View Full Huawei H12-811 V2.0 Exam Dumps and Practice Test Dumps

 

Question 161.

Which network security technology filters traffic according to rules based on addresses, protocols, and ports?

1. ACL
   2. DHCP
   3. DNS
   4. LLDP

Correct Answer: 1. ACL

Explanation:

An Access Control List, or ACL, filters network traffic according to configured rules. Depending on the ACL type, rules can match source addresses, destination addresses, protocol types, and transport-layer port numbers. ACLs can help restrict management access, limit communication between networks, or identify traffic for other policies. DHCP provides address configuration, DNS resolves names, and LLDP discovers directly connected network devices.

Question 162.

Which Huawei ACL type is primarily used to match packets based on source IPv4 address information?

1. Advanced ACL
   2. Basic ACL
   3. Layer 2 ACL only
   4. NAT ACL

Correct Answer: 2. Basic ACL

Explanation:

A Huawei basic ACL primarily matches traffic according to source IPv4 address information. It is useful when filtering decisions depend mainly on where traffic originates. Advanced ACLs support more detailed matching criteria such as source and destination addresses, protocols, and port numbers. Selecting the appropriate ACL type simplifies policy configuration and helps administrators avoid unnecessarily complex rules.

Question 163.

Which Huawei ACL type can match TCP or UDP port numbers in addition to IP addresses?

1. Basic ACL
   2. VLAN-only ACL
   3. Advanced ACL
   4. STP ACL

Correct Answer: 3. Advanced ACL

Explanation:

Huawei advanced ACLs provide more granular filtering than basic ACLs. They can match source and destination IPv4 addresses, IP protocol numbers, and TCP or UDP port information. This makes them suitable for policies that must distinguish specific applications or services. Basic ACLs are generally source-address focused and cannot provide the same level of traffic classification.

Question 164.

Which ACL processing behavior normally occurs after a packet matches a rule?

1. The router always continues checking every remaining rule
   2. The packet is automatically encrypted
   3. The MAC address is rewritten
   4. The matching rule’s action is applied**

Correct Answer: 4. The matching rule’s action is applied

Explanation:

ACL rules are generally evaluated according to their configured matching logic, and once traffic matches an applicable rule, the specified permit or deny action is applied according to the platform’s ACL behavior. Proper rule ordering is important because an earlier matching rule can determine the outcome before later rules are considered. Administrators should design ACLs carefully to avoid unintentionally allowing or blocking traffic.

Question 165.

Which technology translates a private IPv4 source address into a public IPv4 address when traffic leaves an internal network?

1. NAT
   2. STP
   3. OSPF
   4. LLDP

Correct Answer: 1. NAT

Explanation:

Network Address Translation, or NAT, changes address information as packets move between networks. It is commonly used to translate private internal IPv4 addresses into public addresses for internet communication. NAT helps conserve public IPv4 address space and allows organizations to use private addressing internally. STP prevents Layer 2 loops, OSPF exchanges routing information, and LLDP provides neighbor discovery.

Question 166.

Which NAT method creates a permanent one-to-one mapping between an inside local address and a public address?

1. Dynamic NAT
   2. Static NAT
   3. NAPT
   4. DHCP relay

Correct Answer: 2. Static NAT

Explanation:

Static NAT creates a fixed one-to-one mapping between a private address and a public address. It is commonly used when an internal server must always be represented by the same external address. Dynamic NAT selects addresses from a pool as needed, while NAPT also translates transport-layer port numbers so multiple hosts can share a smaller number of public addresses.

Question 167.

Which NAT method allows several private hosts to share one public IPv4 address by translating port numbers?

1. Static NAT
   2. Dynamic NAT only
   3. NAPT
   4. ARP proxy

Correct Answer: 3. NAPT

Explanation:

NAPT translates both IP addresses and transport-layer port numbers. This allows many internal hosts to use the same public IPv4 address simultaneously while maintaining separate sessions. It is widely used for internet access because it conserves public address space. Static NAT provides fixed one-to-one mappings, while dynamic NAT generally maps internal addresses to available addresses from a pool.

Question 168.

Which table is maintained by a NAT device to track active address and port translations?

1. MAC address table
   2. OSPF LSDB
   3. ARP cache only
   4. NAT translation table**

Correct Answer: 4. NAT translation table

Explanation:

A NAT device maintains translation information so returning traffic can be mapped back to the correct internal host and session. In NAPT environments, the table may include inside and outside IP addresses together with transport-layer port numbers. MAC tables, ARP caches, and OSPF link-state databases store different kinds of networking information and do not perform NAT session tracking.

Question 169.

Which Huawei redundancy protocol provides a virtual default gateway for hosts?

1. VRRP
   2. STP
   3. LACP
   4. LLDP

Correct Answer: 1. VRRP

Explanation:

VRRP provides first-hop gateway redundancy by allowing multiple routers to share a virtual IP address. End hosts configure that virtual address as their default gateway. One router normally operates as the master, while backup routers monitor it and can take over if it fails. This improves availability without requiring hosts to change their gateway configuration.

Question 170.

Which VRRP router normally forwards packets sent to the virtual gateway address?

1. Backup router
   2. Master router
   3. Root bridge
   4. DR router

Correct Answer: 2. Master router

Explanation:

The VRRP master router is responsible for forwarding traffic associated with the virtual gateway during normal operation. Backup routers remain ready to assume the master role if the current master becomes unavailable. The election is influenced by VRRP priority and other protocol rules. Root bridge and DR are concepts associated with STP and OSPF respectively.

