H12-261 Sample Questions Answers

Configure route summarization on R2 and summarize routes as 10.0.0.0/16.

Configure route summarization on R3 and summarize routes as 10.0.0.0/16.

On R1, configure a filter policy, use the ACL applied to the filter-policy to match 10.0.3.3/32, and apply direction.

100

3100

300 4200

1234 1400

A virtual link cannot pass through a stub area.

A backbone area cannot be configured as a stub area.

Type 7 LSAs cannot be flooded to a stub area.

A stub area contains no ASBR.

HTTPS TCP 443 protocol acknowledgment use port

HTTPS SSL VPN Pass Used to secure access to data.

When using a website HTTPS, when accessing, if the user cannot browse the digital user of the website, access the website.

If the traffic contains a virus, the router cannot use the virus to directly detect the HTTPS, IPS detection.

DIS preemption is supported. After successful DIS preemption, LSPs do not need to be flooded.

ISIS elects the DIS by comparing preferences. If the preferences are the same, ISIS compares MAC addresses.

On a broadcast network, the DIS sends Hello PDUs at a frequency that is three times the frequency of non-DIS routers.

The DIS periodically sends CSNPs to ensure LSDB synchronization.

The filtering of Type 3 LSAs needs to be configured on ABRs in OSPF.

In a NSSA, when external routes are imported to the OSPF router and LSAs are advertised to its neighbors, LSA filtering can be performed on the ASBR or ABR.

All LSAs, except Grace LSAs, can be filtered based on interfaces in the inbound and outbound directions.

When routes are calculated based on the LSDB, the filter-policy import command can be executed to filter routes. This filtering mode affects only the addition of routes in the routing table, and has no impact on the OSPF LSDB.

Importing IBGP routes into the OSPF process may cause routing loops.

By default, the metric of external routes imported into the OSPF process \s 1 and the type of imported external routes is Type 2.

BGP can generate routes in either Import or Network mode. The Network mode is more precise than the Import mode.

After IS-IS Level-2 routes are imported to an ISTS Level-1 area, routing loops occur if no route import policy is manually configured.

True

False

R3 level-1 DIS must be a certain chain

R3 level-2 router is a router

R3 level-2 DIS must be a certain chain

R3 system ID 0003.0000.0000 for the router

True

False

Pipe IP MPLS IP TTL 1 In MPLS TTL mode, when the message passes through the network, it is mapped to the field at the ingress point.

MPLS TTL IP TTL MPLS A label, which has the same function as the header, can prevent the network from routing the loop (as it is)

Uniform IP MPLS IP TTL 1 MPLS TTL mode is simulated. When the message passes through the network, the entry point is reduced and the field is fixed to the value.

In the case of the MPLS VPN MPLS Ingress uniform, the private network text can be used in the reporting mode.

Type3

Type5

Type4

Type2

Type1

Savage mode can support traversal while main mode does not support traversing NAT, NAT

Two routers have established IPSec VPN, 5 ( ) in the main mode, and the data from the first message is often encrypted.

Two routers have established IPSec VPN through the aggressive mode, and then the tunnels are established between the two least interacting devices.

The two routers can pass IPSec VPN OSPF, the tunnel establishes the neighbor relationship and the intranet route changes.

The Advertising Route is set to

netmask 0 of the ASBR router-id.

link state id is set to the destination network segment address is set to

Use and can be unique. A link state id advertising Router LSA identifier

IPv6 over VXLAN Vxlan Overlay IPv6 refers to the network is the network

IPv6 over VXLAN IP can solve the problem of insufficient capital for the terminal address source.

VXLAN IPv4 The tunnel of the gateway is an inter-layer network.

IPv6 Over VXLAN does not generate entries.

RSTP adds a port-like state class

RSTP has less overhead

RSTP is not based on the timing of the receiver

RSTP has a smaller timer

The AS-PATH attribute of the autonomous system is used to prevent the loop.

Cluster List Cluster List The Cluster ID attribute is used for the anti-ring in the reflector cluster. The discovery of the router routing entry contains its own and will reject the

routing.

The learned route will not announce to IBGP IBGP, AS neighbor is used to prevent internal routing loops.

You can use the attribute to prevent the AS-CONFED-SET link in the alliance.

