Free Practice Questions for Huawei H12-351_V1.0 Exam

A mesh connection can be torn down by either of the two APs that have established it by sending a Mesh Peering Close frame to the other AP. This frame indicates that the sender no longer wants to maintain the mesh connection.

WPA3 has the following advantages over WPA and WPA2:

Supports WPA3-SAE, which provides more secure authentication and key management than PSK.

Provides a more secure handshake protocol than 802.11i, which can resist offline dictionary attacks and protect forward secrecy.

Enhances the algorithm strength from AES-128 to AES-192 or AES-256.

Supports Suite A cryptography, which provides higher security levels for government or military networks.

In Huawei’s smart roaming solution, the WAC can discover and maintain neighboring AP entries of STAs by using two methods: passive listening and active scanning. Passive listening means that the AP listens to the Probe frames sent by STAs and reports them to the WAC. Active scanning means that the AP periodically and proactively scans neighboring APs of STAs and reports them to the WAC.

According to the Huawei documents and resources, the troubleshooting operations for the AP onboarding failures are as follows:

APS fail to be authenticated by the WAC: Whitelist the APS. The WAC can authenticate APs based on their MAC addresses or SNs. If an AP is not whitelisted on the WAC, it cannot be authenticated and onboarded.

License resources on the WAC are insufficient: Expand the license capacity. The WAC can manage a limited number of APs based on its license. If the license resources are insufficient, some APs cannot be onboarded.

APS fail to obtain IP addresses: Check the DHCP server. The APs need to obtain IP addresses from a DHCP server before they can communicate with the WAC. If the DHCP server is not configured or reachable, the APs cannot obtain IP addresses and onboard.

APS fail to ping the WAC: Check the network between the WAC and APS. The APs need to ping the WAC to discover its IP address and establish a CAPWAP tunnel. If there is a network problem between the WAC and APs, such as incorrect VLAN configuration or firewall blocking, the APs cannot ping the WAC and onboard.

Therefore, APS fail to be authenticated by the WAC - c, License resources on the WAC are insufficient - b, APS fail to obtain IP addresses - d, APS fail to ping the WAC - a is the correct answer. References: : https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/ap-onboarding-failures

Huawei’s CloudCampus Solution supports three user access authentication modes: 802.1X authentication, MAC address authentication, and Portal authentication.

URL filtering supports four matching modes: exact matching, suffix matching, prefix matching, and keyword matching. The priority order of these modes is as follows:

Exact matching: The highest priority. An exact match means that a URL entered by a user is exactly the same as a URL in a blacklist or whitelist.

Suffix matching: The second highest priority. A suffix match means that a URL entered by a user ends with a suffix in a blacklist or whitelist.

Prefix matching: The third highest priority. A prefix match means that a URL entered by a user starts with a prefix in a blacklist or whitelist.

Keyword matching: The lowest priority. A keyword match means that a URL entered by a user contains a keyword in a blacklist or whitelist.