Question 171.

Which VRRP parameter is commonly adjusted to influence master-router election?

1. OSPF area ID
   2. VLAN name
   3. Priority
   4. MAC aging timer

Correct Answer: 3. Priority

Explanation:

VRRP uses priority to help determine which router becomes the master. A higher priority generally makes a router more preferred for the master role. Administrators often configure priorities so that the intended primary gateway handles traffic during normal operation while another router remains available as a backup.

Question 172.

Which benefit does VRRP primarily provide?

1. VLAN tagging
   2. DNS resolution
   3. Link aggregation
   4. Default-gateway redundancy**

Correct Answer: 4. Default-gateway redundancy

Explanation:

VRRP improves availability by protecting the default gateway function. Hosts continue using the same virtual gateway address even when the physical router providing that gateway changes. This avoids the need to reconfigure end devices during router failure. VLAN tagging, DNS, and link aggregation solve different networking problems.

Question 173.

Which Huawei technology combines several physical Ethernet interfaces into one logical link?

1. Eth-Trunk
   2. Vlanif
   3. LoopBack
   4. NULL interface

Correct Answer: 1. Eth-Trunk

Explanation:

An Eth-Trunk interface on Huawei devices represents a logical bundle of multiple physical Ethernet links. The bundle can provide increased aggregate bandwidth and redundancy. If one member link fails, traffic can often continue across the remaining active members. Vlanif interfaces provide Layer 3 VLAN gateway functionality, while LoopBack and NULL interfaces serve different purposes.

Question 174.

Which protocol dynamically negotiates member links in an Ethernet aggregation group?

1. STP
   2. LACP
   3. OSPF
   4. ARP

Correct Answer: 2. LACP

Explanation:

LACP, or Link Aggregation Control Protocol, dynamically negotiates and manages which Ethernet links participate in an aggregation group. It allows devices at both ends of the connection to exchange information about member links and select suitable active interfaces. STP prevents loops, OSPF performs routing, and ARP maps IPv4 addresses to MAC addresses.

Question 175.

Which benefit is provided by link aggregation when multiple member links are active?

1. Automatic DNS resolution
   2. IPv6 address assignment
   3. Increased aggregate bandwidth
   4. OSPF area creation

Correct Answer: 3. Increased aggregate bandwidth

Explanation:

Link aggregation can increase the total bandwidth available between two devices by distributing traffic across multiple physical links. It also provides redundancy because traffic can continue if one member fails, assuming other links remain active. The amount of bandwidth available to any single flow may still depend on the load-balancing algorithm.

Question 176.

Which issue can occur if both ends of a link aggregation group are configured inconsistently?

1. DNS names automatically change
   2. IPv4 addresses become IPv6 addresses
   3. STP is permanently disabled
   4. Connectivity or aggregation failure**

Correct Answer: 4. Connectivity or aggregation failure

Explanation:

Both ends of an aggregated connection must use compatible settings. Differences in aggregation mode, member interfaces, VLAN configuration, or related parameters can prevent the bundle from operating correctly. The result may be partial connectivity, inactive links, or complete aggregation failure. Verification should include physical status, Eth-Trunk membership, LACP state when used, and VLAN or Layer 3 settings.

Question 177.

Which Huawei VRP command is commonly used to examine the operational status of an Eth-Trunk interface?

1. display eth-trunk
   2. display dns
   3. display ospf routing
   4. display users only

Correct Answer: 1. display eth-trunk

Explanation:

The display eth-trunk command can be used to examine Eth-Trunk information such as aggregation status and member interfaces. It is useful when troubleshooting link aggregation because administrators can verify whether expected members are active and participating correctly. DNS, OSPF, and user-session commands display unrelated information.

Question 178.

Which Layer 2 protocol elects a root bridge to create a loop-free switched topology?

1. OSPF
   2. STP
   3. VRRP
   4. BGP

Correct Answer: 2. STP

Explanation:

STP creates a loop-free Layer 2 topology by electing a root bridge and selecting appropriate forwarding and non-forwarding ports. Redundant Ethernet paths are important for resilience, but unmanaged loops can create severe broadcast storms and duplicate frames. STP dynamically blocks selected redundant paths while preserving them for possible use after a topology change.

Question 179.

Which STP port on a non-root switch provides the lowest-cost path toward the root bridge?

1. Designated port
   2. Edge port
   3. Root port
   4. Backup port

Correct Answer: 3. Root port

Explanation:

A non-root switch selects one root port that represents its best path toward the STP root bridge. The decision is based on path cost and additional tie-breaking rules. Designated ports are selected for individual network segments, while redundant ports may be placed in non-forwarding roles. The root bridge itself does not have a root port.

Question 180.

A network has redundant Layer 2 links and experiences continuous broadcast traffic and unstable MAC address learning. Which problem is the most likely cause?

1. DNS failure
   2. Incorrect NTP server
   3. Missing static route
   4. Switching loop**

Correct Answer: 4. Switching loop

Explanation:

A Layer 2 switching loop can cause broadcast frames to circulate repeatedly because Ethernet frames do not contain a routing-style hop limit. This can create broadcast storms, duplicate traffic, and rapid MAC address table changes. STP or a related spanning-tree protocol is designed to prevent this problem by blocking redundant paths when necessary. The described symptoms are much more consistent with a loop than with DNS, NTP, or routing issues.