Pass H19-401_V1.0 Exam to Earn HCSP-Presales-Campus Network Planning and Design Certification

dumps2024-07-25T10:13:42+08:00

HCSP-Presales-Campus Network Planning and Design certification is much hot nowadays. To get certified, you need to pass the H19-401_V1.0 exam easily. There are 60 questions in the real Huawei H19-401_V1.0 exam, and you have 90 minutes to answer all the questions. The exam format is Single-answer Question, Multiple-answer Question, True or false. The required passing score for this H19-401_V1.0 exam is 600. The available language is English. We have cracked the latest Huawei HCSP-Presales-Campus Network Planning and Design H19-401_V1.0 exam dumps, which can guarantee you pass easily. Free Huawei H19-401_V1.0 exam dumps are available below.

Page 1 of 27

1. What is incorrect description about the features of campus business on-the-go cloud migration?

Policy service, which provides policy configuration capabilities. It mainly configures security groups and access policies between security groups. It integrates AC3.0 and AC1.0 is optional.

Authentication & Portal service supports serving as an AAA server to provide authentication, authorization, and accounting capabilities. It is integrated in AC3.0 and is optional in AC1.0. Accounting relies on a third party.

IP-Group synchronization service, as the control plane of IP-Group, provides collection and distribution of correspondence between IP and security groups, and is integrated in AC3.0 and AC1.0

Policy enforcement points and authentication points can be deployed on different physical devices.

2. In the fabric network with dual border node networking in the campus distributed gateway solution, cross-networking is recommended between the core device and the aggregation device, so that L3VXLAN tunnels are created between the two border nodes and the edge node. In this scenario, Regarding the high-reliability design of the traffic model for egress traffic, the incorrect description is:

The two upstream traffic paths on edge form ecmp load balancing

Select different main exits for different source network segments.

Different edge devices select different main exits.

Select different main exits for different uplink network segments.

3. When using the planning and design tool, on which page of the tool should you adjust the board position of the service board in the modular switch?

BOQ management

Cabinet layout design

Network equipment connection design

Equipment selection

4. What is the incorrect description of the intelligent routing strategy of the LAN&WAN integration solution?

Support setting primary and backup links based on applications/application groups, and intelligently select links for data forwarding

LTE is only supported as an escape link

Link intelligent switching condition settings include packet loss, delay, and jitter

Support bandwidth condition routing

5. In the virtualization scenario network architecture, there are multiple node roles. Which of the following nodes can serve as both an L2 gateway and an L3 gateway?

Router Node

FW Node

Border Node

Edge Node

6. Which of the following WLAN delivery strategies is wrong?

High-density venues: Huawei original factory delivery or original factory supervision delivery (CSP serves as the delivery entity, and Huawei provides engineering survey, planning, and installation training services)

Wireless Backhaul: CSP Delivery

Massive indoor/outdoor dispersed site scenario: Demonstration sites (at least 5%) are delivered under the supervision of Huawei's original factory, and the remaining sites are delivered by CSP

Campus network: delivered by Huawei original factory/CSP

7. Among the following devices, which ones will not cause interference to wireless APs working at 2.4GHz?

Microwave oven

Bluetooth headset

Infrared sensor

Cordless phones operating in the 2.4G frequency band

8. The maximum MCS supported by WIFI6 is:

MCS7

MCS9

MCS11

MCS13

9. Which stage follows the association stage in the STA access process?

Scanning phase (SCAN)

Link authentication phase (Authentication)

Access authentication

Key agreement

10. Which of the following are not features of the CloudCampus cloud management solution?

Rapid deployment, supporting plug-and-play of tenant devices

Through the NETCONF protocol, remote operation and maintenance can be achieved

In the solution, the NCE platform can provide API interfaces to connect with upper-layer applications.

Huawei equipment cannot be switched between local management and cloud management modes.

Page 2 of 27

11. In the CloudCampus solution, which of the following are not external network connection scenarios?

L3 shared exit

L3 exclusive export

L2 shared exit

L2 exclusive export

12. In CloudCampus APP, a maximum of ( ) pictures can be uploaded to a construction site.

13. Configure the main interface of the translation tool, some lines are marked with different background colors for the purpose of:

Relocation is too boring and the interface is too monotonous. It is purely for decoration and good looks.

Remind users of points that require special attention, such as those that require manual confirmation and processing and can be discarded.

To export the configuration, do not use the background color when exporting the configuration.

has no practical effect

14. Regarding planning and design tools, which of the following statements is incorrect?

The planning and design tool is used for after-sales planning and cannot be used before sales.

If the device model cannot be used, you can provide feedback in the tool platform

Tools can ensure the logical consistency and data consistency of the design

If the networking changes greatly or changes frequently, old projects can be retained and new projects can be designed.

15. iMaster NCE-Campus is deployed in a virtualized environment based on Taishan physical servers. The corresponding virtualization software is:

FusionCompute8.0

FusionCompute6.5.1

VMWare vSphere

FusionInsight

16. The user traffic of a certain enterprise's WLAN is not very large, and there is no traffic bottleneck problem in the network. For the sake of WLAN security, the customer wants to uniformly manage WLAN data. Which of the following networking methods can the customer choose?

AC bypass data is forwarded directly

AC bypasses data tunnel forwarding

Direct forwarding of data in Layer 3 networking

Layer 2 networking data is forwarded directly

17. The maximum channel bandwidth supported by WIFI6 is:

80M

160M

320M

640M

18. The current controller does not support which of the following authentication methods:

Portal

TACACS

P2P

802.1X

19. In iMaster NCE-Campus network plane planning, if there is no special isolation requirement, the recommended networking method is:

Four-plane networking

Two-plane networking

Three-plane networking

20. Where can I modify the AP icon size and line thickness in the WLAN Planner tool?

Planned resources

Global settings

Set display items

Scene setting

Page 3 of 27

21. In the park scenario, what is correct about the policy linkage function?

When the authentication point and the group policy execution point are not on the same device, you need to use the policy linkage function.

In the policy linkage scenario, it is necessary to set the downlink port type of the Edge device to an extended access switch.

The policy linkage function means that no matter where you go, the permissions to access resources are the same and are decoupled from the IP address.

When the authentication point, access point, and group policy execution point are all connected to the access device, the policy linkage function must be used.

22. Which of the following common obstacles has the smallest signal attenuation ()

Metal (80mm)

Brick wall (120mm)

Bulletproof glass (120mm)

Wooden door (40mm)

23. In the LAN-WAN convergence scenario, which is the wrong description of the RR deployment design principles?

RR must be configured redundantly, and there must be at least two RR devices in the existing network. Avoid having only one RR device in the entire network. If the RR device fails, the services of the entire network will be interrupted;

Try to choose an independent R

In an independent RR scenario, a single device can be deployed;

Use the RR model recommended in the specification list;

Edge should be dual uplinked to two RR devices to achieve egress backup;

24. In the CloudCampus solution V1R22CO0 version, the incorrect description of the FW synchronization IP-Group feature is:

NCE-Campus supports the configuration of firewall security group policies.

When the user is authenticated by NCE-Campus or the permissions change, NCE-Campus synchronizes the username, IP-Group, and IP address information to FW; FW identifies all user groups based on the IP address, user name, and IP-Group mapping relationship. Execute the corresponding security group policy;

Reuse the current Internet behavior management process, and add IP-Group information to the synchronization information between NCE-Campus and the firewall.

When users come online and age on the FW, the FW actively queries the NCE-Campus server for online users to maintain synchronization of IP-Group and other information at both ends.

25. Campus virtualization solution, the network topology that Underlay routing automation does not support is:

Core transparent transmission ring networking

Tree networking

Convergence ring networking

Access ring networking

26. The incorrect description of the deployment mode of iMaster NCE - Campus V300R022CO0 version is:

In the LAN management scenario, the minimum cluster requires 3 physical servers; it has a distributed 9-node/17-node deployment mode (nodes refer to the number of virtual machines).

POL convergence scenario, the minimum cluster requires 3 physical servers; there is no distributed cluster yet.

LAN-WAN&POL integration scenario, the minimum cluster requires 3 physical servers; it has a distributed cluster deployment mode.

LAN-WAN integration scenario, the minimum cluster requires 3 physical servers; it has a distributed 6-node/9-node/17-node deployment mode (nodes refer to the number of virtual machines)

27. Regarding the NetEngineAR631l device description, the incorrect one is:

The AR R20 version is launched.

Support DSVPN features

Industrial access router.

Fanless design

28. Regarding the description of V300RO22C10 version NetEngine AR6300 SRG33XO series enterprise router, which is incorrect?

The maximum number of XSIC slots available is 4.

The maximum number of WSIC slots can reach 4.

4 SIC slots.

Dual master control and dual forwarding

29. Regarding the description of CloudEngineS8700 switch master control, the incorrect one is ()

The main control boards of frame 04, frame 06 and frame 10 cannot be shared.

The main control does not provide service ports

Main control and switching are integrated, centralized architecture, lower switching delay

1:1 active and standby in the frame, packet loss during active and standby switching <5ms

30. S switch V200R022 version, which of the following description about the S5X31(S)-S multi-rate switch is wrong?

Supports 2G large cache to cope with high burst business traffic.

It can be used as a central switch to support remote modules to achieve minimalist networking.

Supports advanced features such as VxLAN and MPLS, Telemetry real-time data collection, and network operation and maintenance visualization; it can be widely used in scenarios such as medium-sized campus aggregation and small campus core.

3 power supply design, supports N+1 yuan, all ports support full supply of 802.3bt 90W PoE++ power supply, the maximum PoE output power of the whole machine can reach 2268W, adapting to the power supply needs of massive terminals.

Page 4 of 27

31. In the WLAN R22 Spruce version, which of the following description about the dual-machine hot standby feature is incorrect?

HRP backup tunnel replaces the original V5 HSB backup tunnel; supports multiple HRP tunnels, HRP multi-tunnel redundancy and high reliability; supports configuration synchronization.

HRP supports detecting heartbeat vlanif down and fast switching to achieve second-level switching.

HRP independently completes the master and backup status negotiation, and the HRP protocol forwarding plane offloads high-priority protection to prevent the master and backup status from oscillating in overload conditions.

Tunnel-level security encryption supports AES256 tunnel encryption, and business data does not need to be encrypted by yourself.

32. Regarding the description of CloudEngineS8700 switch, what is incorrect?

Available in three product forms: 4-slot, 6-slot, and 10-slot.

CloudEngineS8700 is a spruce model device.

It has ultra-high-density GE/10GE/25GE/40GE/100GE full-rate access ports with rich port types.

Adopt distributed forwarding architecture

33. What is incorrect about the new model AirEngine 5762-16W?

Super wall penetration ability, one AP covers up to four rooms

Unique built-in butterfly wing smart antenna

USB expansion external IoT

Specially designed for multi-partition scenes in dormitories and hotels

34. In the SDN-WAN solution, what is the detection technology used for TEHSB and VPN FRR protection solutions?

Ethoam

BFD

Y1731

NQA

35. What is the correct description of the main functions of the configuration translation tool?

Used in relocation scenarios. This tool can restore the user’s existing network networking status and business feature information.

Used in relocation scenarios, mainly used to formulate relocation plans, and design the networking structure of new networks

Used in relocation scenarios, mainly used to batch translate configurations of friends and improve relocation efficiency.

The above statements are all correct

36. When using planning and design tools, which of the following statements about the logical networking of the campus network is incorrect?

The logical networking initialization diagram is determined by the scenario parameters of the solution.

Support multi-region and multi-aggregation node design

The working mode supports stand-alone and stacking

Cannot be modified manually by dragging and dropping

37. Regarding WAC monitoring on the cloud, which one is incorrect?

To configure wireless features, jump to the web network management of the device on the controller for configuration, and perform all wireless configurations through the web network management.

AP upgrade, upload the version file to the controller, and the controller directly upgrades the AP

AP works in fit AP mode, registers to WAC through capwap, and WAC manages fit AP

The WAC and the controller establish a netconf channel. The AP registers with the controller through the WA

The controller manages the AP through the WAC and does not directly operate the A

38. Which of the following protocols does the IMaster NCE-Campus controller use to report device performance data?

Netconf

HTTP

HTTP2.0

HTTPS

39. In WLAN scenario, for requirements collection, which of the following statements is wrong?

Coverage area: Confirm the key coverage areas required by the customer (such as internal offices, conference rooms, etc.) and general coverage areas (such as stairs, bathrooms, etc.)

Fulfill the signal field strength requirements in the area, for example, -40dBm~-65dBm in key areas, >-75dBm in ordinary areas

Number of concurrent users: the total number of access terminals in the current coverage area, and how many people the customer plans to access at the same time in the coverage area.

Bandwidth requirements: the main business types planned by the customer and the bandwidth requirements for each user

40. Which of the following descriptions of business VAP is correct?

Provide wireless terminal access function

Establish MESH connection

Each radio frequency can be configured with multiple configurations, and the number is not limited

Each radio frequency can be configured with only one

Page 5 of 27

41. In the CloudCapmus solution, which Huawei equipment is currently not supported through NETCONF/YANG?

CloudEngine S series switches

Data center CE series switches

WLAN AP

AR series routers

USG series firewall

42. AR series routers do not support which of the following deployment methods?

Registration inquiry center

Start by scanning the QR code on the APP

DHCP Option

Email start

43. What kind of business nodes does the cloud management platform controller cluster not include?

Data processing node Fl

Authentication node ACA

Data collection node ACC

Registration inquiry center

Device management node ACM

44. WLAN R22 version, which of the following description about the air interface slicing enhancement is incorrect?

Same-AP uses different slots/sub-slots for uplink and downlink slices.

The multimedia slicing traffic diversion solution is SAC/DFI application identification ACL traffic identification.

The ordinary slice traffic diversion solution uses IP layer DSCP to map to different queues.

The highly reliable slice traffic diversion solution is ACL traffic identification.

45. iMaster NCE-CampusV300RO22CO0 version, which of the function description about the distributed switch (remote module) scenario is incorrect?

Operation and maintenance capabilities: Supports restarting distributed switches; supports reporting failure alarms for distributed switch upgrades. Control capability: Supports direct delivery of configurations to distributed switches (remote modules).

Control capability: Supports direct delivery of configurations to distributed switches (remote modules)

Management capabilities: Supports viewing the information of distributed switches attached to the central switch, including ESN, model, online status, direct connection to the central switch interface, and the port list information of the distributed switch itself.

Monitoring capabilities: Supports viewing the memory usage, storage space usage, temperature of distributed switches, as well as the operating status, rate, traffic, packet statistics, bandwidth utilization, etc. of distributed switch ports.

46. EVPN’s alias function mainly relies on which route?

per EVIAD route

per ES AD route

Inclusive Multicast Ethernet Tag Route

Ethernet Segment Route

47. Regarding end.dt4, decapsulation and specific IPV4 lookup table, which is the wrong statement?

For L3VPN scenarios, it is required to search in the VPN FIB of the egress P

SID can use the SID anywhere in the segment list

Check the private network FIB of V4 based on the inner IPv4 DA

You can use the destination address of IPV6 packets without SRH header

48. Endpoint SID representing the PE type, used to identify an IPv4VPN instance in the network:

End.DX4 SID

End.X SID

End.OP SID

EnDT4 SID

49. Regarding the MPLS tuning solution, which of the following descriptions is incorrect?

It is recommended to deploy a common path for two-way tunnels to facilitate maintenance and make tunnel BFD detection more reliable.

When optimizing path calculation, prioritize the creation of high-priority tunnels. High-priority tunnels can preempt low-priority tunnel resources.

RSVP-TE, SR-TE, and LDP tunnels can all be tuned

When deploying multiple load-sharing tunnels between two PE nodes, it is recommended to deploy a separation group.

50. Which of the following is not a reliability technology of the controller server?

Local hardware redundancy protection

TE HSB

Local software protection

Remote disaster recovery

Page 6 of 27

51. Which of the following is not a network reliability protection technology?

Load sharing

VPN FRR

PCEP

TE HSB

52. In the southbound protocol of the controller, the () protocol collects traffic performance data of ports, links, and tunnels (LSP) from PCC, including flow rate and bandwidth utilization, and collects quality detection data;

BGP-LS

PCEP

SNMP

Netconf

53. In NCE-IP deployment, which of the following licenses are optional to load?

Load Fl License

Load NCE License

Load FC License (Virtual Machine) License

54. In the SDN-WAN solution, the principles that need to be followed in the ISIS Cost design, which of the following description are incorrectly?

The COST configuration of the link using the operator's MSTP in a remote location is larger. It is recommended to configure 1000 to avoid traffic bypassing the wide area link - test error

The COST of the WDM or bare fiber link in the same city is the next smallest. It is recommended to configure 200 to ensure that the same city link is the second choice in route calculation.

Set the local link COST value to the minimum. It is recommended to configure 10 to ensure that the local link is given priority in route calculation - test error

The link COST between the RR and PE equipment is configured with a very large value. It is recommended to configure 10000 to ensure that the RR equipment is only responsible for control plane route reflection and does not forward traffic.

