Huawei H19-424 Online Practice Questions and Exam Preparation

Huawei H19-424 Online Questions & Answers

• Question 51:

  The alias function of EVPN is mainly realized by that route ()

  A. per EVIAD route
  B. per ES AD route
  C. Inclusive Multicast Ethernet Tag Route
  D. Ethernet Segment Route
  A. per EVIAD route

• Question 52:

  Which of the following information cannot be identified through the function of the smart terminal?

  A. Terminal type
  B. Operation
  C. Manufacturer
  D. NIC type
  D. NIC type

• Question 53:

  In the V1R22C00 version of CloudCampus solution, the description of the FW synchronization IP-Group feature is incorrect ()

  A. NCE-Campus supports the configuration of firewall security group policies.
  B. When a user passes the NCE-Campus authentication or the permission changes, NCE- Campus synchronizes the user name, IP-group, and IP address information to FW, and FW identifies all user groups based on the mapping relationship between IP address, user name, and IP-group, and executes the corresponding security group policy.
  C. Reuse the current online behavior management process, and add lP-Group information to the synchronization information of NCE-Campus and firewall.
  D. When the user goes online and ages in FW, FW actively queries the online user to the NCE-Campus server to keep the IP-Group and other information at both ends synchronized
  A. NCE-Campus supports the configuration of firewall security group policies.

• Question 54:

  Regarding the principle of VN division, the following statement is wrong

  A. In a virtualized network, different service networks can be distinguished by different VNs
  B. Virtual networks are isolated from each other by default
  C. Independent business units can be used as a separate virtual network
  D. The isolation requirements caused by the difference of user identities in the same department can be realized by dividing different virtual networks
  D. The isolation requirements caused by the difference of user identities in the same department can be realized by dividing different virtual networks

• Question 55:

  Which of the following configuration types can be automatically generated through NCE-Campus in fabric networking?

  A. Underlay IP addressing
  B. VXLAN VNI allocation
  C. Border node mapping
  D. AP radio profiles
  A. Underlay IP addressing
  B. VXLAN VNI allocation
  C. Border node mapping

• Question 56:

  In the virtualization scenario, we recommend using () external network design when using a unified access policy for different VNs

  A. L3 shared exit
  B. L3 exclusive export
  C. L2 shared exit
  D. L2 exclusive export
  A. L3 shared exit

• Question 57:

  switch V600R022 version, about the PV6 RGuard implementation description, the incorrect is ()

  A. RA packets can carry a lot of network configuration information, including the default router, network prefix list, and whether to use a DHCPv6 server for stateful address allocation. An attacker can send forged RA packets to modify the network configuration of the user's host so that legitimate users cannot communicate properly. IPv6RGuard provides a defense mechanism against RA packet attacks, which can effectively prevent such network attacks.
  B. Configure the host or router role for the interface, and then the device can forward or discard RA packets based on the interface role.
  C. If the interface is connected to the user host, the interface role is set to host, and if the interface is connected to the router, the administrator can configure the interface role to router according to the interface networking. Version 22.0 also supports policy-based filtering of ND packets.
  D. 22.0 also supports policy-based filtering of ND packets.
  D. 22.0 also supports policy-based filtering of ND packets.

• Question 58:

  The statement about the cloud migration characteristics of campus services is incorrect

  A. Policy service, which provides the ability to configure policies, mainly configures access policies between security groups and security groups, integrates AC3.0, and AC1.0 is optional
  B. Authentication and Portal service, which supports authentication, authorization, and accounting capabilities as an AAA server, is integrated in AC3.0 and AC1.0 is optional, in which billing depends on a third party
  C. The P-Group synchronization service, as the control plane of the IP-Group, provides the collection and distribution of IP and security group correspondence, and is integrated in AC3.0 and AC1.0
  D. Policy execution points and authentication points can be deployed on different physical devices.
  C. The P-Group synchronization service, as the control plane of the IP-Group, provides the collection and distribution of IP and security group correspondence, and is integrated in AC3.0 and AC1.0

• Question 59:

  In the LAN-WAN convergence scenario, the description of RR deployment design principles is wrong ()

  A. The RR must be redundant, and at least two RR devices must exist on the live network. Prevent network-wide service interruption caused by the failure of only one RR device on the entire network.
  B. Try to choose an independent RR, which can be deployed on a single device in the independent RR scenario.
  C. Use the RR model recommended in the specification list;
  D. The Edge should be dual-uplink to the two RR devices to achieve egress backup;
  B. Try to choose an independent RR, which can be deployed on a single device in the independent RR scenario.

• Question 60:

  In the southbound protocol of the controller, the () protocol is the LSP communication protocol between the NCE and the PCC, the PCC reports LSP status information to the NCE, and the NCE notifies the PCC to update the tunnel LSP.

  A. PCEP
  B. Netconf
  C. BGP-LS
  D. SNMP
  A. PCEP