H12-261_V3.0 Sample Questions Answers

2020: The /64 router will appear in the IP routing table

The 2022:/64 router will appear in the IP routing table

2019: The /64 router will appear in the IP routing table

The 2021:/64 router will appear in the IP routing table

True

false

Perform source IP address and source port conversion at the same time

Only perform source IP address translation

Only perform destination IP address translation

Convert destination IP address and destination port

interface GigabitEthernet0/0/1 undo eth-trunk 1

interface GigabitEthernet0/0/1 undo shutdownwn

Member interfaces can be added to a link aggregation group enabled by the following command: interface GigabitEthermet0/0/1 shutdownwn

interface GigabitEthernet0/0/1 trunkport GigabitEthernet0/0/1 interface GigabitEthermet0/0/1 undo shutdownwn

True

false

Dual Stack

6 to 4

ISATAP

NAT64

root protection

DefendTC-BPDU attack

BPDU protection

loop protection

In Access mode, the data frame with the label is directly discarded when it is received.

In Access mode, the VLAN tag of the data frame will be stripped off when sending.

Only data frames without labels are received in Access mode.

When the data frame enters the switch interface, the switch will learn the destination MAC address in the data frame.

IGMPv3 adds the function of specifying a multicast group not to join a specific multicast source for a host

IGMPv3 adds the function of specifying a multicast group for a host to join a specific multicast source

IGMPv3 adds between source and local IGMP queriersRequest-to-send andClear-to-send

IGMPv3 removed for membership reportingReport-suppression Features

IGMPv3 removes the ability to join all sources with a wildcard in a multicast group

Sham link is regarded as a link between two VPI instances, each VPN instance must have an endpoint address of sham1irk, which must be a Loopback interface with a 32-bit mask in the VPN address space on the PE router address

The endpoint address of the Sham link is published by BGP as the VPNv4 address. Routes that have passed through the sham link can also be imported into BGP in the form of VPNv4 routes.

In order to forward VPN traffic through the MPLS backbone network, the routing cost of the sham link should be less than the OSPF routing cost of the backdoor link

Sham link can be advertised in any area, it needs to be configured manually, and the local VPN instance must have a route to the destination address of the sham link (the sham link endpoint address of the peer PE)

It can carry both link-local address and global unicast address at the same time.

It can only be global unicast address.

Can be just a link-local address

can only be the local address of the cone road

::1/128

FE80::/10

C00::/7

2000::/3

WREDDifferent drop thresholds and packet loss rates can be set for packets with different priorities

When traffic exceeds a minimum threshold, WRED starts dropping all ingress traffic (tail drop)

Avoid global synchronization by selectively dropping multiple TCP streams

Low-bandwidth traffic is more likely to drop than high-bandwidth traffic

Level of ISIS-1 for SNPs and LSPs.

Level of ISIS-2 SNPs and LSPs.

ISIS Level-1 ofHello message.

ISIS Level-2Hello message.

Obtain relevant information after parsing the BPD service

Close the port

Forward BPDUs as required

Directly discard the BPDUs

Enable local preferential forwarding of traffic

Connect stacking devices via stacking cards

Configuring the MAC Address Switching of the Stacking System

Enabling the Stacked Multi-Master Checking Function

DR routers use FF08::6

DR routers use FF02::6

All OSPsF Router uses FFO2::5

All OSPsF Router uses FF08:5

When the router's memory is insufficient, the system automatically sets the overload flag in the sent LSP message, regardless of whether the user has configured the set-overload command.

The routes imported by R3 through import-route cannot be published.

R3 starts the overload state, R1 and R2 will not calculate the LSP generated by R3 in the SPF tree. The direct route of D, R3 will be ignored by R1 and R2 because the setting of the overload bit will be ignored.

The LSP of R3 will not be able to diffuse to R1 and R2

DAI does not support manual configuration of binding tables.

A. IPSG checks the source IP address and source MA of IP packetsC address, DAI only checks the correspondence between IP and MAC.

URPF can be used to prevent DDoS false origin attacks.

IPSG technology checks IP packets to prevent source IP spoofing attacks.DAI checks the source of ARP packet filtering attacks.

TRUE

FALSE

True

false

In the NSSA area, filtering for external route import and advertisement can be configured on ASBR or ABR.

Filtering for three types of LSAs needs to be configured on ABRs between OSPF areas

Filter LSA based on interface, can filter in and out direction, except Grace All LS except LSAA

When calculating routes based on the link state database, use filter-policy import command, this filtering method only affects the routing entries in the routing table. plus, for OSPF the link state database has no effect

TRUE

FALSE

The switch will drop the frame

The switch will record the source MAC address of the data frame and flood the data frame

The switch will forward the data out an interface according to the destination MAC address of the data frame

The switch will buffer the data frame and forward it after waiting for the destination host to send the data frame

MAC address in non-canonical format

in multiple accessCSMA/CD

Canonical format of the MAC address

802.5 encapsulated frame

802.3 encapsulated frames

64

32

16

128

Aggregator

Local-Pref

Multi Exit-Disc

Community

TRUE

FALSE

turn onDHCP Snooping checkDHCP Function of the CHADDR field in the REQUEST message

configureTrusted/Untrusted interface

Configuration on the master switchDHCP Snooping withDAL or IPSG for linkage

Limit the maximum number of learning allowed on a switch interfaceMACnumber of addresses

Users can use 802.1x authentication to access the network, RADIUS completes authentication.