55. When designing BGP in SDN-WAN, it is recommended to divide devices with the same configuration into the same group to simplify configuration and maintenance. Which of the following descriptions is incorrect?

All backbone P (P) 1 group

All branches PE (BR-PE) 1 group

All data center PE (DC-PE) 1 group

All RR equipment (RR) 1 group

56. In QOS design, the incorrect description of traffic scheduling design principles is:

The scheduling strategy of the entire network should maintain the principle of unity, and try to use templated deployment to facilitate network management.

LPQ/WFQ scheduling strategy can be used to prevent low-priority services from being unable to obtain bandwidth resources.

The currently planned QoS strategy needs to consider the subsequent expansion of the network.

Core services and video and voice services must ensure the absolute priority of forwarding and use PQ scheduling.

Unless the business has special needs, try to use default values for some parameters of the scheduling policy.

For TCP-based services, the queue must be configured with WRED discarding to avoid TCP global synchronization.

57. The function of the Ethernet Segment Route (Type4) is:

Multicast tunnel endpoint automatic discovery & multicast type automatic discovery

ES member automatic discovery

IP Prefix Announcement

MAC address learning notification

58. segment-routing ipv6 encapsulation source-address 1:1 locator SRv6 locator ipv6-prefix A1:64 static 32 static function allocation range is ()

A1::1-A1:FFFF:FFFF

A1::1-A1:-FFFF

A1:1-A1..FFFF:FFFF:FFF

A11:0:0-A1:FFFF:FFFF:FFFF:FFFF

59. Regarding the description of the design principles of Locator SID, which is incorrect?

When planning the SRv6 Locator address segment, set an appropriate mask based on the number of IPv6 SIDs that the device may use.

loatos svW6_locator ipu6-prelix21.DBBABCD:.b4 static 32, Locator is 2001.DB8.ABCD:, length 64 bits, static segment occupies 32 bits, dynamic segment occupies 32 bits and args field occupies O bits. Status segment starting value: 2001:DB8:ABCD:0000:0000:0000:0000:0001

Locator SID supports static configuration or dynamic allocation. end-op and end-m must be configured statically. Static configuration of end and end.x is also recommended to facilitate network operation and maintenance. Other SIDs can be assigned dynamically.

Devices at the same site belong to the same large network segment with the same prefix, and different devices are allocated small network segments with the same prefix in the large network segment.

60. Regarding the behavior of END, which statement is wrong?

end.DT4: EVPN VPLS Unicast Meteor

end.dx2: L2AC interface used to divert traffic to the egress PE

end.X SID: used to direct traffic to a link of a specific node

end SID: direct traffic to the node based on the IP routing table

Page 7 of 27

61. Policy generated sources do not include:

IGP

CLI/Netconf/yang

BGP

PCEP

62. In the southbound protocol of the controller, the () protocol is the LSP communication protocol between NCE and PCC. PCC reports LSP status information to NCE, and NCE notifies PCC to update the tunnel LSP.

PCEP

Netconf

BGP-LS

SNMP

63. When designing BGP routing control for SDN-WAN, the entire backbone network structure is a dual-plane structure, which increases the reliability of the network. PE equipment on the same plane is preferred when selecting BGP routes. This is achieved through ().

ORIGIN

MED

LocalPre

AS_PATH

64. What type of routing does EVPN use to solve the AC side loop problem?

Ethernet AD Route (Type 1)

Ethernet Segment Route (Type4)

MAC/IP Advertisement Route (Type 2)

Inclusive Multicast Route (Type 3)

65. Regarding the tunnel planning description, which is incorrect?

SRv6 Policy Group, SRv6 Policy, and SRv6-BE tunnel are all delivered and deployed through iMaster NCE-I

VPN services in the backbone network can be carried using SRv6 Policy Group, SRv6 Policy, and SRv6-BE tunnels.

For L2EVPN services, the SRv6 Policy tunnel is used first, followed by SRv6-BE for escape.

For L3EVPN services, it is first recommended to use the SRr6 Policy Group tunnel for DSCP traffic diversion. If the route iteration SRv6 Policy tunnel fails, use the SRv6-BE tunnel for escape.

66. Regarding the SRv6 Policy Group tunnel planning description, the incorrect one is ().

Establish an SRv6 Policy Group tunnel group for local and remote devices on the same plane.

The minimum color of the SRv6 Policy Group tunnel group is 1000000. The colors of different VPN services and planes do not need to be distinguished and can be the same.

A VPN service is configured with an SRv6 Policy Group tunnel group.

Multiple Policy tunnels can be planned within the Group according to the actual needs of users.

67. SDN-WAN solution government affairs unified construction mode, the incorrect description of SRv6 tunnel design is ().

Business slicing must use SRv6 Policy tunnel, which can be a strict explicit path or a loose path.

The entire network uses NCE-P to calculate paths for the sliced network based on affinity attributes to ensure optimal paths throughout the network and make full use of link bandwidth while ensuring service quality.

Deploy SRv6 Policy tunnels vertically between district, county, city, and provincial wide area cores to optimize traffic, improve bandwidth utilization, and ensure service quality.

The SRO6fPolicy tunnel can be carried in the default slice network or in the non-default slice network. For default slices, the SRv6BE mode is preferred. Services with special requirements can also be carried using SRv6 Policy tunnels.

68. In the government affairs scenario of the SDN-WAN solution, which of the design description of the business VPN into the network slicing solution is incorrect?

Deploy a VRF instance for each slice.

Each VRF instance configures a routing policy to dye a specific Color.

The SRv6 Policy tunnels in the slice are set to different colors. After the head node matches the Color, the VRF instance iterates to the SRv6 Policy tunnel in the corresponding slice.

In the network, FLEX-E technology is recommended for resource reservation for interfaces below 50GE, and channelized interface technology is recommended for resource reservation for interfaces of 50GE and above.

69. Which of the following statements about MAC routing is incorrect?

The Flag value of the migration attribute in the MAC route is 1, indicating a static MA

At this time, migration processing will not be performed. Static MAC is preferred.

When a MAC route is migrated, the one with a larger sequence number in the MAC migration attribute will be preferred.

Only IRB and IRB6 type routes in MAC routes will fill in two labels (that is, both mpls label1 and mpls label2 in the message will be filled with valid values)

The Route Distinguisher value (RD value) of the MAC route is generated by the value configured in evpn source-address

70. Which of the following interface protocols is not required by the MPLS tuning solution?

BGP-LS

Netstream

PCEP

Telemetry

Page 8 of 27

71. The incorrect opcode parameter description in the SRv6 basic data plan is ().

Static Opcode needs to be configured within the static segment range to prevent conflict with Opcode dynamically allocated by the IGP protocol. The static segment length range is determined by the static static-length parameter of the locator command.

end-op and end-m require static configuration

end, end-x, end-dt4, end-dt6, end-dx2 can be dynamically allocated or statically configured

The SRv6 SID format is Locator: Function: Args, where the Args field is also called Opcode

72. In the southbound protocol of the controller, the () protocol collects topology information in real time.

PCEP

BGP-LS

Netconf

Telemetry

73. In VXLAN access scenarios, the maximum number of ( ) stacked access devices is recommended.

74. In the WLAN Planner tool, under what circumstances will it not prompt whether to enter roaming mode when walking on a 3D floor?

The number of AP is greater than 50 or equal to 0

The number of APs is greater than 100 or equal to 0

When the signal strength on the floor is too low

When there are insulating obstacles

75. Regarding the user requirements for configuring translation tools, which of the following statements is correct?

You already have the tools and you can completely trust them. No special skills are required. Everything is fine.

I have a relatively high degree of education and can solve problems myself; I can use.

The tool is simple, and I already have two years of work experience, so there is no problem in using it.

Have systematic and professional data communication network knowledge, and have more than two years of experience in data communication equipment startup and maintenance.

76. When using planning and design tools, which of the following statements is wrong regarding the layout of campus network cabinets?

A has two views: logical cabinet and physical cabinet.

Drag and drop to adjust the device position

Modular switches support board location design

The server cannot be placed in the cabinet.

77. Which of the following protocols does the IMaster NCE Campus controller use to register devices online and deliver configurations?

Netconf

HTTP

HTTP2.0

HTTPS

78. The types of cloud devices that the cloud management solution supports to manage are not included:

S switch

AR router

CE switch

79. Which of the following does not belong to the planning and design of a virtual network?

VN planning and design

Strategy design

Automated design of start-up

80. In virtualization scenarios, when using a unified access policy for different VNs, we recommend using () external network design.

