NEW 2023 Certification Sample Questions H12-351_V1.0 Dumps & Practice Exam
H12-351_V1.0 Deluxe Study Guide with Online Test Engine
NEW QUESTION # 12
Which of the following statements about attack defense is true?
- A. Defense against flood attacks can be used to defend against Ping of Death attacks.
- B. Fragmentation attack defense enables a device to detect packet fragments in real time and discard or rate-limit them to protect the device.
- C. Attack defense can defend against spoofing packet attacks, malformed packet attacks, fragmentation attacks, and flood attacks.
- D. Attack defense allows APs to analyze the contents and behaviors of incoming packets on ports to determine whether packets have attack characteristics. The APs then take defense measures on the packets that have attack characteristics.
Answer: D
Explanation:
Explanation
Attack defense is a feature that allows APs to analyze the contents and behaviors of incoming packets on ports to determine whether packets have attack characteristics. The APs then take defense measures on the packets that have attack characteristics, such as discarding them or limiting their rate. Attack defense can defend against spoofing packet attacks, malformed packet attacks, fragmentation attacks, and flood attacks.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/attack-defense
NEW QUESTION # 13
With protocol trace, iMaster NCE-Campuslnsight displays protocol-level Interaction details at the phases for wireless users. (Enter the acronyms in capital letters.)
Answer:
Explanation:
AP, WAC, and AC
With protocol trace, iMaster NCE-CampusInsight displays protocol-level interaction details at the AP, WAC, and AC phases for wireless users.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/protocol-trace
NEW QUESTION # 14
The display sync-configuration compare command is executed on the backup WAC in HSB to check wireless configuration synchronization. Based on the command output, which of the following statements are true?
(Select All that apply)
- A. The configuration of ssid-profile 2 exists on both the master and backup WACs.
- B. The configuration of vap-profile name 3 exists on the master WAC but not on the backup WAC.
- C. The configuration of vap-profile name 2 exists on the backup WAC but not on the master WAC.
- D. This command is used to check whether the public configurations on two WACs are consistent after wireless configuration synchronization.
Answer: B,D
Explanation:
Explanation
The display sync-configuration compare command is used to check whether the public configurations on two WACs are consistent after wireless configuration synchronization. The command output shows the differences between the configurations on the master and backup WACs. In this case, the configuration of vap-profile name 3 exists on the master WAC but not on the backup WAC.
References:
https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/display-sync-configuration-compare
NEW QUESTION # 15
Which of the following encapsulation formats are used for EAP termination in 802.1X authentication? (Select All that apply)
- A. EAP
- B. EAPoR
- C. EAP-TLS
- D. EAPoL
Answer: B,D
Explanation:
Explanation
According to the Huawei documents and resources, the encapsulation formats used for EAP termination in
802.1X authentication are as follows:
B: EAPoL: The client and access device exchange information using EAPoL packets across the LAN2.
C: EAPoR: The access device directly encapsulates the received EAP packets into RADIUS using EAP over RADIUS (EAPoR) packets Therefore, B and C are the correct answers. References:
https://support.huawei.com/enterprise/en/doc/EDOC1100086527
NEW QUESTION # 16
Which of the following statements about VXLAN is false?
- A. A VBDIF interface is a logical interface created based on a BD. It is similar to a VLANIF interface on a traditional network.
- B. A Layer 2 VXLAN gateway forwards traffic to a VXLAN network and can also be used for Intra-subnet communication on the same VXLAN network.
- C. Layer 2 and Layer 3 VXLAN gateways must maintain VBDIF interfaces. Otherwise, users cannot communicate with each other through these interfaces.
- D. A Layer 3 VXLAN gateway is used for inter-subnet communication on a VXLAN network and communication with external non-VXLAN networks.
Answer: C
Explanation:
Explanation
B is false because only Layer 3 VXLAN gateways need to maintain VBDIF interfaces for inter-subnet communication on a VXLAN network or communication with external non-VXLAN networks. Layer 2 VXLAN gateways do not need VBDIF interfaces.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/vxlan-gateway
NEW QUESTION # 17
Huawei Agile Cloud Authentication (HACA) supports only IMaster NCE-Campus as the HACA server.
