Free Practice Questions for Huawei H19-402_V1.0 Exam

Huawei iMaster NCE-Fabric ZTP (Zero Touch Provisioning) is designed to enable automated, fast, and error-free deployment of data center network devices, significantly reducing manual configuration efforts.

All listed options are valid characteristics:

Plug-and-play (A): Devices can automatically obtain configurations once powered on and connected to the network, requiring minimal manual intervention.

Visualized device onboarding (B): The controller provides a graphical interface to monitor onboarding progress, topology, and device status, improving deployment visibility.

Link verification (C): ZTP includes automatic cabling and link detection/verification , ensuring correct physical connections before service provisioning.

Batch device onboarding (D): Multiple devices can be onboarded simultaneously, enabling large-scale data center deployment with high efficiency.

Huawei emphasizes ZTP as a key capability in CloudFabric for:

Rapid service rollout

Reduced human error

Standardized deployment

Simplified O & M

This aligns with Huawei’s goal of achieving fully automated and intelligent data center network provisioning .

Therefore, the correct answers are A, B, C, and D .

In Huawei CloudFabric and VXLAN-based data center designs, it is a best practice to use the IP address of a loopback interface as the VTEP (VXLAN Tunnel End Point) source address instead of a physical interface IP. This recommendation is based on reliability, stability, and operational flexibility.

A loopback interface is always in the UP state as long as the device is operational, whereas physical interfaces may go down due to link failures. If a physical interface IP is used as the VTEP source, any link failure would cause VXLAN tunnels to flap, impacting service continuity. In contrast, loopback interfaces remain reachable through the underlay network via dynamic routing protocols such as OSPF, IS-IS, or BGP, ensuring consistent tunnel endpoints.

Additionally, using loopback addresses supports ECMP (Equal-Cost Multi-Path) forwarding in the underlay, improving load balancing and network utilization. Huawei documentation strongly emphasizes this design principle to enhance VXLAN tunnel resilience and simplify network operations. Therefore, the statement is TRUE.

According to Huawei’s CloudFabric intelligent O & M description, the health model is built as a multi-dimensional evaluation system that assesses the network from five dimensions: device, network, protocol, overlay, and service . This means every option listed in the question is part of the CloudFabric health model. Huawei explains that this model integrates telemetry-assisted data such as configuration data, forwarding entry data, logs, and KPI performance information, allowing the platform to detect faults and risks in real time across these five layers.

In practical Huawei CloudFabric operations, the device layer focuses on node health, hardware state, and resource status; the network layer checks connectivity and path quality; the protocol layer verifies control-plane protocols and convergence behavior; the overlay layer evaluates virtualized forwarding networks such as VXLAN fabrics; and the service layer measures the actual service experience and traffic exchange status. Huawei explicitly presents these five as the full health-evaluation scope of CloudFabric intelligent O & M, so the correct response is all five options

In Huawei data center network design, VXLAN overlay deployment models are categorized based on where VTEPs (VXLAN Tunnel End Points) are located. These include host-based overlay, network-based overlay, and hybrid overlay.

In a host overlay , VTEPs are implemented only on vSwitches (such as those within hypervisors), and physical switches only provide IP transport (underlay). In a network overlay , VTEPs are deployed only on physical switches (typically leaf switches), and servers are unaware of VXLAN encapsulation.

The hybrid overlay model combines both approaches. In this design, VTEPs can exist on both vSwitches (inside virtualized hosts) and physical switches (such as leaf devices). This allows greater flexibility, supporting mixed environments where some workloads use hypervisor-based encapsulation while others rely on hardware VTEPs for higher performance or integration with bare-metal servers.

Huawei CloudFabric supports hybrid overlay to enable smooth evolution from traditional to fully virtualized environments. Therefore, the correct answer is Hybrid overlay (C) .

Huawei’s AI Fabric solution is designed to build a unified, intelligent lossless data center network by integrating traditionally separate network infrastructures into a single converged Ethernet-based fabric.

The three integrated networks are:

Computing network (C): Handles east-west traffic between compute nodes (e.g., AI training clusters, GPU servers).

Storage network (B): Supports high-throughput, low-latency storage access (e.g., distributed storage systems like HDFS or Ceph).

Ethernet network (D): Provides the underlying IP-based transport, enabling unified connectivity and scalability.