L3 shared exit

L3 exclusive export

L2 shared exit

L2 exclusive export

Page 9 of 27

81. In solution C1R19C10, which of the following functions cannot be automatically deployed through underlay?

Physical stacking

Internet address

Routing interoperability

Divide routing areas

82. In WLAN scenario, among the four service flows in EDCA, ( ) have the highest priority:

AC_Vl

AC_bk

AC_BE

AC_vo

83. What should the customers do if they want to delete a configuration delivered to the device through NCE-Campus and manually delete the command line on the device?

Just delete it directly on NCE-Campus

Add the command line on the device and delete it through NCE-Campus

No other operations are required, NCE-Campus will perform reconciliation

84. If the device suddenly goes offline during the configuration delivery process, what error message may be displayed in the configuration results?

Configuration service exception.Contact maintenance engineer (netconf communication failed)

Service process failed

The service is abormal

Unrecongnizeinformation

85. Regarding the description of the dual-Border and WAC interconnection design of the campus distributed gateway, which is incorrect?

In the Overlay interworking solution, it is recommended to run VRRP on Vbdif between the two Borders, and the VRRP virtual address serves as the gateway for wireless users;

When wireless centralized forwarding is used, management IP interoperability and service VLAN interoperability are required between WAC and Border, that is, Underlay and Overlay need to be opened;

When performing wireless local forwarding, only the management IP needs to be communicated between WAC and Border, that is, Underlay is connected;

Supported networking: WAC dual-machine hot backup (VRRP dual-machine hot backup or dual-link hot backup), and dual-Border port sub-type networking, dual-machine VRRP hot backup is recommended; in multi-campus interconnection LAN-WAN integration scenarios, refer to the following topology

86. In a multi-campus interconnection LANWAN scenario, refer to the following topology campus topology. Which of the descriptions about the design and deployment of the dual-gateway Interlink solution is incorrect?

Interlink serves as the interconnection port of dual gateway devices and provides forwarding of business (VPN) traffic between devices through sub-interfaces.

Complete the synchronization of dual-gateway device information through the Interlink control sub-interface: such as synchronization and backup of application identification results, synchronization and backup of overlay connection information and connection quality information, etc.

Interlink can be interconnected using direct links. When the site business traffic is large and the CPE port resources are sufficient, it is recommended that Interlink adopts Eth-trunk link.

Interlink cannot borrow the Layer 2 service interface on the CPE LAN side

87. Regarding the statements about campus NCE user access authentication, which is incorrect?

The authentication method supports Portal authentication, MAC authentication, and 802.1X authentication.

Portal page customization is not supported, but docking with third-party Portal servers is supported.

Authentication data is transmitted using HTTP2.0 and Radius protocols, and configuration data is transmitted using Netconf protocol.

Support docking with social media such as WeChat

88. S switch V600R022 version, regarding the IPV6 RGuard implementation description, the incorrect one is ().

RA messages can carry a lot of network configuration information, including key network configuration information such as the default router, network prefix list, and whether to use a DHCPv6 server for stateful address allocation. The attacker modifies the network configuration of the user's host by sending forged RA messages, making it impossible for legitimate users to communicate normally. IPv6 RGuard provides a defense mechanism against RA message attacks, which can effectively prevent such network attacks.

Configure the user (host) or router (router) role for the interface, and the device then chooses to forward or discard RA messages based on the interface role.

If it is determined that the interface is connected to a user host, configure the interface role as user (host); if it is determined that the interface is connected to a router, the administrator can configure the interface role as router (router) according to the interface in the network. Version 22.0 also supports policy-based filtering of ND packets.

Version 22.0 also supports policy-based filtering of nd packets.

89. Regarding the description of the WLAN network planning solution for the one-to-two scenario of a dormitory/hotel with a bathroom at the door, the correct one is ().

Select the butterfly wing wave AP wall-mounted installation in the bathroom corner, with a height of 2.2~2.5m. A single AP covers the left and right rooms.

The AP fixes the radio frequency power and configures the maximum EIRP value to improve downlink coverage in the wall-through room. The worst 5G downlink RSSI is -65dBm, and the worst uplink RSSI is -80dBm.

Separately deploy indoor omnidirectional APs (2*2 models such as 5761-11) in the corridor to ensure roaming continuity. The bathroom relies on 5G for coverage and turns off 2.4

The bathroom relies on 5G for coverage and turns off 2.4G

90. In the campus SDN solution, which statement is wrong about the distributed gateway solution?

In distributed gateway-VxLAN to access, independent AC scenarios, local forwarding mode deployment is not recommended for wireless traffic.

Distributed gateway-VxLAN to access, independent AC scenario, enter VN from edge, execute business mobility policy on edge (edge needs to subscribe to IP-Group service), the current solution supports automated deployment.

The VTEP device is both an L2 gateway and an L3 gateway. Non-gateway nodes are not aware of VXLAN tunnels and only serve as forwarding nodes for VXLAN packets.

In the distributed gateway-VxLAN to aggregation, on-board AC scenario, the accompanying policy for wireless traffic services is executed on the edge, and tunnel forwarding is recommended.

Page 10 of 27

91. In the sales strategy of campus network products, when the number of APs in a single project exceeds () units, after-sales network planning services must be provided.

100

200

300

400

92. What is the correct description about the scenario channel configuration template of the configuration generation tool?

Channel templates are available to all channel providers

Channel templates are available to all users

Channel templates are only available to users of this channel, but cannot be modified.

Channel templates are only available to users of this channel and can be modified.

93. When using the planning and design tool, the files that cannot be output currently are:

ZIP file

LLD file

Configuration script

Project acceptance documents

94. In A.C3.0, when deploying Fabric network, which of the following operations is not an operation in Fabric network deployment?

Configure access management

Configure policy template

Create an external network

Create Fabric network

95. New construction

12 3456

65 1 2 3 4

25 3 4 16

651243

96. To quickly recover when configuration is lost, which of the following operations is recommended?

Periodically manually save the device configuration on the controller

Develop regular configuration file backup tasks

97. Which of the following information cannot be identified through the smart terminal function?

Terminal type

Operation and unity

Manufacturer

Network card type

98. For channel delivery projects, which of the following cannot be used as a basis for recognition of channel WLAN delivery capabilities?

WLAN product delivery qualifications, such as HCIA or HCIP engineer

Huawei WLAN project delivery experience

Friendly merchants’ non-WLAN project delivery experience

Friends’ WLAN project delivery qualifications and experience

99. Which external data for identity data source docking does not be supported by the NCE-Campus controller?

LDAP

Radius Token

Social media

SMS gateway

100. What is the correct description of the main functions of the configuration generation tool?

This tool can be used to restore the user’s live network networking status and business feature information.

Mainly used to generate configuration scripts in batches

Mainly used to specify relocation plans and design the networking structure of new networks

All the above statements are correct

Page 11 of 27

101. In which delivery link are planning and design tools mainly used?

Pre-sale configuration

After-sales delivery planning and design

Installation, deployment, and testing

Operation and maintenance

102. When using planning and design tools, what is the incorrect description of the NCE-Campus planning function?

Support IP address design

Support installation parameter design

Traditional networks also support NCE-Campus planning

Plan the networking method and cluster size in the solution scenario

103. Which of the following configurations does not belong to the global configuration content of the LAN&WVAN integration solution?

WAN network type

IPSec encryption parameters

WAN BGP routing

Virtual network address pool

104. Regarding the statement about cloud AP radio frequency tuning, which is incorrect?

The leader AP loads local tuning, load balancing and other global services. Due to the limitations of AP performance, the AP specifications that the Leader AP can manage are limited.

When the specifications are exceeded, if AP grouping is not performed, APs will be randomly formed into groups. Adjacent APs and APs on the same floor may be assigned to different groups, which will affect global services such as tuning and load balancing.

The current version of AP grouping is grouped by AP management VLA

APs in the same group need to have the same management VLA

The division of AP tuning groups will be reflected on the current version of the controller.

105. Regarding the division principles of VN, which of the following statements is wrong?

In a virtualized network, different business networks can be distinguished through different VNs.

Virtual networks are isolated from each other by default

Independent business units can function as a separate virtual network

Isolation requirements caused by differences in user identities in the same department can be achieved by dividing different virtual networks.

106. In large and medium-sized campus virtualization scenarios, Border nodes are used to connect the Fabric network to the external network and forward data. Which of the following methods is not an external network design supported by the virtualization scenario?

L3 shared exit

L3 exclusive export

L2 shared exit

L2 exclusive export

107. NCE-Campus delivers configurations to devices through () protocol for message exchange.

snmp

netconf c. http

https

108. Which of the following is not a feature of the CloudCampus campus LAN WAN integration solution?

Can manage network devices such as LAN side switches and WLAN APs and perform service provisioning

Can manage SD-WAN services on the WAN side

Management and service provisioning on the LAN side and WAN side need to be carried out through two NCE platforms.

