H12-222 Huawei Certified Network Professional-R&S-IENP Questions and Answers

MAC address

IP address

Lease time

Physical port and UDP port

TRUE

FALSE

Routing table

MAC address table

Session table

FIB table

After receiving a data packet, the ingress node searches for tunnel ID in the ILM table first.

The ingress node finds the NHLFE entry matching the tunnel ID in the ILM table to associate LFIB and NHLFE entries.

The ingress node checks the NHLFE entry to obtain the outbound interface, next hop, outgoing label, and label operation type. D. The label operation type is Push.

The ingress node adds the obtained label to the IP packet, processes EXP by QoS policy, processes the TTL, and forwards the encapsulated MPLS packet to the next hop.

TRUE

FALSE

They must be different.

They must be the same.

They may be the same.

TRUE

FALSE

The previous user is disconnected forcibly and subsequent intranet users go online through NAT translation.

Subsequent intranet users cannot go online.

NAT is automatically switched to PAT, and then subsequent intranet users go online.

Packets are synchronized to another NAT translation device.

openflow listening-ip 1.1.1.1

sdn controller souce-address 1.1.1.1

controller-ip 1.1.1.1

sdn listening-ip 1.1.1.1

Label distribution router

Label edge router (LER)

Label switching router (LSR)

Label transmission router

TRUE

FALSE

Local zone

Trusted zone

Untrusted zone

Security zone

Supports one-click restoration to reduce maintenance costs of terminals.

Allows installation of only standard software, implementing desktop office standardization.

Forces installation of clients meeting security requirements and prevents terminal data leaking.

Prohibits installation of non-standard software to reduce the virus infection risks.

TRUE

FALSE

Monitor the TCP connection integrity of LDP sessions.

Terminate incomplete label request messages.

Release labels.

Negotiate parameters for setting up an LDP session.

Behind the Layer 3 header and before the Layer 2 header

Behind the Layer 2 header and before the Layer 3 header

Inside the Layer 3 header

Before the Layer 2 header

TRUE

FALSE

The outer label is the private network label and the inner label is the public network label.

The MPLS VPN outer label is distributed manually by the LDP protocol. The inner label is distributed by the peer MP-BGP neighbor.

By default, the outer label in data packets is popped out before being forwarded to the last hop.

The outer label is used to instruct the PE to send data packets to the correct VPN.

TRUE

FALSE

2784

3784

4784

5784

In MAC address authentication, user terminals are authenticated by the authentication server based on their MAC addresses. MAC address authentication is mainly used to authenticate dumb terminals, such as IP phones and printers.

802.IX authentication uses the Extensible Authentication Protocol (EAP) to transmit authentication information between the client, access device, and authentication server.

Portal authentication is also called web authentication. Users enter their account information on the web authentication page for identity authentication.

In SACG authentication, the USG firewall is connected to a router or switch in bypass mode, and terminal access is controlled by manual monitoring.

802.1X

Portal

MAC address bypass

SACG

AAA

Cost expenditure

Capital expenditure

One-time expenditure

Daily expenditure

DSCP priority

IP precedence

MPLS EXP priority

802.1p priority

TRUE

FALSE

Simple traffic classification

Complex traffic classification

On-demand classification

Service traffic classification

The processing speed is low.

The processing performance of subsequent packets is good.

It can only detect the network layer.

It detects each packet.

vrrp vrid 1 track interface GigabitEthernet-0/0/0

track vrrp vrid 1 interface GigabitEthernet0/0/0

vrrp vrid 1 interface GigabitEthernet0/0/0 track

vrrp vrid 1 interface GigabitEthernet0/0/0

Multiple users can be created for network management.

Users may be asked to log in to eSight from specified IP addresses in specific time ranges.

The administrator can force unauthorized login users to log out.

The login time of the administrator role also can be limited.

TRUE

FALSE

TRUE

FALSE

This command is generally configured on a PE.

This command binds GO/0/1 and GO/0/2 on the PE to the VPN instances assigned for the customer network.

After an interface is bound to a VPN instance, the interface becomes a private network interface, which can be assigned with a private network address and run a private network routing protocol.

If an interface is unbound from a VPN instance, the device does not automatically clear IPv4 or IPv6 configurations on the interface.

Private routes cannot communicate with each other.

Leased lines are expensive.

Bandwidth resources cannot be fully used.

The address space is overlapping.

224.0.0.18

224.0.0.20

224.0.1.18

224.0.1.20

Association with an interface

BFD

NQA

IP link

Security zone

Trusted zone

Untrusted zone

DMZ

TRUE

FALSE

The address is not translated.

The interface is multiplexed.

The source interface is not converted.

The destination interface is not converted.

The default zone can be deleted.

The level of the default zone can be changed.

The default zone cannot be deleted, but its level can be changed.

There are four default zones.

BE service model

IntServ model

DiffServ model

FIFO model