HCIP-Security-CISN V3.0: H12-721

If a data stream has been established in the firewall session and you modify the data corresponding packet filtering policy, how will the firewall perform?

A. When a new packet reaches the firewall, filtering is performed immediately according to the latest strategies and refreshes the session table

B. Immediately perform filtering according to the latest strategy session table is not refreshed.

C. session before aging, not to implement the new strategy, in accordance with previously established session match

D. modification will fail to modify the need to clear the session.

Which of the following circumstances where main mode IKE negotiation can not be used? (Choose two answers)

A. IKE in the pre-shared mode and peer identity is ID

B. IKE in the pre-shared mode, and net exports outside the firewall dynamically assigned addresses using DHCP

C. IKE in the pre-shared mode, and there is a NAT device link

D. IKE certificate in RSA mode, and there is a NAT device link

When the firewall is working in a hot standby load balancing networking environment, if the behavior of a router and firewall is down while working in routing mode, you need to configure the OSPF cost adjustment value based on HRP.

A. TRUE

B. FALSE