The WAN side supports application-based intelligent routing

109. Which of the following is not a functional advantage of the current Huawei Qiankun Cloud service?

Internal host detection and found a compromised host

Issue black and white lists to automatically block external and internal security risks

Online behavior management

Emergency security incident alerts via SMS and email

110. Which command can be used to query the session for the following services? UDP VPN:public -> public 1.1.1.1: 30199 [2.2.2.2 : 3456] -> 3.3.3.3 : 33435 [4.4.4.4 : 33435]

display firewall session table source global 1.1.1.1 destination inside 3.3.3.3

display firewall session table source global 1.1.1.1 destination global 3.3.3.3

display firewall session table source inside 1.1.1.1 destination global 3.3.3.3

display firewall session table source inside 1.1.1.1 destination inside 3.3.3.3.

Page 12 of 27

111. The linkage function between firewall HRP and dynamic routing protocols does not currently support which of the following routing protocols?

OSPFV3

BGP

ISIS

OSPF

112. If the video gateway needs to perform MAC dimension control, the FW needs to enable the () function.

Attack prevention

Cross-three-layer MAC learning

North direction

SNMP

113. What functions does the new version of SecoManager not have?

Firewall device management

Replace ATIC as the network manager of AntiDDoS

Routing and switching equipment management

Replace eLog as log management device

114. In the source NAT scenario, the intranet PC (IP is 10.1.1.100) accesses the public network 1P 202.11.11.1. The converted IP of the source NAT IP is 201.1.1.2. Which source IP address will be used to match the security strategy?

10.1.1.100

201.1.1.2

127.0.0.1

201.11.11.1

115. Which of the SSL VPN functions on the firewall is controlled by the license?

Number of virtual gateways on the entire machine

The number of locally configurable users of the entire SSL VPN

Maximum number of concurrent users of the entire SSL VPN

116. When the NGFWNP hardware fast forwards, the traffic is transferred away from the NP. How does the session on the CPU side prevent aging?

NP regularly sends synchronization messages to the CPU to refresh the session to prevent accidental aging on the CPU side.

The session on the CPU side can age. After aging, the NP hardware fast forwarding traffic is deleted simultaneously, and the traffic is sent to the CPU again for processing to establish a session and issue NP hardware fast forwarding, and so on.

The traffic is forwarded from the NP hardware. The session on the CPU side has been abandoned and does not need to be maintained. It can be deleted.

After the CPU side session issues NP hardware fast forwarding, the aging time is set to infinite and will never age.

117. Regarding the firewall inter-domain security policy, which of the following statements is correct?

If no conditions are defined in the policy and only actions are defined, the policy will match any packet.

If the packet matches the inter-zone security policy, and the security policy allows the packet to pass, the packet will be forwarded; otherwise, the packet will be lost.

If the packet does not match the inter-zone security policy and the default inter-zone packet filtering rule is to allow the packet to pass by default, the packet will be forwarded; otherwise, the packet will be discarded.

All the above statements are correct

118. By default, backup support for different types of session tables on FW is different. Which of the following statements is incorrect?

For UDP protocol sessions, the FW will back up after receiving the reverse message.

Sessions generated by messages sent to and from the FW will not be backed up.

ICMP sessions are not backed up

For TCP protocol sessions, the session will not be backed up when the TCP three-way handshake is not completed.

119. Which of the following descriptions of session information is wrong?

Through display firewall session table hex, you can see whether forward and reverse packets hit policy routing.

You can determine whether the traffic has been processed by ASPF through display firewall session table verbose.

Through display firewall session table detail, you can see whether forward and reverse packets hit policy routing.

The session TTL displayed through display firewall session table verbose indicates the remaining aging time of the session.

120. Which of the following filters is recommended to be used as a global configuration?

Universal filter

Hardware filter

Software filters

Protection object filter

Page 13 of 27

121. When a user accesses the application for the first time, () intercepts the request and pushes the authentication service.

Certification Services

Trusted Access Prosecution

Zero Trust Agent

122. Use () to determine whether the user is using the cloud desktop to access the application instead of an ordinary terminal.

IP address

Cloud desktop logo

123. High-sensitivity applications require user ratings in () before they can be accessed.

70 points or above

80 points or above

50 points or above

124. The time of the trusted access prosecution default cache token verification result is:

2 hours

0.5h

24h

125. It is generally more convenient to use the () method to generate threat events on the environment awareness service.

Use tcpreplay tool to play back

Write database

Use real threat attacks

126. The user token does not contain the information such as:

ID number

Organizational structure

IP address

Username

127. The security protection level of graded protection objects is divided into five levels, of which the third level means that if the graded protection objects are damaged, it will cause ( ) to social order and public interests or ( ) to national security.

Particularly serious harm, serious harm

serious harm, harm

Harm, serious harm

Serious damage, harm

128. When querying a session in the session table, which of the following statements is correct?

If the source/destination does not perform NAT conversion, the inside and global query results are consistent.

When the first packet is in the outbound direction, the inside parameter represents the IP address of the source/destinationIP address after NAT conversion, and the global parameter represents the IP address of the source/destination 1P address before NAT conversion.

The Left field indicates the total aging time of the current session

When the first packet is inbound, the inside parameter represents the IP address of the source/destination IP address before NAT translation, and the global parameter represents the IP address of the source/destination IP address after NAT translation.

129. DDoS attack defense function does not include which of the following categories?

SYN Flood

FTP Flood

UDP Flood

HTTP Flood

130. Which of the following protocols does not support configuration when SecoManager manages devices?

STELNET/SSH

SNMP

TELNET

Page 14 of 27

131. Simulated concurrency testing tool often used in the testing process is:

nmap

burpsuit

fuzz

Jmeter

132. Context-aware services push user ratings and safety instructions to:

Zero Trust Agent

Authentication Services

Permission service

Trusted Access Prosecution

133. Trusted application prosecution initiates () verification to the zero-trust agent.

User Tokens and Application Tokens

Application Token

User token

134. User tokens and application tokens are valid by default ().

24h

135. Claim to the outside world that the highest support () users.

No upper limit

20W

10W

136. If the same user accesses two different applications, () application tokens will be generated.

137. Configure the () system so that the token is not verified when accessing an application.

Permission service

Trusted Access Prosecution

Authentication Services

138. Which of the following is not a collector function?

IPS detection

Syslog log collection

Dataflow log collection

139. During the relocation process, what is the main purpose of using inspection tools for inspection?

Only to meet the relocation plan step requirements

Perform configuration translation to avoid manual translation errors

Perform configuration verification to avoid configuration omissions

Conduct risk identification to avoid version and feature deployment risks

140. In network protection scenarios, localized security products operate individually, which can easily lead to protection shortcomings and lack the overall coordinated security protection effect.

Which of the following security products can be introduced to enhance the joint prevention and control capabilities of the Internet border?

Net Shield KO1

WAF

Firewall

Vulnerability Scanning

Page 15 of 27

141. Trusted access prosecution initiates deviceD verification request to ().

Certification Services

Permission service

Environment awareness service

Context-Aware Agent

142. The authentication protocol currently used by the authentication service is ().

SAML

RESTFUL

OAUTH

AAA

143. There are () levels of application/application service sensitivity

144. The current recommended deployment method of Tianguan is:

Second floor straight road

Layer 2 bypass

Three-story straight road

Layer 3 bypass

145. iMaster NCE - Campus V300RO22CO0 version, what is incorrect about the difference in equipment management and control between V5 and Spruce?

Monitoring: V5 is based on http2.0 channel, and Spruce is based on telemetry channel (GRPC). Operation and maintenance: Based on the ssh channel, there are differences between V5 and Spruce.

Operation and maintenance: Based on the ssh channel, there are differences between V5 and Spruce.

Management: Based on netconf channel, there is no difference between V5 and Spruce.

Configuration/alarm: carried on the netconf channel, the yang model is different, Yunshan uses the yang2.0 model.

146. Which of the following is not a fusion component of NCE IP?

AC-WAN

ESIGHT

U2000

uTraffic

147. This technology evenly distributes workload across each SSD disk, thereby preventing continued hot data access from causing premature failure of some SSD disks.

What is the name of this technology?

Wear leveling

Hot cache

Read cache

Anti-wear leveling

148. OceanStor Dorado NAS supports user access. The system only displays files and directories that the user has permission to access. Which access protocol does this feature support?

nFs

VHFS

HDFs

SMB

149. Create multiple IUNs in the storage system at the data center site. Some LUNs are used to run high-priority key services, and some LUNs are used to perform low-priority backup tasks.

Which of the following technologies can ensure the normal operation of key tasks and prevent resources from being preempted by backup tasks?

