H12-821_V1.0 Exam Dumps - Huawei HCIP-Datacom Questions and Answers

 ACL Matching in Huawei Routers:

Access Control Lists (ACLs) are used to filter packets based on specific criteria, such as source/destination IP, ports, or protocols.

When a packet arrives, the Huawei router processes it against the configured ACL rules to decide whether to permit or deny the packet.

A is correct– Removing unused accounts helpsminimize the risk surface.

B is false– Email isnot a secure methodfor transferring sensitive information like passwords, even if encrypted.

C is correct–Unique administrator accountshelp with accountability and tracking.

D is false–Long-term password validityreduces security. Passwords should be rotated regularly.

Reference from Huawei HCIP-Datacom-Core Technology Study Guide:

“To secure admin access, avoid account sharing, delete inactive users, and periodically update credentials through secure channels.”

(Chapter: Device Security – Section: Account Management)

The error indicates "Incorrect remote AS," which refers to a mismatch in the autonomous system (AS) numbers during BGP peer configuration. This issue is unrelated to the neighbor address. The neighbor address (10.1.1.5) and timestamp (2010-03-22 12:40:39) provided in the output are correct, and the error type confirms a neighbor relationship issue ​.

The question indicates that a router performs a lookup in its FIB table for a packet and determines that the tunnel ID in the matching entry is 0, suggesting that the packet needs to be forwarded through a tunnel such as an MPLS tunnel. However, this is a misunderstanding of the FIB functionality.

FIB Table OverviewThe Forwarding Information Base (FIB) is used to make packet-forwarding decisions. Entries in the FIB include next-hop information, which can be directly linked to an interface or a tunnel.

If theTunnel IDis0, it indicates that the packet is forwarded via a normal routing path and not through a tunnel.

For MPLS or other tunnels, the Tunnel ID would have a non-zero value pointing to the associated tunnel.

MPLS Tunnel OperationWhen a router forwards packets through an MPLS tunnel, a label-switched path (LSP) is set up. The FIB would reflect specific tunnel identifiers for packets that need such encapsulation.

HCIP-Datacom-Core Reference

Routing Principles and MPLS​explain the forwarding mechanisms clearly, stating that if a packet is routed normally, the tunnel ID remains0.

The section on MPLS​clarifies the encapsulation process and the role of tunnel identifiers.

Hence, the claim in the question is incorrect. A Tunnel ID of0implies no tunneling is required, and normal IP forwarding occurs

Option B isfalse. By default, when the aggregate command is usedwithout any options, BGP generates asummary route, andsuppresses the specific routesthat fall under that summary. To advertise both specific and summary routes, you mustexplicitly configurethe detail-suppressed option to control whether specifics are suppressed or not.

Explanation of the other options:

Ais correct: When suppress-policy is specified, only specific routes matching the policy are advertised; others are suppressed.

Cis correct: The summary automatic command causes summarization based on classful boundaries, which is a legacy behavior.

Dis correct: With detail-suppressed, only the summary route is advertised, not specific prefixes.

Reference from Huawei HCIP-Datacom-Core Technology Study Guide:

“The aggregate command suppresses specific routes by default unless explicitly configured otherwise. Use of suppress-policy or detail-suppressed allows control over which routes are advertised.”

(Chapter: BGP Advanced Features – Section: Route Aggregation)

 ACL Modification

Named ACLs can be modified after their creation. Unlike numbered ACLs, named ACLs provide greater flexibility for editing individual rules without deleting the entire ACL.

Therefore, the statement is incorrect.

 HCIP-Datacom-Core Reference

The flexibility and editability of named ACLs are discussed in the ACL configuration sections​​.

 R3, as the DIS in the Level-2 domain, periodically sends Complete Sequence Number Protocol Data Units (CSNPs) to ensure LSDB synchronization among Level-2 routers.

 R1 and R2 are in a Level-1 domain, and IS-IS requires the receiving router (R2) to acknowledge an LSP from R1 by sending a Partial Sequence Number Protocol Data Unit (PSNP).

 IS-IS LSPs in a broadcast network are sent using multicast, not unicast, making option C incorrect.

 For Level-2 LSPs, acknowledgments are not provided using PSNP by R3; CSNPs are sufficient for synchronization ​.

In a route-policy, attributes such asMED(Multi-Exit Discriminator) andLocal-Preferencecan be used in apply clauses to influence BGP route selection. Attributes likeAS_PathandTagare typically matched or filtered but not directly applied in the apply clause ​.

 Silent Interface Explanation

Thesilent-interfacecommand is used to prevent OSPF from sending or receiving OSPF packets on the specified interface (GE 0/0/1). This disables OSPF adjacency establishment and stops route advertisement for that interface.

 Network Observations

Statement A: R2 can access the server.This is correct, as the silent interface does not impact data traffic, only OSPF-related communication.

Statement B: GE 0/0/1 of R1 cannot send OSPF packets.Correct due to thesilent-interfaceconfiguration.

Statement C: The network segment to which GE 0/0/1 of R1 belongs cannot be advertised.This is correct, as the silent interface prevents route advertisement.

Statement D: GE 0/0/1 of R1 cannot accept OSPF packets.Correct, as the silent interface configuration blocks packet reception.

 HCIP-Datacom-Core Reference

OSPF interface command behavior is outlined in the configuration and lab examples sections​​.

Edge ports are used in RSTP to bypass the spanning tree calculation for ports connected to end devices. By configuring ports like SWD's GE0/0/2 and SWC's GE0/0/2 as edge ports, they transition directly to the Forwarding state upon activation, ensuring faster convergence. Statement A is incorrect because receiving BPDU invalidates the edge port status ​.