Huawei H12-222 Online Practice Questions and Exam Preparation

Huawei H12-222 Online Questions & Answers

• Question 221:

  Which of the following statements regarding the firewall interzone security policy is true?

  A. The interzone security policies are arranged in the order of the match, the listed first is matched preferentially.
  B. The interzone security policy with the smaller ID is matched preferentially.
  C. The interzone security policy with the larger ID is matched preferentially.
  D. The interzone security policies are listed automatically based on sequence numbers. When the order is changed, the number is changed.
  A. The interzone security policies are arranged in the order of the match, the listed first is matched preferentially.

• Question 222:

  DHCP snooping is a security feature. Which of the following statements regarding DHCP snooping is false?

  A. The DHCP snooping binding table contains dynamic binding entries and static binding entries.
  B. DHCP snooping distinguishes the trusted interface and untrusted interfaces. Untrusted interfaces do not process DHCP Reply packets.
  C. The static binding table is manually set on the inbound interface and the aging time is also manually set.
  D. When DHCP snooping is used at Layer 2, the interface information also can be obtained for the binding table if the Option 82 function is not configured.
  C. The static binding table is manually set on the inbound interface and the aging time is also manually set.

• Question 223:

  The session-based stateful detection firewall processes the first packet and subsequent packets in different manners. Which of the following statements are true? (Multiple Choice)

  A. When a packet reaches the firewall the firewall searches for a session table. If the packet does not match any entry, the firewall uses the process of the first packet.
  B. When a packet reaches the firewall, the firewall searches for a session table. If the packet matches an entry, the firewall uses the process of subsequent packets.
  C. When status detection is enabled, the firewall establishes sessions for only SYN packets during TCP packet processing.
  D. When status detection is enabled, the firewall checks subsequent packets against security policies.
  A. When a packet reaches the firewall the firewall searches for a session table. If the packet does not match any entry, the firewall uses the process of the first packet.
  B. When a packet reaches the firewall, the firewall searches for a session table. If the packet matches an entry, the firewall uses the process of subsequent packets.
  C. When status detection is enabled, the firewall establishes sessions for only SYN packets during TCP packet processing.

• Question 224:

  Which of the following statements regarding the access control application scenario of the Agile Controller is false?

  A. In MAC address authentication, user terminals are authenticated by the authentication server based on their MAC addresses. MAC address authentication is mainly used to authenticate dumb terminals, such as IP phones and printers.
  B. 802.IX authentication uses the Extensible Authentication Protocol (EAP) to transmit authentication information between the client, access device, and authentication server.
  C. Portal authentication is also called web authentication. Users enter their account information on the web authentication page for identity authentication.
  D. In SACG authentication, the USG firewall is connected to a router or switch in bypass mode, and terminal access is controlled by manual monitoring.
  A. In MAC address authentication, user terminals are authenticated by the authentication server based on their MAC addresses. MAC address authentication is mainly used to authenticate dumb terminals, such as IP phones and printers.

• Question 225:

  During BFD session establishment between devices, which state is not involved?

  A. 2-way
  B. down
  C. init
  D. up
  A. 2-way

• Question 226:

  Assume that the bandwidths of flows a, b, c, and d are all 100 Mbit/s. The total interface bandwidth is 200 Mbit/s. When network congestion occurs, congestion management is required. If flows a, b, c, and d belong to WFQ queues and the weight ratio is 1:2:3:4, what are traffic volumes of the four flows?

  A. The bandwidths of flows a, b, c, and d are 20 Mbit/s, 40 Mbit/s, 60 Mbit/s, and 80 Mbit/s.
  B. The bandwidths of flows a, b, c, and d are 100 Mbit/s, 100 Mbit/s, 0 Mbit/s, and 0 Mbit/s.
  C. The bandwidths of flows a, b, c, and d are 80 Mbit/s, 60 Mbit/s, 40 Mbit/s, and 20 Mbit/s.
  D. All traffic is discarded due to congestion.
  A. The bandwidths of flows a, b, c, and d are 20 Mbit/s, 40 Mbit/s, 60 Mbit/s, and 80 Mbit/s.

• Question 227:

  Which of the following are roles in port mirroring? (Multiple Choice)

  A. Mirrored port
  B. Local observing port
  C. Remote mirroring port
  D. Trunk port
  A. Mirrored port
  B. Local observing port
  C. Remote mirroring port

• Question 228:

  Which packet information can be used for complex traffic classification? (Multiple Choice)

  A. Packet length
  B. Source and destination addresses
  C. Protocol type
  D. Source and destination MAC addresses
  A. Packet length

• Question 229:

  MPLS is short for multiprotocol label switching. Which of the following statements regarding MPLS labels are true? (Multiple Choice)

  A. An MPLS label is a short fixed-length identifier with only local significance, and is used to uniquely indicate the FEC to which a packet belongs.
  B. Similar to VPI/VCI in ATM packets and DLCI in Frame Relay packets, an MPLS label is a connection identifier.
  C. An MPLS label, carried in a packet header, does not contain topology information and is globally significance.
  D. MPLS supports single-layer labels and multi-layer labels.
  E. MPLS has multiple label distribution protocols, such as, Label Distribution Protocol (LDP).
  A. An MPLS label is a short fixed-length identifier with only local significance, and is used to uniquely indicate the FEC to which a packet belongs.
  B. Similar to VPI/VCI in ATM packets and DLCI in Frame Relay packets, an MPLS label is a connection identifier.
  D. MPLS supports single-layer labels and multi-layer labels.
  E. MPLS has multiple label distribution protocols, such as, Label Distribution Protocol (LDP).

• Question 230:

  Which of the following statements regarding the DiffServ model is false?

  A. Signaling is required. Before transmitting packets, an application does not need to notify a router and the network does not need to maintain the status for each flow.
  B. Different methods can be used to specify QoS of packets, for example, IP precedence, source IP address, and destination IP address of IP packets.
  C. The DiffServ model provides the E2E QoS guarantee for important applications.
  D. It can be implemented through technologies such as CAR or queue scheduling technologies.
  A. Signaling is required. Before transmitting packets, an application does not need to notify a router and the network does not need to maintain the status for each flow.
  B. Different methods can be used to specify QoS of packets, for example, IP precedence, source IP address, and destination IP address of IP packets.
  C. The DiffServ model provides the E2E QoS guarantee for important applications.