SmartQos burst traffic control

SmartQos lower limit guarantee

Wear leveling

Anti-wear leveling

150. Which of the following tools is recommended when testing storage performance with deduplication and compression enabled?

lOmeter, graphical user interface, high ease of use

vdbench, suitable for SAN and NAS, suitable for multiple platforms, and the test model can be flexibly configured. The test results are statistically detailed and easy to extract and analyze.

Orion, a common tool for Oracle databases

Microsoft recommended testing tool Diskspd

Page 16 of 27

151. In the OceanStor Pacific multi-protocol convergence and interoperability scenario, which of the following domain controllers can be used?

NIS

LDAP

native

152. What is the total read bandwidth of 8 nodes of OceanStor Pacific 9950 device?

160 GB

200 GB

144 GB

96 GB

153. OceanStor Pacific uses three major technologies to improve small O performance. Which of the following statements is incorrect?

Use DRAM as Cache

Use larger cache space

The cache image supports RDMA interconnection technology

Unstructured services use BBU protected DRAM

154. Which of the following cannot improve the management efficiency of OceanStor Pacific?

DMEIQ

DME Storage

SmartTier

DeviceManager

155. What type of data does OceanStor Dorado’s CloudBackup feature support to object storage or public cloud?

NAS

Block

Object

156. When OceanStor Dorado HyperMetro active-active adopts ALL-IP network deployment, what protocols are used for host access and data?

FC+FC

isCSI + DTOE

NoF+RDMA

iSCSI + TCP

157. Which of the following descriptions of the OceanStor Dorado AA architecture is incorrect?

LUNs do not belong to any one controller

The path accessed by the host is active-active

Load balancing to all controllers

When only the multipath that comes with the host operating system can be used, ALUA mode must be configured.

158. What is the interconnection protocol between the OceanStor Dorado controller enclosure and the smart disk enclosure?

SAS

PCle

100GE RoCE

159. When OceanProtect backup storage is used with Comuvault, what is the correct way to configure the WORM policy (write once, read many) to prevent data tampering?

Configure on Commvault iDA

Configure on Commvault CommServe, but automatically call OceanProtect WORM

Configure on OceanProtect

Configure on Commvault CommServe

160. Which feature is recommended when using Veeam with OceanProtect backup storage?

Compression

Remote

Deduplication

Instant recovery

Page 17 of 27

161. Which of the following statements about Veeam ratings is incorrect?

Backup server resources are occupied

Only public cloud storage can be supported as a secondary backup device

Backup software can directly restore long-term retained copies

Policies are configured and managed on the backup software, and are hierarchically controllable and manageable.

162. Which of the following descriptions about OceanProtect dedicated backup storage is incorrect?

OceanProtect X9000 control node can accommodate 36 SAS SSDs

The control node of OceanProtect X6000 can accommodate 25 SAS SSDs

The control node of OceanProtect x8000 can accommodate 25 SAS SSDs

OceanProtect’s dedicated backup storage HDD hard disk enclosure can accommodate 24 NL-SAS hard disks

163. Which of the following is not a capability of DME Storage performance monitoring?

FC SAN storage device performance analysis

Correlate alarms with performance analysis

Oracle DataBase Performance Monitoring

View the performance data of 5 resources on one interface

164. How many controllers does OceanProtect X9000 support?

165. Which of the following HSSD reliability technologies can prevent disk data loss when the storage system loses power unexpectedly?

RAID

Wear leveling

Power failure protection

Bad block management

166. Which of the following statements about the OceanStor Pacific Series is correct?

OceanStor Pacific series is only suitable for high IOPS scenarios

OceanStor Pacific series is suitable for mixed load scenarios

OceanStor Pacific series is only suitable for high-bandwidth scenarios

OceanStor Pacific series is only suitable for scenarios with massive amounts of small files.

167. Which of the following is not a function of the DPC client?

Storage space allocation

Load balancing

EC operation

1/0 addressing

168. OceanStor Dorado's HyperReplication only supports NAS asynchronous. If NAS synchronization is required, which function is required?

HyperMetro (dual-active)

HyperVault (all-in-one backup)

SmartMigration

HyperCDP (Continuous Data Protection)

169. What kind of 3DC networking does OceanStor Dorado NAS not support?

Hyperactive + asynchronous

Asynchronous + asynchronous

Hyperactive + synchronization

Synchronous + asynchronous

170. The secure snapshot technology of OceanStor Dorado SAN is based on HyperCDP. What is the maximum retention time of secure snapshots that this feature can support?

40 years

20 years

30 years

10 years

Page 18 of 27

171. When deploying an active-active solution for FC networking, over what distance is additional transmission equipment required to ensure interconnection between the two data centers?

100km

300km

50 km

25 km

172. At site X, the data traffic of the LUN mapped to the host suddenly increases during peak hours. Which of the following technologies of OeanStor Dorado can ensure the smooth operation of services on LUNs?

SmartQoS lower limit guarantee

SmartQos burst traffic control

Wear leveling

SmartQoS online control

173. Which of the following protocols does OceanStor Pacific unified metadata indexing function not support?

HDFS

Documents

Block

Object

174. Which of the following statements about OceanStor Pacific is incorrect?

OceanStor Pacific 9920 can accommodate 24 disks per 2U chassis

OceanStor Pacific9550 can accommodate 120 disks per 5U chassis

Each 4U chassis of OceanStor Pacific 9340 can accommodate 60 disks

OceanStor Pacific 9950 can accommodate 80 disks per 5U chassis

175. Which description of OceanStor Pacific HyperGeoEC is correct?

Only one data center is active

Can tolerate three site failures

At least 2 sites are required

Multiple data centers jointly store one data

176. Which of the description about the performance improvement of OceanStor pacific is wrong?

Small IO performs EC encoding and then places it on the disk.

Little O is aggregated in the cache and then placed on the disk.

Pacific can turn random small IO into large IO sequential writing

Little O writes to the cache and returns

177. Which of the following descriptions about OceanProtect’s dedicated backup storage deduplication and compression technology is incorrect?

The first step is to preprocess the backup data and separate the data header and changed data.

The fourth step is byte-level compression technology

Third step is feature-based Compression. The second step is feature-based compression of backup data

The second step is multi-layer online fixed-length deduplication of backup data.

178. Which of the following statements about Veeam secure recovery is correct?

Automatically disconnect the link and move data to the isolation area to improve security.

The backup storage of the production center and safe isolation area adopts secure snapshot technology to ensure that the data is read-only and cannot be modified or deleted within the specified time.

SMB messages are transmitted in ciphertext to prevent data theft.

Before recovery, please start the disease prevention software scan to restore the data to the production environment. Start the virtual machine in the isolation environment (virtual laboratory) and check whether the virtual machine is normal

179. Which of the following descriptions about the snapshot function of OceanStor Dorado NAS is incorrect?

ONAS snapshots occupy storage pool space

The shortest period of ONAS snapshot is 15 seconds

ONAS and SAN snapshots are both ROW snapshots

You can select a snapshot of the NAS at any point in time to roll back

180. Which algorithms does OceanStor Pacific’s software encryption not support?

fips

AES-NI

OAES128-XTS

OAES256-XTS

Page 19 of 27

181. What are the advantages of OceanStor Pacific in HPDA scenarios?

Lossless protocol interoperability

High-density hardware

Smart card

Support mixed loads

182. Which of the following are the northbound ecological capabilities of DMEStorage?

Integrate into the VMware ecosystem through the vCenter CSI plug-in

Connect with various CMP cloud platforms through RESTfu1API

Connect to a third-party NMS through the SMI-S interface

Connect with the customer’s alarm centralized management platform through SNMP protocol

183. When configuring Huawei's new generation OceanStor hybrid flash storage, there is no need to add SAS hard drives as the second performance layer between SSD and NLSAS. Which function is used to achieve this capability?

SmartThin

SmartAcceleration

HyperSnap

SmartQos

184. What is the maximum backup bandwidth of OceanProtect X9000?

19 TB/h

155 TB/h

55 TB/h

172 TB/h

185. What is the maximum data shrinkage rate of OceanProtect’s dedicated backup storage?

25:1

20:1

50:1

72:1

186. How many hard disk slots does the OceanStor Dorado 5300 NVMe controller enclosure provide?

187. If a user needs to store many data copies based on time policies to deal with accidental deletion of data, which license of OceanStor Dorado should be configured at this time?

HyperSnap

HyperCDP

HyperClone

HyperReplication

188. Which function description of OceanStor Pacific’s Intelligent Recycle Bin is correct?

Only files (HDFS, FS and SMB) support deletion operations

When the system receives an explicit command to delete a file, the system only hides the file and does not move the data.

