QUESTION 141
On a VXLAN-based virtualized network, if the fabric if networking mode is centralized gateway networking, the gateway is located on the device. (Capitalize the first letter)

Correct Answer: Border

QUESTION 142
On a virtualized network deployed using iMaster NCE-Campus, after an administrator performs an operation, iMaster NCE-Campus delivers the configuration shown in the following figure to devices. Which of the following operations did the administrator perform?

A. Create a fabric named MKT.
B. Create a VN named MKT.
C. Create an external network named MKT.
D. Create a network service resource named MKT.

Correct Answer: B
QUESTION 143
Which of the following commands needs to be run in the BGP view to enable a VPN instance to advertise IP routes to the BGP-EVPN address family?

A. advertise irb
B. advertise vpnv4
C. advertise irbv6
D. advertise l2vpn evpn

Correct Answer: D
QUESTION 144
Which of the following statements is incorrect about configuring fabric access management on iMaster NCE-Campus?

A. iMaster NCE-Campus can function as RADIUS server or Portal server.
B. Create a server template and then an authentication template.
C. Only one authentication mode can be specified in an authentication template.
D. Authentication templates need to be bound to wired and wireless access points.

Correct Answer: C
QUESTION 145
MAC address learning of a static VXLAN tunnel depends on exchange of packets, such as ARP packets, between hosts.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 146
To isolate communication between wired terminals, you can enable port isolation on the access switches. However, APs cannot implement wireless user isolation.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 147
Which of the following statements is correct about security groups and resource groups in Huawei’s free mobility solution?

A. When resource groups are used, the policy enforcement device generates a policy for each resource group.
B. When administrators configure a policy control matrix, the source and destination groups of policies can be resource groups.
C. Service resources with overtipping IP addresses can be differentiated using static security groups.
D. The Ip addresses of users in dynamic security groups are not fixed. Rather, they are dynamically bound to security groups after user authentication.

Correct Answer: D
QUESTION 148
In the virtualized campus network shown in the following figure, which of the following statements are correct about network admission authentication?

A. 802.1X authentication can be deployed to implement admission control on IP phones.
B. A terminal needs to send its identity credential to an edge node, which then sends it onto the authentication server.
C. After a terminal passes the authentication, it obtains the corresponding authorization information.
D. The network can provide the authentication function through the built-in server of iMaster NCE-Campus.

Correct Answer: BCD
QUESTION 149

Which of the following can be used to encapsulate and decapsulate VXLAN packets?

A. VLANIF
B. VTEP
C. BD
D. VBDIF

Correct Answer: B
QUESTION 150
IKEv1 phase 2 negotiation works in either fast or slow mode, of which the slow mode is more secure.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 151
The Huawei SD-WAN solution has three types of channels. Drag the channel names to their corresponding callouts.

Select and Place:

Correct Answer:

QUESTION 152
IPsec SAs can be established in either manual mode or IKE auto-negotiation mode. Which of the following statements about the two modes is incorrect?

A. The lifetime of an SA established in IKE auto-negotiation mode is controlled by the lifetime parameters configured on both ends of the tunnel.
B. SAs established in both manual and IKE auto-negotiation modes can be dynamically updated.
C. In manual mode, all parameters (including encryption and authentication keys) required for establishing an IPsec SA need to be manually configured.
D. In IKE auto-negotiation mode, the encryption and authentication keys required for establishing an SA are generated using the DH algorithm.

Correct Answer: B
QUESTION 153
The TWAMP communication model includes the Session-Sender, Session-Reflector, Control-Client, and Server. Drag functional modules on the left to their corresponding descriptions on the right.

Select and Place:

Correct Answer:

QUESTION 154
Flavors are additional behaviors defined to enhance the End series instructions. Which of the following End instructions can the PSP flavor be attached to?

A. End.X
B. End.BM
C. End.T
D. End

Correct Answer: AD
QUESTION 155
A VPDN is a VPN constructed on a public network. Which of the following is a VPDN?

A. IPsec
B. L2TP
C. VPLS
D. GRE VPN

Correct Answer: B
QUESTION 156
A network runs SR-MPLS. R1 needs to access R7, and its label stack is as shown in the figure. Which of the following paths can be used by Ri to access R7?

A. R1-R2-R4-R6-R7 and R1-R2-R4-R5-R7 (load balancing)
B. R1-R2-R4-R5-R7
C. R1-R2-R4-R6-R7
D. R1-R3-R5-R7

Correct Answer: BC
QUESTION 157
MPLS is located between the data link layer and network layer in the TCP/IP protocol stack, and can provide services for all network layer protocols.

A. TRUE
B. FALSE

Correct Answer: A

QUESTION 158
SR-MPLS Policies can use BGP extensions to transmit tunnel information, as shown in the figure. Which of the following parameters is used for SR-MPLS Policy selection?

A. Weight
B. Priority
C. Preference
D. Binding SID

Correct Answer: C
QUESTION 159
When Huawei iMaster NCE-IP is used to configure SR-MPLS TE tunnels, which of the following protocols is used by the controller to collect network topology information?

A. IS-IS
B. BGP-LS
C. OSPF
D. BGP

Correct Answer: B
QUESTION 160
There are many types of SRv6 SIDs, each associated with a different function. Drag the SRV6 SID types on the left to the corresponding functions on the right.
Select and Place:

Correct Answer: