Huawei Huawei Certifications H12-891 Questions & Answers

• Question 41:

  The following description of MED, correct: A. MED default value is 100

  B. MED can only be passed within this AS

  C. MED is an optional non-transitional attribute

  D. MED The default value is 0

  Correct Answer: CD

• Question 42:

  Two routers, connected together through the serial port, but can not ping between each other , now check the port status as follows: Can the following information determine what the cause is?

  

  A. Insufficient link bandwidth

  B. The IP addresses on both ends are not on the same network segment

  C. The link layer protocols on both ends are inconsistent

  D. Subnet mask does not match the

  Correct Answer: C

• Question 43:

  Two routers connected through a firewall cannot establish a BGP neighbor relationship. What causes it?

  A. EBGP Multi-hop is not configured

  B. The firewall did not release IP protocol number 89

  C. Firewalls that do not have an open UDP port number of 179

  D. BGP neighbors must form a Layer 2 adjacency

  Correct Answer: C

• Question 44:

  Regarding the MPLS handling mode of TTL, the following description is correct?

  A. Pipe mode. When an IP message passes through an MPLS network, the IPTTL minus l at the entry point is mapped to the MPLS TTL field

  B. MPLS tags in the TTL, which mean the same as the TTL domain in the IP header. TTL prevents mpLS networks from creating routing loops

  C. In Unifor mode, when an IP message passes through an MPLS network, the inbound IPTTL is minus 1. The MPLSTTL field is a fixed value

  D. In MMLSVPI, if you need to hide the structure of the MPLS backbone network, you can use the Uniform mode on Ingress for private network messages

  Correct Answer: B

• Question 45:

  Traditional BGP-4 can only manage IP4 unicast routing information, and MP-BGP extends BGP-4 to provide support for multiple network layer protocols. Among them, MP-BGP's support feature for IPv6 unicast networks is called BGP4+, BGP4+ via NextHop The route next hop address information is carried by the attribute.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 46:

  Regarding the description of the security level of the configured firewall security zone, the error is?

  A. Two security zones are not allowed to configure the same security level in the same system

  B. Once the security level is set, it is not allowed to change

  C. You can only set the security level for a custom security zone

  D. For newly created security zones, the system defaults to a security level of 1

  Correct Answer: D

• Question 47:

  The following is a description of how BFD sessions are established, which is the wrong one

  A. The system distinguishes between static BFD sessions and dynamic BPD sessions by dividing the identifier area Dynamically assign this landmark identifier

  B. BFD sessions can only be established dynamically

  C. Static configuration of BFD session refers to manual configuration of BFD session parameters through the command line, including local identifiers and remote identifiers

  Correct Answer: C

• Question 48:

  There are routers as follows, according to which the compromise conclusion is wrong?

  A. R3 must be the DIS of some Level-1 link

  B. The R3 router is a Level-1-2 router

  C. R3 must be the DIS of some Level-2 link

  D. The system ID of the R3 router is 000300000000

  Correct Answer: A

• Question 49:

  About multi-instance CE (Multi-VPN-Instance CE, MCE). What is the error described below?

  A. Users who connect to the same MCE but are not part of a VPN instance cannot access each other

  B. The MCE vs. PE direction must have multiple physical links to achieve isolation between different VPN instances

  C. MCE-enabled devices can access multiple VPI instances in BGP/RPLS IPVPN applications, reducing user network equipment investment

  D. On the MCE device, you need to create their own routing tables for different VPNs and bind to the corresponding interface

  Correct Answer: B

• Question 50:

  Man-in-the-middle attacks or IP/MAC spoofing attacks can lead to information leakage and other hazards, and are more common in the intranet, in order to prevent man-in-the-middle attacks or IP/MAC spoofing attacks, you can take the configuration method

  A. Enable DHCP snooping to check the chaddr field in a DHCP request message

  B. Configure the trusted/untrusted interface

  C. Configure DHCP snooping on the switch to interbolde with DAI or IPSG

  D. Limit the maximum number of MAC addresses allowed to be learned on the switch interface

  Correct Answer: C