The recycle bin function is enabled by default and cannot be turned off.

Files that remain in the recycle bin for longer than the configured time need to be manually deleted and the data permanently destroyed.

189. OceanStor OS monitors the I/O response time sent to the disk. If the time exceeds the threshold, the system responds quickly to the host by degrading the read RAID group. What is the name of this technology?

Online diagnosis

Wear leveling

Slow IO fast response

Full disk detection

190. If one SSD in a storage system has a heavy workload and its lifespan is much shorter than the other SSDs, which of the following techniques can avoid this situation?

In-disk RAID

Garbage collection

Bad block isolation

Wear leveling

Page 20 of 27

191. What is the interconnection protocol between OceanStor Dorado multiple controllers?

PCle

ROCE

192. Which is the built-in management software of OceanStor Pacific?

Hmanager

HService

Device lanager

DME IQ

193. Which statement is wrong about OceanStor Dorado component upgrade?

The controller needs to be reset

The upgrade process takes a short time

Performance is not affected

The host is not aware of component upgrades

194. Among the multi-tenant features of OceanStor Dorado NAS, which technology is used to isolate the network between stores?

LAN

SMB service

Physical port

Logical port

195. What attributes does the OceanStor Dorado NAS SMB file blocking feature support based on for file filtering?

Creation time

File type

Access time

File size

196. Based on write-time adaptive locality sorting and optimization, how much better is the performance of EDD-based OceanProtect backup storage than its peers?

20%

30%

10%

40%

197. Which description of dynamic reconfiguration is correct?

There will be no shortage of data elements.

The number of RAID members is too small

The number of RAID members remains unchanged

Increase in the number of RAID members

198. Compared with other high-end flash storage (multi-engine), how reliable is OceanStor Dorado high-end storage?

Power failure protection

Dual disk fault tolerance

Business will not be interrupted if dual-controller failure occurs

No interruption in case of single engine failure

199. For centralized backup systemarchitecture design, 3-2-1 rule should be recommended, what is the details of 3-2-1? For centralized backup system architecture, it is recommended to adopt the 3-2-1 principle. What is the 3-2-1 principle?

3 data copies, 2 sites, 1 backup storage medium

3 backup storage media, 2 data copies, 1 copy in an off-site location

3 data copies are stored in 2 different backup storage media, of which 1 copy is in an off-site location

3 sites, 2 data copies, 1 backup storage medium

200. Which of the following compression algorithms does OceanProtect dedicated backup storage use?

HZBC

LZ4

GZ fast

Page 21 of 27

201. Can the RAID 20 technology in OceanStor Dorado support rapid reconstruction?

Reduce the data to be reconstructed

No dedicated disk required, instead allocate spare space

Add more spare disks

202. Which of the following is the smallest RAID unit for Huawei RAID 20+?

CKGB

Caching

feet

Chunk

203. How many controllers does OceanProtect X8000 support at most?

204. Which technology is used to ensure end-to-end data integrity?

DIF+T10

OSHA algorithm

ECC algorithm

Encryption

205. When customers want to build some IT systems with obvious hot and cold data stratification, such as email systems, which of the following products is recommended?

OceanProtect Data Protection

OceanStor Pacific

OceanStor Dorado all-flash

New generation of OceanStor hybrid flash memory

206. Which of the following re-registration algorithms is used by OceanProtect dedicated backup storage?

Similar deduplication

Fixed-length deduplication

Multi-layer online variable length deduplication

Later deletion

207. What is the biggest difference between DME and DME IQ in terms of the capabilities they provide to customers?

DME IQ supports end-to-end topology display, but DMEstorage does not support it.

DME IO provides performance trend prediction, but DME does not support it.

DMEIQ does not provide change operations on storage resources. DME Storage provides automated changes and service-based change capabilities.

DMEIQ provides capacity trend prediction, but DME does not support it.

208. What is the role of OceanProtect backup storage when used with Veeam?

Repository

Agent

Media Agency

Gateway server

209. What is the maximum recovery bandwidth of OceanProtect X9000?

155TB/h

57TB/h

22 TB/h

172 TB/h

210. Which of the following is not an automation capability of DME Storage?

Automatic provision of OFC switch resources

Map storage resources to hosts

0 Scan the file system format on the host

Automatic provision of O storage resources

Page 22 of 27

211. In the CloudCampus Huawei public cloud deployment scenario, which key factor does the cloud management platform use to determine the tenant to which a device belongs?

Device ESN

Equipment model

Device MAC address

Device IP address

212. In the CloudCampus Huawei public cloud deployment scenario, after the device is connected to the CloudCampus cloud management platform, what operations will be performed if it is unmanaged?

The device will restart

The device will reconnect to the cloud platform

The device will switch to cloud mode

The device will clear the configuration

213. In the CloudCampus Huawei public cloud deployment scenario, which of the following roles can authorize other roles to perform network maintenance?

End users

Platform Operator

Tenant

Network management service provider

214. In the CloudCampus Huawei public cloud deployment scenario, which of the following descriptions is correct?

NAT can be traversed between the cloud box device and the cloud management platform.

The cloud box device and the cloud management platform must have two-way IP communication before they can be managed by the cloud management platform. NAT cannot be traversed between the cloud box device and the cloud management platform.

If you want to use the reverse telnet function provided by the cloud management platform, you must ensure that the address obtained by the cloud box device is a public network address.

The cloud box device does not support reverse telnet through the cloud management platform.

215. Which of the four security policy mechanisms of 802 1X is the most secure?

WAPI

WEP

WPA2

WPA

216. Through Campus Insight, which of the following functions can see the status of the entire network?

User journey

Protocol playback

Access Analysis

Quality Assessment System

217. Which one is not the core role in the business travel plan?

Terminal

iMasterNCE-Campus

Policy execution point

AAA server

218. In the application of policy linkage, what is the management tunnel established between the authentication control point and the authentication execution point (authentication access device)?

NETCONF

VXLAN-based tunnel

IPSec-based tunnel

CAPWAP tunnel

219. In which of the following networks, the data traffic of wireless users will never pass through the wireless controller?

Layer 3 networking + bypass + tunnel forwarding

Three-layer networking + bypass + direct forwarding

Layer 2 networking + direct connection + tunnel forwarding

Layer 2 networking + direct connection + direct forwarding

220. In a WLAN enterprise campus network, regarding SSID planning, which of the following is not recommended to be deployed?

Plan dedicated SSIDs for employees and use 802.1x authentication

The same SSID provides 802.1x authentication for employees and Portal authentication for visitors.

Plan an SSID named public as the pre-authentication domain

Plan Guest SSID for guests and use MAC+Portal authentication

Page 23 of 27

221. Which of the following descriptions about dual-link backup networking is incorrect?

Dual-link backup technology improves network reliability at important network nodes and ensures business stability

The network service configuration on the active and standby ACs must be consistent.

During the process of establishing primary and backup links between the AP and the primary and secondary ACs, the link established first must be the primary link.

The standby AC must always be powered on.

222. Which of the following is the correct order of penetration losses for typical obstacles from small to large?

Ordinary glass windows<12cm brick wall<metal wall<24cm brick wall

12cm brick wall<24cm brick wall<ordinary glass window<metal wall

Ordinary glass window<12cm brick wall<24cm brick wall<metal wall

12cm brick wall<24cm brick wall<metal wall<ordinary glass window

223. Different packets use different packet priorities. Which of the following descriptions of packet priority is incorrect?

When packets pass through different networks, to maintain the priority of the packets, the mapping relationship of the priority fields needs to be configured on the device.

When packets pass through different networks, to keep the priority of the packet in effect, the priority field configured on the device needs to be kept unchanged, and priority mapping cannot be performed.

The 802.11 packet sent by the STA carries the UP priority or DSCP priority.

VLAN packets in the wired network use 802.1p priority, and IP packets use DSCP priority.

224. What channel is used to transmit CPE service routes?

Control channel

Data channel

Arrangement channel

Management channel

225. Regarding the multi-Hub scenario, which of the following descriptions is incorrect?

Support multi-active Hub scenarios based on Spoke sites

Branch interworking hubs in VPN can work in active-active mode

Support multi-hub scenarios based on business network segments

A VPN can select two Hubs from multiple Hubs as branch interworking Hubs

226. What two methods are used in Huawei SD-WAN solution to achieve application identification?

Static recognition and feature recognition

Dynamic recognition and feature recognition

Feature identification and first packet identification

227. By scanning the QR code of the AP device through the CloudCampus APP, you can obtain the ESN of the AP and which of the following information?

