View Full Huawei H12-811 Exam Dumps and Practice Test Dumps
Question 241
Which protocol advertises routes between autonomous systems?
- BGP
- OSPF
- RIP
- IS-IS
Correct Answer: 1
Explanation:
BGP, or Border Gateway Protocol, is designed for exchanging routing information between autonomous systems. It is widely used for inter-domain routing and makes routing decisions using attributes such as AS Path, Local Preference, and MED. OSPF and IS-IS are primarily interior gateway protocols, while RIP is a distance-vector interior routing protocol. BGP’s policy-oriented design makes it suitable for large-scale networks where route selection may depend on administrative policies rather than simply the shortest path.
Question 242
Which BGP attribute prevents routing loops between ASes?
- MED
- Local Preference
- Origin
- AS Path
Correct Answer: 4
Explanation:
The AS Path attribute records the autonomous systems that a BGP route has traversed. When a BGP router receives a route containing its own AS number in the AS Path, it can reject that route, helping prevent inter-domain routing loops. Local Preference influences outbound path selection within an autonomous system, while MED can influence how neighboring networks enter an AS. The Origin attribute indicates how a route was introduced into BGP. AS Path is therefore central to BGP loop prevention.
Question 243
Which route is used when no specific destination route exists?
- Default route
- Host route
- Connected route
- Summary route
Correct Answer: 1
Explanation:
A default route provides a fallback forwarding path when the routing table does not contain a more specific matching route. In IPv4, it is commonly represented as 0.0.0.0/0. The router forwards unmatched traffic toward the configured next hop or outgoing interface associated with the default route. Host routes identify individual destinations, connected routes represent directly attached networks, and summary routes aggregate multiple networks. Default routing is especially useful at network edges where unknown external destinations can be sent toward an upstream provider.
Question 244
Which OSPF mechanism summarizes routes between areas?
- SPF
- Inter-area summarization
- LSA flooding
- Neighbor discovery
Correct Answer: 2
Explanation:
Inter-area route summarization allows an OSPF Area Border Router to represent multiple networks using a summarized prefix. This can reduce the amount of routing information exchanged between areas and make the routing domain more scalable. Summarization can also hide individual topology changes within an area from other areas. SPF calculates shortest paths, while LSA flooding distributes topology information. Neighbor discovery establishes OSPF relationships. Route summarization therefore serves a different purpose focused on reducing routing information.
Question 245
Which VLAN protocol adds an outer VLAN tag?
- QinQ
- STP
- LACP
- RSTP
Correct Answer: 1
Explanation:
QinQ, also called VLAN stacking, adds an additional VLAN tag to an already tagged Ethernet frame. This allows service providers or large network environments to preserve customer VLAN information while adding another VLAN identifier for transport across a shared infrastructure. STP and RSTP provide loop-prevention functions, while LACP negotiates link aggregation. QinQ is particularly useful when multiple customer VLANs need to be transported across a provider network without modifying the customer’s original VLAN structure.
Question 246
Which LACP mode actively negotiates link aggregation?
- Passive
- Manual
- Active
- Disabled
Correct Answer: 3
Explanation:
In LACP, active mode actively sends LACP protocol messages to establish and maintain an aggregated link. A passive participant waits for LACP messages from the other side before negotiating. Using compatible LACP settings allows multiple physical interfaces to form a logical aggregation group while providing redundancy and additional aggregate bandwidth. Manual aggregation does not rely on LACP negotiation. Understanding active and passive behavior is useful when troubleshooting why expected Eth-Trunk members are not successfully joining the aggregation.
Question 247
Which STP feature immediately forwards an edge port?
- BPDU filtering
- Root protection
- Edge port
- Loop protection
Correct Answer: 3
Explanation:
An edge port is intended for direct connection to an endpoint device rather than another switching device. In RSTP, an edge port can transition rapidly toward forwarding instead of waiting through normal spanning-tree convergence behavior. This reduces startup delay for devices such as computers and printers. BPDU filtering controls BPDU handling, root protection helps prevent inappropriate root-bridge changes, and loop protection addresses certain failure conditions. Edge-port configuration should be applied carefully to avoid creating loops if another switch is connected unexpectedly.
Question 248
Which feature prevents a downstream switch from becoming root?
- BPDU filter
- Root protection
- Port security
- DHCP snooping
Correct Answer: 2
Explanation:
Root protection helps prevent a designated Layer 2 topology from accepting superior BPDUs that could cause an unexpected downstream switch to become the root bridge. It is useful on interfaces where the administrator expects the connected segment to remain part of a controlled STP topology. BPDU filtering handles BPDU transmission or reception behavior, port security controls MAC-based access, and DHCP snooping protects against unauthorized DHCP behavior. Root protection therefore specifically addresses unwanted changes to the STP root position.
Question 249
Which NAT type uses a pool of public addresses?
- Dynamic NAT
- Static NAT
- PAT
- Loopback NAT
Correct Answer: 1
Explanation:
Dynamic NAT maps internal addresses to available public addresses from a configured address pool. The mappings are generally created as needed rather than permanently assigning one public address to one private host. Static NAT establishes fixed mappings, while PAT allows multiple internal devices to share public addresses using transport-layer ports. Dynamic NAT can provide outbound connectivity for a group of hosts when the organization has multiple public addresses but does not require every internal device to maintain a permanent public mapping.
Question 250
Which DNS record maps a hostname directly to IPv4?
- AAAA
- PTR
- A
- MX
Correct Answer: 3
Explanation:
An A record maps a hostname to an IPv4 address. For example, a DNS server can return an A record when a client requests the IPv4 address associated with a particular domain name. An AAAA record is used for IPv6 addresses, PTR records support reverse DNS lookups, and MX records identify mail servers. Understanding DNS record types helps administrators correctly configure name resolution and troubleshoot situations where applications can resolve some names but not others.