Traditionally, InfiniBand (IB) networks were used for high-performance computing due to their low latency and RDMA capabilities. However, Huawei AI Fabric replaces IB with lossless Ethernet (RoCE-based) solutions, allowing all services (compute + storage + management) to run over a single Ethernet fabric .

This convergence reduces:

Network complexity

Capital and operational costs

Management overhead

While improving:

Resource utilization

Scalability

Automation

Therefore, the correct three networks are Storage, Computing, and Ethernet , making B, C, and D correct .

In Huawei VXLAN architecture, all listed statements accurately reflect core design concepts used in CloudFabric deployments.

A is correct: a Virtual Interface (VBDIF/VirtualIF) is a Layer 3 interface associated with a Bridge Domain (BD) , enabling inter-subnet routing (distributed gateway function).

B is correct: Huawei VXLAN commonly uses a 1:1 mapping between VNI and BD , where the BD acts as the Layer 2 forwarding domain. This mapping ensures clear separation of tenant networks and simplifies forwarding logic.

C is correct: VXLAN encapsulation uses VTEP (VXLAN Tunnel Endpoint) IP addresses . The source IP is the local VTEP, and the destination IP is the remote VTEP. Together, they logically represent the VXLAN tunnel used for transporting overlay traffic across the IP underlay.

D is also correct: a VAP (Virtual Access Point) represents the service access interface. On Huawei CE switches, VAPs are typically implemented using VLAN-based access , meaning VLANs act as the entry point for VXLAN services.

These concepts are fundamental in Huawei EVPN-VXLAN fabrics, enabling scalable, multi-tenant, and automated data center networking.

In IPv6, the concept of broadcast addresses does not exist , which is a fundamental difference from IPv4. Instead of broadcast, IPv6 uses multicast and anycast to achieve similar communication functions more efficiently. Therefore, statement B is false , as there is no such thing as an IPv6 broadcast address with all bits set to 1.

Statement A is correct: Unique Local Addresses (ULA) are intended for internal communication within a site or organization and are not routable on the public Internet, similar to IPv4 private addresses.

Statement C is also correct: Global Unicast Addresses in IPv6 are globally routable and function similarly to public IPv4 addresses, enabling end-to-end communication across networks.

Statement D is correct as well: Link-local addresses (FE80::/10) are automatically configured and used only for communication within the same local link (e.g., for neighbor discovery and routing protocols).

Huawei data center designs emphasize IPv6’s efficiency and scalability, particularly its elimination of broadcast traffic, which improves network performance and reduces unnecessary load.

Huawei’s Intelligent Lossless Data Center Network is specifically designed to meet the stringent requirements of AI computing workloads , which generate massive east-west traffic and exhibit bursty communication patterns such as incast scenarios . Therefore, traffic control in incast scenarios (A) is a critical requirement to prevent buffer overflow and packet loss.

Fast and efficient load balancing (B) is also essential, as AI training jobs rely on distributed computing across multiple nodes. Technologies like ECMP and flowlet-based load balancing ensure even traffic distribution and optimal link utilization.

Quick congestion control (C) is another key requirement. Mechanisms such as PFC (Priority Flow Control) and ECN (Explicit Congestion Notification) are used in Huawei CloudFabric to achieve near lossless transmission, which is vital for RDMA-based AI workloads.

However, High-performance computing (HPC) (D) is not a network requirement—it is an application and compute domain concept . While AI workloads may run on HPC systems, HPC itself is not a characteristic or requirement of the network.

Therefore, the correct answer is D .

In Huawei data center and network security architecture, native encryption support is a key differentiator between tunneling technologies and secure communication protocols.

SSL VPN (C) and IPsec VPN (D) both provide built-in encryption mechanisms . SSL VPN uses TLS/SSL protocols to encrypt application-layer traffic, making it suitable for secure remote access. IPsec VPN operates at the network layer and provides confidentiality, integrity, and authentication through protocols such as ESP (Encapsulating Security Payload), making it widely used for site-to-site and data center interconnection security.

On the other hand, VXLAN (A) and GRE (B) are encapsulation/tunneling technologies that do not inherently provide encryption. VXLAN is used for overlay networking (e.g., tenant isolation in CloudFabric), while GRE is used for simple tunneling across IP networks. Both require additional security mechanisms (such as IPsec) if encryption is needed.

Huawei CloudFabric design guidelines clearly separate overlay encapsulation (VXLAN) from security protocols (IPsec/SSL) , emphasizing that encryption must be implemented using dedicated security technologies.

Therefore, the correct answers are C and D .