2022 Newly Updated Huawei H12-891_V1.0 Exam Material

dumps2022-08-10T01:31:17+08:00

Huawei H12-891_V1.0 exam updated material is available, which is your best material to pass and get HCIE-Datacom certification. If you are preparing for your Huawei H12-891_V1.0 exam, the newly updated H12-891_V1.0 material is a big helper. We all know that HCIE-Datacom certification is much popular among those Huawei candidates. Studying the updated H12-891_V1.0 material can save much of your time. Free Huawei HCIE-Datacom H12-891_V1.0 exam updated material is available below.

Page 1 of 18

1. According to different network conditions, Layer 2 Portal authentication or Layer 3 Portal1 authentication can be deployed in the network. Which of the following descriptions is wrong?

When there is a Layer 2 network between the client and the access device, that is, the client and the access device are directly connected (or only Layer 2 devices exist between them), then Layer 2 Portal authentication can be configured.

When using Layer 2 authentication, the access device can learn the MAC address of the client, and the access device can only use the MAC address to identify the user

When there is a Layer 3 network between the client and the access device, that is, there is a Layer 3 forwarding device between the client and the access device, you need to configure Layer 3 Portal authentication.

When using Layer 3 authentication, the access device can learn the IP address of the client and use the IP address to identify the user

2. In the campus VXLAN network, which of the following equipment is used to connect the Fabric and the external network of the Fabric?

Extended

Brder

Transparent

Edge

3. In the scenario of establishing a VXLAN tunnel in the BGP EVPN state, which of the following descriptions about the role of BGP EVPN Type 3 routes is wrong?

If the VTEP IP address carried by the received Type3 route is reachable by the Layer 3 route, a VXLAN tunnel to the peer will be established.

Type3 routing will carry L3 VNI

Type3 routing transmits Layer 2 and VTEP IP address information

In the case where the VTEP IP address of the Type3 route is reachable at Layer 3, if the peer end is the same as the local end, a headend replication table is created for subsequent BUM packet forwarding

4. The GRE tunnel supports the MPLS LDP function.

TRUE

FALSE

5. BIER, as a new forwarding technology, adopts the basic IGP routing protocol and unicast routing forwarding mechanism, so that there is no need to run IGMP between the multicast receiver and the multicast router.

TRUE

FALSE

6. In the process of client SSH login to a server configured with username and password authentication only, it will not go through the key exchange stage (no key will be generated).

TRUE

FALSE

7. As shown in the figure, which of the following descriptions is wrong?

The packet information of VLAN configuration delivered by NETCONF protocol is as follows:

The purpose of this NETCONF message is to create VLAN 10 on the device.

The <target> tag indicates the configuration library used by the NETCONF message. In this example, it is the startup configuration library.

<edit-config> indicates that the function of the message is to modify, create or delete configuration data

<protocol Vlan xc: operation="merge"> means modify the existing or non-existing target data in the configuration database, create if the target data does not exist, and modify if the target data exists

8. Which of the following descriptions about BGP/MPLS IP VPN routing interaction is wrong?

After receiving the VPNv4 route advertised by the ingress PE, the egress PE filters the VPNv4 routes according to the RT attribute carried by the route.

The egress PE can send IPv4 routes to the remote CE through BGP, IGP or static routes

The exchange between PE and CE is IPv4 routing information

The ingress PE converts the IPv4 routes received from the CE into VNPv4 routes, and saves them according to different VPP instances

9. Network slicing technology can divide exclusive network resources in the network to carry high-value service traffic. Which of the following descriptions about network slicing is wrong?

The channelized sub-interface technology adopts single-layer scheduling to realize flexible and refined management of interface resources and provide bandwidth guarantee

Generally, network slicing can be realized based on the channelized sub-interface FlexE technology

The layer used by the network slicing technology is different from that of the SR tunnel, and can be used at the same time as the SR tunnel

FlexE technology divides resources according to TDM time slots, satisfies the requirements of exclusive resource sharing and isolation, and realizes flexible and refined management of interface resources

10. Based on the information given in the figure, which of the following statements is correct?

Unable to determine the device type of R3

The device type of R3 must be Level-1-2

The device type of R3 must be Level-2

The device type of R3 must be Level-1

Page 2 of 18

11. Which of the following regular expressions can match only the BGP route entries that pass through AS300 and then AS200?

^200|^300

200$|300$

_200 (200 300) _

_200[200 300]_

12. As shown in the figure, the host implementing the 10.0.1.0/24 network segment accesses 10.0.4.0/25 unidirectionally through virtual system a (vsysa) and virtual system b (vsysb). Which of the following commands need to be used to configure the route?

Configure the following command on virtual execution system b: ip router-static vpn-instance vsysb 10. 0.1.0 255.255. 255.0 vpn-instance vsysa

Configure the following command on virtual system a: ip route-static 10.0.1.0 255. 255.255.0 10.1.2.1

Configure the following command on virtual system a: ip route-static vpn-instance vsysa 10.0.4.0 255.255.255.0 vpn-instance vsysb

Configure the following command on virtual execution system b: ip route-static 10.0.4.0 255. 255. 255.0 10. 0.34.4

13. Which of the following descriptions about the difference between SPFv2 and SPFv3 are correct?

Both SPFv2 and SPFv3 support interface authentication, and OSPFv3 authentication is still implemented based on the fields in the SPF packet header

SPFv3 is similar to SPFv2 and uses the multicast address as the destination address of SPF packets

SPEv2 and OSPFv3 have the same type of packets: Hello, ODD, LSR, LSU, LSAack, and their packet formats are the same

The protocol number of SPFv2 in the IPv4 header is 89, and the next header number of OSPFv3 in the IPv6 header is 89

14. When troubleshooting the BGP neighbor relationship, the network administrator finds that two directly connected devices use the Loopack port to establish a connection, so run display current-configuration configuration bgp to check the configuration of peer ebgp-mat-h p h p-c tnt.

Which of the following descriptions about the command is correct?

h p-c unt must be greater than 15

h p-c unt must be greater than 255

h p-c unt must be greater than 12

h p-c unt must be greater than 1

15. When there are multiple redundant links in the IS-IS network, there may be multiple equal-cost routes.

Which of the following descriptions about equal-cost routing in an IS-IS network is wrong?

When the number of equal-cost routes in the network is greater than the number configured by the command, and these routes have the same priority, the route with the larger system ID of the next hop device is preferred for load balancing

If load balancing is configured, the traffic will be evenly distributed to each link

After the equal-cost route priority is configured, when the IS-IS device forwards the traffic reaching the destination network segment, it will not adopt the load balancing method, but forward the traffic to the next hop with the highest priority

For each route in the equal-cost route, a priority can be specified, the route with the highest priority will be preferred, and the rest will be used as backup routes

16. Which of the following descriptions about traffic policing is correct?

Traffic policing can only be used in the inbound direction

Traffic policing will cache traffic that exceeds the limit

Traffic policing can only be done in the outbound direction

Traffic policing will drop traffic that exceeds the limit

17. IS-IS is a link-state routing protocol that uses the SPF algorithm for route calculation.

As shown in the figure, a campus deploys both IPv4 and IPv6 and runs IS-IS to achieve network interconnection. R2 only supports IPv4.

Which of the following statements about the topology calculation of this network is correct?

If you want IPv4 and IPv6 network computation to form the same shortest path tree, you need to run the ipv6 enable topology ipv6 command to enable the IPv6 capability in the IS-IS process

By default, since R2 does not support IPv6, in the shortest path tree formed by IPv6 network calculation, the path from R1 to R4 is: R1-R3-R4

By default, IPv4 and IFv6 networks will be calculated separately to form different shortest path trees

By default, in the shortest path tree formed by IFv6 network calculation, the path from R1 to R4 is R1-R2-R4. Since R2 does not support IFv6, R2 will directly discard IPv6 packets after receiving them, causing traffic lost

18. When the switch is deployed with DHCP option 148, which of the following information will not be provided by the DHCP server to the switch to be deployed?

The IP address of the cloud management platform

The port number of the cloud management platform

The port number of the device to be deployed

The IP address of the device to be deployed

19. When the user encounters different events during the authentication process, the user is in an unsuccessful authentication state. At this time, you can configure the authentication event authorization to meet the needs of these users to access specific network resources.

Which of the following descriptions about authentication event authorization is wrong?

If the user's network access rights are not configured when the authentication fails or the authentication server is Down, after the user authentication fails, the user remains in the pre-connected state and has the network access rights of the pre-connected user

Authentication event authorization can support authorization parameters including VLAN, user group and business scheme

Events that can trigger authentication event authorization include authentication server Down, authentication server unresponsive, and pre-connection, etc. Authentication failure cannot trigger authentication event authorization

Authorization of a non-authentication success state, also known as escape. For different authentication methods, there are different escape schemes. Some escape schemes are shared, and some escape schemes are only supported by specific authentication methods.

20. In the virtualized campus network deployed through ilMaster NCE-Campus, some key parameters need to be configured in the authorization rules for access authentication. Which of the following is not included?

Binding authentication rules

Access method

Bind the authorization result

Authorization Rule Name

Page 3 of 18

21. Which of the following extended community attributes is used by BGP EVPN to advertise the migration of connected VMs?

EVPN Router’s MAC Extend Community

MAC Mobility

22. In the Huawei SD-WAN solution, which of the following routing protocols are used to transmit VPN routes between CPEs?

BGP

RIP

SPF

IS-IS

23. The OSPF-based SR-MPLS function is enabled on all routers in a network. The SREB of each router is shown in the figure. By default, when R3 forwards a packet whose destination address is 10.0.4.4, which of the following MFLS labels is carried item?

100

40100

50100

24. SR-MPLS Policy can use BGP extension to transmit tunnel information, as shown in the figure.

Among them, SR-MPLS Policy is optimized by which of the following parameters?

Priority

Preference

Weight

Binding SID

25. The network administrator enters display telemetry subscription on the device to view the Telemetry subscription information, and the output is as follows. Which of the following descriptions is wrong?

The subscription name is Sub1

The device sends sampling data every second

The IP address of the device is 192.168.56.1

The subscription method is static subscription

26. Which of the following statements about the difference between NSR and NSF is correct?

NSF must rely on neighbor routers to complete

Both NSR and NSF require neighbor routers to complete

NSF can be done without neighbor routers

NSR must rely on neighbor routers to complete

27. The RF function of the BGP protocol can control the routing entries sent by the neighbors.

Which of the following tools does a BGP router need to use for this purpose?

Filter-Policy

IP Prefix List

ACL

Route-Policy

28. In the process of establishing an LDP session, the active party will first send Initialization information to negotiate parameters. If the passive party does not accept the negotiated parameters, which of the following messages will be sent?

Error Notification Message

Initialization Message

Hell Message

Keepalive Message

29. If the configuration of IS-IS can be found through the display current-configuration command, but the configuration of IS-IS cannot be found through the display saved-configuration command, which of the following is the possible reason?

The running IS-IS configuration in the memory is not saved to Flash

No IS-IS command entered

Flash running IS-IS configuration, not saved to memory

The running IS-IS configuration in memory has been saved to Flash

30. The IS-IS Level-1 neighbor relationship between R3 and R4 is not established.

[R3] display isis error

Hell packet errors ：

... ...

Repeated System ID ： 0 Bad Circuit Type ： 0

Bad TLV Length ： 0 Zer Holding Time ： 0

Unusable IP Addr ： 0 Repeated IPV4 Addr ： 0

Mismatched Area Addr （ L1 ）： 13 Mismatched Prot ： 0

SNPA Conflicted （ LAN ）： 0 Mismatched Level ： 0

Mismatched Max Area Addr ： 0 Bad Authentication ： 0

... ...

[R3]

Based on the information in this graph, which of the following is the likely cause?

The IIH authentication of R3 and R1 failed

The circuit-type of the interconnection interface of R3 and R4 does not match

The IS-Level of R3 and R4 do not match

The area numbers of R3 and R4 are different

Page 4 of 18

31. Which of the following does not belong to the scope of dynamic data collection on the live network before cutover?

Routing Protocol Status

ARP entry

Port Status

SNMP version

32. The network administrator uses ACL and only wants to match the four routing entries whose Num numbers are 1, 3, 5, and 7 in the figure. What are minimum numbers of ACL ruler need to be configured by the network administrator?

33. As shown in the figure, the ARP broadcast suppression function is enabled in the BD20 domain on VTEP1, and VTEP1 has learned the ARP information of PC2 through the BGP EVPN route. When the ARP request sent by PC1 for PC2 is forwarded by VIEP1 to VIEP2, which of the following is the destination MAC address of the inner data frame?

MAC C

MAC A

MAC B

MAC D

34. Which of the following statements about choosing an authentication point location in a network is incorrect?

Deploying authentication at the access layer of the network is conducive to fine-grained management of permissions and high network security

After the user authentication point is moved from the access layer to the aggregation layer, the user's MAC authentication may fail

Setting the user authentication point at the access layer has advantages and disadvantages compared to setting it at the aggregation layer or the core layer. Policy linkage can be used as a solution.

When the user authentication point is moved from the access layer to the aggregation layer and the core layer, the number of authentication points is greatly reduced, which can effectively relieve the pressure on the AAA server

35. Which of the following descriptions about "security group" and "resource group" is wrong in Business Travel?

The resource group supports static binding of IP addresses or address segments

On iMaster NCE-Campus, the UCL group is the security group

The any group can be used as both a source group and a destination group

The security group supports static binding of IP addresses or address segments

36. Compared with traditional networks, SD-WAN can better ensure application experience. Which of the following is the main reason?

SD-WAN can use IPsec technology to realize encrypted transmission of packets

SD-WAN can provide different routing strategies and different QoS strategies for different applications

SD-WAN can build various networking types such as Full Mesh, Hub-Spoke, Partial Mesh, etc.

SD-WAN can realize multi-department business isolation based on VRF

37. Assuming that there are 5 segment IDs in the SRH of an SRv6 packet, when the packet reaches the third router on the forwarding path, the node will set the segment ID numbered by which of the following as the IPv6 destination address?

Not sure

38. Which of the following descriptions about Prefix Segmente is incorrect?

On Huawei devices, Prefix Segment ID supports manual configuration and automatic protocol configuration

Prefix Segment is identified by Prefix Segment ID (SID)

Prefix Segment is used to identify a destination address prefix in the network

Prefix Segment spreads to other network elements through IGP protocol, globally unique

39. The following is a part of the NETCONF protocol message, <rpc xmlns="urn:ietf:params:xml:ns:netc nf:base:1.0" message-id="1024">Where is it located in the NETCONF architecture layer?

Transport layer

Message layer

Content Layer

Operation layer

40. There are multiple protocols that can change or obtain network device data. Which of the following protocols cannot be used to change network device data?

SNMP

NETCONF

RESTC NF

IPsec

Page 5 of 18

41. When the client calls the iMaster NCE-Campus login authentication RESTful interface, the method used is POST, and the request message body format is {"userName": "xxx", "password": "xxx"}

TRUE

FALSE

42. BGP-LS (BGP Link State) carries information such as links, nodes and topology prefixes.

TRUE

FALSE

43. Enterprises can access the Internet through dial-up connection, xDSL, xPON, etc.

TRUE

FALSE

44. NVE is a network entity that realizes the function of network virtualization, and can only be a hardware switch.

TRUE

FALSE

45. Switch stacking and cross-device link aggregation can be deployed to achieve link reliability in small and medium-sized campus scenarios.

TRUE

FALSE

46. Using BGP EVPN as the control plane of VXLAN can completely avoid traffic flooding in the VXLAN network, such as ARP broadcast packets.

TRUE

FALSE

47. When MPLS is deployed in the network and the network layer protocol is IP, the route corresponding to the FEC must exist in the IP routing table of the LSR, otherwise the label forwarding entry of the FEC will not take effect.

TRUE

FALSE

48. When there is a relay device between the DHCP client and the server, if the IP address in the global address pool of the DHCP server is not in the same network segment as the IP address of the VLANIF interface connected to the client on the relay device, it will cause a DHCP failure.

TRUE

FALSE

49. In order to speed up the sensing speed of link failure in IS-IS network, IS-IS can be linked with BFD.

TRUE

FALSE

50. In the dual-system hot backup scenario of the firewall, the heartbeat interface can be directly connected physically, or it can be connected through an intermediate device such as a switch or router.

TRUE

FALSE

Page 6 of 18

51. BGP/MPLS IP VPN can only use LDP to build public network tunnels.

TRUE

FALSE

52. YANG technology originated from netconf but is not only used for netconf.

TRUE

FALSE

53. For the telemetry side, both json and GPE are supported.

TRUE

FALSE

54. The SRP technology can flexibly select the egress link based on the link quality.

TRUE

FALSE

55. When the Next header is 43, it must be SRH.

TRUE

FALSE

56. protobus is a language-independent and platform-independent method of serializing structured data, which pays more attention to efficiency, resulting in poor space, speed, and read and write speeds.

TRUE

FALSE

57. For telemetry data push, devices and collectors can be based on TLS. If GRPC is used, TLS must be used.

TRUE

FALSE

58. Netconf uses SSL to achieve secure transmission, and uses the mechanism of RPC remote invocation to achieve client to server communication.

TRUE

FALSE

59. In the Huawei SD-WAN networking solution, the RR must use an independent device and cannot be deployed on the same device with the CPE.

TRUE

FALSE

60. iFIT supports the measurement of end-to-end service packets, so as to obtain performance indicators such as packet loss rate and delay of real service packets in the IP network.

TRUE

FALSE

Page 7 of 18

61. In SRv6, every time an SRv6 endpoint node passes through, the Segments Left field is decremented by 1, and the IPv6 destination address information is converted once.

TRUE

FALSE

62. The MAC address learning of the static VXLAN channel depends on the exchange of packets between hosts (such as the exchange of ARP packets).

TRUE

FALSE

63. The iMaster NCE-Campus controller connects to various applications through open APIs in the northbound direction, and delivers configurations to campus network devices through the Telemetry technology in the southbound direction.

TRUE

FALSE

64. By default, LDP adjacencies will trigger the establishment of LSPs based on IP routes of 32-bit addresses.

TRUE

FALSE

65. IETF takes advantage of the strong scalability of OSPF to expand the functions of OSPF so that it can support IPv6 networks. The expanded protocol is called OSPFv3. OSPFv3 is compatible with OSPPv2.

