View Full Huawei H12-811 Exam Dumps and Practice Test Dumps

 

Question 161

Which IPv4 range is reserved for private Class A networks?

1. 172.16.0.0/12
2. 192.168.0.0/16
3. 169.254.0.0/16
4. 10.0.0.0/8

Correct Answer: 4

Explanation:

The IPv4 range 10.0.0.0/8 is reserved for private network addressing. It provides a large address space commonly used inside enterprise networks and is not directly routable across the public Internet. The other private ranges include 172.16.0.0/12 and 192.168.0.0/16. The 169.254.0.0/16 range is associated with link-local IPv4 addressing. Private addresses are often combined with NAT when internal devices need to communicate with public Internet destinations.

Question 162

What is the IPv4 broadcast address for 192.168.5.64/27?

1. 192.168.5.95
2. 192.168.5.96
3. 192.168.5.63
4. 192.168.5.127

Correct Answer: 1

Explanation:

A /27 subnet contains 32 IPv4 addresses. Starting with network address 192.168.5.64, the address range extends through 192.168.5.95. Therefore, 192.168.5.95 is the broadcast address for this subnet. The usable host addresses lie between 192.168.5.65 and 192.168.5.94. Understanding subnet boundaries is essential when configuring interfaces, DHCP scopes, and routing entries because an incorrect network or broadcast address can cause addressing and connectivity problems.

Question 163

Which route is selected when two routes have different prefix lengths?

1. Highest metric
2. Longest prefix
3. Lowest bandwidth
4. Oldest entry

Correct Answer: 2

Explanation:

Routers use longest-prefix matching when determining which route best matches a destination IP address. A route with a longer prefix represents a more specific destination and is therefore preferred over a less-specific route when both match the destination. For example, a /24 route is more specific than a /16 route covering the same destination range. This principle allows routers to maintain broad summary routes while also supporting more specific paths for selected networks.

Question 164

Which route configuration requires resolving a next hop recursively?

1. Direct route
2. Connected route
3. Next-hop static route
4. Interface-only route

Correct Answer: 3

Explanation:

A static route configured with a next-hop IP address may require recursive resolution to determine the outgoing interface. The router first looks up how to reach the specified next-hop address and then uses that result to forward traffic toward the destination network. This differs from a directly connected route, where the interface and connected network are already known. Recursive resolution is therefore an important concept when troubleshooting static routes that appear configured but are not being installed or used as expected.

Question 165

Which OSPF state confirms bidirectional neighbor communication?

1. 2-Way
2. Down
3. Loading
4. Init

Correct Answer: 1

Explanation:

The OSPF 2-Way state indicates that two neighboring routers have successfully established bidirectional communication. Each router has received Hello information from the other and recognizes itself in the neighbor’s list. On certain network types, routers may proceed toward full adjacency, while on broadcast networks some routers may remain in 2-Way with each other because full adjacency is primarily established with the designated router and backup designated router. This state is useful when diagnosing OSPF neighbor relationships.

Question 166

Which OSPF network type does not require DR election?

1. Broadcast
2. NBMA
3. Point-to-point
4. Multi-access

Correct Answer: 3

Explanation:

OSPF point-to-point networks do not require a designated router or backup designated router election. The topology contains a direct relationship between two neighboring routers, so the additional DR mechanism is unnecessary. Broadcast networks generally use DR and BDR elections to reduce the number of required adjacencies. Understanding OSPF network types is important because the behavior of neighbor formation, adjacency establishment, and DR/BDR selection depends on the network type configured on the interface.

Question 167

Which feature limits traffic from a single switch port?

1. VLAN mapping
2. Port security
3. Link aggregation
4. Route filtering

Correct Answer: 2

Explanation:

Port security can restrict which devices or MAC addresses are permitted to use a switch interface. It can help control unauthorized access by limiting the number or identity of MAC addresses learned on a port. Depending on the configuration, violations can trigger different protective actions. VLAN mapping changes VLAN relationships, link aggregation combines physical links, and route filtering controls Layer 3 route information. Port security is therefore directly associated with controlling endpoint access at an individual switch port.

Question 168

What happens when a learned MAC entry ages out?

1. It becomes permanent
2. It changes to multicast
3. It is removed
4. It moves to ARP

Correct Answer: 3

Explanation:

A dynamically learned MAC address entry is removed from the switch’s MAC address table when its aging timer expires and the entry has not been refreshed. This prevents stale information from remaining indefinitely after a device moves, disconnects, or changes its network location. When the device sends another frame, the switch can learn its source MAC address again. MAC aging therefore helps switches maintain an accurate view of current Layer 2 device locations without requiring permanent manual entries.

Question 169

Which mechanism helps control excessive broadcast traffic?

1. MAC learning
2. Port mirroring
3. VLAN tagging
4. Storm control

Correct Answer: 4

Explanation:

Storm control helps protect a network interface from excessive broadcast, multicast, or other specified traffic types. A traffic storm can consume bandwidth and switch resources, potentially affecting legitimate communications. Storm-control thresholds allow administrators to limit the amount of selected traffic entering or leaving an interface. MAC learning and VLAN tagging serve different Layer 2 functions, while port mirroring copies traffic for monitoring purposes. Storm control is therefore specifically associated with mitigating excessive traffic conditions.

Question 170

Which Eth-Trunk method distributes traffic across member links?

1. VLAN assignment
2. Load balancing
3. MAC aging
4. Route poisoning

Correct Answer: 2

Explanation:

Eth-Trunk uses load-balancing methods to distribute traffic among available member interfaces. Depending on the configured algorithm, traffic may be distributed according to information such as source and destination MAC addresses, IP addresses, or other packet characteristics. This allows an aggregated link to use multiple physical connections while maintaining a logical interface. Load balancing improves aggregate utilization, while redundancy allows traffic to continue through remaining members when an individual physical link fails.

