Huawei Certified ICT Professional - Constructing Service Security Network (HCIP-Security-CSSN V3.0) H12-722 Question # 28 Topic 3 Discussion
H12-722 Exam Topic 3 Question 28 Discussion:
Question #: 28
Topic #: 3
Configure the following commands on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-defult-route acl 3000
Which of the following options are correct? (multiple choice)
A.
For loose inspection: if the source address of the packet exists in the FB of the firewall: the packet passes the inspection directly
B.
For the case where the default route is configured, but the parameter allow-defult-route is not configured. As long as the source address of the packet is in the FIB table of the firewall
If it does not exist, the message will be rejected.
C.
For the situation where the default route is configured and the parameter allow-defult-route is matched at the same time, if the source address of the packet is in the FIB table of the firewall
If the packet does not exist in the loose check mode, all packets will pass the URPF check and be forwarded normally.
155955cc-666171a2-20fac832-0c042c0427
D.
For the configuration of the default route, and at the same time matching the parameter allow-defult-route, if the source address of the message is in the FIB table of the firewall
If it does not exist in the l0e check, the packet cannot pass the URPF check.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit