Free Practice Questions for Huawei H12-891_V1.0 Exam

OSPF (Open Shortest Path First) Router-LSA (Type 1 LSA) describes all directly connected OSPF links of a router and their types. The following link types can appear in a Router-LSA:

Point-to-Point (P-2-P) (B) – Represents a direct connection between two routers.

Virtual Link (Vlink) (C) – Used to connect an area to the backbone (Area 0) when a direct connection is unavailable.

Stub Network (StubNet) (D) – Represents a network with only one exit point (e.g., a loopback interface or passive interface).

Incorrect Option:

TransNet (A) – Incorrect!

Transit networks appear in Network LSAs (Type 2), not Router LSAs.

Reference from Huawei HCIE-Datacom Documentation:

Huawei OSPF Configuration Guide – Router-LSAs and Link Types

HCIE-Datacom Training Material – OSPF LSAs and Topology Advertisement

NETCONF architecture consists of the following conceptual layers:

Secure Transport Layer – Ensures confidentiality (e.g., SSH, TLS)

Messages Layer – Handles framing and encoding (XML-based)

Operations Layer – Includes < get > , < edit-config > , < commit > , etc.

Content Layer – Carries the actual configuration and state data defined by YANG models

This makes Option D correct.

Exact Extract – Huawei HCIE-Datacom NETCONF Architecture Overview:

“NETCONF is divided into four conceptual layers: secure transport, message framing, operations, and content layers.”

SSH (Secure Shell) is a protocol designed for secure remote access and is always built on TCP, typically on port 22. UDP is not supported for SSH, as it is connectionless and doesn ' t provide the required reliability and order.

Exact Extract – Huawei Security Protocol Fundamentals:

“SSH is a TCP-based protocol. It does not support UDP. TCP ensures session reliability and data integrity, which are critical for SSH.”

Comprehensive and Detailed In-Depth Explanation:

In MPLS (Multi-Protocol Label Switching), the label retention mode determines how an LSR (Label Switching Router) handles labels received from its neighbors:

Liberal Mode:

An LSR retains all labels distributed by its neighbors, not just the labels from the next-hop LSR.

This approach ensures faster convergence because the LSR does not need to request new labels if the next hop changes.

It does not save memory or label space, as it stores more labels than strictly necessary.

Conservative Mode:

An LSR only retains labels from its next-hop neighbors, saving memory and label space.

Statements C and D are correct because they accurately describe liberal mode.

Statements A and B are incorrect because they describe conservative mode.

Understanding User Isolation in the Same VLAN

In a traditional VLAN, all devices within the same VLAN can communicate unless additional security policies are applied. To isolate users within the same VLAN, the following technologies can be used:

✅ B. Port Isolation (Private VLAN or Layer 2 Isolation)

Prevents communication between ports within the same VLAN.

Common in enterprise and campus networks to improve security.

Example: Isolating guest users from employees within the same VLAN.

✅ C. IPSG (IP Source Guard)

Blocks IP address spoofing within the same VLAN.

Uses DHCP snooping binding table to verify whether a device is using an authorized IP address.

✅ D. Ethernet Port Security

Limits the number of MAC addresses allowed per port.

Prevents unauthorized devices from communicating within the VLAN.

❌ A. Super VLAN (Incorrect Choice)

Super VLAN groups multiple VLANs under a single Layer 3 gateway, but it does not provide isolation within the same VLAN.

Real-World Application:

Public Wi-Fi Networks: Ensures that users within the same VLAN cannot communicate with each other.

Enterprise Security: Prevents unauthorized access or attacks within shared VLANs.

✅ Reference: Huawei HCIE-Datacom Guide – VLAN Security and User Isolation Technologies

VRRP (Virtual Router Redundancy Protocol) and Flapping

VRRP ensures gateway redundancy by allowing multiple routers to work together as a virtual router. Flapping occurs when the master and backup routers frequently switch roles.

Causes of VRRP Flapping:

✅ A. Too small interval between Advertisement packet transmissions – Can cause flapping

If the Advertisement interval is too short, frequent VRRP state changes can occur.

✅ C. Packet loss on an interface of the backup device – Can cause flapping

If the backup router loses VRRP packets, it might assume the master is down and initiate an election.

✅ D. Flapping on the link transmitting VRRP Advertisement packets – Can cause flapping

If the link used for VRRP experiences instability, packets may be lost, triggering VRRP role changes.