Question 171

Which ACL direction filters packets entering an interface?

1. Inbound
2. Outbound
3. Internal
4. External

Correct Answer: 1

Explanation:

An inbound ACL is applied to traffic as it enters an interface. The device evaluates the packet against the configured rules before forwarding it further through the system. An outbound ACL evaluates traffic leaving the interface. Choosing the correct direction is important because the same ACL can produce different results depending on where and how it is applied. Administrators should consider the packet’s direction of travel and the interface through which it enters or exits when designing filtering policies.

Question 172

Which protocol is commonly associated with centralized AAA authentication?

1. ARP
2. ICMP
3. RADIUS
4. LLDP

Correct Answer: 3

Explanation:

RADIUS is widely used to provide centralized authentication, authorization, and accounting services for network access. A network device can communicate with a RADIUS server instead of maintaining every user’s credentials locally. This approach supports centralized identity management and consistent access policies across multiple devices. ARP resolves IPv4 addresses to MAC addresses, ICMP supports control and diagnostic messaging, and LLDP exchanges device information with neighboring network equipment. RADIUS is therefore directly relevant to centralized AAA deployments.

Question 173

Which DNS record identifies an alias for another hostname?

1. MX
2. CNAME
3. PTR
4. SOA

Correct Answer: 2

Explanation:

A CNAME record defines an alias for another canonical hostname. Instead of assigning a separate address directly to the alias, DNS resolution follows the CNAME toward the referenced canonical name. MX records identify mail-exchange servers, PTR records support reverse DNS mapping, and SOA records contain authoritative zone information. CNAME records are commonly useful when multiple hostnames should reference the same underlying service name while keeping the actual destination managed through a single canonical DNS record.

Question 174

Which HTTP status indicates a successful request?

1. 301
2. 403
3. 404
4. 200

Correct Answer: 4

Explanation:

HTTP status code 200 indicates that a request was successfully processed. It belongs to the 2xx success class. Code 301 represents a permanent redirection, 403 indicates that access is forbidden, and 404 means the requested resource was not found. Understanding common HTTP response classes helps network administrators troubleshoot web applications and distinguish successful communication from redirection, authorization, or resource-availability problems.

Question 175

Which WLAN identifier uniquely identifies an access point radio?

1. SSID
2. ESS
3. BSSID
4. VLAN ID

Correct Answer: 3

Explanation:

BSSID, or Basic Service Set Identifier, identifies a specific WLAN basic service set and is commonly represented by the MAC address of the AP radio. The SSID is the human-readable network name presented to wireless clients. An ESS represents an extended collection of WLAN cells using a common service identity, while a VLAN ID identifies a Layer 2 broadcast domain. Understanding the distinction between SSID and BSSID is important when troubleshooting wireless association and roaming behavior.

Question 176

Which WLAN security method uses a shared passphrase?

1. WPA2-PSK
2. WPA-Enterprise
3. Open authentication
4. MAC filtering

Correct Answer: 1

Explanation:

WPA2-PSK uses a pre-shared key or passphrase for wireless authentication. It is commonly used in smaller WLAN environments where centralized authentication infrastructure is unnecessary. Each participating client and the wireless network share the configured secret. Enterprise WLAN deployments can instead use authentication through an authentication server and individual user credentials. Open authentication provides no equivalent shared wireless security mechanism, while MAC filtering controls device addresses rather than providing strong cryptographic protection.

Question 177

Which IPv6 prefix identifies unique local addresses?

1. 2000::/3
2. FE80::/10
3. FF00::/8
4. FC00::/7

Correct Answer: 4

Explanation:

The FC00::/7 prefix identifies IPv6 Unique Local Addresses. These addresses are intended for internal communication and are not designed for global Internet routing. Link-local addresses use FE80::/10, multicast addresses use FF00::/8, and global unicast addresses commonly fall within 2000::/3. Unique local addressing is useful when organizations need internal IPv6 addressing that remains separate from globally routable address space.

Question 178

Which SNMP operation retrieves an object value?

1. SET
2. GET
3. TRAP
4. INFORM

Correct Answer: 2

Explanation:

The SNMP GET operation requests the value of a managed object from an SNMP agent. A network management system can use GET operations to retrieve information such as interface counters, system data, or other monitored parameters defined in the MIB. SET is used to modify supported values, while TRAP and INFORM are notification mechanisms generated by agents or management systems. Understanding these operations helps administrators distinguish monitoring queries from configuration changes and asynchronous event notifications.

Question 179

Which Python collection cannot be modified after creation?

1. List
2. Dictionary
3. Tuple
4. Set

Correct Answer: 3

Explanation:

A Python tuple is immutable, meaning its existing elements cannot be changed after the tuple is created. Lists, dictionaries, and sets are mutable collections that can generally be modified after creation. Tuples are useful when data should remain fixed throughout program execution. In network automation, immutable structures can help represent constant groups of values that should not accidentally be altered by later operations. Understanding mutability is an important Python concept for writing predictable automation scripts.

Question 180

Which SDN layer contains network applications?

1. Application layer
2. Transport layer
3. Data plane
4. Physical layer

Correct Answer: 1

Explanation:

The application layer of an SDN architecture contains network applications that express higher-level requirements and services. These applications communicate with the SDN controller through northbound interfaces. The controller provides centralized control and translates application requirements into instructions for network devices. The data plane remains responsible for forwarding traffic. Separating applications, control logic, and forwarding functions is a fundamental SDN concept and enables centralized programmability and automated network management.