RADIUS authentication and WTACACS authentication are mutually exclusive, and dual authentication cannot be performed for the same user at the same time.

RADIUS authentication and HWTACACS authentication can perform dual authentication for the same user at the same time, which is more secure.

RADIUS authentication and 802.1x authentication are mutually exclusive.

By default, matching is performed according to the "depth first" principle.

By default, match pe first rmit, then match the order of deny.

By default, according to Rule-ID, matching from small to large.

There is only one matching order and cannot be modified.

The outer label of MPLS VPN is called the private network label, and the inner label is called the public network label.

By default, the outer label is popped before the data packet is forwarded to the last hop device.

The outer label is used for Correctly send packets to the corresponding VPN on the PE device

The outer label of MPLS VPN is assigned by the LDP protocol or statically, and the inner label is assigned by the MP-BGP neighbor of the opposite end

The routing entry in the peer BGP routing table is not optimal.

The next hop address of the BGP route entry is unreachable?

The peer is configured with peer ignore

The peer is configured with active-route-advertise

116

118

112

114

SNMPV1

SNMPV2C

SNMPV3

All versions can be implemented

The Hello packet must contain the interface ID of the sending interface

The LSACK message contains the LSA header information to confirm receipt of the LSU message

The LSR packet contains the complete LSA header information and is used to request to update the LSA

The Option field of Hello and DD packets is extended to 24 bits

use import-route BGP commands can import IBGP routes

AS-path-filter is the needle to AS-path, thus affecting the route selection.

OSPF, ISIS, and BGP can all deliver default routes.

in node 10, if-match community-filter 1 and if-match as-path-filter 1 is"with" relationship

Outer label: 1025: Inner label: 1027

Outer label: 1025; Inner label: 1025

Outer label: 1027; Inner label: 1025

Outer label: 1027; Inner label: 1027

ebgp max hop

BGP certification

BGP route filtering

BGP GSTM

LSP fast diffusion feature, first diffuse LSPs less than the specified number to speed up the synchronization process of LSDB

by configurationAn intelligent timer generated by LSP, which can automatically adjust the delay time according to the changing frequency of routing information

When the link state information increases, the packet length of the LSP can be increased, so that each LSP can carry more information.

Decreasing the minimum time interval for sending LSPs by port can speed up the diffusion of LSPs.

Cluster-List is an optional non-transition attribute used to prevent loops within a cluster.

Routes learned from clients, advertised to all non-clients and clients of this RR.

A backbone network is divided into multiple reflection clusters, eachRR configures her RRs as non-clients, and establishes IBGP full connections between RRs.

The trigger-ID attribute is generated by a route reflector (RR) and is used to prevent loops between clusters.

configure dynamicWhen the RP is used, the BSR needs to be configured as the backup of the RP.

configure staticWhen an RP is used, the BSR needs to be configured to advertise RP information.

configure staticRP information needs to be specified on all PIM routers.

configure dynamicWhen the RP is used, no BSR needs to be configured.

After the VRRP protocol master and backup role elections are completed

After the DHCP client receives the confirmation message sent by the server

When a new host with an IP address is connected to the network

When a host connected to the switch sends a Ping after the message

Private network label by MP-BGP carries and distributes routes when delivering routes, and public network labels are distributed by LDP.

MPLS BGP VPNTwo layers of labels are used in the network: public network labels (also called outer labels) and private network labels (also called inner labels).

By default, the router assigns the same label value to all VPNv4 routes destined for the peer end.

exitThe PE uses the inner label when judging which egress CE the packet should be sent to.

Unicast IGMPv2 membership report to the default router on the local network

TowardsRP sends unicast IGMPv2 membership report

Send the IGMPv2 membership report through multicast in the local network, and the multicast address carried in the IGMPv2 membership report is the desiredincoming multicast address

The IGMPv2 membership report is sent through multicast on the local network, and the destination multicast address for sending the IGMPv2 membership report is"All PIM routers" 2240.0.2 multicast address

IGMPv2

BGP

OSPF

PIMv2

BGP packets can be used to exchange VPN routing information between CEs and PEs

Hub-CE and When the Hub-PE transmits routing information, the Hub-PE It is necessary to configure a route that allows the receiving AS number to be repeated once to receiveRoutes advertised by the Hub-CE

Hub-CE and Hub-PE, Spoke-PE with Spoke-CEs can use OSPF to exchange routing information

Spoke- Establish an MP-IBGP peer relationship between PEs to exchange VPN routing information.