- A. False
- B. True
Answer: A
Explanation:
Explanation
According to the Huawei documents and resources, Huawei Agile Cloud Authentication (HACA) supports iMaster NCE-Campus as well as Agile Controller-Campus as the HACA server. HACA is an authentication method that allows users to access a network without entering user names or passwords3. Therefore, B is the correct answer. References: 3: https://support.huawei.com/enterprise/en/doc/EDOC1100086527
NEW QUESTION # 18
After multicast-to-unicast conversion is enabled on an AP's air interface, which of the followings is the destination MAC address of multicast packets sent over the air interface?
- A. MAC address of the multicast source
- B. MAC address of a STA
- C. Multicast MAC address
- D. Broadcast MAC address
Answer: B
Explanation:
Explanation
After multicast-to-unicast conversion is enabled on an AP's air interface, the destination MAC address of multicast packets sent over the air interface is changed to the MAC address of a STA that has joined the multicast group. This improves the transmission efficiency and reliability of multicast packets.
References:
https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/multicast-to-unicast-conversion
NEW QUESTION # 19
On a campus network, which of the following problems may occur when you manually create a static VXLAN tunnel? (Select All that Apply)
- A. If N devices need to establish VXLAN tunnels, you need to manually configure the ingress replication list up to N x (N-l)/2 times.
- B. A static VXLAN tunnel uses related protocols on the control plane, consuming device resources.
- C. Remote MAC addresses can be learned only through data flooding.
- D. Although the static VXLAN tunnel mode supports the distributed gateway scenario, the configuration involves a heavy workload and is complex to adjust.
Answer: A,D
Explanation:
Explanation
B is false because a static VXLAN tunnel does not use any protocols on the control plane, saving device resources.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/static-vxlan-tunnel
NEW QUESTION # 20
Assume that a large enterprise needs to deploy a WLAN to provide wireless access for both employees and guests. However, guest data may pose security threats on the network. Which of the following networking modes is applicable to this scenario?
- A. Mesh networking
- B. Fat AP networking
- C. Leader AP networking
- D. Navi WAC Networking
Answer: D
Explanation:
Explanation
Navi WAC networking is a networking mode that uses a WLAN Access Controller (WAC) to manage and control APs. It can provide different authentication and security policies for different user groups, such as employees and guests. Guest data is isolated from the internal network to prevent security threats.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100064352/9aadccc0/navi-wac-networking
NEW QUESTION # 21
To which of the following scenarios is radio calibration applicable?
- A. Rail transportation scenario
- B. WDS or mesh backhaul scenario
- C. High-density scenario
- D. Enterprise office scenario
Answer: C
Explanation:
Explanation
Radio calibration is applicable to high-density scenarios where a large number of users access the network simultaneously and require high bandwidth, such as stadiums, exhibition halls, and conference centers. Radio calibration can improve user experience by increasing the frequency bandwidth for high-load APs.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/radio-calibration
NEW QUESTION # 22
Which of the following statements about EAP relay and EAP termination are false? (Select All that apply)
- A. In EAP termination mode, an access device extracts client authentication information from the EAP packets sent by a client and encapsulates the information using the standard RADIUS protocol. The access device supports only the EAP MD5-Challenge authentication method.
- B. In EAP termination mode, an access device encapsulates EAP packets sent by an 802. IX client Into RADIUS packets, without processing the data in the EAP packets.
- C. The EAP termination mode simplifies the processing on an access device and supports various authentication methods. However, this mode requires an authentication server to support EAP and have high processing capability.
- D. In EAP relay mode, an access device extracts information from EAP packets, encapsulates the information into RADIUS packets, and sends the RADIUS packets to an authentication server.
Answer: B,C
Explanation:
Explanation
A: In EAP termination mode, an access device encapsulates EAP packets sent by an 802. IX client Into RADIUS packets, without processing the data in the EAP packets. This statement is false because in EAP termination mode, an access device extracts information from EAP packets, encapsulates the information into RADIUS packets, and sends the RADIUS packets to an authentication server2.
D: The EAP termination mode simplifies the processing on an access device and supports various authentication methods. However, this mode requires an authentication server to support EAP and have high processing capability. This statement is false because it describes the EAP relay mode, not the EAP termination mode2.