MAC address

Model

Domain name

228. When designing WLAN, which one should you choose for the bandwidth of the 2.4G frequency band?

160 MHz

20 MHz

40 MHz

80 MHz

229. In CloudCampus small and medium-sized campus network design (public cloud scenario), when engineers are designing reliability for the site network, what are the items that do not need to be considered?

Egress link reliability

Equipment reliability

Reliability of links within the campus

Cloud management platform reliability

230. What types of devices are supported by CloudCampus APP scan code deployment?

Switch

Page 24 of 27

231. Company A’s network operation and maintenance staff received a report: An employee’s Wi-Fi experience was poor at 3pm yesterday. Which of the following functions can be used to trace the user’s network experience?

User journey replay

Alarm viewing

Access Analysis

Protocol playback

232. Huawei’s network access control solution supports a strategy based on 5W1H. What does Whose stand for?

User identity

Access method

Equipment ownership

Terminal type

233. When the AC has only one interface connected to the aggregation layer switch, and user traffic goes out of the public network directly through the aggregation layer switch and does not flow through the AC, which networking mode should be used?

Direct connection mode + tunnel forwarding

Bypass mode + direct forwarding

Bypass mode + tunnel forwarding

Direct connection mode + direct forwarding

234. Which is the roaming optimization technology for sticky terminals?

Layer 3 roaming

PMK fast roaming

802.11r fast roaming

Intelligent roaming

235. Non-US standards, among the following channel combinations, which combination of three non-overlapping channels should be chosen?

Channel 4, Channel 6, Channel 8

Channel 1, Channel 5, Channel 9

Channel 1, Channel 6, Channel 9

Channel 3, Channel 4, Channel 5

236. Which of the following descriptions about the WLAN traffic forwarding model is correct?

For Layer 3 roaming with tunnel forwarding, when the traffic returns to the HAC, it needs to return to the HAP and then be forwarded to the upper-layer network.

Direct forwarding Layer 2 roaming. After roaming, traffic will be forwarded directly at the FAP without going through the FA

Direct forwarding and tunnel forwarding Layer 2 roaming. After roaming, the traffic path is the same and will be forwarded to the home agent through the CAPWAP tunnel.

By default, for direct forwarding Layer 3 roaming, when the traffic returns to the HAC, it will be forwarded directly to the upper layer network.

237. Huawei SD-WAN solution uses which of the following protocols to ensure the security of management channels?

SSH

GRE

GRE Over IPsec

BGP Over IPsec

238. Huawei SD-WAN solution, regarding the RR deployment method, which of the following statements is wrong?

Support co-deployment of RR and site

Only supports co-deployment of RR and HUB sites

Support RR independent deployment

Support RR multi-region deployment

239. Which of the following statements about the opening of the CPE registration inquiry center is wrong?

The CPE queries and obtains the IP address of the network controller from the registration center.

The registration query center can allocate IP address, DNS server address and other information to CP

Registration center deployment refers to the process of realizing CPE plug-and-play using the registration center as the medium to transmit information.

The registration query center is deployed on the public network

240. Which of the following is the data channel used in Huawei SD-WAN solution?

GRE Over IPsec

NETCONF

Telemetry

BGPEVPN

Page 25 of 27

241. The control channel refers to the information transfer between which two network elements?

RR and CPE

CPE and CPE

iMaster NCE and CPE

242. Which of the following statements about Edge nodes in SD-WAN is incorrect?

Edge often also needs to have application identification and routing, security, and wide-area acceleration capabilities.

Edge is the egress CPE device for various SD-WAN sites of the enterprise.

Edges at different sites are interconnected through end-to-end Underlay tunnels

The SD-WAN tunnel can be encrypted or not.

243. Which of the following options belongs to the management component of Huawei's SD-WAN solution architecture?

iMaster NCE

CPE

244. Which AR supports POE power supply?

NetEngine AR651

NetEngine AR651W-8P

NetEngine AR651W

NetEngine AR6121

245. Which of the following network models is suitable: large multinational enterprises with sites distributed in multiple countries or regions and large enterprises with large sites?

Full-mesh

Partial-mesh

Hierarchical networking

Hub-spoke

246. In the campus wide-area SD-WAN interconnection solution, if it is a dual-gateway site, a link connecting the two CPEs needs to be configured. What type of link can it be?

Layer 2 or Layer 3 link

No link

Layer 3 link

Layer 2 link

247. Which of the following protocols does IMasterNCE use to deliver service configurations to devices working in cloud mode?

NETCONF

HTTPS

UDP

FTPS

248. In the SD-WAN solution, which statement is wrong about the remote controller disaster recovery solution?

The northbound and southbound controller uses a unified domain name or I

Tenants and devices access the main cluster of the controller through a unified domain name or I

After the active/standby switchover, traffic is automatically switched to the new active cluster.

The main and backup clusters of the controller run at the same time. Only the main cluster can provide normal services to the outside world, and the backup cluster does not provide services to the outside world. The data in the operation of the main cluster will be synchronized to the backup cluster in real time to ensure data consistency.

Huawei SD-WAN controller active and backup solution supports multiple active clusters and multiple standby clusters

Remote disaster recovery supports disaster recovery and backup capabilities between two clusters. The number of nodes in the main cluster and the disaster recovery backup cluster must be consistent.

249. Which routing algorithm should be chosen in the following scenario: The enterprise rents telecom MPLS and three links, Internt1 and Internet2, and VOIP uses the MPLS link first. When the MPLS link is congested, low-priority applications are scheduled to other links. To prevent MPLS link quality cracks from affecting VOIP services?

Apply priority routing

Link quality routing

Load balancing routing

Bandwidth routing

250. Which of the following statements is correct when using Navi AC function?

Local AC and Navi AC need to ensure that the business VLAN, SSID user isolation and authentication method configurations under the corresponding VAP template are consistent.

Local AC and Navi AC versions can be guaranteed to be inconsistent

Local AC and Navi AC support the establishment of dual-link backup

Navi AC supports cross-Navi AC roaming

Page 26 of 27

251. Regarding the description of ACN+1 backup, which of the following is correct?

The AP and all ACs establish CAPWAP tunnels at the same time

Support active/standby switchover and active/standby switchback

Does not support load sharing mode

Support real-time synchronization of user data information

252. In network planning scenarios, to ensure good signal coverage, what is the recommended field strength value for signal coverage? This is an empirical value obtained in engineering practice. Different projects may have special requirements.

≥-65dBm

≥-60dBm

≥-58dBm

≥-70dBm

253. In indoor wireless office scenarios, what is the recommended distance between indoor APs?

15~20

25~30

35~40

7~12

254. The radio frequency tuning principle includes the following steps. Which of the following is the correct order?

1) AP reports detection results

2) All APs perform neighbor detection

3) The AC enables global tuning and notifies each AP to start periodic neighbor detection.

4) AC issues tuning results

5) The AC waits for all APs to report neighbor information and then starts running the global optimization algorithm to allocate channel power to APs, etc.

1-2-3-4-5

3-2-1-4-5

3-2-1-5-4

2-1-3-5-4

255. When designing a WLAN solution, what is the minimum edge field strength of the coverage area that needs to be ensured?

-90dBm

-70dBm

-75dBm

-100dBm

256. In AAA, what is the function of granting different permissions to different users and restricting the services that users can use?

Audit

Billing

Certification

Authorization

257. Which of the following is not a feature of Telemetry technology?

Polling technology based on minute-level cycles

Efficient encoding and decoding technology can obtain multiple data at one time with sub-second accuracy.

Based on HTTP + Protobuf

Publish based on subscription and use on demand

258. For which scenario, is it recommended to use a 30-bit mask for IP addresses?

Internet IP address

Business IP address

Management IP address

259. Establish control channel

Which of the following options is the correct order of processing the three steps?

123

231

321

213

260. Regarding the Fu11-Mesh application scenario, which of the following statements is wrong?

Mainly suitable for small businesses with small sites, or deployed in large enterprises that require collaborative work between branches.

Collaborative services, such as high-value applications such as VolP and video conferencing, have very high requirements for network performance such as network packet loss, delay, and jitter. Therefore, this type of business is more suitable for direct mutual access between branch sites.

Full-mesh topology is simple in networking and highly efficient in business access. It is suitable for networks with many branch sites.

In the Full-mesh topology, if there is a business mutual access relationship between the branch sites of the enterprise, the data will be exchanged directly without going through intermediate nodes.

Page 27 of 27

261. In SD-WAN networking, how many WAN Links can be set at each site as the access link for the site to connect to the Internet?

Pass H19-401_V1.0 Exam to Earn HCSP-Presales-Campus Network Planning and Design Certification

Pass H19-401_V1.0 Exam to Earn HCSP-Presales-Campus Network Planning and Design Certification

Share this post

Leave a Reply Cancel reply

Related Posts