H12-222-ENU HCIP-Routing & Switching-IENP Exam Questions

Pdfprep2021-04-08T08:42:18+00:00

HCIP-Routing & Switching-IENP H12-222-ENU exam questions are available, which are the best material for you to study the test. The HCIP-Routing & Switching-IENP (Improving Enterprise Network Performance) V2.5 H12-222-ENU exam covers MPLS, MPLS VPN, DHCP, VRRP, BFD, Mirroring technologies and Agile Controller, eSight Product Features, IP QoS, Huawei Firewall Technology Basis and SDN, VXLAN, NFV new technologies. Test Huawei certification H12-222-ENU exam free questions below.

Page 1 of 17

1. Which of the following is included in the main features of the stateful inspection firewall?

Slow processing speed

Subsequent packet processing performance differences

Can only detect the physical layer

Packet filtering detection for each packet

2. In the process of establishing an LDP session, in order to establish TCP, which party initiates the initialization message?

The party with the smaller transmission address

The party with the small router-id

The party with the big router-id

The party with the larger transmission address

3. Before the LDP session is established, you need to establish a TCP connection. And before the connection is established, the active and passive parties are selected. In the network shown in the figure, which device will become the active party initiated by TCP?

If the Hello Message carries a Transport Address, the smaller Transport Address will become the active party.

If the Transport Address is not carried in the Hello Message, the SWB will become the active party.

If the Transport Address is not carried in the Hello Message, the SWA will become the active party.

If the Hello Message carries a Transport Address, the larger Transport Address will become the active party.

4. The main feature of Overlay VPN is that the customer's routing protocol is always exchanged between the client devices, and the service provider knows nothing about the internal structure of the client.

TRUE

FALSE

5. Under the trend of mobileization, what new requirements does the enterprise put on the traditional network? (Multiple Choice)

Unified wireline and wireless management

A consistent business experience anytime anywhere

Strict hierarchical networking

Support mobile application rapid deployment

6. The advantages of PQ+WFQ are: (Multiple Choice)

Achieve bandwidth allocation by weight

Guarantee low-latency services are scheduled in time

Realize the need to flexibly classify messages according to user customization

Messages with different priorities cannot be treated differently

7. The NAT server function refer to map a public IP address to the private IP address of the server. It is a way to translate the destination IP address of the packet.

TRUE

FALSE

8. The correct statement about ASPF and Server-map is: (Multiple Choice)

The message after the channel is established is still forwarded according to the Server-map.

Only ASPF will generate a Server-map table

Server-map entries will be deleted after a certain aging time because they have not been matched. This mechanism ensures that the more relaxed channels of the Server-map entries can be deleted in time to ensure the security of the network. The server-map entry is re-triggered when a new data connection is initiated.

Server-map usually only checks the first packet, and the packet after the channel is established is forwarded according to the session table.

9. Which of the following working mode is available under the interface of the firewall? (Multiple Choice)

Exchange mode

Routing mode

Transmission mode

Transparent mode

10. By default, the VRRP of the Huawei AR router runs in the preemptive mode.

TRUE

FALSE

Page 2 of 17

11. Regarding the description of VRRP load sharing, the correct one is: (Multiple Choice)

Load sharing mode means that two or more backup groups are established, and multiple routers bearer services at the same time.

Load sharing means that multiple routers are responsible for services at the same time. Therefore, load sharing mode requires two or more virtual routers.

When configuring priorities, the VRRP master of the three virtual routers can be on different routers.

Multiple virtual routers can be created on one interface of the router, so that the router can act as a master router in one virtual router and as a backup router in other virtual routers.

12. The BFD single arm echo function can be used for 2 devices that are not directly connected.

TRUE

FALSE

13. VXLAN encapsulates Layer 2 packets for Layer 3 protocols in Mac in TCP encapsulation.

TRUE

FALSE

14. The Integrated Service service model releases bandwidth resources when there is no traffic, and the resource utilization is high.

TRUE

FALSE

15. The path that the IP packet passes through the MPLS network is called the Label Swithed Path (LSP). This path is determined and established through various protocols before forwarding the packet. The packet will be passed on the specified LSP.

TRUE

FALSE

16. The LDP Discovery message is used for neighbor discovery, and LDP has different discovery mechanisms when discovering neighbors. The following statements are about the Discovery message in the basic discovery mechanism, which is correct? (Multiple Choice)

This message is encapsulated in a UDP packet. The destination port number is 646.

The message is sent to the specified LDP Peer

The destination IP address of the message is the multicast IP address 224.0.0.2

After the TCP connection is established, the LSR no longer sends Hello Message.

17. BFD can only be used in combination with the protocol modules of the network layer and the data link layer.

TRUE

FALSE

18. Which of the following description of VRRP is wrong?

When two routers with the same priority contend for the Master at the same time, the IP address of the interface is compared, the larger interface address is elected as the master.

VRRP determines the status of each router in the virtual router based on priority.

If the backup router works in non-preemptive mode, the backup router will not become the master router even if it is configured with a higher priority as long as the master router does not fail.

If Master already exists, Backup will also preempt.

19. Regarding the description of VRRP fast switching, the error is: (Multiple Choice)

When the VRRP backup group monitoring the common BFD, the status of the common BFD changed, VRRP backup group will modify the priority of the backup group to change the active/standby status; when the status of monitored BFD session is restored, the priority of the router in the backup group is return to the riginal value.

If multiple BFDs are monitored at the same time. Then the various configurations are related to each other and may have an impact.

Use VRRP to monitor the BFD session or EFM function. After the BFD session or EFM session status changes, the VRRP module is notified to implement the VRRP fast switching.

A VRRP backup group cannot monitor Peer BFD, Link BFD, and Normal BFD at the same time.

20. In the esight subnet, the resources that can be managed which described correctly are: (Multiple Choice)

Link

Equipment

Subnet

Nesting other subnets is not available under the subnet

Page 3 of 17

21. Regarding the PC to obtain the address from the DHCP server, which of the description of used command is correct? (Multiple Choice)

Use the ipconfig/release command to release the IP address actively in the Windows 7/Windows XP environment of the user's P

At this time, the user's PC sends a DHCPRELEASE message to the DHCP server.

Use the ipconfig/renew command to apply for a new 1P address in the Windows 7/Windows XP environment of the user's P

At this time, the user's PC sends a DHCP RENEW message to the DHCP server.

Use the ipconfig/renew command to apply for a new IP address in the Windows 7/Windows XP environment of the user's P

At this time, the user's PC sends a DHCPDISCOVER message to the DHCP server.

Use the ipconfig/release command to actively release the IP address in the Windows 7/Windows XP environment of the user's P

At this time, the user's PC sends a DHCPREQUEST packet to the DHCP server.

22. The intranet user of a company accesses the Internet using the No-pat method of NAT. If all the public IP addresses are used, what happens to the subsequent intranet users?

Automatically switch NAT to PAT and go online

Subsequent intranet users will not be able to access the Internet.

Synchronize the message to other NAT translation devices for NAT conversion

Squeeze the previous user and force NAT to convert to the Internet.

23. Simple traffic classification in the Qos technology refers to adopt simple rules, such as the DSCP value in IP packets, the EXP value in MPLS packets, and the 802.1p value in the Vlan header to make simple classification.

TRUE

FALSE

24. In the following options, the description of the terminal security management features of the Agile Controller, which is correct? (Multiple choice)

If the terminal does not meet the enterprise security, the user often wants to provide automatic repair function. Now it can completely realize the automatic repair of the non-compliant state. The user can realize the repair in the shortest time with only a click of the mouse.

Through the MC Management Center, you can centrally configure and distribute policies to subordinate terminal security management servers.

Can control illegal web access

The terminal security client checks the terminal according to the assigned security policy. After the check is passed, the server can notify the admission control device to open the network permission to the terminal. If the check fails, the terminal can be isolated and repaired.

25. In MPLS VPN, the description of the relationship between VPN, Site, and VPN, which is correct?

VPN instance and VPN are one-to-one correspondence

VPN instance and the site are one-to-one correspondence

A site can only belong to one VPN

VPN instance and VPN Routing and Forwarding table (VRF) are different concepts.

26. The hardware detection mechanism in the SDH transport network can quickly find faults and applicable to all media.

TRUE

FALSE

27. The difference between traffic policing and traffic shaping is: (Multiple choice)

Traffic shaping colores the message

Traffic policing colores the messages

Traffic shaping introduces delay and jitter and requires more buffer resources to buffer packets.

Traffic policing introduces delay and jitter and requires more buffer resources to buffer packets.

28. As shown in the figure, the LDP session is established. After the TCP connection is established, the SWB becomes the active party to start parameter negotiation and establish LDP session.

The following sequence of steps which is correct?

2-1-3-4

2-1-4-3

1-3-2-4

1-2-3-4

29. Packet filtering firewall exists what problem so stateful firewall is proposed? (Multiple choice)

Unable to detect certain attack behaviors from the transport layer and application layer (such as TCP SYN, Java Applets, etc.)

For multi-channel application layer protocols (such as FTP, SIP, etc.), some security policy configurations are unpredictable.

For the TCP connection, the first packet is required to be SYN packet, and the first TCP packet of the non-SYN packet is discarded.

Unrecognized ICMP error packets from the network, so ICMP malicious attacks cannot be avoided

30. Which of the following deployment methods can the Agile Controller have? (Multiple choice)

Hierarchical deployment, deploying the management center at headquarters, and the business manager at the branch office.

Centralized deployment, deploying the server components of Agile Controller-Campus in a relatively centralized location, usually the enterprise data center.

Distributed deployment, deploying the business manager and database server at the headquarters, and the business controller at the branch office.

Distributed deployment, deploying the business manager and database server at the branch office, and the business controller at the headquarters.

Page 4 of 17

31. Both the firewall and the switch can implement security defense functions. The switch focuses on () and the firewall focuses on ():

Forwarding, control

Connectivity, forwarding

Control, forwarding

Forwarding, connectivity

32. 3-bit long PRI field is included in the 802.1Q header. The PRI field defines eight service priority CoS, which are 0, 1, 2, ..., 6, and 7 in descending order of priority.

TRUE

FALSE

33. The following description of Huawei eSight network management software, which is correct? (Multiple choice)

The password of the admin user is lost. You can restore the default password only by reinstalling eSight.

eSight supports hierarchical management. In the hierarchical deployment mode, the upper-layer network management can add the lower-layer network management to the system and provide a link to open the lower-level network management interface.

The eSight application platform supports the integration with the upper-layer OSS system, and implements network alarm reporting through SNMP and interfaces with the OSS alarm system.

The password of the admin user is lost. You can reset the password by dialing 400.

34. Port mirroring is divided into local port mirroring and remote port mirroring according to the location of the monitoring device in the network.

TRUE

FALSE

35. Which of the following are transfer process for MPLS VPN routes? (Multiple choice)

Process of injecting MP-BGP routes into VRF

Route exchange between CE and PE

Public network label allocation process

Process of injecting VRF routes into MP-BGP

36. With the development of ASIC technology, MPLS no longer has obvious advantages in improving the forwarding speed, but why MPLS still widely used for the following reasons? (Multiple choice)

MPLS combines the powerful Layer 3 routing function of the IP network with the efficient forwarding mechanism of the traditional Layer 2 network.

MPLS supports multi-layer tags and connection oriented.

Traffic Engineering, Virtual Private Network, Quality of Service applications provide better solutions.

MPLS is not easy to achieve seamless integration of IP and ATM, frame relay and other Layer 2 networks.

37. The description of the Agile Controller campus network access control deployment scenario, which is wrong?

Enable 802.1X on the access layer switch/aggregation layer switch or AC, and control the rights through VLAN, ACL and UCL (agile switch support).

The authentication domain is divided into pre-authentication domain, isolation domain and post-authentication domain.

Combine the user's identity, the type of terminal used, the current access location, access time and other matching conditions, and enter the access policy for devices between different departments.

The terminal can provide username and password interface.

38. The information security system is the interaction of (), () and () (Multiple choice)

Equipment

Technology

Personnel

Management

39. Why can you increase the QoS of the network by increasing the link bandwidth capacity? (Multiple choice)

Increased link bandwidth can support higher traffic

Increased link bandwidth reduces the chance of congestion, which reduces the number of packets lost.

Increased link bandwidth means less latency and jitter

Increase in link bandwidth can increase the available bandwidth of the control protocol

40. Regarding the difference between GTS, LR and CAR, which description is correct?

When performing packet flow control, the LR discards packets that exceed the traffic limit.

When performing packet flow control, the CAR discards packets that exceed the traffic limit.

When performing packet flow control, the LR can not only cache the packets exceeding the traffic limit, but also enable the packets to enter the QoS queue for processing.

When performing packet flow control, the CTs cache the packets exceeding the traffic limit in the GTS queue.

Page 5 of 17

41. Which common queue scheduling techniques are available? (Multiple choice)

CIR

FIFO

WFQ

WRR

42. By viewing the DHCP configuration information and packet statistics, you can view the running status of the device and the number of received and sent DHCP packets to facilitate problem location during routine maintenance.

Which of the following instructions can be used to check DHCP packets. (Multiple choice)

display dhcp relay statistics

display dhcp

display dhcp statistics

display dhcp server statistics

43. The description of MPLS, which is wrong? (Multiple choice)

Before connecting a packet with MPLS label, you must establish a corresponding network connection.

The router can aggregate multiple IP flows according to the forwarding destination to form a forwarding equivalence class (FEC).

MPLS supports various network layer protocols, and packets with MPLS labeling must be encapsulated in frames for transmission.

MPLS replaces IP forwarding with label switching

MPLS "tag" is the unique identifier of a particular group in each subnet

44. MPLS is a label forwarding technology. The description of MPLS, which is wrong?

The IP Routing Protocol module in the control plane is used to transmit routing information and generate routing information tables.

The Label Distributiion Protocol module in the data plane is used to exchange label information and establish a label forwarding path.

The data plane includes the Forwarding Information Base. When receiving normal Ir messages, if it is normal IP forwarding, check the IP routing table forwarding.

When receiving a packet with a label, if it needs to be forwarded according to the label, it is forwarded according to the label forwarding table. If it needs to be forwarded to the IP network, the label is removed and then forwarded according to the IP forwarding table.

45. RouterA and RouterB belong to a VRRP group. The priority of RouterA is 120. The priority of RoaterB is 100. The virtual IP address of the VRID is the same as the interface address of RouterB. When the network is running well, the `Master device in this VRRP group is:

RouterA

RouterB

46. The business priority in the DSCP, which is correct?

AF11 has high loss probability of packet than AF12

AE has higher priority than EF

CS has the highest priority

AF1 has higher priority than AF4

47. The packet filtering firewall provides support for detecting and filtering fragmented packets. The packet filtering packets that the packet filtering firewall can filter are: (Multiple choice)

The first piece of fragmented message

Subsequent fragmented messages

Forged ICMP error message

Non-fragmented message

48. What kind of information can be used to classify complex traffic at the link layer? (Multiple choice)

Destination MAC address

802.1p

Source MAC address

Port number

49. On an IP network, the service level is identified by the IP precedence or DSCP of the IP packet. However, for an MPLS network, the IP header of the packet is invisible to the LSR (Label Switching Router) device. Therefore, the EXP field of the MPLS packet needs to be marked at the edge of the MPLS network.

TRUE

FALSE

50. In order to provide different services for different users or services, users or services can be finely divided according to the information of the packets (such as packet priority, source IP, destination IP, port number, etc.). The QoS technologies we usually use are:

Congestion avoidance

Traffic policing

Complex flow classification

Congestion management

Page 6 of 17

51. Congestion management refers to how the network manages and controls when congestion occurs. The processing method is to use the queue scheduling technique.

TRUE

FALSE

52. What are the characteristics of visitor access? (Multiple choice)

Visitors and employees have the same access rights

Access your own device to access the network

Uncontrolled access to the corporate network

Visitor's uncontrolled speech and behavior

53. In the MPLS system, there are two ways to distribute tags. They are (Multiple choice)

Downstream autonomous mode DU

Downstream on-demand mode DoD

Downstream autonomous mode DoD

Downstream on-demand mode DU

54. As a network resource automation control system, the Agile Controller can provide a unified policy engine, implement a unified access policy throughout the organization, and implement authentication and authorization user-based identity, access time, access address, access type, and access mode, which abbreviate to 5H1W.

