QUESTION 41
DCs require comprehensive protection for internal and external traffic of VMs. Which of the following security isolation technologies can be used to isolate hosts in the same subnet?

A. Firewall security policy

B. Microsegmentation
C. VLAN
D. SFC

Correct Answer: B
QUESTION 42
As shown in the following figure, in a DCN built using Huawei CloudFabric Solution, two switches form an M-LAG and function as active-active gateways. Firewalls work in HSB mode and are connected to these gateways in off-path mode. Which of the following statements is false about the gateway and firewall deployments?

A. The HRP link between the firewalls ensures Layer 2 communication between the firewalls.
B. The firewalls and gateways are interconnected through Layer 2 interfaces.
C. During service provisioning, the gateways and firewalls can be interconnected through VLANIF or VBDIF interfaces.
D. The two firewalls must use the same interface to connect to the same switch.

Correct Answer: D
QUESTION 43
A security zone on a firewall is a collection of networks connected through one or more interfaces. The                is a security zone with a medium security level and typically refers to the zone where the servers that need to provide services for external networks are located. (Enter the acronym in uppercase letters.)

Correct Answer: DMZ
QUESTION 44
When an SDN controller cluster is deployed in Huawei CloudFabric Solution, which of the following network planes are divided based on carried services?

A. Internal communication plane
B. Southbound service plane
C. BGP microservice plane
D. Northbound management plane

Correct Answer: ABD
QUESTION 45
Which of the following statements are true about the comparison between OSPF and BGP on the underlay network?

A. BGP is ideal for large and midsize DCs.
B. BGP routing domains are independent from each other, and the failure domain is controllable.
C. OSPF provides fast convergence.
D. OSPF provides more route control methods.

Correct Answer: ABC
QUESTION 46
In the computing scenario of Huawei CloudFabric Solution, the computing administrator creates VMs on the VMM and selects corresponding network labels to access the network. After VMs are started, which of the following pieces of mapping information will be automatically detected by the tenant’s logical network?

A. User port
B. vSwitch
C. Logical port
D. Logical router

Correct Answer: BC
QUESTION 47
To reduce the configuration workload of the network administrator, an enterprise deploys a service system in the computing scenario of Huawei CloudFabric Solution. After receiving service requirements from the department, the administrator performs the following steps to provision services:
1. Add hosts to FusionCompute and create a distributed virtual switch.
2. Create VMM mappings to generate a port group for the distributed virtual switch.
3. Select a host and create VMs.
4. iMaster NCE-Fabric detects VM login and automatically delivers port and gateway configurations.
5. Create tenants and VPCs on iMaster NCE-Fabric and create logical networks in the VPCs. Which of the following is the correct order of these steps?

A. 5->1->2->3->4

B. 1->5->2->3->4
C. 1->2->3->5->4
D. 5->1->3->2->4

Correct Answer: A
QUESTION 48
The underlay network can be configured in ZTP or manual mode.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 49
Which of the following statements are true about the Easy mode?

A. Layer 2 and Layer 3 basic services in a VPC are orchestrated on the Easy pe
B. This mode has low networking requirements.
C. iMaster NCE-Fabric automatically generates configuration script files.
D. On iMaster NCE-Fabric, you need to manually create and configure fabric resource pools, managed devices, device groups, device roles, tenants, and VPCs one by one in the Configuration Wizard menu.

Correct Answer: ABC
QUESTION 50
Which of the following servers are built into iMaster NCE-Fabric to provide related services?

A. DNS server
B. DHCP server
C. RADIUS authentication server
D. Version file server

Correct Answer: BD
QUESTION 51
In the hosting scenario of Huawei CloudFabric Solution, which of the following statements is false about the solution architecture?

A. No computing platform or cloud platform is available. Network administrators provision services.
B. It is recommended that firewalls be deployed in hot standby and load balancing mode.
C. It is recommended that M-LAG be deployed on leaf nodes.
D. PEs can be interconnected to gateways through dynamic routing protocols (BGP/OSPF) or static routes.

Correct Answer: B
QUESTION 52
Service provisioning refers to the allocation of network and computing resources to bear service applications. The DC administrator needs to allocate resources to tenants according to the service plan, SO that the tenant administrators can configure and deploy network and computing services based on the resources.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 53
Which of the following statements are true about the computing scenario of Huawei CloudFabric Solution?

A. The cloud platform is included in the computing scenario.
B. iMaster NCE-Fabric implements automatic network device configuration.
C. iMaster NCE-Fabric interconnects with the VMM to bring VMs online. However, the administrator needs to manually deliver the network-side configuration to bring VMs offline.
D. The network layer uses the spine-leaf architecture.

Correct Answer: ABD
QUESTION 54
In the CloudFabric Solution, SecoManager and iMaster NCE-Fabric are deployed independently. After SecoManager is installed, t needs to be manually interconnected with iMaster NCE-Fabric.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 55
With the service path visibility function, iMaster NCE-Fabric can filter paths based on 5-tuple information and display hop-by-hop path information, enabling users to view service path information as needed.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 56
Single-path detection is used to detect the network connectivity between two VMs. ARP request or ICMP request packets are constructed and sent from the source VM to the destination VM by simulating the ARP request and ping process. If the source VM receives the response packets from the destination VM, connectivity is determined to be established between the two VMs.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 57
“1-3-5” troubleshooting of the CloudFabric intelligent 0&M solution can detect, locate, and rectify faults from multiple dimensions. Which of the following are not dimensions supported by this function?

A. Protocol
B. Application
C. Service
D. Device
E. Configuration

Correct Answer: AE
QUESTION 58
Which of the following are included in the overall architecture of iMaster NCE-FabricInsight?

A. Analyzer
B. O&M app
C. Collector
D. Network device

Correct Answer: ACD

QUESTION 59
In the CloudFabric Solution, iMaster NCE-Fabric and iMaster NCE-FabricInsight can be used to provide refined O&M for the network. Which of the following are not O&M
functions provided by iMaster NCE-Fabric?

A. Service path detection
B. Three-level topology visibility
C. Three-level rollback
D. Network health

Correct Answer: CD
QUESTION 60
Which of the following issues can be identified by the health function of iMaster NCE-Fabriclnsight?

A. Switch ARP entry threshold exceeded
B. Routing loop on the network
C. OSPF router ID conflict
D. Switch CPU usage threshold exceeded

Correct Answer: ABCD