View Full Huawei H12-811 Exam Dumps and Practice Test Dumps

 

Question 221

Which interface enables communication between VLANs on a switch?

1. LoopBack interface
2. VLANIF interface
3. Null interface
4. Serial interface

Correct Answer: 2

Explanation:

A VLANIF interface provides Layer 3 gateway functionality for a VLAN on a Huawei switch. By assigning an IP address to a VLANIF interface, the switch can route traffic between different VLANs. Each VLAN that requires Layer 3 gateway services can have a corresponding VLANIF interface. This approach allows a multilayer switch to perform inter-VLAN routing without requiring an external router for every VLAN. Loopback and serial interfaces serve different purposes, while a null interface is generally used for special routing and traffic-discard scenarios.

Question 222

Which routing design uses one router interface for multiple VLANs?

1. Dual-homed routing
2. Distributed routing
3. Router-on-a-stick
4. Static gateway routing

Correct Answer: 3

Explanation:

Router-on-a-stick uses a single physical router interface divided into multiple logical subinterfaces. Each subinterface is associated with a different VLAN and normally uses VLAN tagging to distinguish traffic. This design allows a router to perform inter-VLAN routing while using only one physical connection to the switch. It can reduce physical interfaces but requires appropriate trunk configuration and subinterface settings. Modern multilayer switches can instead use VLANIF interfaces to perform inter-VLAN routing directly within the switch.

Question 223

Which DHCP function forwards client requests between subnets?

1. DHCP relay
2. DHCP snooping
3. DHCP binding
4. DHCP reservation

Correct Answer: 1

Explanation:

A DHCP relay forwards DHCP client requests between different IP subnets when the DHCP server is located on another network. DHCP clients initially use broadcast-based communication, and routers normally do not forward such broadcasts. A relay agent receives the request and forwards it toward the configured DHCP server, allowing centralized address assignment across multiple networks. DHCP snooping serves a security purpose by controlling DHCP-related traffic, while bindings and reservations relate to address-assignment management rather than forwarding client broadcasts.

Question 224

Which protocol provides unsecured remote terminal access?

1. SFTP
2. SSH
3. Telnet
4. HTTPS

Correct Answer: 3

Explanation:

Telnet provides remote terminal access but does not encrypt the normal management session. Usernames, passwords, commands, and other session information can therefore be exposed when transmitted across an untrusted network. SSH provides encrypted remote command-line access and is generally used when secure device administration is required. SFTP is intended for secure file transfer, while HTTPS secures web-based communication. Understanding the distinction between Telnet and SSH is important when selecting appropriate management protocols for network devices.

Question 225

Which FTP mode establishes the data connection from the server?

1. Passive mode
2. Active mode
3. Secure mode
4. Tunnel mode

Correct Answer: 2

Explanation:

In FTP active mode, the FTP server establishes the data connection toward the client after receiving the client’s connection information. In passive mode, the client initiates both the control and data connections toward the server. This distinction can affect firewall and NAT behavior because different connection directions are involved. FTP uses separate control and data communication, making its connection behavior different from protocols that maintain a single connection for the complete exchange.

Question 226

Which MAC behavior occurs when the destination is unknown?

1. Frame rejection
2. Selective forwarding
3. Unicast conversion
4. Flooding

Correct Answer: 4

Explanation:

When a switch receives a frame with an unknown destination MAC address, it normally floods the frame within the appropriate VLAN, excluding the interface on which the frame arrived. The switch does this because it does not yet know which port leads to the destination device. Once the destination device responds, the switch can learn its source MAC address and update the MAC table. This learning process gradually reduces unnecessary flooding during normal network operation.

Question 227

Which Ethernet field detects frame transmission errors?

1. FCS
2. EtherType
3. Preamble
4. Destination MAC

Correct Answer: 1

Explanation:

The Frame Check Sequence, or FCS, is used for error detection in Ethernet frames. The receiving device calculates an expected value based on the received frame contents and compares it with the transmitted FCS. If the values do not match, the frame is considered corrupted and is normally discarded. The preamble helps with frame synchronization, EtherType identifies the encapsulated protocol, and the destination MAC identifies the intended Layer 2 recipient. FCS therefore provides an important Ethernet integrity-checking mechanism.

Question 228

Which VLAN port type commonly connects to another switch?

1. Access
2. Hybrid endpoint
3. Trunk
4. Loopback

Correct Answer: 3

Explanation:

A trunk port is commonly used to connect switches when traffic from multiple VLANs must traverse the same physical link. VLAN identification allows the receiving device to distinguish traffic belonging to different broadcast domains. An access port generally connects to an endpoint and normally carries one VLAN. Hybrid ports can support particular combinations of tagged and untagged VLAN traffic depending on configuration. Trunking is therefore the standard concept associated with carrying multiple VLANs between network devices.

Question 229

Which mechanism protects a switch from unauthorized DHCP servers?

1. ARP inspection
2. IP spoofing
3. DHCP snooping
4. MAC learning

Correct Answer: 3

Explanation:

DHCP snooping helps protect a Layer 2 network from unauthorized or rogue DHCP servers. The switch can classify interfaces as trusted or untrusted and control DHCP server messages received from inappropriate ports. It can also build binding information associating clients with assigned addresses and interfaces. ARP inspection addresses a different security concern, while MAC learning is a normal switching function. DHCP snooping is therefore particularly useful in access networks where unauthorized DHCP services could distribute incorrect gateway or DNS information.

Question 230

Which authentication method sends credentials in clear text?

1. CHAP
2. PAP
3. EAP
4. Kerberos

Correct Answer: 2

Explanation:

PAP, or Password Authentication Protocol, transmits authentication credentials without the protection provided by challenge-response mechanisms. Because the credentials are not cryptographically protected during normal PAP authentication, it is less secure than CHAP when used over an exposed link. CHAP uses a challenge-response process rather than repeatedly sending the password itself. Authentication methods should therefore be selected according to the security requirements and characteristics of the underlying connection.

Question 231

Which OSPF calculation determines shortest paths?

1. Dijkstra algorithm
2. Bellman-Ford algorithm
3. Flooding algorithm
4. Token algorithm

Correct Answer: 1

Explanation:

OSPF uses the Shortest Path First calculation based on Dijkstra’s algorithm to determine optimal paths through the topology represented in its link-state database. Each router independently calculates its shortest-path tree from its own perspective. The resulting information is then used to install appropriate routes in the routing table. This differs from distance-vector approaches that exchange summarized distance information with neighbors. Understanding SPF helps explain why OSPF can react to topology changes by recalculating affected paths.

Question 232

Which OSPF value represents interface path expense?

1. Priority
2. Router ID
3. Cost
4. Area ID

Correct Answer: 3

Explanation:

OSPF cost represents the relative expense of using a particular interface or path. Routers use accumulated OSPF costs when comparing possible routes to the same destination. Interface bandwidth commonly influences the automatically calculated cost, although administrators can configure values manually. Router ID identifies the router, area ID identifies an OSPF area, and priority can influence DR or BDR selection on applicable network types. Cost is therefore the primary metric used for OSPF shortest-path selection.

Question 233

Which device stores packets before forwarding when necessary?

1. Hub
2. Repeater
3. Switch
4. Transceiver

Correct Answer: 3

Explanation:

A switch can buffer frames temporarily before forwarding them through an appropriate interface. Buffering is useful when incoming traffic arrives faster than the outgoing interface can transmit it or when multiple incoming interfaces contend for the same destination interface. The switch can temporarily store frames rather than immediately discarding them, subject to available buffer capacity. Hubs and repeaters primarily regenerate or repeat signals rather than performing intelligent frame forwarding based on MAC addresses.

Question 234

Which STP parameter influences root bridge election?

