Question 1

The following statement about the security alliance SA in IPSec is incorrect

Options :

A :

SA is uniquely identified by a triple that includes the security parametric reference SPI (Security

Parameter Inder), the source IP address, and the security protocol number (AH or ESP)

B :

Use the display ipsec command to view the encryption algorithm used with another IPSec peer, the

traffic of interest, and so on.

C : IPSec only supports encrypting data using symmetric encryption algorithms.

D : A two-way SA must exist between IPSec peers to establish an IPSec VPN connection

Answer: A

Question 2

As shown in the figure, a company sets up an OSPF network. The links in the figure all form OSPF adjacencies, and all OSFP devices declare their own loopback addresses. One day SIR2 The two links of the S2AR1 suddenly failed, and in order to detect if the network was operating properly, the engineers performed a device status check, which is correct as described below

Options :

A : R5 can normally learn the loopback route to R2

B : R3 can not learn the loopback route to R2

C : R1 can normally learn the loopback route

D : R3 of R2 The loopback route of R2 can be learned normally

Answer: A,B

Question 3

In an IPv6 network, two nodes A and B are neighbors to each other if node A sends to node B NS message, if

Node B receives the message and then replies to the NA message, then on Node A On the view, the neighbor

status will be marked as What?

Options :

A : Reachable

B : Incomplete

C : Constant

D : Probe Answer

Answer: A

Question 4

Which of the following is incorrect about HTTPS?( Multiple Choice)

Options :

A : HTTPS secures access to data by using SSLVPN.

B : If the HTTPS traffic contains a virus, the router cannot detect the virus directly using IPS technology

C : When using HTTPS to access a website, the website cannot be accessed if the user-s browser does not recognize the website-s digital certificate.

D : HTTPS protocol uses TCP port 443 by default

Answer: C

Question 5

The following about BGP routing, what is the wrong description?

Options :

A : Non-aggregate routes take precedence over aggregate routes.

B :

In the case of PrefVal, Local_Preference equality, if the BGP preference of the locally generated route,

IBGP route, EBGP route is equal, the valid reference of this generation is preceded by priority.

C :

See the following entry in the BGP routing table: • *172 16 1. 11/32 0 00010 0? Indicates that the route

is available non-optimal.

D :

For next_hop unreachable routes are invalid cat by and do not participate in the preference. Flogging

case

Answer: A

Free H12-891_V1.0 Mock Exam – Practice Online Confidently

Buying Options: