Practice Free H12-891_V1.0-ENU Exam Online Questions
When policy linkage is deployed in the campus network, a CAPWAP (Control and Provisioning of Wireless Access Points) tunnel will be established between the control point and execution point devices, and user association, message communication, and user authorization policy delivery are implemented through CAPWAP. User business data forwarding, etc.
- A . True
- B . False
When using EVPN to carry VPLS, which of the following descriptions about the advantages of EVPN is wrong?
- A . Loop avoidance can be achieved without running STP
- B . Support automatic discovery of PE members
- C . PE does not need to learn the MAC address of CE
- D . EVPN supports CE multi-active access to PE
In order to publish IPv6 routes in BGP4+, what fields are added to the Update message?
- A . A new NLRI type: IPv6_NLRI, which carries IPv6 NLRI prefix length and IPv6 NLRI prefix
- B . A new path attribute: IPv6_ REACH_NLRI
- C . A new path attribute: MP_REACH_NLRI
- D . A new path attribute: MP_UNREACH_NLRI
As shown in the figure, if you want to prevent users from accessing the network through statically configured IP addresses in this network, which of the following solutions can be used?
- A . DAI+IPSG
- B . DHCP Snooping+DAI
- C . DAI+Port Security
- D . DHCP Snooping+IPSG
As shown in the figure, there are the following configurations under BGP. Which of the following descriptions are wrong? (Multiple choice)
- A . Timer takes the minimum value, so the final result is that the timer value of peer 1.1.1.2 takes keepalive 10 hold 30
- B . Peer configuration takes priority, so the final result is that the timer value of peer 1.1.1.2 is keepalive 10 hold 30
- C . Global configuration takes precedence, so the final result is that the timer value of peer 1.1.1.2 is keepalive 30 hold 90
- D . The default configuration is timer keepalive 60 hold 180, so peer 1.1.1.2 can detect peer connection failures faster than the default value.
In the scenario of dynamically establishing a VXLAN tunnel through BGP EVPN, BGP EVPN advertises the host’s MAC address information to the remote VTEP through Type5 routing.
- A . True
- B . False
DHCP Snooping is a DHCP security feature that can be used to defend against a variety of attacks.
Regarding the types of attacks that DHCP Snooping can defend against, which of the following items are correct? (Multiple choice)
- A . Defense against starvation attacks that change the CHADDR value
- B . Defense against DHCP counterfeit attacks
- C . Defense against TCP flag attacks
- D . Defense against man-in-the-middle attacks and IP/MAC spoofing attacks
In the small and medium-sized cloud management campus network scenario based on Huawei Cloud Campus Network Solution, when using static IPsec VPN for wide-area interconnection, the egress device can choose AP, router, ().
All routers in a network enable the SR-MPLS function based on OSPF. The SRGB of each router is as shown in the figure. By default, when R3 forwards a packet with the destination address 10.0.4.4, the SRGB carried is as shown in the figure. It shows that by default, when R3 forwards a packet with the destination address 10.0.4.4, which of the following MPLS labels is carried?
- A . 50100
- B . 40100
- C . 100
- D . 3
iMaster NCE-Campus Insight uses SNMP technology to collect performance indicators and log data of network devices, and discovers network anomalies based on real business traffic.
- A . True
- B . False