TRUE

FALSE

55. VRRP packets do not support authentication.

TRUE

FALSE

56. If no security policy is configured between the firewall domains, or all security policies are not hit when the security policy is checked, the default packet filtering action between domains is performed by default ().

Only allowed to pass a part

Refusal to pass

Reporting administrator

Different applications have different default actions

57. The interface of the firewall has the following () working mode. (Multiple choice)

Exchange mode

Transparent mode

Transmission mode

Routing mode

58. When setting the WRED discard policy, the lower limit of the flow rate marked AF21 is set to 35, the upper limit is set to 40; the lower limit of flow marked AF22 is set to 30, the upper limit is set to 40; and the lower limit of flow marked AF23 is set to 25. The upper limit is set to 40, and the drop probability when the upper limit is reached is 10%. Which priority packet can be guaranteed before congestion occurs?

All the same

AF22

AF21

AF23

59. What information can be marked or re-marked for the message? (Multiple Choice)

MAC Address information

Any information in the message

IP Source, Destination Address, EXP information

IP DSCP, IP Precedence, 802.1p, EXP information

60. Which information in the message can be used for complex traffic classification? (Multiple choice)

Source and destination MAC address information

Type of protocol

Source and destination address information

Packet length of the message

Page 7 of 17

61. Weight Round Robin (WRR) evolves on the basis of Round Robin (RR). The queues are scheduled in turn, and the packet flows in each queue are scheduled according to the weight of each queue.

TRUE

FALSE

62. The DHCP protocol can allocate some TCP/IP related parameter information to the client. In this process, DHCP defines multiple types of packets, and the encapsulation which these packets adopted is ().

TCP encapsulation

UDP encapsulation

PPP encapsulation

IP encapsulation

63. Configured as shown, which of the following description is wrong? (Multiple choice)

[LSRA] mpls lsr-id 1.1.1.9

[LSRA] ip

[LSRA] interface vlanif 10

[LSRA-Vlanif] mpls

[LSRA-Vlanif] quit

[LSRA] static lsp ranges SA to SD destination 4.4.4.9 32 nexthop 10.1.1.2 out-label

The last command is to configure LSRA as the access interface LSR and configure a static LS

After mpls global mpls is enabled, you do not need to enable mpls again in the interface view.

mpls lsr-id is the ID of the LS

It is a prerequisite for configuring other MPLS commands. The default is not configured.

mpls is to enable mpls in the system and in the interface view. After mpls is enabled, lsr-id can be configured.

64. Which of the following description of Transit node forwarding in the MPLS forwarding process is correct?

According to the label value of MPLS, check the corresponding FIB table to get the Token.

Find the corresponding NHLFE entry according to the Token of the FTB table.

View the NHLFE entry to get the outbound interface, next hop, outgoing label, and label operation type.

If the tag value is 1, the tag will be popped directly, and the EXP and TTL will be processed at the same time, and then the IP forwarding or the next layer of label forwarding will be performed.

If the tag value is >=15, replace the old tag in the MPLS packet with the new tag, process the EXP and TTL, and then send the MPLS packet with the replaced tag to the next hop.

65. In the MPLS label, if the label value assigned by the outbound node to the penultimate hop node is 0, the second-to-last hop LSR needs to push the label with the value 0 into the top of the packet label value and forward it to the last hop. The last hop finds that the label value carried in the packet is 0, and the label is ejected. 0 tag is only valid when it appears at the bottom of the stack.

TRUE

FALSE

66. Regarding the description of the DHCP address pool, which of the following is correct? (Multiple choice)

Configure the address allocation mode based on the global address pool to receive DHCP requests in response to all ports.

You can set the IP address range that does not participate in automatic allocation only when you configure the address allocation mode based on the global address pool.

Configure interface-based address allocation, and only respond to DHCP requests from this interface.

Configure interface-based address allocation, which can respond to all ports receiving DHCP requests.

67. BFD's one-arm echo function can be used for 2 devices that are not directly connected.

TRUE

FALSE

68. NFV and SDN are complementary, but not interdependent.

TRUE

FALSE

69. In SDN, the OpenFlow protocol is the control protocol between the controller and the repeater.

TRUE

FALSE

70. The stateful monitoring firewall uses the session table to track active TCP sessions and UDP sessions, and the firewall security policy determines which sessions are established, and packets are only forwarded when they are associated with the session.

TRUE

FALSE

Page 8 of 17

71. Which descriptions are correct about the characteristics of the high availability network? (Multiple Choice)

Can recover quickly after a failure

In the event of a failure, the business can only be recovered through manual intervention.

No failure

Can't fail frequently

72. What is the reason for the shortcomings of RED?

Queue length setting is unreasonable

High threshold setting is unreasonable

Low threshold setting is unreasonable

Tail discarding cannot distinguish traffic by discarding

73. There is no concept of forwarding plane, control plane and management plane in traditional IP networks in SDN.

TRUE

FALSE

74. MPLS has the concept of forwarding equivalence classes, and what is the role of forwarding equivalence classes?

Forwarding equivalence class determines how tags are added to the LS

Forwarding equivalence class determines how to establish an LSP path

Forwarding equivalence class determines how IP datagrams are forwarded on MPLS LSPs.

Forwarding equivalence class determines the correspondence between LSP and IP data packet groups

75. Which of the following does not belong to label release agreement?

LDP

RSVP-TE

MP-BGP

LSP

76. What are the reasons that DHCP will face many security threats? (Multiple Choice)

The middleman exploits the mapping between the fake IP address and the MAC address to simultaneously spoof the DHCP client and server.

