H12-261_V3.0 Exam Dumps - HCIE-Routing & Switching (Written) V3.0

TRUE

FALSE

link-lsa

Intra-Area-Prefix-LSA

Inter-Area-Prefix-LSA

Inter-Area-Router LSA

Static tunnels also use related protocols on the control plane, which will cause equipment resource loss

VTEP can only rely on data flooding to learn the remote MAC address

Although the static VXLAN tunnel mode can support distributed gateway application scenarios, the configuration workload is large and the configuration adjustment is complicated

If N devices establish static VXLAN tunnels, at most N(N-1)/2 tunnels need to be manually configured, and the amount of configuration is large.

Users can use 802.1x authentication to access the network, RADIUS completes authentication.

RADIUS authentication and WTACACS authentication are mutually exclusive, and dual authentication cannot be performed for the same user at the same time.

RADIUS authentication and HWTACACS authentication can perform dual authentication for the same user at the same time, which is more secure.

RADIUS authentication and 802.1x authentication are mutually exclusive.

IGMP PThe downstream interface of the roxy device generates multicast forwarding entries based on the information of member hosts joining/leaving the multicast group

IGMP Proxy can work with NQA to detect link status and realize fast switching between active and standby links

IGMP PProxy is usually deployed on the device between the member hosts of the access device

IGMP PThe roxy device cannot replace the IGMP querier to send query packets to downstream member hosts to maintain group membership.Tie

ebgp max hop

BGP certification

BGP route filtering

BGP GSTM

IGMP Snooping does not consume the CPU of the switch

IGMP Snooping solves the problem of multicast multicast broadcast at Layer 3

IGMP Snooping runs at the link layer and is a multicast constraint mechanism on a Layer 2 Ethernet switch to manage and control multicast groups.

IGMP Snooping establishes a MAC multicast address table by monitoring the IGMP messages sent by the host.

only putR2 The ISIS protocol priority is adjusted to 5,Only the IP routing entry with the destination network segment 10.0.0.2/32 on R1 will be generated by OSPF

if putR1 The ISIS protocol priority is adjusted to 5, thenThe IP routing entry with the destination network segment 10.0.22/32 on R1 is generated by OSPF

if putR1 The ISIS protocol priority is adjusted to 5, thenThe IP routing entry with the destination network segment 10.0.2.2/32 on R1 is generated by ISIS

if putR2 The ISIS protocol priority is adjusted to 5, thenThe IP routing entry with the destination network segment 10.0.2.2/32 on R1 is generated by ISIS

R3 andR1 Systemm ID Repeat

R3 and R1 have different area numbers

R3 andR1 IS-Leve1 Do not match

R3 andR1 IIH Authentication failed

turn onDHCP Snooping checkDHCP Function of the CHADDR field in the REQUEST message

configureTrusted/Untrusted interface

Configuration on the master switchDHCP Snooping withDAL or IPSG for linkage

Limit the maximum number of learning allowed on a switch interfaceMACnumber of addresses

Perform source IP address and source port conversion at the same time

Only perform source IP address translation

Only perform destination IP address translation

Convert destination IP address and destination port

Type5 LSA

Type7 LSA

Type3 LSA

Type1 LSA

Layer 3 VNI

Host MAC address

Layer 2 VNI

Host IP address

isis cost

isis timer hello

isis circuit-type

isis circuit-leve1

TRUE

FALSE

The SPT path is the shortest and the forwarding performance is better

The RPT tree may not be the optimal path for group insertion traffic forwarding

All multicast traffic passes through the RP router, and the RP router may become the bottleneck of data forwarding

After the SPT switching is completed, the multicast traffic still passes through the RPT tree

This router will put the newly received LSP in the LSDB

If it is a broadcast network,The DIS will include the summary information of this LSP in the next CSNP packet.

This router ignores LSPs received from neighbors

If it is a point-to-point network, the router will send PSNP

No need to change the current configuration, GigabitEthemnet1/0/1 and GigabitEthernet1/0/2 can join the same aggregation group

Because of the VLA allowed to passN is different, GigabitEthemet1/0/1 Cannot join the same aggregation group as GigabitEthernet1/0/2

After link aggregation is configured on both SWA and SWB, if the switches SWA and SWBopen Kai MSTP, then GigabitEthernet1/0/1 and GigabitEthernet1/0/2 are in the forwarding state of MSTP

Only the GigabitEtheThe configuration of rmet1/0/2 is changed to be the same as that of GigabitEthemet1/0/1, so that the two can join the same aggregation group

TRUE

FALSE

No RP required

SSM only uses shared trees

SSM uses STP tree only

Best for1-to-many application

SSM is recommended in networks with multiple sources and a desire to minimize in Use when the state of the route

Best for many-to-many applications

TRUE

False

The confederation divides an AS into several sub-ASs, and the AS outside the confederation still considers the confederation as one AS.