1. VLAN tag
2. Bridge priority
3. Port description
4. Interface speed

Correct Answer: 2

Explanation:

Bridge priority is an important component of the bridge ID used during STP root bridge election. A switch with the lower effective bridge ID is preferred as the root. Administrators can influence root selection by configuring bridge priority appropriately. Interface speed can affect path cost, but it is not the primary value used to determine the root bridge. Deliberate root placement can help produce predictable Layer 2 forwarding paths and avoid unnecessary traffic traversing less desirable parts of the network.

Question 235

Which AAA method validates identity before access is granted?

1. Authentication
2. Authorization
3. Accounting
4. Auditing

Correct Answer: 1

Explanation:

Authentication verifies the identity of a user or device before access is granted. It commonly involves credentials such as usernames and passwords or other authentication mechanisms. Authorization determines what an authenticated user is allowed to access or perform, while accounting records activity associated with sessions. Auditing is a broader operational concept rather than one of the three core AAA functions. Keeping authentication and authorization separate allows administrators to verify identity independently from the permissions assigned to that identity.

Question 236

Which protocol is designed for simple file transfer without authentication?

1. FTP
2. SFTP
3. TFTP
4. SCP

Correct Answer: 3

Explanation:

TFTP, or Trivial File Transfer Protocol, provides a lightweight mechanism for transferring files and does not normally provide user authentication like FTP-based secure methods. It commonly uses UDP and is often associated with simple network-device file operations such as configuration or image transfers in controlled environments. FTP provides a richer file-transfer service, while SFTP and SCP use secure mechanisms associated with SSH. Because TFTP lacks strong authentication and encryption, its deployment should be carefully controlled.

Question 237

Which WLAN standard operates in the 2.4 GHz and 5 GHz bands?

1. 802.11n
2. 802.11a
3. 802.11b
4. 802.11g

Correct Answer: 1

Explanation:

IEEE 802.11n can operate in both the 2.4 GHz and 5 GHz frequency bands. This flexibility helped WLAN deployments achieve greater capacity and compatibility across different wireless environments. Earlier standards such as 802.11b and 802.11g primarily operate in the 2.4 GHz band, while 802.11a is associated with 5 GHz operation. Band selection affects available channels, interference conditions, coverage, and performance, making frequency planning an important part of WLAN design.

Question 238

Which MPLS element removes the label before IP forwarding?

1. LER
2. LSR
3. PE
4. CE

Correct Answer: 2

Explanation:

An MPLS Label Switch Router, or LSR, forwards packets based on labels within the MPLS domain. Depending on the forwarding operation and network position, an LSR can perform label swapping or participate in label removal. A Label Edge Router operates at the boundary between MPLS and non-MPLS networks, while PE and CE describe provider-edge and customer-edge roles in service-provider architectures. MPLS label processing enables efficient forwarding through predefined label-switched paths.

Question 239

Which IPv6 notation compresses consecutive zero groups?

1. Hyphen
2. Double colon
3. Slash notation
4. Dot notation

Correct Answer: 2

Explanation:

IPv6 uses a double colon, ::, to represent one consecutive sequence of zero-valued 16-bit groups. This compression makes long IPv6 addresses easier to read and write. The :: notation can normally be used only once within an individual IPv6 address because multiple occurrences would make expansion ambiguous. A slash is used for prefix-length notation, while dots are associated with IPv4-style decimal notation. Correct IPv6 formatting is important when configuring addresses and interpreting routing information.

Question 240

Which Python keyword exits a loop immediately?

1. continue
2. pass
3. break
4. return

Correct Answer: 3

Explanation:

The Python break statement immediately terminates the innermost loop in which it appears. It is useful when an automation script has found the required device, value, or condition and no longer needs to continue processing additional iterations. The continue statement skips the remaining statements in the current iteration and proceeds with the next one. pass performs no operation, while return exits a function. Understanding these control-flow statements helps create efficient and predictable network automation scripts.