DHCP Server cannot distinguish what kind of CHADDR is legal, what kind of CHADDR is illegal

DHCP has a long response time for dynamically assigning IP addresses.

Since the DHCP Discovery message (DHCPDISCOVER) is sent as a broadcast

77. B/S mode on the eSight application platform, enabling multiple browsers to access simultaneously.

TRUE

FALSE

78. Congestion refers to the phenomenon that the service rate drops due to the relative shortage of supply resources (adding additional delay). The technologies for congestion avoidance include: FBD and WRED.

TRUE

FALSE

79. Which is wrong about the description of MPLS?

MPLS supports various network layer protocols. Packets with MPLS labeling must be encapsulated in PPP frames for transmission.

MPLS "tags" are unique identifiers for specific groups in each subnet

The router can aggregate multiple IP flows according to the forwarding destination to form a forwarding equivalence class (FEC).

Before connecting a packet with MPLS label, you must establish a corresponding network connection.

MPLS replaces IP forwarding with label switching

80. When the network is intermittently congested, and the delay-sensitive service requires higher-quality QoS services than the non-delay-sensitive service, congestion management is required. If congestion still occurs after congestion management is configured, bandwidth needs to be increased.

TRUE

FALSE

Page 9 of 17

81. What are the possible cases of packet loss? (Multiple Choice)

The packet may be lost due to the CPU being too busy to process the packet.

Packet loss occurs during transmission

Packet loss occurs in the queue

Packet loss occurs during the receiving process

82. Suppose that there are four traffic flows a, b, c, and d with 100M, and the total bandwidth of the port is 200M. Traffic congestion occurs and congestion management occurs. Traffic a, b, c, and d belong to the WFQ queue scheduling, and the weight ratio is 1:2:3:4.

What is the size of the four traffic?

Flows a, b, c, and d pass 20M, 40M, 60M, and 80M respectively.

Flows a, b, c, and d pass 100M, 100M, 0M, 0M respectively

Flows a, b, c, and d pass 80M, 60M, 40M, 20M respectively

Traffic is completely discarded due to congestion

83. Which of the following statements are wrong about Integrated Service and RSVPd in Qos? (Multiple Choice)

Integrate Service is RSV

Integrate Service uses RSVP as its signaling mechanism

RSVP is a multi-purpose protocol. In addition to Integrate Service, RSVP can be used in other fields.

Integrate Service is suitable for large-scale application on the backbone network

84. What are the reasons why traditional networks cannot guarantee the quality of communication? (Multiple Choice)

Treat all messages indiscriminately

Allocate the resources needed for forwarding according to the order in which the packets arrive.

Unable to guarantee the communication quality of key services

The strategy adopted by the network device to process the message is the first in first out FIF

85. NFV is to deploy traditional CT services to the cloud platform through IT virtualization technology. The network functions are implemented in software and can run on a series of industry standard server hardware

TRUE

FALSE

86. As shown in the figure, all the devices are running in the PLS network. The downstream switch SWA sends the label mapping message of 1.1.1.1 to the SWB. After receiving the label distributed by the downstream switch SA, the SB distributes the label to the SC. The SWC receives the label from the SWB. The label is then sent to the SWD.

So what is the label control method and label distribution method in the network?

Ordered+DU

Independent+DU

Ordered+DoD

Independent+DoD

87. During the operation of the DHCP protocol, what conditions will use DHCP REQUEST messages? (Multiple Choice)

After the client is initialized, the broadcast DHCP REQUEST packet is sent to respond to the DHCP OFFER packet of the server.

When the client finds that the IP address assigned to it by the server conflicts, it will notify the server by sending this message, and will re-address the address to the server.

When the client has been bound to an IP address. Send a DHCP REQUEST packet to update the lease of the IP address

After the client restarts, it sends a broadcast DHCP REQUEST message to confirm the configuration information such as the previously assigned IP address.

88. What are the characteristics of guest access? (Multiple Choice)

Visitors and employees have the same access rights

Visitors bring their own devices to access the network

Visitor speech, uncontrolled behavior

Uncontrolled visitor network range

89. Among the three service models of Best-Effort, Integrated Service, and Differentiated service, only Integrated Service and Differentiated Service can provide multi-service QoS guarantee. In the actual network construction, the network edge should use the Integrated Service mode, and the network core uses the Differentiated service mode.

TRUE

FALSE

90. QoS is a tool for effectively utilizing network resources. It allows different networks to unequally compete for network resources. Voice, video, and important data applications can be preferentially served in network devices.

TRUE

FALSE

Page 10 of 17

91. A flow mirroring port can transmit the specified service flows on the mirroring port to the monitoring device for analysis and monitoring.

TRUE

FALSE

92. In peer-to-peer VPN model, which of the following devices is directly connected to a client and is responsible for connecting VPN services to the carrier network?

Client device

93. QoS provides different service quality to meet a variety of different needs.

Which of following functions are provided by the QoS? (Multiple Choice)

Provide dedicated bandwidth.

Reduce the packet loss ratio.

Prevent and manage network congestion.

Setting the source address of packets.

94. Which IP precedence value represents the critical service traffic?

95. What about all outgoing labels in the label forwarding table of a MPLS-capable device for the same route with the same next hop?

They must be different.

They must be the same.

They may be the same.

96. How is traffic classification classified based on reference different information of rules? (Multiple Choice)

Simple traffic classification

Complex traffic classification

On-demand classification

Service traffic classification

97. Which of the following command is used to configure the listening address of the SDN controller?

openflow listening-ip 1.1.1.1

sdn controller souce-address 1.1.1.1

controller-ip 1.1.1.1

sdn listening-ip 1.1.1.1

98. Which of the following statements regarding the firewall zone is true?

Different zones of Firewall can use the same priority.

