H12-222 Huawei Certified Network Professional-R&S-IENP Questions and Answers

Alarm severity

First occurrence time

Alarm source

Alarm name

TRUE

FALSE

Storage device

Network device

Server

Air conditioning system

DSCP priority, IP precedence, 802.1p priority, and EXP priority

Source and destination addresses, and EXP priority

MAC address

Any packet information

In MAC address authentication, user terminals are authenticated by the authentication server based on their MAC addresses. MAC address authentication is mainly used to authenticate dumb terminals, such as IP phones and printers.

802.IX authentication uses the Extensible Authentication Protocol (EAP) to transmit authentication information between the client, access device, and authentication server.

Portal authentication is also called web authentication. Users enter their account information on the web authentication page for identity authentication.

In SACG authentication, the USG firewall is connected to a router or switch in bypass mode, and terminal access is controlled by manual monitoring.

TRUE

FALSE

The destination IP address of the LDP Discovery message is the multicast IP address 224.0.0.2.

The LDP Discovery message is sent to the specified LDP peer.

The LSRdoes not send Hello messages any longer after TCP connections are established.

The LDP Discovery message is encapsulated into a UDP packet and its destination port number is 646.

TRUE

FALSE

ip route-static 0.0.0.0 0.0.0.0 10.0.12.2 bfd-session 1

ip route-static 0.0.0.0 0.0.0.0 10.0.12.2 track bfd-session 1

ip route-static 0.0.0.0 0.0.0.0 10.0.12.2 track 1

ip route-static 0.0.0.0 0.0.0.0 10.0.12.2 track session 1

MPLS supports multi-layer labels, and the connection-oriented.

MPLS integrates the powerful Layer 3 routing function of the IP network and the highly effective forwarding mechanism of the traditional Layer 2 network.

MPLS cannot easily implement seamless integration between IP and Layer 2 networks such as the ATM and frame relay.

Support Applications like traffic engineering (TE), virtual private network (VPN), quality of service (QoS) provide better solutions.

Access control by user name

According to whether the wireless terminal MAC address registration control access

Access control by SSID (different SSIDs for internal employees and guests)

Access control by wireless terminal type

The DiffServ model provides different services destined for different destinations.

The DiffServ model provides different services destined for different sources,

The DiffServ model does not need to maintain the status of each flow.

The DiffServ model applies to large-scale backbone networks.

Attackers initiate MAC address spoofing attacks using the MAC address learning mechanism.

Attackers send data frames with forged MAC address to the switch to initiate MAC address spoofing attacks.

When MAC address spoofing attacks occur, the switch may learn incorrect mapping between MAC addresses and IP addresses.

When MAC address spoofing attacks occur, the switch may send packets to the attacker.

The devices are managed by eSight.

Trap parameters have been correctly configured on the devices.

The SNMP protocol and parameters are correctly configured for managed devices on eSight.

There are reachable routes between eSight and devices.

A BFD session can be set up. After the negotiation, the detection interval of 40ms is used.

A BFD session can be set up. After the negotiation, the detection interval of 30ms is used.

A BFD session can be set up, and packets are sent at respective intervals at both ends.

A BFD session cannot be established.

TRUE

FALSE

TRUE

FALSE

802.IX and RADIUS are different names of the same technology.

802.IX is a technological system, in which RADIUS is included.

RADIUS is a technological system, in which 802.IX is included.

802.IX and RADIUS are different technologies, but they are often used together for user access control.

TRUE

FALSE

TRUE

FALSE

FTP

Telnet

H.323

SMTP

Collection by physical optical splitter

Collection through port mirroring

Centralized collection by NMS

Automatic collection

TRUE

FALSE

LDP label distribution can be controlled in ordered mode.

In ordered mode, when an LSR is the origin of a route, it can send label mapping messages to the upstream router initiatively and does not need to wait for label mapping messages from the next hop LSR.

LDP label distribution cannot be controlled in independent mode.

In independent mode, an LSR cannot send label mapping messages to the upstream router before it receives label mapping messages from the next hop LSR.

Traffic from the DMZ to the untrusted zone

Traffic from the trusted zone to the DMZ

Traffic from the trusted zone to the untrusted zone

Traffic from the trusted zone to the local zone

The DHCP client broadcasts a DHCP Discover packet. The DHCP server replies to the packet.

The DHCP client only needs to broadcast a DHCP Request packet containing the IP address obtained last time, but does not need to send a DHCP Discover packet again.

After receiving the DHCP Discover packet, the DHCP server sends a DHCP Offer packet containing the leased IP address and other settings to the DHCP client.

After receiving the DHCP Request packet, the DHCP server returns a DHCP ACK packet if the requested IP address is not allocated to another client.

By default, the DHCP service must be enabled when you configure the DHCP server and DHCP relay agent.

VLANIF 100 receives DHCP packets and forwards the packets to the external DHCP server through a relay agent.

Specify VLANIF 100 to the DHCP server group dhcpgroup1.

Create a DHCP server group first and add a DHCP server to the group.

By default, DHCP servers on the network are added to dhcpgroup1 automatically.

Version 1

Version 2

Version 3

Version 4

TRUE

FALSE

As the ACL complexity and length increase, the firewall filtering performance deteriorates exponentially.

Static ACL rules cannot adapt to dynamic security filtering requirements.

It is easy for hackers muddle through without check the session state and analyze the data.

It can fully control network information exchange, and Session control is of high security.

QoS information of packets can be marked.

The DSCP priority or IP precedence of IP packets can be marked.

The 802.1P priority of VLAN packets can be marked

The MAC address of packets can be marked.

Private routes cannot communicate with each other.

Leased lines are expensive.

Bandwidth resources cannot be fully used.

The address space is overlapping.

5

50

85

100

The Agile Controller uniformly deploys permission policies for controlling server access from personnel in each department. The administrator needs to focus on access permissions between departments. A key device in the campus can function as the policy execution point. After the deployment is complete, users can obtain access permissions no matter where they are and what access mode is used.

Policies are deployed automatically to control access between outsourcing personnel and

employees by policies and IP addresses, while ensuring correct the network access permissions of each user. It can also control data sharing among team members to guarantee enterprise data security.

When gateway resources are limited, automatic gateway selection and preferential forwarding of packets from VIP users guarantee fine network experience of VIP users.

The Agile Controller can automatically identify office requirements of working staff, without the need for manual configurations. Users can obtain network access permissions anytime, anywhere.

The top label is removed from the MPLS label stack.

The top label is added to the MPLS label stack.

The top label is replaced with another value.

The top label is replaced with the label of another group.

Packets with the same FEC are processed differently on a MPLS network.

FECs can be divided flexibly by source IP address, destination IP address, source port, destination port, protocol type, VPN, or any combinations of them.

MPLS classifies packets with the same forwarding processing mode into one FEC.

One FEC has only one unique label marker.

The address is not translated.

The interface is multiplexed.

The source interface is not converted.

The destination interface is not converted.

VRRP determines the device role in the virtual router based on device priorities.

If the backup router works in non-preemption mode, the backup router with a higher priority does not become the master router as long as the master router does not fail.

Even if there is the master router, the backup router will preempt to be the master router.

When two routers with the same priority preempt to be the master router, the IP addresses of interfaces are compared. The router with a larger IP address of the interface is selected as the master router.

8

16

32

64

Increasing link bandwidth

Using proper queue scheduling and congestion avoidance mechanisms

Using high-performance devices

Provide services at different times for different business