TRLE

FALSE

66. Traffic shaping can only be used in the outgoing direction, and its function is to control the rate of outgoing packets.

TRLE

FALSE

67. When configuring the DHCP Relay function on the device, the VLANTF interface of the relay connection client must be bound to a DHCP server group, and the bound DHCP server group must be configured with the IP address of the proxy DHCP server.

TRUE

FALSE

68. The following figure shows the MPLS VPN cross-domain Option B solution. In the scenario where an RR exists within the domain, PE1 and ASBR-PE1 establish a VPNv4 neighbor relationship with RR1. By default, user traffic must be forwarded through RR1.

TRUE

FALSE

69. When deploying BGP/MPLS IP VPN, when two VPNs have a common site, the common site must not use overlapping address space with other sites of the two VPNs.

TRUE

FALSE

70. The OPS (Open Programmability System) function of Huawei network equipment provides the open programmability of network equipment. To facilitate users to write scripts, Huawei provides a Python script template for the OPS function. The OPSComnection class is created in the script template. Among them, the member function of creating device resource operation is def post (self, uri, req_data).

TRUE

FALSE

Page 8 of 18

71. In the virtualized campus network scenario deployed by iMaster INCE-Canrpus, to realize user mutual access between different VNs, the administrator can deploy a policy control matrix on the controller.

TRUE

FALSE

72. During the process of establishing the SSH connection, the two communicating parties conduct version negotiation. Which of the following data is not included in the version negotiation packet sent by both parties?

Client Device Type

Minor Protocol Version Number

Software version number

Main agreement version number

73. The NETCONF protocol provides a set of mechanisms for managing network devices, which can be divided into the following layers?

Security transport layer, message layer, operation layer, content layer

Encrypted transport layer, message layer, configuration layer, content layer

Security transport layer, message layer, configuration layer, content layer

Encrypted transport layer, message layer, operation layer, content layer

74. The SSH server has been configured and correct. Which of the following Pythom codes can be run on the SSH client to successfully establish an SSH connection (the private key file is id_rsa, which is in the same path as the client Python script?

import paramiko client=paramiko.client.SSHClient() client.connect(hostname='192.168.1.1', username='huawei', key_filename='id_rsa')

import paramiko client = paramiko.Transport(('192.168.1.1', 22)) client.connect(username='huawei', key_filename='id_rsa')

import paramiko client=paramiko.client.SSHClient() client.connect(hostname='192.168.1.1', username=1 huawei', pkey='idrsa')

import paramiko key = paramiko.RSAKey.from_private_key_file('id_rsa') client = paramiko.Transport((192.168.1.1', 22) client.connect(username=huawei', pkey-key

75. YANG is the data modeling language of NETCONF. The client can compile RPC operations into XML-formatted messages. XML follows the constraints of the YANG model for communication between the client and the server.

Which of the following XML content is written against this data model?

A)

Option A

Option B

Option C

Option D

76. Which of the following is the default port number for the northbound API of iMaster NCE-Campus?

18000

18002

18008

18006

77. In the request header field of the HTTP request message, which of the following fields is used to identify the MIME type?

Content-Type

Data-Type

Referer

MIME-Type

78. The engineer wants to log in to the Huawei device remotely. When writing the SSH Python script, the Paramiko library is used to write the following code:

Cli=ssh.invoke_shell （）

Cli. send （ ‘screen-length 0 temporaryn' ）

Which of the following is the role of screen-length 0 temporary?

Cancel split screen display

Do word wrapping

Cancel word wrap

Perform split screen display

79. As shown in the figure, the gateway of the PC is located in the aggregation switch. If you want to realize the load sharing of the gateway device, which of the following descriptions is wrong?

Set different gateway addresses on the PC so that traffic is sent to different gateways in a balanced manner

The VRID parameter only has local significance, so the VRIDs of the two aggregation switches about the same virtual router can be different

It is necessary to configure the priority to make the aggregation switch become the master device of the two virtual routers respectively

Multiple VRRP backup groups need to be configured on the aggregation switch

80. In BGP4+, which of the following descriptions is correct about the content of the next hop network address field carried by the MP_REACH NLRI attribute in the Update message?

Only link-local addresses

Can only be a global unicast address

Can carry link-local addresses and global unicast addresses at the same time

Can be just a link-local address

Page 9 of 18

81. After the interface sticky MAC function is enabled on the device, what is the number of MAC addresses learned by the interface by default?

82. Which of the following token bucket technologies is used in traffic shaping??

Double barrel single speed

Single barrel double speed

Single barrel single speed

Double barrel double speed

83. In the controller public cloud deployment scenario, if you use the Huawei Registration Query Center to deploy, you do not need to configure DHCP Option148 on the campus DHCP server.

TRUE

FALSE

84. In free mobility, if the authentication point device and the policy enforcement point device belong to the same device, you need to subscribe to the IP-Group entry to view the user IP-Group information.

TRUE

FALSE

85. In the scenario of dynamically establishing a VXLA tunnel through BGP EVPN, BGP EVPN advertises the host's MAC address information to the remote VTEP through Type 5 routes.

TRUE

FALSE

86. View the running configuration in memory through the "display current-configuration" command.

TRUE

FALSE

87. As long as FIT-AP is added in NCE, the AP can go online normally.

TRUE

FALSE

88. In the HUAWEI CLOUD WAN, the controller can plan paths in real time and deliver path information through PCEP or BGPLS.

TRUE

FALSE

89. On the premise that the 32-bit host route of the remote host exists on the VXLAN L3 gateway, the L3 gateway can enable the local ARP proxy under the VBDIF interface to reduce the broadcast of ARP packets. For packets destined for the remote host, the L3 gateway will match the host route for Layer 3 forwarding.

TRUE

FALSE

90. The Huawei iMaster NCE-WAN controller delivers the configuration to the CPE through the NETCONF protocol.

TRUE

FALSE

Page 10 of 18

91. In the virtualized campus network scenario deployed by iMaster NCE-Campus, which of the following descriptions about configuring network service resources is correct?

Network service resources include DHCP server, RADIUS server, Portal server, and other servers, etc.