A firewall interface can belong to different zones.

Different firewall interfaces can belong to the same zone.

The default firewall zone can be deleted.

99. eSight single-server mode allows login of only one user. If another user logs in, the system displays a message indicating that a user is online currently.

TRUE

FALSE

100. Which of the following are highlights of the Service Chain component of the Agile Controller? (Multiple Choice)

Services are orchestrated based on the Layer 3 GRE tunnels and service devices can be deployed flexibly.

Service orchestration operations are visualized in the topology, simplifying the configuration and management.

Adding or deleting service devices does not change the physical topology of the live network and existing routes.

Services are orchestrated automatically, without the need for manual maintenance.

Page 11 of 17

101. Which of the following statements regarding Agile Controller guest account application mode is false?

Created by the administrator

Created by employees with guest management rights

Created by the receptionist

Registered by guests

102. Which of the following statements regarding the trusted and untrusted zones are true? (Multiple Choice)

The direction for the access from the trusted zone to the untrusted zone is the outbound direction.

The direction for the access from the trusted zone to the untrusted zone is the inbound direction.

The security level of the trusted zone is 85.

The security level of the untrusted zone is 50.

103. MPLS is a label forwarding technology.

Which of the following MPLS statements is false?

MPLS uses the connection-oriented control plane and connectionless data plane.

The control plane transmits route information and distributes labels. The data plane transmits packets along the created label switched path (ISP).

Switches in an MPLS domain only need to forward packets based on the label added before the IP header.

Compared with traditional IP forwarding, MPLS label forwarding greatly improves the data forwarding efficiency.

104. Which information of IPv4 packets is used for simple traffic classification? (Multiple Choice)

DSCP information

IP precedence

Traffic class information

802.1p information

105. The interface IP address and VRRP virtual IP address can be the same.

TRUE

FALSE

106. NFV and SDN depend on each other and must be used together.

TRUE

FALSE

107. Which of the following methods can be used to improve network QoS? (Multiple Choice)

Increasing link bandwidth

Using proper queue scheduling and congestion avoidance mechanisms

Using high-performance devices

Provide services at different times for different business

108. In the port mirroring, real and reliable data must be collected in real time.

TRUE

FALSE

109. SDN technology advocate layered open architecture. Then which organization advocate and defines the centralized architecture and Open Flow?

ONF

IETF

ETSI

ITU

110. What are the prerequisites for eSight to receive and manage alarms reported by devices? (Multiple Choice)

The devices are managed by eSight.

Trap parameters have been correctly configured on the devices.

The SNMP protocol and parameters are correctly configured for managed devices on eSight.

There are reachable routes between eSight and devices.

Page 12 of 17

111. The Agile Controller is an automated control system for network resources. It provides a unified policy engine to realize unified access control policies within the entire organization, and implements 5W1H-based (user identity, access time, access location, device type, device source, and access mode) authentication and authorization.

TRUE

FALSE

112. Compared with traffic policing, traffic shaping uses queues to cache the traffic that exceeds the limit.

Which of the following statements regarding traffic shaping is false?

Compared with traffic policing, traffic shaping has good anti-burst capability.

Traffic shaping enables packets to be transmitted at an even rate.

Because queues are used, the delay is added when congestion occurs.

Compared with traffic policing, traffic shaping is more suitable for voice services.

113. Which of the following statements regarding RT are true? (Multiple Choice)

Each VPN instance is associated with one or more pairs of VPN Target attribute, used to control VPN routing information advertisement and reception between sites.

RTs are classified into two types: Export Target and Import Target.

Export Target and Import Target are independent from each other and support multiple values to implement flexible VPN access control.

The RT value is advertised to neighbors through the BGP extended community attribute in Update messages.

114. MPLS VPN is used to solve some limitations of traditional VPN technology.

Which are the major limitation that MPLS VPN solves?

Private routes cannot communicate with each other.

Leased lines are expensive.

Bandwidth resources cannot be fully used.

The address space is overlapping.

115. Which of the following statements regarding Free Mobility of the Agile Controller are true? (Multiple Choice)

When administrators configure Free Mobility, they need to select proper authentication points and policy execution points.

In the Free Mobility, Administrators can add static network segments or server resources to security groups, and manually bind their IP addresses to the security groups.

Free Mobility uses a configuration matrix to define access permissions between two security groups such as users and servers.

Free Mobility defines higher forwarding priorities for the VIP user group to ensure their network experience.

116. At which layer does a packet filtering firewall check data packets?

Application layer

Physical layer

Network layer

Link layer

117. Besides resource discovery, allocation, and management, which function else does the VIM management module of NFV provide?

Resource scheduling

Resource monitoring

Resource reclaiming

Troubleshooting

118. What are differences between the DiffServ and IntServ models? (Multiple Choice)

The DiffServ model provides different services destined for different destinations.

The DiffServ model provides different services destined for different sources.

The DiffServ model does not need to maintain the status of each flow.

The DiffServ model applies to large-scale backbone networks.

119. In TCP/IPv4, what are potential security threats? (Multiple Choice)

There is no data source verification mechanism.

There is no data packet acknowledgement mechanism.

There is no data integrity verification mechanism.

There is no confidentiality guarantee mechanism.

120. MPLS technology replaces IP forwarding with label switching.

Which of the following encapsulation modes is used when MPLS runs on Ethernet networks?