When the configuration of each port is consistent, port, Ethernet1/0/7 Unselected

When the configuration of each port is consistent, port, Ethernet1/0/6 Unselected

In the case of consistent port configuration, random port aggregation in each port, SWA 7 Unselected selected as group port

In the case of consistent port configuration, port, Ethernet1/0/1 Unselected

Route aggregation can be configured and valid on all routers.

Route aggregation can only be configured on the router to take effect level--1

Route aggregation can only be configured on the router to take effect level--2

Route aggregation can only be configured on the router to take effect level--1-2

R2 filter-policy export R3 can use the loopback route of the command filtering.

R2 Area1 filter export R3 can use the loopback route of the command filtering

R2 Area0 filter import R3 can be used in the commanded loop routing ring

R1 filter-policy import R3 can use filtered loop routing ring

R2 BFD 800ms text report detection time is

R2 BFD 600ms text report detection time is

R1 BD 660ms text report detection time is

R1 BFD 1280ms text report detection time is

True

False

The integrity of the digital name guarantee number is signed.

The number contains the public information certificate key.

When the received body is within the validity period of the certificate, but the device itself is not valid, the device time error certificate is lost.

Even if the two entities are not in the same PRI CA, CA, the real system can complete the authentication as long as both parties can identify each other.

The stub cannot exist in the ASBR area.

The virtual path cannot traverse the chain stub area

stub type7 LSA area is not allowed to be injected

The backbone area cannot be configured as a stub area.

Synchronization is turned off

BGP Down neighbor relationship

Router is not enabled R1 BGP Multi-hop

Routing is not the best

30M

15M

90M

25M

If the party does not have a username authentication account, the endpoint interface may not be configured with a password.

Use sequence authentication ID. MD5 Hash random number and secret key algorithm to calculate a value

It requires three texts to report authentication, and only send the name on the network instead of sending the password.

CHAP authentication authentication must be configured under the user interface

Under the same one, you can mix and use VLAN MUX VLAN Super VLAN

MUX VLAN Principal VLAN Subor is divided into and divided into dinate VLANs, Subordinate VLAN S is separate VLAN and Isolate VLAN

Each can be bound to multiple Separate VLAN Principal VLANs

Principal Port MUX VLAN can communicate with all interfaces inside

The opportunity to discard the data and replace the frame.

The exchange will forward the data out of an interface frame according to the data of the frame.

Source of the exchange data, record the frame MAC address and flood the data.

The opportunity to save the data to slow down the frame, waiting for the destination host to send data, then send the frame to forward

If configured, the Suppress policy Route-production clause can also be used to pick the suppressed route. policy if-match is fine,

The clear route will still be advertised. Other Route-policy BGP will be given to neighbors.

If only the matching routes are configured to participate in the aggregation Origin-policy, Route-policy is fine.

If you have configured the attribute Attribute-policy that can change the aggregated route,

If the route's As-set, AS_ATH AS is configured, the summary contains path information of all specific routes to prevent routing loops.

R2 R1 export MED 150 specifies that the body pair is set in the direction attribute

R1 R3 import MED 150 specifies the body to be set in the direction attribute

R2 R1 export 150 specifies the body to set the priority in the direction

R1 R2 import 150 specifies that the body is set to the local direction in the direction.

The RP RPT is constructed with the recipient.

The multicast source and the RP RPT are constructed by the tree.

RP SPT and the recipient's construction is the tree

The multicast source and the RP SPT are constructed by the tree.

The IP prefix field in a Type5 route can carry either the host IP address or the network segment address

Type5 route is the IP prefix route

A Type5 route carries a Layer 3 VNI

A Type5 route carries both Layer 2 and Layer 3 VNIs

If the packet source address IP 10.0.1.2, DSCP is then forwarded, the field remains unchanged

If the packet source address IP 10.0.1.2, DSCP CS3 is then forwarded, the field can be marked as

If the packet source address P 10.0.1.2, then the forwarding cannot be

If the packet source address IP 10.0.1.1, DSCP cS3 is then forwarded, the field can be marked as

If configured, but the route does not match any of the specified RD-filter RD RD Permit rules, the default match is then recognized.

The use of the RD-filter ” configuration is the relationship between rules or

If there is no configuration, but reference RD-filter RD-filter deny, this is the filter line, the match is the result

Multiple, according to the configuration, the line matching rules

Option LSA Link-lsa field exists in the header, not the data area

Contains both the local address chain of this interface and all the pre-IPv6 suffixes of this interface.

If a previous Link-LSA Prefix Option 0x00 Prefix IPv6 suffix field is , then it will not be admitted to the single calculation.

Contains both the local address chain of this interface and all the previous Ipv6 suffixes in the same area on the router.

C-RP's priority

The mask of the C-RP service that matches the address of the added group.

Address of the C-RP IP interface

Number of the C-RP interface

Register mechanism

BSR/RP mechanism

Assert mechanism

Join/Prune mechanism

In the middle, Filter-Policy, OSPF ASBR type 5 LSA type 7 LSA can be generated for filtering

The previous list can be used for both route suffix filtering and packet filtering. C. Filter-Policy can receive or route the information line to filter the chain status, and modify the attributes of the route entry.

Pre-use list When route filtering is applied, the entry ip ip-prefix 1 deny 0.0.0.0 0 less-equal 32 means that only the default route is matched.

Authentication is unsuccessful

The BGP protocol version is inconsistent

IBGP – Multi-hop not configured

IGP routing is unreachable

The sum of the ISIS Level-1 SNP LSP

ISIS Level-1 Hello's report

and the sum of the ISIS Level-2 SNP LSP

ISIS Level-2 Hello's report

Configure a routing policy for routes originating in the local area. The policy is effective before adding routes to the routing table.

Route-Policy node “ ” node Route-Policy's relationship is inter-filter or , that is, as long as it passes a filter, it can pass.

When the BGP BGP BGP pair is received, the routing policy is executed, and the unwanted routing routes are not added to the local.

Routing table

Route-Policy node if-match " " In the same one, multiple attributes of different attributes are or

True

False

TRUE

FALSE

True

False

GigabitEthernet1/0/1 and GigabitEthernet1/0/2 can be added to the same LAG without changing the current configurations.

After link aggregation is configured on SWA and SWB, if MSTP is enabled on them, GigabitEthernet1/0/1 and GigabitEthernet1/0/2 enter the Forwarding state in MSTP.

GigabitEthernet1/0/1 and GigabitEthernet/0/2 can be added to the same LAG only after the configuration of GigabitEthernet/0/2 is changed to be the same as that of GigabitEthernet1/0/1.

GigabitEthernet1/0/1 and GigabitEthernet/0/2 cannot be added to the same LAG because the allowed VLANs are different.

When sending a data packet with the destination IP address 2.2.2.2, the router sends it directly without any label added.

After receiving a data packet with label 1024, the router changes the label to label 1027 and then sends the packet.

When sending a data packet with the destination IP address 33.3.3, the router adds label 1026 to the packet before sending it.

When sending a data packet with the destination IP address 4.4.4.4, the router sends it directly without any label added.

The PIM-SM router with the lowest DR priority is elected as the DR.

The PIM-SM router with the smallest IP address is elected as the DR.

The PIM-SM router with the longest interface mask is elected as the DR.

DR priorities of the PIM-SM routers are compared first. If their DR priorities are the same, their interface IP addresses are then compared.

Routers in the same routing domain may repeatedly receive the same link state information.

Routers in the entire routing domain have the same LSDB.

Each router establishes a routing domain topology.

Each router learns routing entries from updated routing information and adds them to the routing table.

The router sends all link state information from a neighbor to all the other neighbors to ensure data synchronization in the database.

filter import command can be executed on R2 in Area 0 to filter loopback interface routes of R3.

The filter policy import command can be executed on R1 to filter loopback interface routes of R3.

The filter export command can be executed on R2 in Area 1 to filter loopback interface routes of R3.

The filter policy export command can be executed on R2 to filter loopback interface routes of R3.

By default, sub-AS numbers of a confederation are advertised to BGP peers outside the confederation.

A BGP confederation divides an AS into several sub-ASs. ASs outside a confederation still consider the confederation as an AS.

Confederations can easily detect routing loops inside an AS because EBGP is run between sub-ASs.

Sub-A5s within a BGP confederation can use private AS numbers. For Huawei NE and AR routers, a maximum of 32 sub-ASs can be configured in a BGP confederation.

Public key information

Digital signature

Issuer

Digital envelope

Shorten the holdtime of Join or Prune messages.

Shorten the interval for sending Join or Prune messages.

Shorten the interval of PIM Hello messages.

Set up BFD for PIM sessions between PIM SM neighbors.

True

False

The interconnection between the VPN and the Internet can be implemented on the PE. However, the implementation is complex and may bring security risks. The PE is vulnerable to DoS attacks from the Internet.

Directly connect the CE to the Internet on the user side. Each user site can independently access the Internet. That is, a default route destined for the Internet is configured on the CE of each site.

Configure the PE to send a default route destined for the Internet to the CE, and add a default route destined for the Internet gateway to the VPN instance routing table.

Isolating public network routes and VPN routes on the user side is simple, secure, and reliable.

Go/0/2 of SW2 enters the Discarding state.

G0/0/1 of SW1 enters the Discarding state.

G0/0/1 of SW2 enters the Discarding state.

No interface is blocked.

G0/0/2 of SW1 enters the Discarding state.

Single-packet attacks

Flood attacks

Man-in-the middle attacks

Source IP address spoofing attacks

When the Hub-CE and Hub-PE use EBGP to transmit routing Information, the Hub-PE must be able to accept routes with the AS number repeated once so that routes advertised by the Hub-CE can be received.

OSPF can be used to exchange routing information between Hub CEs and Hub-PEs as well as between Spoke-PEs and Spoke-CEs.

BGP can be used to exchange VPN routing information between CEs and PEs.

The MP-IBGP peer relationship can be established between Spoke-PEs to exchange VPN routing information

Type 1, Type 2, and Type 5 LSAs

Type 1, Type 2, and Type 3 LSAs

Type 3 and Type 4 LSAs

Type 7 LSA

Type 1 and Type 2 LSAs

32 Kbytes

256 Kbytes

80128 bytes

48128 bytes

Routing entries 10.0.3.3/32 and 10..0.0./16 exist in the IP routing table of R1.

Routing entries 10.0.2.2/32 and 10.0.3.3/32 exist in the IP routing table of R1.

Because route summarization is configured on R2, only the routing entry 10.0.0./16 exist in the IP routing table of R1.

Routing entries 10.0.2.2/32 and 10.0.0.0/16 exist in te IP routing table of R1.

Huawei devices support port mirroring on the control traffic sent to the CPU

Huawei devices support flow-based port mirroring. The mirrored traffic can be copied onto multiple observing ports

Traffic in the RSPAN is transmitted to observing ports in multicast mode

When the observing port becomes congested, mirrored packets cannot be discarded because these packets have higher priority than service traffic

WRR is a congestion management technology

WRR prevents congestion on the network

WRR ensures important traffic being forwarded first

WRR ensures that all queues being serviced

WRR cannot be used on gigabit-ethernet interfaces

TRUE

FALSE

The time taken to detect BFD packets on R1 is 660 ms.

The time taken to detect BFD packets on R2 is 800 ms.

The time taken to detect BFD packets on R2 is 600 ms.

The time taken to detect BFD packets on R1 is 1280 ms.

By default, a router assigns the same label value to all VPNv4 routes destined for the remote PE.

The egress PE uses the inner label to determine the egress CE to which packets are sent.

Two labels are used on an MPLS BGP VPN: public network label (outer label) and VPN label (inner label).

VPN labels are distributed by MP-BGP when routing information is transmitted. Public network labels are distributed by LDP.

When the DSCP value is EF, data is forwarded in expedited forwarding mode

CS in DSCP classifies data based on eight priorities

DSCP can represent the data priority as well as the packet drop probability

The DSCP value can be 0. When the value is 0, the default packet forwarding mechanism is used

Configure static ARP binding entries

Configure IPSG

Configure DAI

Limit the maximum number of DHCP snooping binding entries that can be learned on an interface.

The physical layer of the peer

The peer’s presentation layer

The peer’s session layer

The peer’s application layer

The data link layer of the peer

TRUE

FALSE