Sub-ASs within the confederation can use private AS numbers. HuaweiFor NE/AR routers, a confederation can be configured with up to 32 sub-ASs.

A confederation can easily detect routing loops within an AS because EBGP is running between child ASs.

Son of the UnionAS number, which is advertised to BGP peers outside the federation by default

The Option field of Hello and DD packets is extended to 24 bits

The LSR packet contains the complete LSA header information and is used to request to update the LSA

The LSACK message contains the LSA header information to confirm receipt of the LSU message

The Hello packet must contain the interface ID of the sending interface

True

false

True

false

DR routers use FF08::6

DR routers use FF02::6

All OSPsF Router uses FFO2::5

All OSPsF Router uses FF08:5

::1/128

FE80::/10

C00::/7

2000::/3

For a newly created security zone, the system defaults to its security level of 1

In the same system, two security zones are not allowed to configure the same security level

Only the security level can be set for a custom security zone

Once the security level is set, it is not allowed to change

LSA3

LSA1

LSA5

LSA2

Implemented on the user side, directlyCEs are connected to the Internet. Each user site can be independently connected to the Internet, that is, the CE of each site is configured with a default route to the Internet.

The implementation on PE is complicated and there are security risks. PE equipment may be affected by the Internet Dos attack.

Implemented on the PE, the PE device is directed toThe CE sends a default route to the Internet and adds a default route to the Internet gateway in the VPN instance routing table.

Implemented on the user side, the implementation method is simple, the public network and private network routes are isolated, and it is safe and reliable.

existRoute summary is configured on R3, and the route is summarized as 10.0.0.0/16

existRoute summary is configured on R2, and the route is summarized as 10.0.0.0/16

existConfigure filter-policy on R1, match 10.0.3.3/32 through ACL, and apply it in the import direction at the same time

existThe filter-policy is configured on R2, which matches 10.0.3.3/32 through ACL and applies it in the export direction at the same time

The relationship between different nodes is "or"

The relationship between different nodes is "and"

if-match under each node There is an "and" relationship between clauses

if-match under each node "or" relationship between clauses

filter-policy can be used on R2 expoThe rt command filters the loopback route of R3

R2 can be used in Area use filter in 0r import command to filter the loopback route of R3

filter-policy can be used on R1 import filters the loopback route of R3

Area is available on R2 Use filter in 1r expot command to filterR3 loopback route

R3's GE0/0/0 port and its neighbor are in different areas

Eth0/0/1 of the R3 router enables both IPv4 and IPv6 ISIS

R3 is Level-1 and L on the link where Eth0/0/0 is located evel-2 DIS

The circuit-level of Eth0/0/1 of the R3 router is Level-1-2

TRUE

FALSE

The sender announces the initial window size

The sender does not need to transmit the full window size of the message

TCPSliding window allows multiple packets to be sent before an acknowledgment is received

After the retransmission timer expires, the sender has not received the acknowledgment and will retransmit the unacknowledged data

The receiver needs to confirm the data packet of the sender

Sliding window size can only increase or stay the same

The switch will drop the frame

The switch will record the source MAC address of the data frame and flood the data frame

The switch will forward the data out an interface according to the destination MAC address of the data frame

The switch will buffer the data frame and forward it after waiting for the destination host to send the data frame

True

false

When routing is passed, Next_ Hop Attribute must be IPv46 Global Unicast Address

When routing, it will carry AS. _Path and other recognized mandatory attributes

likeUpdate NP is carried in the packet. REACHL NLRI Attribute, indicating that reachable routes are advertised

BGP4+ passUpdate Packets transmit routing information between peers

MAD direct connection detection can be done through an intermediate device or full-mgsh.

MAD detection methods are divided into direct connection detection and proxy detection.

MAD proxy detection requires that all stack members are connected to the proxy, and the connected links are added to an Eth-Trunk.