Packet mode

Frame mode

Transport mode

Channel mode

Pipe mode

Page 13 of 17

121. A DHCP server provides different address allocation modes to meet various application requirements.

Which address allocation mode can be used to allocate an IP address to a host requiring temporary network access or allocate a group of limited IP addresses that can be shared by a group of temporary hosts?

Automatic allocation

Dynamic allocation

Manual allocation

Manual or dynamic allocation

122. How is CAPEX defined?

Cost expenditure

Capital expenditure

One-time expenditure

Daily expenditure

123. If two interfaces are assigned to the same zone, data flows between the two interfaces also must be handled by the interzone packet filtering process.

TRUE

FALSE

124. On the network shown in the following figure, a remote LDP session needs to be established between SWA and SWC.

Which of the following statements is true?

The existing configuration is correct.

You need to configure the directly-connected interfaces between SWA and SWC to set up TCP connections.

You need to create a remote peer and specify an LSR ID for the remote peer.

You need to specify the LSR ID of the remote peer in the system view.

125. Which are the Agile Controller functional components? (Multiple Choice)

Free Mobility

Service Chain

Access Control

United Security

Ubiquitous Resources

126. Which command is used to enable association between BFD and static default mute?

ip mute-static 0.0.0.0 0.0.0.0 10.0.12.2 bfd-session 1

ip mute-static 0.0.0.0 0.0.0.0 10.0.12.2 track bfd-session 1

ip mute-static 0.0.0.0 0.0.0.0 10.0.12.2 track 1

ip mute-static 0.0.0.0 0.0.0.0 10.0.12.2 track session 1

127. Among the BE service model, IntServ model, and DiffServ model, only the IntServ model and DiffServ model can provide multi-service QoS guarantee. During network construction, the network edge should use the IntServ model and the network core should use the DiffServ model.

TRUE

FALSE

128. Duiing the DHCP interaction process, the DHCP server and client exchange various types of packets.

Which of the following packets is not sent from the client to the server?

DHCP NM

DHCP Request

DHCP Discover

DHCP Release

129. VXLAN is irrelevant to SDN technology.

TRUE

FALSE

130. On the USG series firewall, what is the security level of the DMZ?

100

Page 14 of 17

131. Which of the following statements regarding MPLS label encapsulation format are true? (Multiple Choice)

The total length of an MPLS label is 4 bytes (32 bits).

The TTL field in an MPLS label has the same meaning as that in an IP packet, and can prevent loops.

The S field in an MPLS label has 1 bit and is used to identify whether the label is the bottom-of-stack label. If the value is 1, the label is a penultimate-layer label.

For Ethernet and PPP packets, a label stack is located between the Layer 2 packet header and data. If a VLAN tag is available, the label stack is placed before the VLAN tag.

132. The DHCP protocol can allocate TCP/IP-related parameters to clients. DHCP defines multiple types of packets for this process.

Which is the encapsulation mode for these packets?

TCP encapsulation

IP encapsulation

UDP encapsulation

PPP encapsulation

133. If the DSCP priority (leftmost 6 bits of the ToS field) is used, how many types of packets can be classified?

134. The stateful inspection firewall uses the session table to trace activated TCP and UDP sessions, firewall security policies determine which sessions are established, and only the packets associated with sessions are forwarded.

TRUE

FALSE

135. What about incoming labels and outgoing labels in the label forwarding table of a MPLS-capable device for the same route?

They must be different.

They must be the same.

They may be the same.

136. When BFD detection intervals at both ends are 30ms and 40ms.

Which of the following statement is true?

A BFD session can be set up. After the negotiation, the detection interval of 40ms is used.

A BFD session can be set up. After the negotiation, the detection interval of 30ms is used.

A BFD session can be set up, and packets are sent at respective intervals at both ends.

A BFD session cannot be established.

137. Which of the following statements regarding different types of firewalls is false?

The packet filtering firewall checks each data packet against ACL rules.

The stateful inspection firewall uses security policies to check only the first packet of non-matched sessions.

The security policies in two directions need to be configured on the stateful inspection firewall.

The proxy firewall processes services of users on internal and external networks.

138. Different VMs can communicate through VTEP tunnels established by vSwitches.

So what is the VXLAN communication process?

1-3-2-4-6-5

3-5-2-4-1-3

1-2-3-4-5-6

1-5-6-4-3-2

139. Which of the following values can be used to set security levels of user-defined zones of USG series firewaIls? (Multiple Choice)

150

100

140. In a MPLS VPN network, two-layer MPLS labels are added into data packets before they are transmitted over the public network.

Which of the following statements regarding data packet processing are true? (Multiple Choice)

The penultimate hop removes the outer label before forwarding the data packet to a peer PB

The IP data packet received by the peer PE does not carry labels.

The penultimate hop removes the outer label if the outer label in the data packet is explicit null label 3.

The peer PE sends the data packet to the correct VPN based on the inner label.

Page 15 of 17

141. What is the multicast destination address of VRRP packets?

224.0.0.18

224.0.0.20

224.0.1.18

224.0.1.20

142. In the SDN network architecture, which device is used to calculate the path and deliver the flow table?

Application server

Controller

Orchestrator

Device

143. LDP has two different mechanisms for discovering peers.

Which of the following statements are true? (Multiple Choice)

The two mechanisms are basic discovery mechanism and extended discovery mechanism.

The basic discovery mechanism periodically sends Hello messages to discover LDP peers.

The basic discovery mechanism is used to discover directly-connected LSR peers on a link.

The extended discovery mechanism periodically sends Hello messages to specified addresses to discover LDP peers.

