View Full Huawei H12-811 Exam Dumps and Practice Test Dumps

 

Question 21

Which ACL type matches source and destination IP addresses?

1. Basic ACL
2. MAC ACL
3. Advanced ACL
4. User ACL

Correct Answer: 3

Explanation:

An advanced ACL can match multiple packet attributes, including source IP address, destination IP address, protocol, and port information. This makes it more flexible than a basic ACL, which primarily focuses on source IP addresses. Advanced ACLs are commonly used when administrators need precise traffic-control policies. For example, a network administrator can permit HTTP traffic from one subnet to a specific server while denying other traffic. Careful rule ordering is important because ACL processing generally evaluates entries sequentially and applies the first matching rule.

Question 22

What does an ACL implicit deny generally do?

1. Permits unmatched traffic
2. Rejects unmatched traffic
3. Redirects unmatched traffic
4. Logs every packet

Correct Answer: 2

Explanation:

An ACL normally contains an implicit deny at the end of its rule set. Traffic that does not match an explicit permit rule is therefore denied when the ACL is being used for filtering. This behavior makes rule design important because administrators must explicitly permit required traffic. A policy that contains only one permit statement can unintentionally block all other traffic. When troubleshooting an ACL, administrators should review the sequence of rules and determine whether the desired packet matches a permitted entry before reaching the implicit deny.

Question 23

Which AAA component verifies a user’s identity?

1. Authentication
2. Authorization
3. Accounting
4. Auditing

Correct Answer: 1

Explanation:

Authentication verifies the identity of a user or device before access is granted. In AAA, authorization determines what the authenticated user is allowed to do, while accounting records information about access and activity. Separating these functions allows network administrators to create structured access-control policies. For example, a user can successfully authenticate but still lack permission to execute certain administrative commands. Understanding the distinction between authentication and authorization is important when troubleshooting login and privilege-related problems on Huawei network devices.

Question 24

Which AAA function determines permitted user actions?

1. Authentication
2. Authorization
3. Accounting
4. Identification

Correct Answer: 2

Explanation:

Authorization determines which resources, services, or operations an authenticated user may access. Within an AAA framework, authentication establishes identity first, while authorization controls the privileges associated with that identity. For network administration, authorization can determine whether a user may execute particular commands or access certain services. Accounting serves a different purpose by recording activity and usage information. When a user can log in successfully but cannot perform a requested administrative operation, authorization settings should be examined.

Question 25

Which protocol commonly transports RADIUS authentication messages?

1. TCP
2. SCTP
3. UDP
4. GRE

Correct Answer: 3

Explanation:

RADIUS commonly uses UDP for communication between network access devices and a RADIUS server. It can provide centralized authentication, authorization, and accounting services for network access. The network device forwards authentication requests to the configured RADIUS server, which processes the credentials and returns an appropriate response. RADIUS is widely used because centralized AAA simplifies management across multiple network devices. When troubleshooting RADIUS access, administrators should verify server reachability, shared secrets, authentication ports, and the configured AAA scheme.

Question 26

Which NAT method maps one private address permanently to one public address?

1. Static NAT
2. Dynamic pool NAT
3. PAT
4. Port translation

Correct Answer: 1

Explanation:

Static NAT creates a fixed one-to-one mapping between an internal address and an external address. The mapping remains consistent, making static NAT useful when an internal server must be reachable through a predictable public address. Dynamic NAT instead selects addresses from a configured public pool, while PAT allows multiple internal hosts to share public addresses through different port numbers. When publishing an internal service externally, administrators should verify the static mapping, routing, security policies, and return path.

Question 27

Which NAT technique lets many hosts share one public address?

1. One-to-one translation
2. Pool translation
3. PAT
4. Fixed mapping

Correct Answer: 3

Explanation:

PAT, or Port Address Translation, allows multiple internal hosts to use a shared public IPv4 address by distinguishing individual connections through transport-layer port numbers. This significantly reduces the number of public IPv4 addresses required for outbound connectivity. PAT is commonly used for Internet access from private networks. The device maintains translation information so returning traffic can be associated with the correct internal host. Because multiple sessions share one public address, port information becomes an essential part of the translation process.