Incorrect Answer Explanation:

❌ B. Inconsistent preemption delay settings – Does NOT cause VRRP flapping

Preemption delay only affects when a router takes over as master after recovering from a failure.

It does not directly cause flapping because the role change happens only after a delay, preventing frequent transitions.

Reference from Huawei HCIE-Datacom Documentation:

Huawei VRRP Configuration Guide – Preventing VRRP Flapping

HCIE-Datacom Study Material – VRRP Timers and Stability

Virtual Networks in Huawei CloudCampus Solution:

Virtual networks (VNs) are segmented based on services (e.g., IoT, Guest Wi-Fi, Enterprise Wi-Fi).

Each VN has its own routing and forwarding instance (VRF).

Isolation Between Virtual Networks:

By default, different virtual networks are isolated.

If inter-VN communication is required, it must be manually configured using policy-based routing (PBR), inter-VRF routing, or firewall policies.

Reference from Huawei HCIE-Datacom Documentation:

Huawei CloudCampus Solution Guide – Virtual Networks and Segmentation

HCIE-Datacom Training Material – Policy-Based Inter-VN Communication

Comprehensive and Detailed In-Depth Explanation:

The Huawei SD-WAN Solution involves four types of channels to ensure smooth and efficient network operation:

Management Channel (A): Used for managing and monitoring SD-WAN devices. It facilitates communication between the iMaster NCE-Campus controller and SD-WAN devices.

Control Channel (B): Responsible for transmitting control plane information such as routing updates and protocol control messages.

Data Channel (C): Carries actual user data traffic over the SD-WAN network.

Orchestration Channel (D): Used for service orchestration, configuration delivery, and policy management.

All four channels work together to provide comprehensive network management, data transmission, and service orchestration in an SD-WAN environment.

There are three standard inter-AS MPLS VPN options, as per RFC 4364:

Option A (Back-to-Back VRF):

VRFs are directly connected between ASBRs using routing exchange (like static/BGP).

No label switching between ASs — no MPLS label needed between ASs.

Option B (EBGP Label Exchange):

ASBRs exchange labeled VPNv4 routes via EBGP.

One MPLS label is required — MPLS forwarding across AS boundary is used.

Option C (End-to-End LSP):

Full end-to-end LSP is created across ASs.

MPLS labels are definitely used end-to-end, even between ASs.

Option D (Commonly vendor-specific extensions based on Option B/C):

Similar to Option C — requires MPLS labels.

So:

B. Option B — needs MPLS label ✅

D. Option D — also needs MPLS label ✅

A. Option A — no MPLS label ❌

C. Option C — also uses MPLS label ✅, but not listed as an answer option in this question format (should have been).

Assuming valid options are A, B, D, the correct ones needing MPLS labels are:

Correct answers: B, D

Let’s analyze the scenario and each statement carefully based on OSPF path selection and BGP behavior in Huawei routers.

✅ Option A: The preferred path is R1–R3–R4.

According to the OSPF cost values:

R1–R3–R4: Cost = 1 + 1 = 2

R1–R2–R4: Cost = 2 + 2 = 4

OSPF chooses the lowest-cost path to reach a destination. Therefore, R1 will prefer the R1–R3–R4 path to reach 172.20.1.4/32.

Huawei Datacom Reference:

" OSPF selects routes based on the shortest path calculated using link costs. The router always selects the path with the lowest cost. "

(Source: HCIE-Datacom Study Guide v3.0 – OSPF Path Selection, Chapter 5)

✅ Option B: If the stub router on-startup command is run on R3, packet loss occurs during the power-off process of R3 but no packet loss occurs during the startup process of R3.

When R3 is powered off, OSPF needs to reconverge, which causes temporary packet loss.

When R3 starts up, it will advertise itself as a stub router using the stub-router on-startup command. This tells OSPF not to use R3 as a transit path during the startup period, thus preventing traffic blackholing.

Huawei Datacom Reference:

" stub-router on-startup command prevents a newly started router from being used as a transit node by OSPF, allowing routing to remain stable during convergence. "

(Source: HCIE-Datacom Study Guide v3.0 – OSPF Stub Router Functionality, Chapter 6.2)

❌ Option C: The preferred path is R1–R2–R4.

This is incorrect because the OSPF path cost via R2 is higher (4) than the cost via R3 (2).

❌ Option D: Packet loss occurs during both the power-off and startup processes of R3.

Incorrect. As explained above, when the stub-router on-startup command is used, packet loss is avoided during startup, but still occurs during power-off since the alternate path requires convergence.