The extended discovery mechanism is used to discover indirectly-connected LSR peers on a link.

144. Which of the following are the major objects of network management? (Multiple Choice)

Ensure that network users can receive the expected service quality and technical support information.

Decrease device migration costs.

Reduce the network device service life and extend the service period.

Help network engineers copy with complex network data to ensure quick and correct data display to end users.

145. Which of the following statements regarding the VRRP backup are true? (Multiple Choice)

When the VRRP backup receives VRRP packet from the VRRP master, it can determine whether the master is in the normal state.

When receiving VRRP packets with the priority of 0, the backup directly switches to be the master.

The backup discards IP packets destined for the virtual MAC address.

The backup responds to IP packets destined for the virtual IP address.

146. During BFD session establishment between devices, which state is not involved?

2-way

down

init

147. What about all outgoing labels in the label forwarding table of a MPLS-capable device for different mutes with the same next hops?

They must be different.

They must be the same.

They may be the same.

148. When QoS is deployed on a network to improve the quality of some services, the quality of other services must deteriorate.

TRUE

FALSE

149. A DNCP server supports various types of address allocation policies to meet different requirements.

Which of the following is not a correct address allocation policy?

Automatic allocation

Dynamic allocation

Duplicated allocation

Manual allocation

150. The session-based stateful detection firewall processes the first packet and subsequent packets in different manners.

Which of the following statements are true? (Multiple Choice)

When a packet reaches the firewall, the firewall searches for a session table. If the packet does not match any entry, the firewall uses the process of the first packet.

When a packet reaches the firewall, the firewall searches for a session table. If the packet matches an entry, the firewall uses the process of subsequent packets.

When status detection is enabled, the firewall establishes sessions for only SYN packets during TCP packet processing.

When status detection is enabled, the firewall checks subsequent packets against security policies.

Page 16 of 17

151. How is NFV defined?

Network infrastructure virtualization

Network function virtualization

Network bus virtualization

Network architecture virtualization

152. Which are lower-layer physical devices of NFV framework? (Multiple Choice)

Storage device

Network device

Server

Air conditioning system

153. Assume that the bandwidths of flows a, b, c, and d are all 100 Mbit/s. The total interface bandwidth is 200 Mbit/s. When network congestion occurs, congestion management is required.

If flows a, b, c, and d belong to WFQ queues and the weight ratio is 1:2:3:4, what are traffic volumes of the four flows?

The bandwidths of flows a, b, c, and d are 20 Mbit/s, 40 Mbit/s, 60 Mbit/s, and 80 Mbit/s.

The bandwidths of flows a, b, c, and d are 100 Mbit/s, 100 Mbit/s, 0 Mbit/s, and 0 Mbit/s.

The bandwidths of flows a, b, c, and d are 80 Mbit/s, 60 Mbit/s, 40 Mbit/s, and 20 Mbit/s.

All traffic is discarded due to congestion.

154. SDN and NFV are essentially the same concept and both define network function virtualization.

TRUE

FALSE

155. A DHCP client needs to obtain an IP address from the DHCP server when accessing a network for the first time.

When the client accesses the network again, which of the following statements are true? (Multiple Choice)

The DI-ICP client broadcasts a DHCP Discover packet. The DHCP server replies to the packet.

The DHCP client only needs to broadcast a DHCP Request packet containing the IP address obtained last time, but does not need to send a DHCP Discover packet again.

After receiving the DHCP Discover packet, the DHCP server sends a DHCP Offer packet containing the leased IP address and other settings to the DHCP client.

After receiving the DHCP Request packet, the DHCP server returns a DHCP ACK packet if the requested IP address is not allocated to another client.

156. Which of the following queue scheduling technologies is better in a fair manner?

WFQ

FIFO

157. VXLAN technology is only used to build an inter-DC Layer 2 network.

TRUE

FALSE

158. MPLS is short for Multiprotocol Label Switching, so the core technology of MPLS is label switching.

TRUE

FALSE

159. Which of the following statements regarding MAC address spoofing attacks is false?

Attackers initiate MAC address spoofing attacks using the MAC address learning mechanism.

Attackers send data frames with forged MAC address to the switch to initiate MAC address spoofing attacks.

When MAC address spoofing attacks occur, the switch may learn incorrect mapping between MAC addresses and IP addresses.

When MAC address spoofing attacks occur, the switch may send packets to the attacker.

160. Complex traffic classification means that packets are classified based on the quintuple including the source and destination addresses, source and destination port numbers, and protocol type. It is usually deployed on the network core.

TRUE

FALSE

Page 17 of 17

161. VXLAN users can access the Internet through VXLAN interfaces.

TRUE

FALSE

162. Flow mirroring is divided into local flow mirroring and remote flow mirroring.

TRUE

FALSE

163. For interzone packet filtering, which of following traffic is not transmitted in the outbound direction?

Traffic from the DMZ to the untrusted zone

Traffic from the trusted zone to the DMZ

Traffic from the trusted zone to the untrusted zone

Traffic from the trusted zone to the local zone

164. During configuration of the WRED drop profile, the lower drop threshold and upper drop threshold for AF21 traffic are 35 and 40, the lower drop threshold and upper drop threshold for AF22 traffic are 30 and 40, and the lower drop threshold and upper drop threshold for AF23 traffic are 25 and 40. The maximum drop probability for AF21, AF22, and AF23 traffic is 10%.

Before congestion occurs, which type of traffic can obtain bandwidth guarantee?

AF21

AF22

AF23

AF21, AF22, and AF23 traffic

H12-222-ENU HCIP-Routing & Switching-IENP Exam Questions

Author