QUESTION 101
Which of the following technologies are used to implement application-based dynamic traffic steering?

A. Link quality detection
B. QoS
C. Application quality detection
D. Application identification

Correct Answer: ABCD
QUESTION 102
In Huawei SD-WAN Solution, which of the following is the default DSCP value of outer packets in a tunnel?

A. DSCP value in the inner packet
B. EF
C. 0
D. AF31

Correct Answer: C
QUESTION 103
In Huawei SD-WAN Solution, to ensure data channel security, CPEs use the certificate mechanism to authenticate each other’s identity.

A. True
B. False

Correct Answer: A
QUESTION 104
iMaster NCE-WAN can authenticate administrators using the two-factor authentication (username/ password + SMS verification code) mode.

A. True

B. False

Correct Answer: A
QUESTION 105
Which of the following security factors does Huawei SD-WAN Solution need to consider?

A. Site-to-cloud security
B. Site-to-site security
C. None of the above
D. Site-to-Internet security

Correct Answer: ABD
QUESTION 106
iMaster NCE-WAN supports application traffic and quality monitoring.

A. True
B. False

Correct Answer: A
QUESTION 107
NQA is used to monitor Huawei SD-WAN data tunnel quality (packet loss rate, jitter, and delay).

A. True
B. False

Correct Answer: A
QUESTION 108
Which of the following factors should be considered during Huawei SD-WAN network deployment to ensure high reliability for financial customers?

A. Dual-hub or multi-hub site-level reliability
B. Site-level reliability of RRs
C. Link-level reliability of a single gateway
D. Device-level reliability of dual gateways

Correct Answer: ABCD
QUESTION 109
The Internet is a typical application of WAN technology. Because the Internet is open, VPN technology is used to build secure and reliable enterprise networks. Which of the following are VPN technologies?

A. L2TP
B. IPsec VPN
C. DSVPN
D. PPTP

Correct Answer: ABCD
QUESTION 110
Which of the following are key features of Huawei SD-WAN Solution?

A. 5G uplink
B. Simplified ORM
C. High performance
D. Optimal experience

Correct Answer: ABCD
QUESTION 111
In the following figure, a GRE tunnel is established between R1 and R2. If the ping -a 10.1.1.1 10.3.1.1 command is run on R1, which of the following statements is true about the ICMP packet sent by GE0/0/1 of R1?

A. The packet will be encapsulated using GRE, and the source and destination IP addresses in the inner IP header are 10.1.1.1 and 10.0.12.2, respectively.
B. The packet will not be encapsulated using GRE, and the source and destination IP addresses are 10.0.12.1 and 10.0.12.2, respectively.
C. The packet will be encapsulated using GRE, and the source and destination IP addresses in the outer IP header are 10.0.12.1 and 10.3.1.1, respectively.
D. The packet will not be encapsulated using GRE, and the source and destination IP addresses are 10.1.1.1 and 10.3.1.1, respectively.

Correct Answer: C
QUESTION 112
Refer to the following command output on the router R1. Which of the following statements is false?

A. Keepalive detection is enabled on the tunnel.
B. The tunnel is a GRE tunnel.
C. The destination Ip address of the tunnel ls 10.0.3.3.
D. Key authentication is disabled for the tunnel.

Correct Answer: A
QUESTION 113
Which of the following statements about IKEv1 are true?

A. IPsec SAs are established in IKE phase 2 through negotiation.
B. IKE phase 2 supports two negotiation modes: quick mode and slow mode.
C. IKE SAs are established in IKE phase 1 through negotiation.
D. IKE phase 1 supports two negotiation modes: main mode and aggressive mode.

Correct Answer: ACD
QUESTION 114
IPsec SAs can be established in either manual mode or IKE auto-negotiation mode. Which of the following statements about the two modes is false?

A. The Lifetime of an SA established in IKE auto-negotiation mode Is controlled by the lifetime parameters configured on both ends of the tunnel.
B. SAs established in both manual and IKE auto-negotiation modes can be dynamically updated.
C. In IKE auto-negotiation mode, the encryption and authentication keys required for establishing an SA are generated using the DH algorithm.
D. In manual mode, all parameters (including encryption and authentication keys) required for establishing an IPsec SA need to be manually configured.

Correct Answer: B
QUESTION 115
Which of the following statements is false about Authentication Header (AH)?

A. AH provides packet encryption.
B. AH provides data integrity authentication.
C. AH provides data origin authentication.
D. AH provides anti-replay protection.

Correct Answer: A
QUESTION 116
An MPLS header resides between the Layer 2 and Layer 3 headers.

A. True
B. False

Correct Answer: A
QUESTION 117
Which of the following address families cannot be transmitted through MP-BGP?

A. IPv6 broadcast
B. VPNv6
C. IPv4 multicast
D. VPNv4

Correct Answer: A
QUESTION 118
In the MP_REACH_NLRI, the address family identifier (AFI) of EVPN is 25.

A. True
B. False

Correct Answer: A
QUESTION 119
There are three households in a residential building: Households A, B, and C.
Household A leases 30 Mbit/s network bandwidth and purchases the IP voice, IPTV, and broadband Internet access services. Household B leases 20 Mbit/s network bandwidth and purchases the IPTV and broadband Internet access services.
Household C leases 10 Mbit/s broadband network and purchases only the broadband Internet access service.
The carrier configures HQoS on the access device, shown in the following figure. Which of the following statements are true?

A. A maximum of 30 Mbit/s bandwidth can be obtained for the broadband Internet access service of household A, and maximum of 20 Mbit/s bandwidth can be obtained for the IPTV service of household B.
B. A maximum of 30 Mbit/s bandwidth can be obtained for the IPTV service of household A, and a maximum of 10 Mbit/s bandwidth can be obtained for the broadband Internet access service of household C.
C. A maximum of 10 Mbit/s bandwidth can be obtained for the broadband Internet access service of both households A and C.
D. A maximum of 30 Mbit/s bandwidth can be obtained for the IP voice service of household A, and a maximum of 10 Mbit/s bandwidth can be obtained for the IPTV service of household B.

Correct Answer: AC
QUESTION 120
The DSCP value ranges from 0 to 63. Which of the following DSCP values corresponds to EF?

A. 46
B. 22
C. 38
D. 30

Correct Answer: A