Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Huawei
Exam Format
90 min
60-70
600
Associate
Registration
$200 USD
Pearson VUE, Huawei Authorized Testing Centers, or online proctoring
English, Chinese
Validity
3 years
Pass the current version of HCIA-Security exam before expiration; Pass any HCIP-level exam in any track; Pass any HCIE-level exam in any track
H12-711 Exam Topics and Domains
H12-711 is organized into 11 weighted domains. Expect to work with Huawei USG6000 Series, Huawei USG6000 Series IPS, Huawei USG Firewalls, Huawei Agile Controller, and more.
1
Network Security Concepts and Specifications
5%
Information Security Standards and Specifications
Network Security DefinitionInformation Security StandardsFuture Network Security Trends
- Understand fundamental information security concepts and principles
- Identify and explain major information security standards and specifications
- Recognize emerging trends in network security
2
Network Basics
10%
Basic Network Concepts
OSI and TCP/IP ModelsNetwork Devices and FunctionsIP Addressing and SubnettingNetwork Protocols
- Understand fundamental networking concepts and models
- Identify common network devices and their security implications
- Configure and troubleshoot basic IP addressing
3
Common Network Security Threats and Threat Prevention
5%
Common Information Security Threats
Malware TypesNetwork AttacksSocial Engineering
- Identify common security threats and attack vectors
- Understand threat characteristics and propagation methods
- Implement basic threat prevention strategies
Threat Defense and Information Security Development Trends
Defense in DepthThreat Prevention Technologies
- Implement defense-in-depth strategies
- Select and deploy threat prevention technologies
- Understand evolving security threat landscape
4
Firewall Security Policy
10%
Introduction to Firewalls
Firewall Types and TechnologiesSecurity Zones
- Understand firewall architectures and technologies
- Configure security zones on Huawei USG firewalls
- Design zone-based security strategies
Firewall Security Policies
Security Policy ConfigurationAdvanced Policy Features
- Configure comprehensive firewall security policies
- Implement advanced policy features
- Monitor and optimize policy performance
5
Firewall NAT Technologies
10%
Network Address Translation (NAT)
NAT FundamentalsStatic NATDynamic NATNAT Overload (PAT/NAPT)NAT Server (Port Forwarding)Advanced NAT Features
- Configure various NAT types on Huawei USG firewalls
- Understand NAT operation and address translation processes
- Troubleshoot common NAT issues
- Implement secure NAT server configurations
6
Firewall Hot Standby Technologies
10%
Dual-System Hot Standby (VRRP)
High Availability FundamentalsVRRP (Virtual Router Redundancy Protocol)Firewall Clustering and Hot StandbyHRP (Huawei Redundancy Protocol)
- Configure VRRP for gateway redundancy
- Implement firewall hot standby solutions
- Understand state synchronization mechanisms
- Troubleshoot high availability issues
7
Firewall User Management Technologies
10%
User Authentication and Authorization
AAA FrameworkUser Authentication MethodsSACG (Security Access Control Gateway)Policy Center Integration
- Configure user authentication on Huawei firewalls
- Implement AAA services
- Deploy SACG for endpoint security
- Integrate with Policy Center for centralized management
8
Firewall Intrusion Prevention Technologies
10%
Overview of Intrusion Prevention
IDS vs IPSDetection Methods
- Understand IPS concepts and architectures
- Differentiate detection methods
- Deploy IPS in appropriate modes
IPS Configuration and Management
IPS Signature ManagementIPS Profiles and PoliciesIPS Monitoring and Response
- Configure IPS on Huawei USG firewalls
- Manage IPS signatures and profiles
- Monitor and respond to intrusion attempts
- Tune IPS for optimal performance
9
Fundamentals of Encryption Technologies
10%
Encryption and Decryption Mechanism
Cryptography FundamentalsSymmetric EncryptionAsymmetric EncryptionHash Functions
- Understand fundamental cryptography concepts
- Differentiate symmetric and asymmetric encryption
- Explain hash function purposes and applications
- Select appropriate encryption methods for security requirements
10
PKI Certificate System
5%
PKI Fundamentals
PKI ComponentsDigital CertificatesCertificate Lifecycle
- Understand PKI architecture and components
- Explain digital certificate structure and validation
- Manage certificate lifecycle operations
11
Encryption Technology Applications
15%
Application of Cryptographic Technologies
SSL/TLS ProtocolsIPSec VPNSSL VPNVPN Comparison and SelectionSecure Email and Data Protection
- Configure IPSec VPN on Huawei USG firewalls
- Deploy SSL VPN for remote access
- Understand SSL/TLS protocols and applications
- Select appropriate encryption technologies for use cases
- Troubleshoot VPN connectivity issues
How do I earn this certification?
Passing H12-711 earns the HCIA-Security certification. It sits in the Security track.
Next Level Options
- H12-721 - HCIP-Security-CISN (Constructing Infrastructure of Security Network) Focuses on advanced firewall features, intrusion prevention, and network security infrastructure
- H12-722 - HCIP-Security-CSSN (Constructing Service Security Network) Covers application security, content security, and secure service deployment
- H12-723 - HCIP-Security-CTSS (Cloud Technologies and Security Solutions) Addresses cloud security, virtualization security, and security management platforms
- HCIE-Security - HCIE-Security Lab Exam Expert-level certification requiring both written exam and extensive lab examination
Alternative Paths
- H12-811 - HCIA-DatacomComplementary networking skills for security professionals
- H13-611 - HCIA-StorageUnderstanding storage security requirements
- H12-891 - HCIE-DatacomAdvanced networking expertise
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for H12-711 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-01-01
- Announcement date: 2020-08-01
Updates
- Huawei USG6000 Series Firewalls Latest firmware updates Enhanced IPS and threat intelligence features may appear in future exam updates • Release date: 2024-Q3
- Huawei Policy Center V100R006 Improved SACG integration and user management features • Release date: 2024-Q2
- SSL/TLS Standards TLS 1.3 Increased focus on modern encryption protocols and deprecation of older standards • Release date: Ongoing adoption
Who should take this exam?
This exam is typically taken by Network security engineers and System administrators.
- Basic understanding of TCP/IP networking
- Familiarity with network security concepts
- Experience with router and switch configuration
- Understanding of Windows and Linux operating systems