OSPF version number changed from 2 to 3

There is no change in the option field of the He11o packet

Hello packets no longer contain address information and carry Interface ID

Removed Authentication, Auth Type field

Trap, Get and Set

Get, Set and Getnext

Get, Set, Getnext and GetBulk

Get, Set and GetBulk

Trap only

BGP. POP3. SNMP, TFTP. Telnet B. HTTPS.SNMP.POP3.DNS.Telnet

HTTPS.BGP NetbiosNameServer POP3.Telnet

Finger, DHCP Server, Netbios Name Server, POP3, Telnet E. LDAP. SNMP TFTP. POP3. Telnet

Type5

Type4

Type1

Type2

Type3

For two OSPs connected to the link F routers, even if their IPv6 address prefixes are different, can still establish neighbor relationships

OSP the routing information obtained by Fv3 routers from neighbors will use the neighbor's Link-Local address as the next hop for forwarding packets.

For two OSPs connected to the link F routers can establish neighbor relationships even without configuring a unicast IPv6 address

All OSPs except virtual connections All Fv3 interfaces use the Link-Local address as the destination address of the packet

ASs that form load-balancing equal-cost routes. The -Path property must be different.

If the destination network segment is the same, load balancing can be formed between BGP routes from different sources.

If BGP load balancing is implemented, pee needs to be configured when the local device advertises routes to the IBGP peer grouprnext-hop-local command only Change the next hop address to own address.

IBGP routes and EBGP routes to the same destination on the public network can form load balancing.

The routing priority in ISIS IPv4 and ISIS IPY6 cannot be adjusted independently.

The cost of ISIS in IPv4 and IPv6 can be adjusted independently.

To support dual stack, the ISIS protocol must be changed to version 2.

By default, the routing priority of the ISIS protocol in IPv6 is 25

Inconsistent BPDU interval configuration between switches

Instanc between transfer machinese VLAInconsistent N mapping configuration

between switchesRevislon Level configuration is inconsistent

between text changersRegion Name configuration is inconsistent

Configure 1000:1000 both under EVPN

Configure 10:10 both under VPN

Configure 1000: 1000 both evpn under VPN

Configure 1000: 1000 export under EVPN

digital envelope

Issuer

digital signature

public key information

When sending a neighbor solicitation packet, the source address must be the link-local address of the end interface

When sending a Neighbor Solicitation message, the destination address must be the neighbor's requested node multicast address. C. Two ICMPv6 messages, Neighbor Solicitation and Neighbor Advertisement, are used in the address resolution process.

Address resolution realizes the function of resolving from IPv6 address to link layer address

ip source checkk user bind checkk The item command is used to configure IP packet inspection items based on VLAN or interface.All static entries take effect.

If an interface is configured asDHCP Snooping Trust interface, the interface can normally receive the DHCP response from the DHCP server. ACK, DHCP NAK and DHCP Offer packets, other untrusted ports cannot receive these packets normally.

On Huawei routers, IPSG can be configured on VlanifFeatures.

IPSG can perform binding table matching check on IP packets entering and leaving the interface.

Special Control Packet Attack

Scanning to detect attacks

DDos attack

Malformed Packet Attack

VBDIF interface

Layer 2 sub-interface

VLANIF interface

NVE interface

When using IPsec master and backup link redundancy backup, enable it on the physical interfaceURPF function, it is recommended to use URPF loose mode.

When using IPsec multi-link redundancy backup, it is possible toURPF function, you can use URPF strict mode

When using IPsec multi-link redundancy backup, enable it on the tunnel interfaceURPF function, you can use URPF strict mode.

When using IPsec master and backup link redundancy backup, enable it on the physical interfaceURPF function, you can use URPF strict mode.

A carried by routeSPATH attribute to filter routes received from BGP neighbors. For example the command peer xxxx as-path-fliter import

Route apply clause in policy

A carried by routeSPATH attribute to filter routes sent to BGP neighbors. For example the command peer xxxx as-path-ilter export

if-match clause in Route-policy

It includes both the link-local address of this interface and all the addresses in the same area on this router.TPv6 prefix.

Contains the link-local address of this interface, and also includes all IPv6 on this interfaceprefix.

The option field exists in the header of the LSA, not the Link LSAdata area

like Link-LSA one of Prefix of Prefix Options Field is 0x00, then the Prefix Not included in IPv6 unicast calculations.

ifTP-B>0 and TC-B<0, the packet is marked in green

ifTP-B<0 and TC-B<0, the message is marked in red

ifTP-B>0 and TC-B<0, the packet is marked in yellow

ifTP-B>0 and TC-B>0, the packet is marked green

This router does not have an OSPF process ID configured

The area ID configured by this router and the area I of its neighbor routersD is different

This router is not configured with the authentication function, but the neighbor router is configured with the authentication function

This router's advertised network address does not match the interface mask

ISIS GThe R feature is enabled by default.

ISIS GR has a total of four timers.

ISIS GR notifies events and maintains neighbor relationships through CSNP messages.

ISIS GR defines a whole new TLV structure to support this feature.

True

false