Therefore, A and D are the correct answers. References: 2:
https://support.huawei.com/enterprise/en/doc/EDOC1100086527
NEW QUESTION # 23
In a dual-link HSB scenario, after an AP sets up CAPWAP links with the active and standby WACs, which of the following types of packets does the AP periodically send to the WACs to detect link status?
- A. DTLS
- B. Echo
- C. Join
- D. Keepalive
Answer: B
Explanation:
Explanation
In a dual-link HSB scenario, after an AP sets up CAPWAP links with the active and standby WACs, the AP periodically sends Echo packets to the WACs to detect link status. The Echo packets are sent every 30 seconds by default.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/dual-link-hsb
NEW QUESTION # 24
iMaster NCE-Campuslnsight provides Intelligent radio calibration for high-load APs to increase the frequency bandwidth. This function applies to both 5 GHz and 2.4 GHz frequency bands.
- A. False
- B. True
Answer: A
Explanation:
Explanation
iMaster NCE-CampusInsight provides intelligent radio calibration for high-load APs to increase the frequency bandwidth. However, this function applies only to the 5 GHz frequency band, not to the 2.4 GHz frequency band.
References:
https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/intelligent-radio-calibration
NEW QUESTION # 25
Which of the following configurations may cause ST As to experience a slow Internet connection? (Select All that Apply)
- A. QoS CAR is configured in the traffic profile.
- B. TKIP encryption is configured, causing a low link setup rate.
- C. Radio 1 of APs is disabled.
- D. Rate limiting is configured in the SSID profile.
Answer: A,B,D
Explanation:
Explanation
B is false because disabling radio 1 of APs does not affect the Internet connection speed of STAs that use radio 2.
References:
https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/troubleshooting-slow-internet-connec
NEW QUESTION # 26
As shown in the figure, STA_1 through STA_4 are associated with AP_1, and STA_5 is associated with AP_2. Assuming that the load balancing threshold is 2, the load difference threshold is 25%, and API and AP2 support a maximum of 10 STAs, which of the following statements are true? (Select All that Apply)
- A. The load balancing mechanism needs to be enabled. Then some STAs are steered from AP_1 to AP__2.
- B. If load balancing is performed, the load percentage of AP_1 changes to 30%.
- C. The load percentage of AP_1 is 40%, and that of AP_2 is 10%.
- D. The minimum load percentage is 10%, which is greater than the load difference threshold. Therefore, load balancing needs to be enabled.
Answer: A,C
Explanation:
Explanation
The load percentage of an AP is calculated by dividing the number of associated STAs by the maximum number of STAs supported by the AP. In this case, the load percentage of AP_1 is 4/10 = 40%, and that of AP_2 is 1/10 = 10%. The load balancing mechanism needs to be enabled to balance the load between AP_1 and AP_2. Then some STAs are steered from AP_1 to AP_2 based on the load balancing threshold and the load difference threshold.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/load-balancing
NEW QUESTION # 27
Which of the following statements correctly arranges matching modes used by URL filtering in descending order of priority?
- A. Exact matching > Suffix matching > Keyword matching > Suffix matching
- B. Exact matching > Suffix matching > Prefix matching > Keyword matching
- C. Exact matching > Prefix matching > Suffix matching > Keyword matching
- D. Exact matching > Keyword matching > Suffix matching > Prefix matching
Answer: B
Explanation:
Explanation
URL filtering supports four matching modes: exact matching, suffix matching, prefix matching, and keyword matching. The priority order of these modes is as follows:
Exact matching: The highest priority. An exact match means that a URL entered by a user is exactly the same as a URL in a blacklist or whitelist.
Suffix matching: The second highest priority. A suffix match means that a URL entered by a user ends with a suffix in a blacklist or whitelist.
Prefix matching: The third highest priority. A prefix match means that a URL entered by a user starts with a prefix in a blacklist or whitelist.
Keyword matching: The lowest priority. A keyword match means that a URL entered by a user contains a keyword in a blacklist or whitelist.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/url-filtering
NEW QUESTION # 28
Which of the following items is not involved in the HLD phase?
