QUESTION 69
Use the Ping command on the firewall to test the reachability of the server (the security zone where the server is located is the DMZ). If the security policy is configured to allow the test traffic, the source security zone is ______.

QUESTION 70
Information security graded protection is the basic system of national information security assurance work.

QUESTION 71
The steps of the security assessment method do not include which of the following?

QUESTION 72
In the authentication policy of the firewall, ______ allows users to obtain the corresponding relationship between the user and IP without entering a user name and password, so as to perform policy management based on the user.

QUESTION 73
_________ Mode: Two devices, one active and one standby. Under normal circumstances, business traffic is handled by the main device. When the main equipment fails, the backup equipment takes over the main equipment to process business traffic to ensure uninterrupted business.

QUESTION 74
Regarding GRE encapsulation and decapsulation, which of the following descriptions is wrong?

QUESTION 75
Which of the following does not belong to the log format of the firewall?

QUESTION 76
Which of the following is network address port translation (NAPT) and only translate network addresses (No-PAT) difference?

QUESTION 77
An employee of a company accesses the internal web server of the company through the firewall. The web page of the website can be opened by using a browser, but the reachability of the web server is tested by using the Ping command, and it shows that it is unreachable. What are the possible reasons?

QUESTION 78
Using the _____ method of the web proxy, the virtual gateway encrypts the real URL that the user wants to access and can adapt to different terminal types.

QUESTION 79
IPv6 supports configuring router authorization function on the device, verifying peer identity through digital certificate, and selecting legal device. ( )[Multiple choice]*

QUESTION 80
The matching principle of the security policy is: first search for the manually configured interzone security policy, and if no match is found, the data packet will be discarded directly.

QUESTION 81
The administrator wants to create a web configuration administrator, the device web access port number is 20000, and the administrator is at the administrator level, which of the following commands is correct?
A)

B)

C)

D)

QUESTION 82
Which of the following options is not a sign of IPSec SA?

QUESTION 83
Which options are the way for PKI entity to apply for a local certificate from a CA? (Multiple Choice)

QUESTION 84
Digital signature is to generate digital fingerprint by using hash algorithm, so as to ensure the integrity of data transmission

QUESTION 85
Which of the following options is not a private network IP address?

QUESTION 86
Regarding the NAT policy processing flow, which of the following options are correct? ( )*

QUESTION 87
When the company’s network administrator is performing dual-system hot backup, because of the possibility of inconsistent back and forth paths, if you want to turn on the session fast backup function, the command you need to enter is ______.