H21-212 exam questions

1. Question 1

   Single answer

   A small logistics company once enabled intrusion prevention and antivirus on its old all-in-one security appliance. Internet access slowed so badly that staff asked for both functions to be switched off.

   Which point about the eKitEngine USG6000E-S answers this objection?

   • A

     Its IPS signatures are produced on the intelligent cloud, so fewer signatures are matched on the device

   • B

     Its web UI shows traffic and threat events, so staff can see which function slows the link

   • C

     Its URL categories are queried in the cloud, so no content inspection runs on the device itself

   • D

     Its adaptive security engine shares resources among services, and dedicated engines speed IPS

   Reveal answer

   Correct answer

   • D

     Its adaptive security engine shares resources among services, and dedicated engines speed IPS

2. Question 2

   Single answer

   A 300-user logistics office has a 1 Gbit/s Internet link and wants all traffic inspected by IPS and antivirus without the firewall becoming the bottleneck. The engineer is choosing between the two USG6000E-S models.

   Which recommendation is supported by sound sizing reasoning?

   • A

     USG6000E-S03, as its 400 reference users already cover the 300 staff

   • B

     USG6000E-S13, as its 1.2 Gbit/s threat protection rate exceeds the link

   • C

     USG6000E-S03, as its 5 Gbit/s firewall throughput is five times the link

   • D

     USG6000E-S13, as its 3 Gbps IPsec throughput is three times the link

   Reveal answer

   Correct answer

   • B

     USG6000E-S13, as its 1.2 Gbit/s threat protection rate exceeds the link

3. Question 3

   Single answer

   Three payroll clerks at a logistics firm each receive an email addressed to them by name. It refers to the firm's real payroll software and asks them to confirm their login on a linked page. No other staff received it, and none of the targets is an executive.

   Which term most precisely describes this attack?

   • A

     Spear phishing

   • B

     Pharming

   • C

     Whaling

   • D

     Vishing

   Reveal answer

   Correct answer

   • A

     Spear phishing

4. Getting the hang of it? 80 more H21-212 questions are waiting, each with its answer. Unlock them all

5. Question 4

   Single answer

   A family-owned bakery chain wants to start a security program based on the IPDRR framework. Nobody can say which devices, cloud services and customer data the business has, or who is responsible for each.

   Which step should come first?

   • A

     Protect: install a firewall at every shop before reviewing anything else

   • B

     Detect: deploy an IDS on a mirrored port to see what traffic is present

   • C

     Identify: inventory the assets, data and owners, then assess the risks to each

   • D

     Recover: write restoration plans for the devices, services and data, then test them

   Reveal answer

   Correct answer

   • C

     Identify: inventory the assets, data and owners, then assess the risks to each

6. Question 5

   Multiple answer

   A veterinary practice keeps a regularly tested offline backup of its records system.

   Which two IPDRR functions does this backup chiefly serve?

   (Choose two.)

   • A

     Detect, because the backup raises an alert when ransomware starts encrypting files

   • B

     Identify, because the backup records every asset the practice owns

   • C

     Respond, because the backup stops ransomware from spreading during an attack

   • D

     Protect, because taking the backup is a safeguard put in place before any incident

   • E

     Recover, because restoring from it brings services back after an incident

   Reveal answer

   Correct answer

   • D

     Protect, because taking the backup is a safeguard put in place before any incident

   • E

     Recover, because restoring from it brings services back after an incident

7. Question 6

   Single answer

   A consultant proposes applying the Gartner CARE model at a growing retail chain.

   What is CARE used for, as Huawei describes it?

   • A

     Classifying DDoS attacks by network, transport and application layer

   • B

     Evaluating how well a firm's cybersecurity program is working

   • C

     Defining the lifecycle functions from Identify through Recover

   • D

     Granting access through continuous authentication and dynamic authorization

   Reveal answer

   Correct answer

   • B

     Evaluating how well a firm's cybersecurity program is working

8. Question 7

   Multiple answer

   A security review at a small firm finds that an attacker tried to recover staff passwords, both from a stolen file of password hashes and by repeated login guesses.

   Which three methods belong to the brute force family the attacker could have used?

   (Choose three.)

   • A

     Rainbow table attack

   • B

     ARP poisoning attack

   • C

     Dictionary attack

   • D

     Watering hole attack

   • E

     Exhaustive attack

   Reveal answer

   Correct answer

   • A

     Rainbow table attack

   • C

     Dictionary attack

   • E

     Exhaustive attack

9. Question 8

   Single answer

   An insurance broker emails policy documents to clients. It needs the documents to stay unreadable to anyone in transit, and it needs clients to be able to detect whether a document was altered. Its IT contractor proposes hashing every file and nothing else.

   What is the main weakness of this proposal?

   • A

     Hashing supports confidentiality but not integrity, so changes to the documents cannot be detected

   • B

     Hashing supports availability only, so it neither hides the documents nor reveals changes to them

   • C

     Hashing and encryption are interchangeable, so the only weakness is the higher processing cost

   • D

     Hashing supports integrity but not confidentiality, so the documents can still be read in transit

   Reveal answer

   Correct answer

   • D

     Hashing supports integrity but not confidentiality, so the documents can still be read in transit

10. Question 9

    Single answer

    A dental practice group runs three small sites. Its office manager handles IT part time and says that reviewing policies and logs on each security device takes most of a working day.

    Which eKit firewall selling point should the presales engineer lead with?

    • A

      Intelligent defense, with AI detection of unknown threats at the network edge

    • B

      Simplified O&M, with central management of devices and policies

    • C

      Superior performance, from a new software and hardware architecture

    • D

      Anti-DDoS protection against flood attacks aimed at the practice websites

    Reveal answer

    Correct answer

    • B

      Simplified O&M, with central management of devices and policies

11. Question 10

    Single answer

    Staff at a small travel agency type the correct address of their airline booking portal, yet land on a convincing fake login page. No suspicious email was received, the office uses wired PCs only, and checks show the PCs' hosts files were modified.

    Which attack explains these symptoms?

    • A

      Pharming

    • B

      An evil twin

    • C

      Email phishing

    • D

      Cross-site scripting

    Reveal answer

    Correct answer

    • A

      Pharming

12. Question 11 Locked Unlock to see this question
13. Question 12 Locked Unlock to see this question

Back to the H21-212 exam page