完全版は2023年最新のH12-891_V1.0試験問題集テストガイドはトレーニング専門問題
試験準備と合格するための最高なカバー率問題集を提供しています これで試験準備せよH12-891_V1.0
質問 225
The following description of the characteristics of cross-domain VN-Optionc is correct?
- A. VPN routes are exchanged directly between the ingress PE and egress PE and do not require an intermediate device to secure a circular VPN route.
- B. Cross-domain VN-Optionc, which is not suitable for use when spanning multiple AS.
- C. VPMV4 routes are not saved on the ASBR, and VPNv routes are not advertised to each other.
- D. A maximum of two layers of tags need to be used in the message forwarding process.
正解: A,C
質問 226
Regarding BGP route filtering, the following description is wrong?
- A. In the same node of Route-Policy, multiple if-match clauses for different attributes are "or" relationships.
- B. When a route to a BGP peer is received, a routing policy is enforced to filter unwanted BGP routes that are not added to the local BGP routing table.
- C. For routes published locally, configure a routing policy that takes effect before the route is added to the BGP route table.
- D. The filtering relationship between Route-Policy's noodes is "or." ", that is, as long as a node filter is passed, it can pass through the Route-policyo
正解: A
質問 227
The CPU was attacked by malicious traffic. Here are some of the following ways to prevent an attack:
Multi-select
- A. Turn off the remote login function of the router.
- B. Speed limiting of messages sent to the CPu on the soil.
- C. Analyze and count the packets sent to the CPU to find out the user of the attack source or the interface of the attack source.
- D. USE CPCAR to rate limit messages sent up to the CPU according to the protocol type
- E. Filter packets with AcL on the compromised router port
正解: A,E
質問 228
Regarding the description of the security level of the configured firewall security zone, the error is ?
- A. Two security zones are not allowed to configure the same security level in the same system
- B. You can only set the security level for a custom security zone
- C. For newly created security zones, the system defaults to a security level of 1
- D. Once the security level is set, it is not allowed to change
正解: C
質問 229
When the IPv6 address of a host is configured with a stateless address configuration, and other parameters other than the address are obtained through DHCPv6, how to set the M and 0 bits in the RA message ?
- A. M=10=0
- B. M=00=1
- C. M=1 0=0
- D. M=10=1
正解: B
質問 230
The following statement about VXLAN gateways is incorrect
- A. Layer 3 gateway: Used for cross-subnet communication of VXLAN virtual networks and access to external networks.
- B. VXLAN Layer 3 gateways can be divided into centralized gateways and distributed gateways.
- C. Layer 2 gateway and VPN instance binding.
- D. Layer 2 gateway: Used to solve the problem of tenant access to the VXLAN virtual network, it can also be used for subnet communication of the same VXLAN virtual network.
正解: C
質問 231
What messages does an NMS (Network Management Station) running SNMPv1 send to the agent?
- A. Get,Set ? GetBulk
- B. Get,Set,Getnext ? GetBulk
- C. Get,Set ? Getnext
- D. Trap,Get ? Set
- E. Get Trap
正解: C
質問 232
As shown in the figure, which of the following options satisfies two routers to establish an ISIS neighbor?( Single choice questions).
- A. Both routers are of The Level-1 type.
- B. One of the two routers can be of the Level-1-2 type and the other of the Leve1-1 type.
- C. The ISIS process numbers of the two routers must be consistent.
- D. Both routers remain of the default type.
正解: D
質問 233
Unlike STP, RSTP has only one BPDU type, its value is 2, and there is no TCN BPDU.
- A. TRUE
- B. FALSE
正解: A
質問 234
Which of the following messages does the BGP protocol support?
- A. Keepalive
- B. Hello
- C. Open
- D. Update
正解: A,C,D
質問 235
You want only his telnet stream to be able to access the server (address 1011.100). Then, you add the following ACL to the routing ring: nule5pemit cp source ny destination 1011.100000destination-porteq 23 rule
1l0 deny ip source any destination any Then you apply that ACL to the ingress direction of the router's seial interface. What type of message is allowed to pass through the router?( Multiple choice questions).
- A. Packet answer for the first sharded or non-sharded, using port 23 to access the server
- B. Non-first-of-its-kind packets that use port 21 to access the server
- C. Non-first-sharded messages that use port 23 to access the server's message
- D. A non-sharded, port 21-accessing packet
- E. Non-first-of-sharded messages to access other hosts
正解: A,B,C
質問 236
In the use of the CP protocol, the following description is correct?
- A. The Eth-Trunk interface can be avoided by frequent oscillation interfaceeth-trunkllacppreemptenablelacppreemptdelaydelay-time by following command
- B. A member interface can be removed from an enabled link aggregation group with the following command: interface GigabitEthernet0/0/1 shutdown interface GigabitEthernet0/0/1 undo eth-trunk 1 interfaceGigabitEthernet0/0/1undoshutdown
- C. The member interface can be joined in the link aggregation group by enabling the following command: interface GigabitEthernet0/0/1 shutdown interface GigabitEthernet0/0/1 trunkport
- D. Source A address can be configured for load sharing in an enabled link aggregation group with the following command: interface eth-trunk 110ad-balance src-dst-ip
正解: A
質問 237
The following description of the process of sending and receiving data frames in switch interface Access mode is correct? ( Single choice questions).
- A. When a data frame enters the switch interface, the switch learns the destination MAC address in the data frame.
- B. Access mode strips off the VLAN tag of the dataton when sending .
- C. Access mode receives only unlabeled data frames.
- D. In Access mode, labeled data frames are discarded directly when they are received.
正解: B
質問 238
Vxlan is based on UDP encapsulation, which encapsulates Ethernet data frames on top of UDP in IP packets, so it is called MAC in UDP encapsulation
- A. True
- B. False
正解: A
質問 239
The following description of BGP loop protection is correct: multi-select
- A. Any update information received from the EBGP peer that contains its own AS number in the AS-PATH attribute is discarded via the AS-PATH attribute
- B. BGP routers do not announce any slaves The EBGP peer comes to update the information to its EBGP peer
- C. Any routing information from an IBGP peer is advertised to the other IBGP peers
- D. Non-RR BGP routers do not announce any updates from IBGP peers to other IBGP peers
正解: A,D
質問 240
What is the relationship between CIR, BC and TC? (single select)
- A. CIR=BE/TC
- B. CIR=TC/BC
- C. TC=CIR/BC
- D. TC=BC/CIR
正解: D
質問 241
If four routers run ISIS and have established an adjacency relationship, and the area code and router rank are marked as shown in the figure, what is the cost value of R4 reaching 10022/32?
- A. 0
- B. 1
- C. 2
- D. 3
正解: B
質問 242
To build a loopless Layer 2 network, which of the following schemes is optimal?( Single Choice)
- A. TRILL+MSTP
- B. Link Collection + MSTP
- C. ??+MSTP
- D. Stacking + Link Aggregation
正解: D
質問 243
In a multicast network running PIM-SM mode, how does the router choose the upstream interface?
- A. The interface that is fast to the PIlM Join message
- B. Interface for sending PIM Heilo messages.
- C. looks up the outgoing interface corresponding to the RP address in the unicast routing table
- D. Interfaces to which multicast group members are directly connected
- E. Find the outbound interface corresponding to the mapping proxy in the unicast routing table
正解: C
質問 244
What are the following statements about 8021x, RADIUS, and HWTACACS certification? ( Multiple choice questions).
- A. RADIUS authentication is mutually exclusive with 8021x authentication.
- B. Users can use 8021x authentication to access the network and complete identity authentication through RADIUS
- C. RADIUS authentication and HWTACACS authentication can perform two-factor authentication for the same user at the same time, which is more secure.
- D. RADIUS authentication and WTACACS authentication are mutually exclusive and cannot be two-factor authentication for the same user at the same time.
正解: B,D
質問 245
As shown in the following figure, R1 and R2 establish a neighbor relationship with LeveL2, and the key configuration is as follows, so is the following route entry for R2 correct?
- A. 2022::/64 Routers appear in the IP routing table
- B. 0::/64 The router will appear in the IP routing table
- C. 2021::/64 Routers appear in the IP routing table
- D. 2019::/64 Routers appear in the IP routing table
正解: A,B,D
質問 246
The following description of the characteristics of multi-instance CE is ?
- A. The MCE device can determine the source of the routing information according to the interface that receives the routing information, and maintain it in the route forwarding table of the corresponding VP.
- B. Configuring MCE enables a CE to connect to multiple VPNs at the same time, which can not only completely isolate the service between different VPN users, but also reduce the input cost of network equipment.
- C. MCE is implemented by creating their own routing forwarding tables for different VPNs on the MCE device and binding to the corresponding interface o
- D. Since the MCE device is already bound to the VPN, there is no need to bind the VPN on the PE connected to the MCE device
正解: D
質問 247
As shown in the figure, as shown, as the AS10 has two paths to access THEA1, the optimal route passed from the 4S23 by default is now sprinkled with S00 to ass4O The odds belt wins even more worrying. Therefore, in the R2 configuration as follows, after the completion of the coordination, it is found that the most worrying route has not changed, and some operations can be adjusted to make the configuration
??[ R2]jpas-path-fiter l permit "4D0& [2]pouteplicy med permit node 10[R2-routepolicyli- match aspath-ilterl[R2-oute-policylapplycoast.20
- A. Configure compare-di fferent-as-med under the BGP process of Rl
- B. Configure compare-di fferent-as-med under the BGP process for R2
- C. Configure destiny-med under the BGP process for R1
- D. Configure the targeted-med under the BGP process for R2
正解: A,C
質問 248
The following description of BGP load sharing is wrong with ?( Multiple choice question)
- A. IBGP routes and EBGP routes that reach the same destination in the public network can form a load sharing
- B. If BGP load sharing is implemented , the local device needs to configure the peer next-hop-local command to change the next hop address to its own address when issuing a route to an IBGP peer group
. - C. The destination CIDR blocks are the same, and load sharing can be formed between BGP routes with different sources.
- D. The AS_Path properties of the equivalent routes that form load sharing must be different.
正解: A,B,C,D
質問 249
By default, huawei firewalls provide the following security areas:
- A. Security zone
- B. Local zone
- C. Trust zone
- D. Untrust Zone
正解: B,C,D
質問 250
......
検証された材料は決まってこれH12-891_V1.0：https://www.passtest.jp/Huawei/H12-891_V1.0-shiken.html
合格するために必要なH12-891_V1.0試験問題集：https://drive.google.com/open?id=1e9BL6-Fa0LsXaDGQefcXynIe_2fFD6J6