Huawei H12-222 Huawei Certified Network Professional-R&S-IENP Exam Practice Test

2

4

6

8

The packet filtering firewall checks each data packet against ACL rules.

The stateful inspection firewall uses security policies to check only the first packet of non-matched sessions.

The security policies in two directions need to be configured on the stateful inspection firewall.

The proxy firewall processes services of users on internal and external networks.

Private routes cannot communicate with each other.

Leased lines are expensive.

Bandwidth resources cannot be fully used.

The address space is overlapping.

Resource scheduling

Resource monitoring

Resource reclaiming

Troubleshooting

The switch uses the directly-connected interface to set up a TCP connection.

The switch's peer LDP ID is an interface IP address of the peer device.

The switch's peer LDP ID is the MPLS LSR ID of the peer device.

The switch uses the LSR ID to set up a TCP connection.

Transmission delay

Transmission jitter

Transmission bandwidth

Transmission distance

eSight is a lightweight system and a wizard is available for eSight installation.

eSight adopts the C/S architecture, so users can access eSight using a browser anytime, anywhere.

eSight provides corresponding solutions for different customers.

eSight can uniformly manage devices from multiple vendors.

There are two label distribution control modes: independent and ordered.

If the label advertisement mode is DU and the label distribution control mode is Independent, an LSR distributes labels without waiting for labels from the downstream device.

If the label advertisement mode is DoD and the label distribution control mode is Independent, the transit device distributes labels only after receiving a label mapping message from the egress device.

If the label advertisement mode is DU and the label distribution control mode is Ordered, the transit LSR distributes labels to the ingress device only after receiving a label mapping message from the egress device.

The two mechanisms are basic discovery mechanism and extended discovery mechanism.

The basic discovery mechanism periodically sends Hello messages to discover LDP peers.

The basic discovery mechanism is used to discover directly-connected LSR peers on a link.

The extended discovery mechanism periodically sends Hello messages to specified addresses to discover LDP peers.

The extended discovery mechanism is used to discover indirectly-connected LSR peers on a link.

DHCP Discover broadcast packet

DHCP Release unicast packet

DHCP Request broadcast packet

DHCP Request unicast packet

The top label is removed from the MPLS label stack.

The top label is added to the MPLS label stack.

The top label is replaced with another value.

The top label is replaced with the label of another group.

GRE

IPSec VPN

SSL VPN

L2TPVPN

TRUE

FALSE

RED

WRED

Tail drop

WFQ

If the DHCP request packet received by GigabitEthernet 0/0/1 does not contain the SubOptionl information of Option 82, the B. device generates Option 82 and inserts it into the packet.

Enable DHCP snooping to defend against bogus DHCP server attacks.

Enable DHCP snooping to defend against bogus ARP spoofing attacks.

TRUE

FALSE

BE service model

IntServ model

DiffServ model

FIFO model

When a packet reaches the firewall the firewall searches for a session table. If the packet does not match any entry, the firewall uses the process of the first packet.

When a packet reaches the firewall, the firewall searches for a session table. If the packet matches an entry, the firewall uses the process of subsequent packets.

When status detection is enabled, the firewall establishes sessions for only SYN packets during TCP packet processing.

When status detection is enabled, the firewall checks subsequent packets against security policies.

TRUE

FALSE

Local zone

Trusted zone

Untrusted zone

Security zone

Collection by physical optical splitter

Collection through port mirroring

Centralized collection by NMS

Automatic collection

TRUE

FALSE

TRUE

FALSE

The bandwidths of flows a, b, c, and d are 20 Mbit/s, 40 Mbit/s, 60 Mbit/s, and 80 Mbit/s.

The bandwidths of flows a, b, c, and d are 100 Mbit/s, 100 Mbit/s, 0 Mbit/s, and 0 Mbit/s.

The bandwidths of flows a, b, c, and d are 80 Mbit/s, 60 Mbit/s, 40 Mbit/s, and 20 Mbit/s.

All traffic is discarded due to congestion.

A BFD session can be set up. After the negotiation, the detection interval of 40ms is used.

A BFD session can be set up. After the negotiation, the detection interval of 30ms is used.

A BFD session can be set up, and packets are sent at respective intervals at both ends.

A BFD session cannot be established.

ASPF checks application layer protocol information and monitors the application layer protocol status of connections.

ASPF determines whether data packets can pass the firewall through the dynamically generated ACL.

During configuration of the NAT server, static Servermap entries are generated.

The Servermap table uses the 5-tuple to represent one session.

Storage device

Network device

Server

Air conditioning system

The first 6 bits of the ToS field (leftmost 6 bits) mark different types of services, namely, DSCP priority.

The DSCP priority can be used to classify traffic into 32 types.

Each DSCP priority corresponds to a Behavior Aggregate (BA), and a PHB can be specified for each BA.

You can use some QoS mechanisms to implement PHB.

FIFO

WFQ

PQ

LQ

When administrators configure Free Mobility, they need to select proper authentication points and policy execution points.

In the Free Mobility, Administrators can add static network segments or server resources to security groups, and manually bind their IP addresses to the security groups.

Free Mobility uses a configuration matrix to define access permissions between two security groups such as users and servers.

Free Mobility defines higher forwarding priorities for the VIP user group to ensure their network experience.

TRUE

FALSE

Fast handshake

Interface association

BFD Echo

Bidirectional detection

The total length of an MPLS label is 4 bytes (32 bits).

The TTL field in an MPLS label has the same meaning as that in an IP packet, and can prevent loops.

The S field in an MPLS label has 1 bit and is used to identify whether the label is the bottom-of-stack label. If the value is 1, the label is a penultimate-layer label.

For Ethernet and PPP packets, a label stack is located between the Layer 2 packet header and data. If a VLAN tag is available, the label stack is placed before the VLAN tag.

8

16

32

64

TRUE

FALSE

Liberal

Independent

Conservative

Ordered

Global TCP synchronization

High jitter and long delay

High cost

Packets are discarded without differentiating the priority

FIFO

LR

WRR

CIR

CQ

WFQ

The jitter is relevant to the delay.

The jitter occurs because the E2E delays of data packets in the different flow are different.

A long delay indicates a short jitter and a short delay indicates a large jitter.

Jitter is independent of delay.

vrrp vrid 1 preempt-timer 20

vrrp vrid 1 preempt-mode timer delay 20

vrrp vrid 1 timer delay 20

vrrp vrid 1 preempt-delay 20

WFQ

PQ

FIFO

RR

The label space 16-1023 is shared by static LSPs and static CR-LSPs.

The label space 1024 and higher is shared by dynamic signaling protocols, such as LDP, RSVP-TE, and MP-BGP.

When the last hop receives packets with the label control 0, it directly performs IP forwarding or forwards the packets based on the next-layer label.

When the penultimate-hop LSR performs label switching, if it finds that the label value after the switching is 3, then it pops out the label and sends the packet to the last hop.

TRUE

FALSE