If the scene is selected as "Directly Connected Switch", it means that Border adds the interconnection port to the interconnection VLAN in an untagged way

The interconnection address in the network service resource must belong to the "interconnection IP" in the "Underlay Automation Resource Pool"

Configuring network service resources is to configure the global resource pool of Fabric

92. How many bits are there in the label field of MPLS?

93. In the description of DHCP Snooping, which one is wrong?

DHCP Snooping can prevent illegal attacks by setting trusted ports

When the DHCP snooping function is enabled in the interface view, the function of assigning all DHCP packets on the interface will take effect.

If DHP Snooping is enabled in VLAN view, the command function of DHCP packets received by all interfaces of the device belonging to the VLAN will take effect.

Enable DHCP Snooping globally, and the device only processes DHCPv4 packets by default without any post-parameters

94. Which of the following routing types does EVPN use to achieve fast convergence and split horizon?

Inclusive Multicast Route

MAC/IP Advertisement Route

Ethernet Segment Route

Ethernet Auto-discovery Route

95. Which of the following is the meaning of the ipv6 enable topology ipv6 command in IS-IS protocol view?

has no meaning

SPF calculation is performed separately in the topology of IPv4 and IPv6

SFF calculation without IPv6 support

IPv4 and IPv6 use the same topology for SPF calculation

96. Which of the following descriptions about the principle of DHCP is wrong?

DHCP supports assigning a fixed IP address to a specified terminal. This assignment mechanism is called DHCP static assignment.

When the DHCP client and the DHCP server are on different Layer 3 networks, a DHCP relay needs to be configured to forward packets between the client and the server

The Options field in the DHCP packet adopts a TLV structure, which can carry parameter information such as the NTP server address, AC address, and log server address.

If only the information of the gateway and DNS server needs to be delivered to the DHCP client, the DHCP Offer packet sent by the DHCP server to the client will not carry the Options field

97. Which of the following descriptions about the VXLAN gateway is wrong?

XLAN Layer 3 gateway is used for cross-subnet communication of VXLAN virtual network and access to external network (non-VXLA network)

VBDIF is a logical interface created based on BD, similar to the concept of VLANIF in traditional networks

Both XLAN Layer 2 and Layer 3 gateways must maintain the VBDIF interface, otherwise users cannot communicate normally through this interface

The XLAN Layer 2 gateway enables traffic to enter the VXLAN virtual network, and can also be used to implement the same subnet communication within the same VXLAN virtual network

98. In the scenario of dynamically establishing a VXLAN tunnel through BGP EVPN, for the VTEP peer to generate BGP EVPN Type 2 routes based on the local terminal ARP information, which of the following commands needs to be enabled on the VBDIF interface?

arp collect host enable

arp-proxy enable

mac-address xxxx-xxxx-xxxx

arp distribute-gateway enable

99. When configuring access authentication, it is necessary to define the contents authorized to the user in the authorization result, which one of the following is not included?

Security Group

ACL

VLAN

IP address

100. In the Huawei SD-WAN solution, which of the following protocols is used for the control channel?

Static routing

BGP4

BGP VPNv4

BGP EVPN

Page 11 of 18

101. Which of the following descriptions about SR-MPLS BE and SR-MPLS TE is correct?

SR-MPLS BE supports creating a tunnel by specifying Node SID and Adjacency SID at the same time

Both SR-MPLS BE and SR-MPLS TE support tunnel creation by specifying the Adjacency SID

SR-MPLS TE supports creating a tunnel by specifying Node SID and Adjacency SID at the same time

When creating an SR-MPLS BE, you can specify the necessary routers

102. The network administrator enters display telemetry sensor Sensor1 on the device to view the related information of the Telemetry sampling sensor Sensor1, and the output is as follows. Which of the following descriptions is wrong?

Telemetry samples CPU information, memory information, and MAC address table

The device is configured with three Telemetry sampling paths

For the sampling path huawei-mac: mac/macAddrSurmarys/macAddrSurmary, when the capacity of the mac address table does not reach 40000, the device will continue sampling

The device can continue to add Telemetry sampling paths

103. The <config> operation of the NETCONF protocol may contain an optional "operation" attribute, that is used to specify the operation type "operation" for configuration data that does not include which of the following?

create

remove

update

merge

104. There are various types of northbound interfaces, ranging from SUMP, CORBA, SMP to REST, but nowadays the northbound interfaces of various devices are gradually evolving to REST interfaces.

Which of the following is NOT a reason to use REST?

REST adopts a stateless design

REST standardizes URI naming

REST realizes front-end and back-end coupling

REST has good cross-platform compatibility

105. Which of the following protocols can be used by the iMaster NCE service open and programmable to complete the device configuration?

BGP

CLI/SSH

NETCONF

SNMP

106. Which of the following descriptions about labels is wrong?

The principle to be followed when manually assigning labels is: the value of the outgoing label of the upstream node is the value of the incoming label of the downstream node

Dynamic LSPs are dynamically established through label distribution protocols, such as MP-BGP, RSVP-TE, LDP

LSPs are classified into two types: static LSPs and dynamic LSPs: static LSPs are manually configured by the administrator, and dynamic LSPs are dynamically established using label protocols.

LSPs established by statically assigning labels can also be dynamically adjusted according to network topology changes without administrator intervention

107. In the data header, which of the following fields cannot be used for simple flow classification?

DSCP

Protocol

EXP

802.1P

108. Which of the following descriptions about the functions of Ping and Tracert is correct?

Tracert has the same function as Ping, but the name is different

Tracert must be able to trace the IP address of each hop from the source to the destination

Ping verifies the reachability from the local end to the peer end, but it does not mean that the peer end to the local end must be reachable

Ping detects the two-way reachability with the peer through the one-way icmp echo request message

109. Which of the following NPLS L3VPN cross-domain solutions does not need to run MPLS between ASBRs?

Option B

Option D

Option A

Option C

110. When the network administrator tried to access the internal network device through Telnet, it was found that it could not be accessed.

Which of the following is impossible?

The protocol inbound all is configured on the VTY user interface

The route is unreachable, and the client and server cannot establish a TCP connection

ACL is bound in the VTY user interface

The number of users logged into the device has reached the upper limit

Page 12 of 18

111. In the scenario of dynamically establishing a VXLAN tunnel through BGP EVPN, which of the following routes is used by BGP EVPN for MAC address advertisement, ARP information advertisement and IRB route advertisement?

Type1

Type3

Type4

Type2

112. A company's headquarters network and branch network are interconnected through the Internet. If VPN technology is used to realize secure and reliable data transmission between headquarters users and branch users, which of the following VPN technologies is most suitable?

SSL VPN

MPLS VPN

L2TP VPN

IPsec VPN

113. Which of the following descriptions about access control for small and medium-sized campuses is wrong?

iMaster NCE supports directly as an authentication server

Cloud AP supports Portal local authentication

iMaster NCE supports connection to third-party RADIUS servers

iMaster NCE supports as a portal relay device

114. Which of the following descriptions about data encryption methods is wrong?

Data encryption methods are divided into symmetric encryption and asymmetric encryption

Symmetric encryption algorithms use the same key to encrypt and decrypt data

Asymmetric encryption uses public key encryption and private key decryption

The key used by the symmetric encryption algorithm must be exchanged by mail, otherwise there is a risk of key leakage

115. IPsec SA (Security Association) triple does not include which of the following parameters?

Source IP address

Security protocol number (AH or ESP)

Destination IP address

Security Parameter Index SPI (Security Parameter Indez)

116. Which of the following descriptions about GRE tunnels is incorrect?

GRE can encapsulate IPv4 unicast packets

The implementation mechanism of GRE is simple, and the burden on the devices at both ends of the tunnel is small.

GRE can encapsulate IPv6 unicast packets

GRE can encapsulate IPv6 broadcast packets

117. If there are multiple service packets on the same link, in order to give priority to the use of high-priority applications when the link is congested, and low-priority applications to avoid high-priority applications when congestion occurs, then you should choose Which of the following is an intelligent routing strategy?

Routing based on link priority

Routing based on application priority

Routing based on link bandwidth

Routing based on link quality

118. SR-MPLS TE distributes MPLS labels through which of the following protocols?

RSVP-TE

PCEP

IGP

LDP

119. The deployment of a virtualized campus network is shown in the figure. In this scenario, which method should be used to interconnect the fabric with the external network?

Layer 2 shared egress

Layer 3 Shared Export Mode

Layer 2 exclusive export method

Layer 3 exclusive export method

120. Which of the following is not a principle that needs to be followed when designing an SR-MPLS Policy tunnel?

The traffic of a single tunnel should not be too large. To facilitate progress in bandwidth tuning

Business traffic and tunnel association. Achieve a certain level of path visibility

Consider possible future network expansion

Increase the number of tunnels as much as possible. The more the number of tunnels, the more refined the high-level service can be separated and the service quality can be guaranteed

Page 13 of 18

121. The OPS (Open Progrannability System. Open Programmable System) function of Huawei network equipment uses the HTTP protocol method to access the management objects of network equipment. To facilitate users to write scripts, Huawei provides Fython script templates for the OPS function. Which of the following is the content of the header fields "Content-type" and "Ahccept" in the HTTP request message sent in the Pythorn script template?

text/xml, text/json

text/json, tcxt/xml

text/json. text/json

text/xml, text/xsml

122. Which of the following descriptions cannot be the cause of the dual-active failure of the VRRP backup group?

The master device sends 1 notification message per second

VRRP backup group IDs on both ends are different

The link that transmits VRRP advertisement packets is faulty

The low-priority VRRP backup group discards the received VRRP advertisement packets as illegal packets

123. MACsec can provide users with secure MAC layer data transmission and reception services.

Which of the following is not a service provided by MACsec?

Integrity Check

Controllability Check

User Data Encryption

Data source authenticity verification

124. Which of the following regular expressions can match only the EGP route entries that pass through AS300 and then AS200?

200$/300$

_[200 300]_

_(200 300)_

^200l^300

125. Which of the following descriptions about TTL in MPLS Header is correct?

To control label distribution

Limiting LSR

Similar to the TTL in the IP header, it is used to prevent packet loops

Control of upstream equipment for label distribution

126. As shown in the figure, OSPF is enabled on all interfaces of the router. Which of the following statements is correct?

The Type1 LSA generated by R2 in area 0 contains the routing information of 10.0.2.2/32

The Type5 LSA generated by R2 in area 0 contains the routing information of 10.0.2.2/32

The Type2 LSA generated by R2 in area 0 contains the routing information of 10.0.2.2/24

The Type3 LSA generated by R2 in area 0 contains the routing information of 10.0.2.2/32

127. During HTTP communication, the client only sends one request for each HTTP connection, and once the server response data is sent, the connection will be released.

To solve this problem, which header field extension is used so that the HTTP session can be maintained without immediate disconnection?

Session

Set-Cookie

Connection

128. As shown in the figure, if you want to realize that only legitimate users (users who obtain IP addresses through a legitimate DHCP server or specific static IP users) are allowed to access the network in this network, which of the following solutions can be used?

DAI +Port Security

DHCP Snooping+IPSG

DHCP Snooping+DAI

DAI+IPSG

129. In order to enable the VPN instance to advertise IP routes to the BGP-EVPN address family, which of the following commands needs to be enabled in the BGP view?

advertise 12vpn evpn

advertise irb

advertise vpnv4

advertise irbv6

130. An enterprise wants to centrally and securely manage and control Internet traffic. Which of the following Internet access methods is more appropriate?

Internet access by priority

Centralized Internet access

Hybrid Internet access

Local Internet access

Page 14 of 18

131. In the MA network environment, all IS-IS routers enable the SR-MPLS function. Which of the following descriptions is correct?

DIS will collect the SRGB of each device in the MA network and advertise it to other routers

If SR-MPLS is enabled, there is no need to elect DIS

The LSP generated by DIS will describe all IS-IS routers in the network

DIS will generate a special Node ID

132. As shown in the figure, PE1 has enabled the OSPF-based SR-MPLS function. Based on this, it is inferred that the label when PE1 forwards data packets to 10.0.3.3 is which of the following?

24003

24004

24001

133. MPLS LDP can be used to build BGP/MPLS IP VPN bearer tunnels. Which of the following descriptions about MPLS LDP is wrong?

The default label publishing and management methods adopted by Huawei devices are: downstream autonomous mode (DU) + ordered label control mode (Ordered) + free label retention mode (Liberal)

MPLS LDP tunnels are established based on IP shortest paths, and tunnel forwarding path planning cannot be performed

LDP, RSVP-TE, MP-BGP share the label space of 1024~1048575

Due to its relatively simple configuration and maintenance, BGP/MPLS IP VPNs are widely used in carrier WAN bearer networks and enterprise WAN bearer networks

134. SR-MPLS Policy is one of the current mainstream ways to implement SR-MPLS. Which of the following descriptions about SR-MPLS Policy is wrong?

Common SR-MPLS Policy application scenarios the controller collects information such as network topology, network bandwidth, link delay, etc., calculates the SR-MPLS Policy tunnel according to service requirements, and delivers the policy to the head node

A candidate path can contain multiple forwarding lists, load balancing based on weights

An SR-MPLS Policy is identified by the triplet <headend, color, endpoint>

Multiple candidate paths can be defined, and the candidate paths form a master-standby or load-sharing relationship according to their priorities

135. The NETCONF protocol provides a mechanism for managing network devices. The operation object of NETCONF is the configuration library of network devices. Which of the following descriptions of the configuration library is wrong?

<delete-config> is an operation on the startup configuration library

The configuration library of network devices can be divided into candidate configuration library, running configuration library, and startup configuration library

<validate> is the operation on the candidate configuration library

<commit> will submit the configuration in the startup configuration library as the configuration in the running configuration library

136. The establishment of an SSH connection needs to go through multiple stages in turn. Which of the following descriptions is correct?

Version negotiation stage, algorithm negotiation stage, key exchange stage, user authentication stage, session interaction stage

Version negotiation phase, user authentication phase, key exchange phase, algorithm negotiation phase, session interaction phase

Version negotiation stage, user authentication stage, algorithm negotiation stage, key exchange stage, session interaction stage

Version negotiation stage, key exchange stage, algorithm negotiation stage, user authentication stage, session interaction stage

137. Which of the following descriptions about the purpose of configuring LSP fragmentation on IS-IS equipment is correct?

Make the device unable to establish IS-IS neighbors

Enable the device to support more IS-IS routing entries

Have no practical purpose

Prevent the device from learning IS-IS routing information

138. Which of the following tools cannot be used to match BGP routing entries?

Community Filter

IP Prefix List

Basic ACL

Advanced ACL

139. Which of the following NAT64 prefixes do not require manual configuration by the administrator?

64:FF9B::/16

64:FF9B::/32

64:FF9B::/64

64:FF9B::/96

140. In order to advertise IPv6 routes in BGP4+, what fields are added to the Update message?

A new path attribute: IPv6_REACH_NLRI

A new path attribute: MP_REACH_NLRI

A new path attribute: MP_UNREACH_NLRI

A new NLR type: IPv6_NLRI, which carries IPv6 NLRI prefix 1ength and IPv6 NLRI prefix

Page 15 of 18

141. In the VXLAN network, which of the following is used to realize cross-subnet communication within the VXLAN network and access to the external network (non-VXLAN network) from the VXLAN network?

VXLAN L2Gateway

VLANIF interface

NVE interface

VXLAN L3 Gateway

142. For scenarios that need to support advanced security functions such as URL filtering, IPS, security defense, and AV anti-virus, and need to support multi-link uplinks, which one of the following can the export device choose?

143. In the VXLAN network, similar to the traditional network using VLAN to divide the broadcast domain, VXLAN identifies the broadcast domain locally according to which of the following?

VRF

VNI

NVE

144. EVPH supports multiple service modes. In which of the following service modes, an interface can only be used by a single user?

VLAN Based

Port Based

VLAN Bundle

VLAN-Aware Bundle

145. During the implementation of the Wi-Fi-based location service of iMaster NCE-Campus, the terminal data is reported to the location service platform by HTTP request. Which of the following HTTP methods is used for this HTTP request?

PUI

POST

DELETE

GET

146. In Huawei's access control solution, which of the following user authentication methods is not supported by portal authentication?

Based on Passcode

SMS-based verification code

Based on the user's MAC address

Username based password

147. Which of the following tunneling technologies is used in Huawei SD-WAN solution to establish data channels?

GRE over IPsec

MPLS

IPsec

Vxlan

148. NCE-campus has some key parameters when configuring access authentication and authorization, which one of the following is not included?

Certification Rules

Result name

Site binding

Authorized Security Groups

149. Which AP is independent, can manage a small number of APs, has low cost, and does not require high management skills?

Leader AP

FIT AP+AC

FAT AP

Agile distribution of AP

150. Before the SSH client uses public key authentication to connect to the SSH server, it needs to create a key pair in advance. The client uses Git Bash to create a DSS key pair. Which of the following commands is used to create it?

ssh-keygen -t rsa

ssh-keygen -t dss

ssh-keygen -t ecc

ssh-keygen -t dsa

Page 16 of 18

151. In SD-WAN, after deploying NAT in RR, what kind of features are required?

NAT SERVER

1:1 NAT

NAT444

ALG

152. Which of the NCE-Campus descriptions about the access management configuration is wrong?

A template can only have one authentication method

NCE device can be used as Radius server or portal server

Fabric needs to specify wired or wireless templates

Before creating a user template, you must first create a server template

153. When configuring SR-MPLS, which of the following is not mandatory?

Enable MPLS

Enable SR

Configure LSR-ID

Link configuration Adj-Sid

154. Traffic monitoring does not include monitoring which of the following?

Management plane traffic

Control Plane Traffic

Monitor plane traffic

Data plane traffic

155. There are three roles in strategy linkage. Which of the following is not?

Authentication Control Point

Terminal

Policy enforcement point

Certification enforcement point

156. In SD-WAN, CPE is located in the private network area behind the NAT device. NAT technology is required between CPE. Which technology in SD-WAN enables NAT between CPE?

STUN

IPSEC

NAT SERVER

ALG

157. Engineers often log in to the device remotely to check the status of the device. Now engineers want to realize automatic remote login through Python script, they can use Python Paramiko library and telnetlib library to achieve the above requirements. Using telnetlib to achieve remote login is more secure.