Question 28

Which DHCP message does a client initially broadcast to locate servers?

1. DHCPACK
2. DHCPDISCOVER
3. DHCPREQUEST
4. DHCPDECLINE

Correct Answer: 2

Explanation:

A DHCP client commonly begins address acquisition by broadcasting a DHCPDISCOVER message. The broadcast allows the client to locate available DHCP servers without already knowing their addresses. Servers can respond with DHCPOFFER messages containing proposed configuration information. The client then selects an offer and continues the exchange. Understanding the DHCP message sequence is useful when troubleshooting address assignment. If clients receive no address, administrators should investigate Layer 2 connectivity, DHCP server availability, relay configuration, address pools, and relevant security policies.

Question 29

Which DHCP message confirms the server’s offered configuration?

1. DHCPINFORM
2. DHCPOFFER
3. DHCPREQUEST
4. DHCPRELEASE

Correct Answer: 3

Explanation:

The DHCPREQUEST message is used by the client to request the offered configuration from a DHCP server. During the normal address-acquisition sequence, the client broadcasts the request after receiving one or more offers. The selected server then responds with DHCPACK if the requested configuration can be assigned. Other DHCP messages serve different purposes, such as releasing an address or obtaining additional configuration information. Understanding the message sequence helps identify where DHCP negotiation fails when clients cannot obtain valid network settings.

Question 30

Which protocol synchronizes device clocks across a network?

1. DNS
2. FTP
3. NTP
4. TFTP

Correct Answer: 3

Explanation:

NTP, or Network Time Protocol, synchronizes clocks across networked devices. Accurate time is important for logging, authentication, troubleshooting, event correlation, and many network-management functions. A device can synchronize its clock with an NTP server and maintain more consistent timestamps than would be possible through independent manual configuration. When investigating time-related problems, administrators should verify NTP server reachability, configuration, synchronization status, and the device’s current clock information.

Question 31

Which protocol transfers files using a simple UDP-based mechanism?

1. TFTP
2. FTP
3. SCP
4. SFTP

Correct Answer: 1

Explanation:

TFTP, or Trivial File Transfer Protocol, provides a lightweight file-transfer mechanism that uses UDP. It has fewer features and less overhead than FTP and does not provide the same level of authentication and session functionality. TFTP has traditionally been useful for simple network-device file transfers, such as configuration or firmware-related operations in controlled environments. Because of its simplicity and limited security capabilities, it should be used carefully. Administrators should distinguish TFTP from FTP and secure file-transfer protocols.

Question 32

Which protocol provides encrypted remote CLI access?

1. Telnet
2. SSH
3. FTP
4. TFTP

Correct Answer: 2

Explanation:

SSH provides encrypted remote access to network devices and servers. It protects interactive management sessions by encrypting the communication between the client and server. Telnet, in contrast, sends management traffic without the same built-in encryption protection. SSH is therefore commonly preferred for administrative access over untrusted or shared networks. When configuring SSH access on a Huawei device, administrators must consider user authentication, VTY settings, local or external AAA, key-related configuration, and appropriate access controls.

Question 33

Which WLAN device centrally manages multiple access points?

1. AC
2. AP
3. STA
4. Antenna

Correct Answer: 1

Explanation:

An AC, or WLAN Access Controller, centrally manages multiple access points in a controller-based WLAN architecture. It can handle functions such as AP management, wireless policy configuration, authentication integration, and centralized control. An AP provides wireless access to client stations, while a STA represents a wireless client device. Centralized management simplifies deployment and operational control across larger WLAN environments because administrators can manage many APs through a coordinated system rather than configuring each AP independently.

Question 34

Which WLAN device directly provides wireless access to clients?

