Enhance Your HCIE-Datacom V1.0 Exam Preparation with Huawei H12-891_V1.0-ENU Dumps V11.02

1. IPv6 is deployed on a campus network for service tests. In the initial phase of deployment, engineers want to use IPv6 static routes to implement network interconnection. When creating an IPv6 static route, you can specify either or both the outbound interface and next hop.

2. OSPF fast convergence is an extended feature designed to speed up route convergence. When the network topology changes, partial route calculation (PRC) recalculates routes only for affected nodes, speeding up route calculation.

3. Atter policy association is deployed on a campus network, the control device and access device establish CAPWAP tunnels to complete user association, exchange messages, deliver user authorization policies, and forward users' service data.

4. The major routing policy tools available to BGP include the filter-policy and route-policy. The filter-policy can only be used to filter routes, and the route-policy can only be used to modify routes.

5. For the same MAC address, a manually configured MAC entry has a higher priority than an automatically generated MAC entry.

6. In OSPF, an ABR translates all Type 7 LSAs in a Not-So-Stubby Area (NSSA) into Type 5 LSAs.

7. YANG, deriving from NETCONF, is not only applicable to NETCONF. Currently, both the YANG modeling language and YANG file have been unified.

8. The SBFD state machine running on the initiator has only the up and down states and can alternate only between the two states.

9. In a distributed gateway scenario, VNIs are classified into L2VNIs and L3VNIs. An L2VNI is mapped to a BD in 1:1 mode for forwarding of VXLAN packets within a subnet. An L3VNI is associated with a VPN instance for forwarding of VXLAN packets across subnets.

10. If the K bit in the GRE header is set to 1, a 4-byte Key field is inserted into the GRE header. The sender and receiver then authenticate each other based on this key.

11. The Accept-Language field in the HTTP request header indicates the languages preferred by a client as a response to the request.

12. Portal authentication is recommended for scenarios with high mobility and numerous terminal types, such as shopping malls and supermarkets. MAC address authentication is recommended for dumb terminals that do not support Portal authentication, such as printers, fax machines, and IP phones.

13. The enterprise WAN provides interconnection between enterprise headquarters and branches, between enterprises and clouds, and between clouds.

14. For telemetry data push, data can be transferred between devices and collectors using the TLS protocol. TLS must be configured for data encryption if data is pushed based on gRPC.

15. SSH must be configured before you can enable NETCONF on Huawei network devices.

16. SR is a technology that forwards data packets based on source IP addresses.

17. Segment Routing (SR) is a technical architecture designed to forward data packets on a network based on the source routing paradigm. SR-MPLS, as its name suggests, is SR based on MPLS label forwarding.

18. In 6PE and 6VPE networking, no VPN instance needs to be created on PEs.

19. In the firewall hot standby scenario, heartbeat interfaces can be connected directly or through an intermediate device such as a switch or router.

20. By default, the domain ID of an OSPF process is the same as the process ID. You can run the domain-id command in the OSPF process view to change a domain ID.

21. In DU label advertisement mode, if the liberal label retention mode is used, the device reserves labels received from all the LDP peers regardless of whether the LDP peer is the optimal next hop for reaching the destination network.

22. In Huawei SD-WAN Solution, atter a CPE goes online, it automatically selects an RR without the help of iMaster NCE-WAN.

23. On a CloudCampus virtualized campus network, virtual networks are defined based on services. Each virtual network corresponds to a service, and isolation needs to be manually configured between virtual networks.

24. On a virtualized campus network, all devices in a VXLAN domain must support VXLAN.

25. VXLAN identifies tenants using VNIs, which are 24 bits long. A tenant can have one or more VNIs, and VXLAN supports a maximum of 12 million tenants.

26. When you configure a virtualized campus network on iMaster NCE-Campus, creating a virtual network is equivalent to creating a VPN instance to isolate different services.

27. If the ipv6 enable topology standard command is run in the IS-IS view, IPv4 and IPv6 share the same topology.

28. When an SSH client logs in to the SSH server that is configured only with user name and password authentication in SSH mode, the key exchange phase is not involved (no key is generated).

29. As shown in the following figure, by using a route-policy changes the MED value of the route sent from R1 to R2, the network administrator can control the traffic through which path leaves AS 100.

30. In BGP/MPLS IP VPN deployment, the address space of a site that is shared by two VPNs must not overlap with the address spaces used by other sites of the two VPNs, there is no any risk in this scenario.

31. Network admission control can be deployed at different network layers based on actual network requirements. Deploying it at the access layer can achieve more granular permission management and higher network security than doing so at the aggregation or core layer.