TRUE

FALSE

158. In an MPLS domain, LSR can be divided into Ingress LSR, Transit LSR and gross LSR according to the different processing methods of LSR for data. For the same FEC, a certain LSR can be the Ingress LSR of the FEC or the Transit LSR of the FEC.

TRUE

FALSE

159. The business package (Specific Service Plugin, SSP) implements the mapping by using the jinja2 template. The jinja2 syntax {%...%} contains control structures (ControllStructures), such as for loops.

TRUE

FALSE

160. When OSPFv2 evolves to OSPFv3, the LSA format and function are exactly the same, but the network layer address in the LSA is changed from IPv4 to IPv6.

TRUE

FALSE

Page 17 of 18

161. Which of the following security protection actions can be performed by a secure MAC address does not include?

Remark

Shutdown

Restrict

Protect

162. In the SSH algorithm negotiation phase, the two parties exchange the list of algorithms they support.

The symmetric encryption algorithm list of the SSH server is: aes256-ctr, aes192-ctr, aes128-ctr, aes256-cbc.

The list of symmetric encryption algorithms of the SSH client is: aes128-c9-ctr, aes256-ctr, aes256-cbc.

Which of the following is the symmetric encryption algorithm that both parties will use?

aes128-ctr

aes192-ctr

aes256-cbc

aes256-ctr

163. Huawei network equipment provides the OPS function. Which of the following commands can view the information of the OPS script installed on the network equipment?

check ops script

display ops file

display ops script

check ops file

164. Which of the following descriptions about the application scenarios of the 0PS function is wrong?

In the scenario of using the OPS function to automatically deploy devices with empty configuration, the function of the Python script is to obtain the server addresses of software and configuration files, and to download system software and configuration files

The user needs to realize the function of automatically sending the configuration file to the server after the network device configuration is saved. This can be achieved by creating a timer type trigger condition through the maintenance assistant and executing the Python script regularly.

Using the OPS function can reduce the impact of the network environment in some cases. For example, when transmitting collected information to the server, the Python script can realize that when the network is unavailable. The function of temporarily storing the execution result in the device and transferring it to the server after the network is restored.

Using OPS can realize the function of automatically checking the health status of the device.

165. Which of the following protocols does not support SR-MPLS?

BGP

IS-IS

OSPF

RSVP-TE

166. Telemetry is a technology that collects data remotely from physical or virtual devices at high speed. Which of the following is NOT a component of the data layer for a mode that uses gRPC push?

Notification message layer

Telmetry layer

RPC layer

Business data layer

167. In the virtualized campus network deployed through iMaster NCE-Campus, in the "network planning" stage, which of the following is not an operation that the administrator needs to complete?

Deploy Overlay Access Resource Pool

Create an authentication template

Deploy the Fabric global resource pool

Deploy the Underlay automation resource pool

168. In the virtualized campus network design, which of the following descriptions about the Fabric networking design is wrong?

Single/dual Border networking can be selected according to different scenarios, in which the VXLAN centralized gateway supports single Border or dual Border deployment at the same time.

If users in multiple VNs want to access the same external network, and the security policies of each VN are different, you can configure the VN to connect to the external network through Layer 3 exclusive egress.

If you want to use the original access switches (which do not support VXLAN), you can deploy VXLAN covering the core layer to the aggregation layer

When the terminal scale is small, a centralized gateway network can be selected, in which Border acts as a gateway to manage the network uniformly.

169. Both SNMP and NETCONF can be used for the management of network devices. Which of the following descriptions about these two protocols is correct?

When Huawei switches need to be managed through NETCONF, the NETCONF parameters of each switch must be manually configured by default.

Both protocols adopt the Client/Server architecture, with NMS as the server and the managed network device as the client

When Huawei switches need to be managed through SNMP, the SNMP parameters of each switch must be manually configured by default.

Both protocols manage different objects through MIB on network devices

170. Which of the following commands can be used to adjust the link cost of the IS-IS interface?

isis cost

isis timer hello

isis circuit-type

isis circuit-level

Page 18 of 18

171. Execute the print(r.json()) command in the Python script, and the print output is as follows;

The output contains multiple elements, and now the value of token_id needs to be filtered out and assigned to the variable id. Which of the following is the correct command?

{'data': {'token_id': 'x-eonsfw', 'expirelate': '2020-07-07-07:30:00' }, 'errcode': '0', 'errmsg': 'get token' successfully' }

id=r.json()['data']['token_id']

id=r.json(){'data'}{'token_id'}

id= r.json()('data')('token_id')

id = r.json()('token_id')

172. In the scenario of dynamically establishing a VXLAN tunnel through BGP EVPN, when using BGP EVPN Type 2 routes for host MAC address advertisement, which of the following descriptions is correct?

Will carry specific L2 VNI and L3 VNI values at the same time

Will carry the specific L3 VNI value

The RT value carried is the Export RT in the IP VPN instance

IP Address and IP Address Length fields will not carry specific content

173. In the virtual campus network scenario deployed through iMaster NCE-Campus, after VN are created, VN interworking needs to be configured.

Which of the following descriptions about configuring VN interworking is correct?

Actually, OSPF is deployed for the VPN-Instance corresponding to the VN

Actually, a static route is created for the VPN-Instance corresponding to the VN

Actually deploying routing strategies

Actually deploying traffic filtering

174. In a small and medium-sized cloud-managed campus network scenario based on the HUAWEI CLOUD campus network solution, which of the following components provides query services for devices to automatically go online?

WLAN Planner

Registration Inquiry Center

CloudCampus APP

iMaster NCE-campusInsight

175. A campus network deploys the Free Mobility function through iMaster NCE-campus, and the configured policy control matrix is shown in the figure.

Policy Control Matrix:

Which of the following statements about the policy control matrix is wrong?

If the policy enforcement point does not find the security group corresponding to an IP address, the traffic of the IP address can access the server group

The sales group cannot communicate with the guest group

The guest group can access the guest group

If the server group is a resource group, you can configure the policy source for the server group

2022 Newly Updated Huawei H12-891_V1.0 Exam Material

2022 Newly Updated Huawei H12-891_V1.0 Exam Material

Share this post

Leave a Reply Cancel reply

Related Posts