H12-891_V1.0 試験問題を無料オンラインアクセス

Man-in-the-middle attacks (MITM) or IP/MAC Spoofing attacksare common onintranetsand can causeinformation leakage.
Which configuration method can prevent these attacks?

• A.Limit the maximum number of MAC addresses that can be learned on a switch interface.
• B.Configure the trusted or untrusted interface.
• C.Configure association between DHCP snooping and IPSG or DAI on the switch.
• D.Configure DHCP snooping to check the CHADDR field carried in a DHCP Request packet.

The TTL field encapsulated in the MPLS label header can prevent infinite loops of MPLS packets. Which of the following statements regarding the TTL field are correct?

• A.If TTL copy is disabled, users can use the tracert function to view the LSR of the MPLS domain.
• B.MPLS provides two processing modes on the TTL field:TTL in the MPLS header copies the IP TTL value when an IP packet enters the MPLS network.The ingress LER sets the TTL value in the MPLS header to 255.
• C.MPLS encapsulation in frame mode supports the TTL field. MPLS encapsulation in cell mode does not support the TTL field.
• D.The processing of IP TTL copy hides the LSR in an MPLS domain, improving network security.

In a scenario whereSR Policiesare dynamically established through thecontroller, which of the following statements about theSR Policy solution architectureis incorrect?

• A.The controller uses NETCONF to deliver configurations such as service interfaces and routing policies.
• B.The controller uses BGP-LS to collect tunnel topology information and computes SR Policy paths.
• C.The controller uses telemetry to deliver information such as SRv6 SIDs to construct SID entries.
• D.The controller uses BGP IPv6 SR Policy to deliver SR Policy information, such as the color, headend, and endpoint information.

If an engineer wants to remotely log in to a Huawei device, the engineer uses the Paramiko library to compile the following code when compiling the SSH Python script:
cli = ssh.invoke_shell()
cli.send("screen-length 0 temporary\n")
What is the function of screen-length 0 temporary?

• A.Performing split-screen display
• B.Canceling automatic word wrap
• C.Canceling split-screen display
• D.Performing automatic word wrap

Which of the following statements about VXLAN principles is incorrect?

• A.VXLAN uses MAC-in-UDP encapsulation to encapsulate Ethernet packets into UDP packets and thereby extend Layer 2 networks.
• B.VXLAN packets are forwarded through routes on the underlay network, and the MAC address of the terminal in the inner data frame is not considered during underlay forwarding.
• C.VXLAN can be deployed on campus networks to implement Layer 2 and Layer 3 communication.
• D.When VXLAN is deployed, in addition to devices at both ends of a VXLAN tunnel, intermediate forwarding devices are also required to support VXLAN. Otherwise, VXLAN packets cannot be forwarded.