Question 251
Which protocol securely transfers files using SSH?
- TFTP
- SCP
- FTP
- HTTP
Correct Answer: 2
Explanation:
SCP provides secure file transfer using SSH-based security mechanisms. It is useful when configuration files, software packages, or other operational data must be copied between systems while protecting the transfer from ordinary network interception. TFTP provides simple file transfer without comparable security features, FTP is a traditional file-transfer protocol, and HTTP is primarily designed for web communication. SCP is therefore appropriate when secure, straightforward file copying is required between compatible systems.
Question 252
Which protocol provides encrypted web communication?
- HTTP
- FTP
- HTTPS
- Telnet
Correct Answer: 3
Explanation:
HTTPS provides web communication protected through TLS encryption. It is widely used when clients need to securely communicate with web servers, particularly when credentials, session information, or other sensitive data are transmitted. HTTP does not provide encryption by itself. FTP is designed for file transfer, while Telnet provides remote terminal access without modern transport encryption. HTTPS therefore combines normal HTTP application behavior with cryptographic protection for the underlying communication session.
Question 253
Which IPv6 address is used for loopback testing?
- ::1
- FE80::1
- FF02::1
- 2001::1
Correct Answer: 1
Explanation:
The IPv6 loopback address is ::1. It identifies the local host itself and is commonly used to test the local IPv6 protocol stack without sending traffic to an external network interface. It is conceptually similar to IPv4’s 127.0.0.1. Link-local addresses begin with FE80::/10, multicast addresses use the FF00::/8 range, and global unicast addresses occupy globally routable ranges. Loopback testing is useful for verifying local protocol functionality before investigating network connectivity.
Question 254
Which ICMPv6 message announces a neighbor’s link-layer address?
- Echo Request
- Router Solicitation
- Neighbor Advertisement
- Router Advertisement
Correct Answer: 3
Explanation:
Neighbor Advertisement is an ICMPv6 Neighbor Discovery message used to communicate information about a neighbor, including its link-layer address in appropriate situations. It can respond to a Neighbor Solicitation and is also used for other Neighbor Discovery functions. Router Solicitation and Router Advertisement support router discovery, while Echo Request is associated with IPv6 diagnostic testing. Neighbor Discovery therefore combines address-resolution and reachability functions through ICMPv6 messages rather than using ARP.
Question 255
Which IPv6 method requires no DHCPv6 address assignment?
- Stateful DHCPv6
- Static addressing
- SLAAC
- Manual tunneling
Correct Answer: 3
Explanation:
SLAAC, or Stateless Address Autoconfiguration, allows an IPv6 host to automatically configure an address using information learned from Router Advertisement messages. The host can generate an interface identifier according to the configured addressing mechanism and combine it with the advertised prefix. Stateful DHCPv6 can assign addresses through a DHCPv6 server, while static addressing requires manual configuration. SLAAC therefore provides an automated IPv6 addressing method without requiring a DHCPv6 server to assign the address itself.
Question 256
Which SNMP version provides enhanced security features?
- SNMPv1
- SNMPv2c
- SNMPv3
- SNMPv2
Correct Answer: 3
Explanation:
SNMPv3 provides enhanced security capabilities compared with earlier commonly deployed SNMP versions. It supports mechanisms for authentication and privacy, helping protect management communication and verify the source of SNMP messages. SNMPv1 and SNMPv2c traditionally rely on community strings and do not provide the same security framework. Because network-management traffic can contain sensitive operational information, stronger protection is valuable when SNMP is used across less-trusted environments.
Question 257
Which management protocol uses structured configuration data?
- NETCONF
- Telnet
- FTP
- ICMP
Correct Answer: 1
Explanation:
NETCONF is a network management protocol designed for structured device configuration and operational data management. It commonly works with structured data models and supports controlled configuration operations. This makes it useful for network automation and programmatic device management. Telnet provides interactive terminal access, FTP transfers files, and ICMP provides network control and diagnostic messaging. NETCONF can help reduce manual configuration work by allowing management systems to communicate with network devices in a standardized programmatic manner.
Question 258
Which SDN component makes forwarding decisions?
- Application
- Controller
- Host
- Data plane
Correct Answer: 4
Explanation:
The data plane is responsible for forwarding packets through network devices according to the rules and forwarding information installed by the control plane. In SDN architectures, the controller provides centralized control logic and can program forwarding behavior, while applications express higher-level requirements. The data plane then performs the actual packet-handling operations at network devices or forwarding elements. Separating decision-making from packet forwarding is one of the fundamental concepts behind software-defined networking.
Question 259
Which Python structure preserves insertion order and allows duplicates?
- Set
- List
- Dictionary key
- Frozen set
Correct Answer: 2
Explanation:
A Python list is an ordered collection that allows duplicate values. Elements remain associated with their positions, and the list can be modified after creation. This makes lists useful when automation scripts need to process an ordered sequence of devices, interfaces, addresses, or configuration tasks. Sets automatically remove duplicate values, dictionary keys must be unique, and frozensets are immutable set structures. Choosing the correct collection type is important when designing scripts that process network information.
Question 260
Which NFV component manages virtual infrastructure resources?
- VNF
- VNFM
- VIM
- SDN application
Correct Answer: 3
Explanation:
The Virtualized Infrastructure Manager, or VIM, manages the virtualized computing, storage, and networking resources used by NFV workloads. It provides the infrastructure-management layer required for deploying and operating virtualized network functions. A VNF represents the virtualized network function itself, while a VNFM focuses on lifecycle management of VNFs. SDN applications provide higher-level network requirements or services. Understanding these roles helps distinguish infrastructure management from network-function lifecycle operations in an NFV architecture.