H13-811_V3.5 Sample Questions Answers

Option B is incorrect because Huawei Cloud OBS does not allow a bucket that has already had versioning enabled to return to the original Disabled state. Versioning can initially be enabled on a bucket, but once enabled, it can subsequently only be suspended , not disabled.

Option A is correct. With versioning enabled, OBS assigns unique version IDs to uploaded objects, allowing multiple objects with the same key or name to coexist as different versions. This protects against accidental overwrites and provides point-in-time recovery capabilities.

Option C is also correct when a specific historical version is permanently deleted. Each object version is independently identified by its version ID, so deleting one specified version does not inherently remove the other retained versions.

Option D accurately describes the initial state. Huawei states that versioning is disabled by default for newly created OBS buckets. When versioning has never been enabled, uploading a new object with the same name replaces the existing object instead of maintaining multiple historical versions.

The critical distinction is therefore Disabled versus Suspended . Disabled is the initial state; after versioning is enabled, it cannot be restored to Disabled.

Reference topics: OBS Versioning; Version IDs; Suspending Versioning; Object Recovery.

===============

Option D is incorrect . The HCIA-Cloud Service V3.5 comparison positions SFS Capacity-Oriented as the large-capacity, high-bandwidth, cost-sensitive file-storage option. Huawei describes its principal advantages as large capacity, high bandwidth, and low cost , making it particularly appropriate for media processing, large-scale file sharing, HPC, and backup workloads.

The performance characteristics also support A and B. Huawei's documented SFS Capacity-Oriented implementation provides substantially greater maximum aggregate bandwidth than the previous-generation SFS Turbo Standard class. However, its access latency is approximately 3–20 ms , whereas SFS Turbo Standard provides lower latency, historically around 2–5 ms . SFS Turbo is therefore more appropriate where low-latency access and workloads involving large numbers of small files are important.

Capacity-Oriented storage can scale to petabyte-scale capacities and is specifically optimized economically for large-volume storage. Consequently, for equivalent expenditure, it can provide significantly greater capacity than performance-oriented SFS Turbo configurations.

Option D reverses this economic relationship. SFS Capacity-Oriented is not positioned as the more expensive alternative for equal capacity; low cost at large scale is one of its defining characteristics .

Reference topics: SFS File System Types; SFS Capacity-Oriented; SFS Turbo Standard; File Storage Performance and Cost.

===============

Option C is incorrect under the HCIA-Cloud Service V3.5 networking model . Huawei Cloud's V3.5-era VPC documentation differentiates the two access-control mechanisms by their scope and rule behavior: security groups protect cloud server instances and use allow rules, whereas network ACLs protect subnets and support both allow and deny rules . Therefore, the statement that both mechanisms support both rule actions is inconsistent with the curriculum version used by this examination.

Option A is correct because a network ACL is associated with one or more subnets and controls traffic entering or leaving those subnets. Option D is also correct because security groups provide instance-level access control for resources such as ECSs. Huawei describes a security group as a collection of traffic-control rules applied to instances sharing common security requirements.

Option B is technically correct because these mechanisms can be layered. A security group provides access control around ECS instances, while a network ACL adds another security-control boundary around the subnet. Huawei specifically recommends using them together where comprehensive or fine-grained network protection is required.

Reference topics: Security Groups; Network ACLs; VPC Access Control; Defense-in-Depth.

===============

All four statements represent Huawei Cloud IAM capabilities. An agency establishes a trust relationship through which one account can delegate another account to manage specified resources according to assigned permissions. Huawei explicitly documents account delegation as an IAM function.

An IAM project corresponds to a region. Huawei defines default projects as mechanisms that group and physically isolate compute, storage, and network resources across regions. Users granted permissions in a default project can access resources covered by those permissions in the associated region. This qualification is important: IAM users do not automatically receive unrestricted access merely by existing; the project's assigned permissions determine their effective access.

A user group is explicitly defined as a collection of IAM users. Assigning permissions to groups simplifies authorization because users added to a group inherit its permissions.

Finally, Huawei's identity federation functionality allows an enterprise Identity Provider (IdP) to establish trust with Huawei Cloud so employees can use existing enterprise identities for SSO access instead of maintaining separate cloud credentials.

Reference topics: IAM Agencies; Project Management; User Groups; Identity Federation; Identity Providers.

===============

The statement is FALSE because the management tracker used for general cloud-resource auditing does not need to be created manually when CTS is first enabled. Huawei Cloud explicitly states that when CTS is enabled for the first time, a management tracker named system is created automatically.

The management tracker identifies and associates with the cloud services used by the account and records management operations, including resource creation, modification, query, login-related actions, and deletion. Therefore, the portion of the statement saying that the user must manually create the tracker is technically incorrect.

Huawei does allow users to create additional data trackers manually. These trackers are specifically designed to record operations performed on data in OBS buckets, such as uploads and downloads. That is different from the automatically created management tracker.

Huawei's official getting-started workflow is explicit: open CTS, choose Enable CTS , and the system automatically creates the management tracker named system. Configuration such as OBS or LTS trace transfer can then be added if long-term retention is required.

Therefore, enabling CTS is necessary, but manually creating its primary management tracker is not.

Reference topics: Cloud Trace Service; Management Tracker; Data Tracker; Enabling CTS.

===============

For the HCIA-Cloud Service V3.5 snapshot model represented by this question, the statement is FALSE. Huawei Cloud's exam-era EVS documentation states that an EVS snapshot captures the state of a disk at a specific point in time and can be used for rollback or creation of another disk. However, the snapshot is dependent on its source EVS disk.

Huawei's earlier official EVS documentation explicitly states that when an EVS disk is deleted, the disk data and snapshots created for that disk are also deleted. The applicable documentation also states that when a snapshot's source disk is deleted, all snapshots of that source disk are deleted.

This distinction matters because Huawei has subsequently introduced standard snapshots stored in OBS, for which newer lifecycle behavior can differ. Current documentation distinguishes legacy snapshots from standard snapshots: legacy snapshots are deleted with the source disk, whereas newer standard snapshots may remain. However, HCIA V3.5 questions were written around the earlier EVS snapshot behavior.

Accordingly, the proposition that deleting an EVS disk does not delete its snapshots contradicts the V3.5-era model.

Reference topics: EVS Snapshots; Snapshot Lifecycle; EVS Disk Deletion; Point-in-Time Recovery.

===============

The supported notification methods represented in this question are SMS and email , so the correct selections are A and D .

Huawei Cloud CTS supports key event notification for significant operations. Administrators can identify operations that require immediate awareness and configure notification delivery through Simple Message Notification (SMN). When the configured key event occurs, CTS works with SMN to deliver the corresponding notification to subscribed recipients.

Huawei's official CTS documentation specifically states that SMN can send key-event messages to users' mobile phones or email addresses . A notification sent to a mobile phone in this context corresponds to SMS messaging. Email subscriptions similarly deliver the notification to the registered email endpoint.

This mechanism provides proactive visibility into sensitive cloud operations rather than requiring administrators to continually query CTS records. Typical use cases include monitoring resource deletion, security configuration changes, permission-related operations, or other high-risk administrative actions.

Neither WeChat nor a conventional phone call is identified by Huawei CTS as one of the notification methods in this key-event mechanism. Those options therefore do not satisfy the documented CTS notification workflow.

Reference topics: CTS Key Event Notification; Simple Message Notification; Operation Auditing; O & M Notifications.

===============

The statement is true in the context of the HCIA cloud-computing architecture model. Cloud computing evolved from developments in computing, distributed systems, virtualization, networking, and Internet technologies. Most importantly, cloud services are consumed remotely, making network connectivity an intrinsic part of service delivery.

Huawei Cloud defines cloud services as IT capabilities delivered by cloud providers through the Internet or dedicated networks . These services include compute, storage, networking, security, database, middleware, O & M, big data, and AI resources. Users obtain and consume those resources remotely rather than requiring the underlying physical infrastructure to reside locally.

