PE接入，使用6PE技术连接至IPv6 Internet
Answer: AC

2. 路由欺骗防止：推荐在同用户内网相连运行OSPF协议的接口指定为Silent状态，并配置MD5验证。
A. True
B. False
Answer: B

3. PIM-SM中可以没有RP。
A. True
B. False
Answer: B

4. 在一个只有二层交换机构成的局域网中，如果在交换机上只启用IGMP Snooping，那么（ ）
A. 组播不通
B. 组播正常，但IGMP Snooping无法正确记录成员端口信息
C. 组播正常，IGMP Snooping也可以正确记录组播成员端口信息
D. 如果同时启用IGMP Spoofing，可以使IGMP Snooping正常工作
Answer: A

5. STP和RSTP对端口状态定义相同的是（ ）
A. disabled
B. blocking
C. listening
D. learning
E. forwarding
Answer: DE

6. 关于动态路由协议的描述，下列哪些是正确的（ ）
A. RIPng的原理与RIP一样，但改进了RIP收敛速度慢的缺点
B. OSPFv3协议的报文格式与OSPF报文一样，但做了改进以能够支持IPv6
C. MBGP是IPv6网络中唯一的EGP路由协议
D. 因为IS-IS原本就支持多协议，所以不用做任何改动就可以支持IPv6
Answer: C

7. 网络中常见的安全设备包括防火墙Firewall；入侵检测系统（IDS：Intrusion Detection System）；深度抵御防火墙IPS等。其中IDS通常作为网关设备部署，处于主要业务流量的路径之上。而Firewall和IPS则通常作为旁路设备部署。
A. True
B. False
Answer: B

8. 开放系统互连安全体系结构中的安全服务有（ ）和防否认服务。
1)验证；
2)访问控制；
3)数据保密服务；
4)数据完整性服务；
A. 1)和2)
B. 1)、2)和3)
C. 2) 和 4)
D. 1)、2)、3)、4)
Answer: D

Real questions and answers