When the stacking systems act as agents for each other to perform MAD detection, the two stacking systems can use the same Domain ID

True

false

[Huawei]interface GigabitEthernet 0/0/1 [Huawei-GigabitEthernet0/0/1]port link type trunk

[Huawei-GigabitEthernet0/0/1port trunk allow pass vlan 10

[Huaweijinterface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1]port link type access [Huawei GigabitEthernet0/0/1]ipsg enable

. [Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0l]port link-type access [Huawei-GigabitEthernet0/0/1 ]port-security enable

[Huawei]interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1 ]port link type access [Huawei-GigabitEthernet0/0/1]port isolate enable

Insufficient link bandwidth

Subnet mask mismatch

Inconsistent link layer protocols at both ends

The IP addresses of both ends are not on the same network segment

For two OSPs connected to the link F routers, even if their IPv6 address prefixes are different, can still establish neighbor relationships

OSP the routing information obtained by Fv3 routers from neighbors will use the neighbor's Link-Local address as the next hop for forwarding packets.

For two OSPs connected to the link F routers can establish neighbor relationships even without configuring a unicast IPv6 address

All OSPs except virtual connections All Fv3 interfaces use the Link-Local address as the destination address of the packet

True

false

01-00-5E-02-82-01

01-00-5E-82-82-01

00-00-5E-02-82-01

00-00 -5E-82-82-01

_[200 300]_

200$|300$

^200|^300

_(200 300)_

True

false

description

as-number

peer's IP Address

password

When sending a neighbor solicitation packet, the source address must be the link-local address of the end interface

When sending a Neighbor Solicitation message, the destination address must be the neighbor's requested node multicast address. C. Two ICMPv6 messages, Neighbor Solicitation and Neighbor Advertisement, are used in the address resolution process.

Address resolution realizes the function of resolving from IPv6 address to link layer address

TRUE

FALSE

DSCP set to decimal 36

IP ToS is set to 0xEF

IP Experimental EEN

DSCP set to decimal 5

bitstream 101110

OSPFv3 ofHello The packet carries the IPv4 address of the router interface6 Address prefix list

OSPFv3 uses the authentication field in the packet header to complete packet authentication

OSPFv3 uses the link-local address as the source address of the sent packet, and the packet can be forwarded outside the range of the originating link

OSPFv3 Use IPv46 multicast addressFF02: :5 andFF02: :6 send OSPFv3 message

Basic ACL

Layer 2 ACL

Advanced ACL

User-defined ACL

LDP GR (Graceful Restart) utilizes the feature that the forwarding plane and the control plane of the LS are high, and realizes the switchover of the device during protocol restart or active/standby switchover.uninterrupted

By default, the manually configured LDP FRR policy is a 32-bit backup route that triggers LDP to establish a backup LSP.

by LDP FRR can also generate LSPs for label mappings from non-optimal next hops, and create forwarding entries as backups of the primary LSPs

LDP and IGP are associated with each other, and the IGP needs to suppress the advertisement of routes to ensure that the LDP and LGP paths are consistent.

Prefix list is used to filter IPPrefix, which can match both prefix number and prefix length

Prefix list is used to filter IPPrefix, cannot match prefix number and prefix length at the same time

Prefix lists cannot be used for packet filtering

Prefix lists can be used for packet filtering

The next-hop router of router HW has no path to reach the destination address

Ping was successful, but congestion occurred on the path to the destination

ICMP packets can reach the destination address, but the destination device fails to reply

router HWThere is no valid route to the destination address

There is a firewall in the remote destination network, and I have not been releasedCMP traffic

Router-LSA

Network-LSA

ASBR- Summary-LSA

AS-External -LSA

source address

destination port number

source port number

destination address

True

false

30M

15M

90M

25M

All running OSPF Protocol routers are listening 224.0.0.5

All routers are listening 224.0.0.2

All running PIM Protocol routers are listening 224.0.0.100

All hosts and routers in the network segment are listening 224.0.0.1

AS_ _PATH (321 12 2374)

AS_ _PATH (123621 7432374)

AS_ PATH (125328 74 twenty three)

AS_ PATH (32 1274 twenty three)

TRUE

FALSE

MP-EGP by MP_REACH_NLRI and IP_UNREACH_NLRI Two attributes to advertise VPNv4 routing

MP-BGP The required message is quasi-VP type N, v4VP route N is distributed by v4 distribution and privately issued network label policy label slightly with BGP-4 same

When the PE and CE exchange routes through BGP, a BGP process needs to be created on the CE for each VPN instance

The prefix is learned through other IBGP neighbors, or the prefix is learned from EBGP neighbors, or the prefix is learned through route importarrived

Prefixes that exist in the routing table

The prefix is learned through other BGP neighbors, or the prefix is locally through network or route introduction learned

The prefix is learned via EBGP neighbors, or the prefix is locally via network or route introduction learned

The prefix is learned from EBGP neighbors, or the prefix is learned from RR