QUESTION 81
The following figure shows the BGP state switching mechanism. Drag the following BGP states to the corresponding sequence numbers.

Select and Place:

Correct Answer:

QUESTION 82
On an OSPF or IS-Is network, the filter-policy import command can be run on a router to tilter out the LSAs forwarded by its neighbors.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 83
An ACL is referenced by a traffic policy on a router. The ACL configuration is shown below. Packets from which of the following host addresses can pass through the router?
#
acl number 2000
rule 5 permit source 192.168.1.2 0
rule 10 permit source 192.168.1.3 0
rule 15 deny source 192.168.1.0 0.0.0.255 #

A. 192.168.1.1
B. 192.168.1.2
C. 192.168.1.3
D. 192.168.2.1

Correct Answer: BC
QUESTION 84
When configuring an ACL on a router, you can identity the ACL by number or name. When configuring a named ACL, you need to manually specify a name and a number for the ACL.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 85
When receiving a packet, a Huawei router matches the packet against ACL rules. The default ACL matching order used by the Huawei router is .(Enter lowercase letters.)

Correct Answer: config
QUESTION 86
ACLs are a common tool for matching routes. ACLs are classified into multiple types based on ACL rule functions. An ACL can be identified by a number, and the number range for each type of ACLs is different. Which of the following type of ACLs are numbered from 4000 to 4999?

A. Layer 2 ACL
B. Advance ACL
C. User-defined ACL
D. Basic ACL

Correct Answer: A
QUESTION 87
A Layer 2 switch supports multiple types of Ethernet interfaces, and each interface has a default VLAN ID regardless of the interface type. On a Huawei switch, the default VLAN ID of an interface is 11.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 88
Compared with RSTP, which of the following port roles are added to MSTP?

A. Backup port
B. Edge port
C. Master port
D. Regional edge port

Correct Answer: BCD
QUESTION 89
There are multiple types of Ethernet interfaces on a Layer 2 switch. An access interface can be added to only one VLAN, and a trunk interface can allow data frames from multiple VLANs to pass through.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 90
In IP multicast transmission, packets are transmitted from a source to a group of receivers. Which of the following statements are true about IP multicast technologies?

A. Compared with unicast, IP multicast improves information transmission security.
B. Compared with broadcast, IP multicast effectively conserves network bandwidth.
C. Compared with unicast, IP multicast increases the load of information sources.
D. Compared with broadcast, IP multicast prevents information flooding.

Correct Answer: BD
QUESTION 91
The figure shows an inter-AS multicast network. Which of the following protocols will be applied to this network architecture?

A. IGMP
B. MSDP
C. MBGP
D. PIM

Correct Answer: ABCD
QUESTION 92
IGMP has three versions. Which of the following messages exist in all three IGMP versions?

A. Group-Specific Query message
B. Report message
C. General Query message
D. Leave message

Correct Answer: BC
QUESTION 93
IGMP snooping enables a switch working at Layer 3 to establish a Layer 3 multicast forwarding table by listening to IGMP messages exchanged between the upstream Layer 3 device and the user hosts. The switch working at Laver 3 manages and controls the forwarding of multicast data packets based on the Layer 3 multicast forwarding table, thus suppressing multicast data flooding on the Layer 3 network.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 94
In IPv6, each interface can have only one link-local address. To prevent link-local address conflicts, automatic generation of link-local addresses is recommended.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 95
On Huawei firewalls, the priority of the default security zone cannot be changed. Match the following zones on Huawei firewalls with the default security priorities.
Select and Place:

Correct Answer:

QUESTION 96
During routine check, the administrator of an enterprise finds that some switch ports are not in use. Therefore, the administrator logs in to the device and manually disables the ports to further ensure device security.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 97
Which of the following statements are true about the packet filtering firewall?

A. The packet filtering firewall supports per-packet detection.
B. The packet filtering firewall filters data packets based on ACLs.
C. The packet filtering firewall can analyze associated packets to improve security.
D. The packet filtering firewall can check application-layer data.

Correct Answer: ABD
QUESTION 98
L2TP does not provide security encryption. Therefore, other security measures, such as IPsec, are required to ensure the security of the entire tunnel for data transmission.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 99
If the interval for two consecutive packets of a TCP session reaching the firewall is longer than the aging time of the session, the firewall deletes the session information from the session table to ensure network security.

A. TRUF
B. FALSE

Correct Answer: A
QUESTION 100
In VRRP, both the master and backup devices respond to the ARP request destined for a virtual IP address so that a fast switchover can be performed when a fault occurs.

A. TRUE
B. FALSE

Correct Answer: B