1. AC
2. STA
3. AP
4. ControllerNode

Correct Answer: 3

Explanation:

An Access Point, or AP, provides wireless connectivity for client stations. It communicates with wireless devices using supported IEEE 802.11 technologies and typically connects to the wired network through an Ethernet interface. In controller-based deployments, AP configuration and management can be coordinated by an AC. The AP remains the device that establishes the wireless access environment for clients. When wireless users cannot connect, administrators should examine AP status, radio configuration, SSID settings, authentication, and connectivity toward the management infrastructure.

Question 35

Which WLAN identifier names a wireless network for clients?

1. BSSID
2. SSID
3. WLAN-ID
4. RadioName

Correct Answer: 2

Explanation:

The SSID, or Service Set Identifier, is the name associated with a wireless network as presented to clients. Users commonly see the SSID when selecting a WLAN from a device’s available wireless networks. Multiple APs can advertise the same SSID as part of a coordinated WLAN deployment. The BSSID identifies a specific wireless basic service set and is commonly associated with an AP radio’s MAC address. Understanding these identifiers helps when troubleshooting wireless discovery and roaming behavior.

Question 36

Which PPP protocol performs link establishment negotiation?

1. IPCP
2. LCP
3. NCP
4. PAP

Correct Answer: 2

Explanation:

LCP, or Link Control Protocol, establishes, configures, and tests a PPP link. It negotiates fundamental link parameters before appropriate network-layer protocols are configured. NCP mechanisms are used afterward to configure specific network-layer protocols, such as IPv4 through IPCP. PAP is an authentication mechanism rather than the general link-establishment protocol. When a PPP connection fails during initial negotiation, administrators should examine LCP-related parameters and the physical or logical WAN connection.

Question 37

Which PPP protocol negotiates IPv4 parameters?

1. IPCP
2. LCP
3. IPv4CP
4. IP-NCP

Correct Answer: 1

Explanation:

IPCP, or IP Control Protocol, is the PPP Network Control Protocol used to configure IPv4 parameters across a PPP connection. It operates after the basic PPP link has been established through LCP. IPCP can negotiate IPv4-related information such as addresses and other configuration parameters. If a PPP link reaches an established state but IPv4 connectivity does not work, administrators should inspect IPCP negotiation and the resulting interface configuration.

Question 38

Which IPv6 address type is intended for communication within a local link?

1. Global unicast
2. Link-local
3. Multicast
4. Anycast

Correct Answer: 2

Explanation:

IPv6 link-local addresses are used for communication within the local network segment and are not routed beyond the local link. They are commonly formed from the FE80::/10 range. Link-local addressing is fundamental to IPv6 neighbor discovery and can also be used as a next-hop address for certain routing protocols. Every IPv6-enabled interface typically has a link-local address. When troubleshooting IPv6 neighbor or routing behavior, verifying link-local configuration is therefore an important step.

Question 39

Which IPv6 mechanism automatically configures addresses from router advertisements?

1. DHCPv6-PD
2. SLAAC
3. IPv6 NAT
4. Static RA

Correct Answer: 2

Explanation:

SLAAC, or Stateless Address Autoconfiguration, allows IPv6 hosts to configure addresses using information provided through Router Advertisement messages. A host can derive an address based on the advertised prefix and its interface-related identifier. SLAAC can operate without requiring a DHCPv6 server for basic address formation. Router Advertisements also communicate important network information and influence how hosts determine their IPv6 configuration behavior. Administrators troubleshooting automatic IPv6 addressing should inspect Router Advertisements and the interface’s IPv6 configuration.

Question 40

Which Python data structure stores key-value pairs?

1. Tuple
2. List
3. Dictionary
4. Set

Correct Answer: 3

Explanation:

A Python dictionary stores data as key-value pairs. Each key provides a way to access its associated value, making dictionaries useful for representing structured configuration information, device parameters, and API responses. Lists store ordered collections, tuples provide immutable sequences, and sets store unique elements without using key-value relationships. In network automation, dictionaries are frequently used to represent device connection parameters or parsed data returned by management interfaces. Understanding dictionaries is therefore useful when developing basic Python-based automation workflows.