- A. Network design
- B. Capacity planning
- C. AP position planning
- D. Deployment planning
Answer: C
Explanation:
Explanation
According to the Huawei documents and resources, the HLD phase is the high-level design phase of a WLAN project. It involves the following items:
Capacity planning: Determines the number and types of devices required for the WLAN network based on the customer's requirements and network scale.
Network design: Designs the network topology, IP addressing scheme, VLAN division, security policies, and other network parameters for the WLAN network.
Deployment planning: Plans the deployment sequence, schedule, resources, and risks for the WLAN project.
AP position planning is not involved in the HLD phase. It is part of the LLD phase, which is the low-level design phase of a WLAN project. It involves the detailed design of AP positions, antenna types, channel allocation, power adjustment, and other wireless parameters for the WLAN network. Therefore, C is the correct answer. References: :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/wlan-project-design
NEW QUESTION # 29
Drag the short-range wireless IoT technologies on the left to their corresponding descriptions on the right.
Answer:
Explanation:
Explanation
According to the Huawei documents and resources, the definitions of the short-range wireless IoT technologies are as follows:
ZigBee: IEEE 802.15.4-based wireless communication technology is a short-range, and low-power wireless communication technology that supports star, mesh, and hybrid networking.
Bluetooth: With the emergence of IoT industries such as smart wearables, smart home, and Internet of Vehicles, short-range communication technologies are attracting more and more developers.
REID: Its basic principle is to automatically identify objects based on the transmission characteristics of radio signals and space coupling (inductance or electromagnetic coupling) or radar reflection.
Wi-Fi: Wireless networking technology based on IEEE 802.11 is the most popular WLAN technology.
Therefore, ZigBee - 1, Bluetooth - 3, REID - 2, Wi-Fi - 4 is the correct answer. References: :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/zigbee :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/bluetooth :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/rfid :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/wi-fi
NEW QUESTION # 30
802. 11r fast roaming (over-the-air) is enabled on the WLAN shown in the figure. A STA roams from AP1 to AP2. Sort the steps in chronological order during the 802.11r fast roaming process between WACs.
Answer:
Explanation:
Explanation
According to the Huawei documents and resources, the chronological order during the 802.11r fast roaming process between WACs is as follows:
2.The STA accesses the network through API. This is the initial association process before roaming.
1.The STA initiates an 802.11 FT authentication request to AP2. This is the first step of the roaming process when the STA moves to a new AP.
3.AP2 starts the reassociation timer, and sends an 802.11 FT authentication response to the STA. This is the second step of the roaming process when AP2 responds to the STA's request and sets a timer for reassociation.
4.The STA generates and installs a P TK based on the information contained in the response frame. This is the third step of the roaming process when the STA derives a new pairwise key for encryption.
5.The STA sends a reassociation request to AP2. This is the fourth step of the roaming process when the STA requests to reassociate with AP2.
6.AP2 generates and installs a PTK according to PMK-RI and information contained in the request frame. This is the fifth step of the roaming process when AP2 derives the same pairwise key as the STA.
7.After receiving the reassociation request, AP2 disables the reassociation timer, and then sends a reassociation reg onse to the STA. This is the sixth step of the roaming process when AP2 confirms the reassociation with the STA and stops the timer.
8.The STA receives the response frame of AP2. The roaming process is complete. This is the final step of the roaming process when the STA completes the handover to AP2.
Therefore, 2, 1, 3, 4, 5, 6, 7, 8 is the correct answer. References:
https://support.huawei.com/enterprise/en/doc/EDOC1100169459/8d79210e/configuring-wireless-mesh-networki
NEW QUESTION # 31
Which of the following types of non-Wi-R devices can be identified by Huawei APs? (Select All that Apply)
- A. 2.4 GHz wireless video and audio transmitter
- B. Game controller
- C. ZigBee device
- D. Bluetooth device
Answer: A,C,D
Explanation:
Explanation
Huawei APs can identify non-Wi-Fi devices that operate in the 2.4 GHz frequency band, such as Bluetooth devices, ZigBee devices, game controllers, wireless video and audio transmitters, microwave ovens, cordless phones, and baby monitors.
References:
https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/non-wi-fi-device-identification
NEW QUESTION # 32
......
H12-351_V1.0 dumps review - Professional Quiz Study Materials: https://examkiller.itexamreview.com/H12-351_V1.0-valid-exam-braindumps.html