This dependence is architectural rather than merely convenient. An ECS, database, object-storage bucket, SaaS application, or cloud management interface has practical value to a remote user only if network connectivity exists between the consumer and the cloud environment. A private connection can replace Internet access in certain enterprise architectures, but that is still network connectivity.

Accordingly, the intended HCIA principle is that cloud computing and networking are inseparable: network access forms the communication foundation through which cloud resources are delivered and consumed .

Reference topics: Cloud Computing Fundamentals; Network Access; Cloud Service Delivery; Internet and Dedicated Networks.

===============

The statement is false because its description of infrastructure ownership does not correctly characterize a hybrid cloud. A hybrid cloud combines different cloud environments—most commonly private cloud and public cloud —and enables workloads, applications, or data to be distributed between them according to security, capacity, latency, compliance, or business requirements.

Huawei Cloud describes hybrid cloud as a blend of private and public cloud environments. The private portion may be dedicated to a particular customer and may host confidential or sensitive workloads, while public cloud resources are delivered through infrastructure operated by a cloud service provider. Consequently, the combined infrastructure is not inherently owned and operated by a single organization .

This ownership distinction separates hybrid cloud from a purely private-cloud model. A private cloud can be dedicated to a single organization, whereas hybrid architecture deliberately combines environments that may have different infrastructure ownership and operating responsibility.

The statement correctly recognizes that hybrid cloud is flexible and that workloads can use different cloud environments, but because it makes an absolute and incorrect assertion about single-organization ownership, the entire statement must be evaluated as FALSE .

Reference topics: Cloud Deployment Models; Public Cloud; Private Cloud; Hybrid Cloud; CloudPond Service Overview.

===============

Option A is the only sequence that respects the essential dependency chain for Huawei Cloud Log Tank Service host-log collection. A log group must exist before its log stream can be created , because a log stream is a subordinate storage and management unit within a log group. Huawei explicitly describes log groups and streams as the basic units used to manage logs and requires creation of the group before creation of its contained stream.

ICAgent is the host-side log collection component. It must be installed on the ECS before LTS can collect host log files according to configured paths and rules. After ICAgent is operational and the destination log stream exists, the administrator configures the relevant collection paths, parsing/collection rules, and ingestion configuration. ICAgent then packages and reports matching log records into the selected log stream.

Only after ingestion has been configured can the administrator reliably access LTS and view the collected logs for searching, analysis, monitoring, troubleshooting, or O & M.

The other alternatives violate basic dependencies by attempting to create a stream before its parent group, configuring collection before the required destination/agent exists, or installing ICAgent after collection configuration.

Reference topics: Log Tank Service; Log Groups; Log Streams; ICAgent; ECS Log Collection.

===============

The statement is TRUE. Huawei Cloud OBS provides several resource-based authorization mechanisms, including bucket policies and object policies. Their principal distinction is the scope of resources to which they apply.

Huawei's official OBS Permission Configuration Guide explicitly states that an object policy applies to only one object in a bucket, whereas a bucket policy applies to multiple objects or all objects within the bucket. This enables administrators to select the authorization mechanism that best matches the required granularity.

An object policy is useful when permissions must be configured specifically for an individual object, such as granting another principal read or write permissions to one particular resource without broadening access to the rest of the bucket.

A bucket policy supports broader authorization scenarios. Its policy statements can define principals, actions, resources, effects, and conditions to grant or restrict access to selected objects, prefixes, or the entire bucket. Typical uses include allowing another Huawei Cloud account to access specified OBS resources or granting IAM identities access to defined bucket content.

The question therefore correctly distinguishes object-level policy scope from bucket-level multi-object policy scope.

Reference topics: OBS Permission Management; Object Policies; Bucket Policies; Resource-Based Authorization.

===============

The statement is TRUE . Huawei Cloud distinguishes ordinary EVS disks from shared EVS disks . A standard non-shared EVS disk can normally be attached to only one server at a time, whereas a shared disk is specifically designed so that multiple supported servers can access the same block-storage device. Huawei documentation states that a shared EVS disk can be attached to multiple servers simultaneously, with supported implementations allowing attachment to as many as 16 servers.

The deletion requirement is equally explicit. A shared EVS disk cannot remain attached to any server when the disk itself is being deleted. Huawei requires administrators to detach the shared disk from all servers before deletion . If the disk is attached to several servers and is detached from only some of them, it remains in the In-use state. Only after it has been detached from every server does its state return to Available, permitting subsequent deletion operations.

Huawei additionally cautions that shared block storage does not itself provide cluster coordination. Appropriate cluster software or shared-file-system mechanisms must manage simultaneous reads and writes to prevent corruption.

Thus, both parts of the question precisely reflect Huawei Cloud's EVS shared-disk lifecycle requirements.

Reference topics: Shared EVS Disks; Attaching Shared Disks; Detaching EVS Disks; EVS Lifecycle Management.

===============

The statement is TRUE . Huawei Cloud Image Management Service supports creating private images from external image files, with OBS serving as the staging storage location for those files. The documented workflow is to prepare the source image, upload the image file to an appropriate OBS bucket, and then register or import that file through IMS as a private image.

Huawei's IMS documentation explicitly describes the scenario as registering an image file that has been uploaded to an OBS bucket as a private image . During image creation, the administrator selects Import Image or Image File as the source, selects the OBS bucket containing the prepared file, and then selects the required file.

Supported formats and detailed constraints depend on the image type and import method. For example, standard system-disk image imports and optimized fast-import workflows have specific requirements concerning image formats, file size, operating system, and bucket storage class. However, these restrictions do not change the fundamental integration represented in the question.

OBS therefore provides object storage for the source image file, while IMS performs image registration and lifecycle management. The resulting private image can subsequently be used to provision identically configured ECS instances.

Reference topics: Image Management Service; Creating Private Images; Importing Image Files; OBS and IMS Integration.

===============

1 → B

2 → C

3 → A

The mappings follow Huawei Cloud's LTS architecture exactly. A log group is the fundamental management unit used by LTS to organize logs. Huawei defines a log group as the basic unit for managing logs; it can contain multiple log streams and is primarily an organizational container rather than the location from which individual log records are read or written.

A log stream is the basic unit for reading and writing log data. Different categories of logs can be stored in separate streams within the same group, which improves log classification, searching, analysis, and O & M management.

ICAgent is the collection component. Huawei explicitly describes ICAgent as a log collection tool for LTS that runs on hosts from which logs need to be collected, including ECSs and physical servers. LTS distributes collection configurations to ICAgent, and ICAgent detects matching log files and reports the records to the specified log stream.

Therefore, the correct relationship is Log stream → read/write; ICAgent → collection; Log group → management .

Reference topics: Log Tank Service; Log Groups; Log Streams; ICAgent; Host Log Collection.

===============

The statement is FALSE because directly binding an EIP to an ECS is only one of several Huawei Cloud mechanisms for providing Internet access. An ECS with its own EIP can communicate directly with the public network, but ECSs can also access the Internet without having an EIP individually bound to each server .

The principal alternative is a public NAT Gateway using an SNAT rule . Huawei Cloud states that servers in a VPC subnet can share an EIP through a public NAT gateway. The NAT gateway translates their private source addresses into the configured public EIP, enabling outbound Internet connectivity while avoiding the need to expose or allocate an individual public IP address to every ECS.

Huawei's ECS documentation also explicitly describes “Internet connectivity for an ECS without an EIP bound” and recommends NAT Gateway as the standard solution. A proxy/SNAT ECS can also provide an Internet access path in suitable architectures.

Therefore, binding an EIP directly to the ECS is a valid method, but it is not the only method , making the statement false.

Reference topics: Elastic IP; Public NAT Gateway; SNAT; ECS Internet Connectivity; VPC Networking.