32. An SRLB is a set of user-specified local labels reserved for SR-MPLS. These labels are locally configured and have only local significance. Therefore, they are not advertised through the IGP

33. To prevent hackers from attacking user devices or networks using MAC addresses, you can configure MAC addresses of untrusted users as blackhole MAC addresses to filter out such invalid MAC addresses. When receiving a packet whose source or destination MAC address is a blackhole MAC address on a device, the device discards the packet.

34. In a scenario where a VXLAN tunnel is dynamically established through BGP EVPN, BGP EVPN advertises the MAC address of a host to the remote VTEP through a Type 5 route.

35. An SRv6 Policy can be either statically configured on a device, or be delivered to a device after being dynamically generated by the controller.

36. In the firewall hot standby scenario, when VGMP works in load balancing mode, which of the following functions must be enabled on the firewalls to prevent the return traffic from being discarded because it does not match any session entry in the case of inconsistent forward and return paths?

37. Which of the following items is not involved in dynamic data collection before a migration is performed?

38. A network administrator fails to access devices on the internal network through Telnet.

Which of the following causes is the most impossible?

39. In a scenario where a VXLAN tunnel is dynamically established through BGP EVPN, which of the following fields is not carried in BGP EVPN Type 2 routes?

40. When an NVE encapsulates a data frame into a VXLAN packet, information of which of the following protocols is encapsulated between the outer IP header and the VXLAN header?

41. As shown in the figure, the CES and PEs run OSPF for communication.

When CE1 advertises the routes of its site to CE2, which of the following statements is incorrect?

42. Assume that the SRH of an SRv6 packet has five segment IDs.

When the packet arrives at the third endpoint, how many segment IDs does the SRH have?

43. Which of the following is the drop probability of packets exceeding the upper threshold in WRED?

44. NCE-Campus. The figure shows the configured policy control matrix.

Which of the following statements about the policy control matrix is incorrect?

45. Huawei CloudCampus Solution provides location-based services (LBS), obtains Wi-Fi-based terminal location data, and reports the data to developers' LBS applications. In this case, terminal locations within a certain range can be calculated.

Which of the following statement is incorrect about the interactions between the LBS application and iMaster NCE?

46. Which of the following protocols is used in Huawei SD-WAN Solution to report device performance data?

47. Which of the following statements is incorrect about BGP/MPLS IP VPN data forwarding?

48. In the topology shown in the following figure, OSPFv3 runs on the entire network.

If no external routes are imported, which of the following types of LSAs will not be generated on R1?

49. Fabric nodes need to be planned during fabric design on a CloudCampus virtualized campus network.

Which of the following statements about node planning on a fabric is incorrect?

50. Which of the following parameters is not included in an IPsec security association (SA)?

51. On a carrier's MPLS VPN network, PE1 and PE2 transmit data packets between VPNs. After PE1 receives VPN route 172.16.1.0/24 from a client, it converts the route into a VPNv4 route and distributes label 1027 to PE2. For the FEC of LSR-ID in PE1, the label value distributed by PE2 is 1025.

When a client on PE2 accesses this route, what are the outer and inner labels in the packet transmitted out of PE2?

52. Assume that free mobility is deployed on the virtualized campus network shown in the figure and PC1, PC2 and PC3 belong to the Sales, R&D and Market security groups, respectively.

Which of the following statements is incorrect?

53. In the SSH algorithm negotiation phase, the SSH server and client exchange the list of algorithms that they support. The list of symmetric encryption algorithms of the SSH server is as follows: aes256-ctr, aes192-ctr, aes128-ctr, and aes256-cbc. The list of symmetric encryption algorithms of the SSH client is as follows: aes128-ctr, aes192-ctr, aes256-ctr, and aes256-cbc.

Which of the following symmetric encryption algorithms can be used by both the SSH server and client?

54. If network administrator A wants to use an ACL to match only routes 1, 3, 5, and 7 shown in the following figure, what is the minimum number of ACL rules that must be configured?

A 1

B. 2

C. 3

D. 4

55. Portal authentication, also known as web authentication, is used to authenticate user identities on a web authentication page.

Which of the following statements about Portal authentication is incorrect?

56. In a scenario where BGP EVPN is used to dynamically establish a VXLAN tunnel, which of the following statements is incorrect when EVPN Type 2 is used to advertise host ARP entries and IP routes?

57. Which of the following steps is not mandatory when manually configuring an OSPF-based SR- MPLS BE tunnel?