H13-431 by Huawei Actual Free Exam Q&As

Question 1

Which of following is the correct description of the OperationCenter deployment method? (Multiple Choice)

A. Two-node deployment B. Five-node deployment C. Three-node deployment D. Single-node deployment

Discussion 0

Correct Answer: A,D Vote an answer

Question 2

Huawei FusionStorage 6.0 cloud storage system provides block storage, file storage, and object storage resources to the upper layer on demand. The resource supply is more agile, but its disadvantage is that it cannot be compatible with Amazon S3 and Hadoop big data platforms.

A. TRUE B. FALSE

Discussion 0

Correct Answer: B Vote an answer

Question 3

C enterprises deploy Huawei SDN cloud network integration solution. Because of the small scale and centralized gateway deployment, it is hoped to improve the reliability of the gateway. Which of the following description about gateway reliability is wrong?

A. Multiple devices form a DFS group, four active gateway mode, FW/LB value-added equipment side-by-side access or Service Leaf access B. Two devices perform CSS stacking, and gateway traffic can be load-sharing on the stack member devices. C. Two devices form a VRRP group, and two devices have independent control planes that are backups of each other. D. Multiple devices form a DFS group, dual-active gateway mode, and gateway traffic can be load-sharing on DFS group member devices.

Discussion 0

Correct Answer: A Vote an answer

Question 4

About the deployment of the host security solution, which is the correct description? (Multiple Choice)

A. Deploy a software firewall for inter-VM communication B. Install anti-virus software on the VM C. Security group isolation D. Authenticate the user

Discussion 0

Correct Answer: A,B,C,D Vote an answer

Question 5

In the Huawei SDN solution, ahout the reliability analysis of the Network Overlay centralized gateway (CE12800 as the gateway role), which description of following is incorrect?

A. Stand-alone/stacking devices independently make VXLAN gateways. Specifications: 4K tenants, high reliability. B. Multiple sets of multiple-active gateways are deployed to add independent gateway devices, but the forwarding capacity and reliability within a single set of gateways are unchanged. C. Two independent devices establish VRRP groups and have independent tunnel endpoint addresses with high reliability. D. Gateway multiple-active deployment, with the same gateway address and different tunnel endpoint addresses.

Discussion 0

Correct Answer: D Vote an answer

Question 6

In the cloud network integration scenario, a client successfully applies for a cloud host and binds the EIP. In case of a problem, the cloud host does not reach the external network, and another cloud host that reaches the same network segment does not pass. What is the possible reasons? (Multiple Choice)

A. No virtual firewall is applied. B. There is no virtual firewall configured. C. Cloud hosts are in different security groups. D. The cloud host uses an internal network.

Discussion 0

Correct Answer: B,C Vote an answer

Question 7

The object storage client sends an access request to the B1.R1.hws.com domain name, and queries the Local DNS server. If the local DNS server does not save the resolution rule of the domain name, and then the domain name request fails.

A. False B. True

Discussion 0

Correct Answer: A Vote an answer

Question 8

In the Huawei SDN solution, which description is wrong about the FusionSphere business model?

A. VPC is a business unit, and VPC supports cross-POD deployment. B. The VDC is a resource unit, the VDC supports cross-POD deployment, and the tenant uses the VDC as the granularity for resource lease. C. The VM is a virtual machine and the VM supports deployment across VPCs. D. POD is a physical unit. For example, a fabric network can be considered as a POD.

Discussion 0

Correct Answer: C Vote an answer

Question 9

Which of the following description about the part of the process of double live load balancing for B/S applications is wrong?

A. If it does not match. The plugin will find the right application server based on the established rules. B. HTTP Session persistence check, check the Session id parameter in the requested cookie or URL. If it matches, the plugin will forward the request to the application server. C. SLB accepts a new HTTP request and distributes it to the application server according to the load balancing algorithm. D. The web server receives the new HTTP request distributed by the SLB, and then selects the application server node in the resource pool for forwarding.

Discussion 0

Correct Answer: C Vote an answer

Question 10

The FusionStorage agent process is deployed on each node to implement communication between the nodes and the FusionStorage Manager. What is the module?

A. MDC B. FusionStorage Agent C. OSD D. FusionStorage Manager

Discussion 0

Correct Answer: B Vote an answer

Question 11

In a cloud data center scenario, network isolation between tenants is required to ensure security and avoid attacks. Which of the following description about network isolation measures is wrong?

A. When multi-tenant shares cluster resources, VPN isolation can be used as needed in the data center Layer 3 network. B. When a multi-tenant shares cluster resources, the virtualized network uses VLANs for Layer 2 isolation. C. When multi-tenant shares cluster resources, for management reasons, port isolation and Layer 3 isolation do not need to be deployed at the same time. D. Each tenant enjoys exclusive cluster resources for physical network isolation.

Discussion 0

Correct Answer: D Vote an answer

Question 12

When planning and designing a data center, A company conducts network design based on different business scenarios. The following are some solutions when planning and designing. Which description is wrong?

A. Multi-service hybrid deployment, requiring security isolation between services. The gateway can deliver multiple VRFs as needed, and the VPCs and the PODs must communicate with each other inside and outside the POD. B. For the service front-end area, the firewall is deployed next to the firewall, and the virtualization is enabled. The AC delivers the policy route according to the access policy defined by the cloud platform. C. For the DMZ zone, the firewall is connected in series with the gateway. The traffic between the POD and the internal and external access must pass through the firewall. D. Deploying a single service or deploying multiple services but on-demand isolation between services requires open east-west access and controlled north-south access. You can choose a security policy that does not pass the firewall by default.

Discussion 0

Correct Answer: B Vote an answer

Question 13

The APT attack is a continuous attack and can only be launched from the external network. Therefore, if the security mechanism is deployed at the network boundary, it can be prevented.

A. False B. True

Discussion 0

Correct Answer: A Vote an answer

Question 14

In a cloud network integration environment, a tenant can only have one virtual machine firewall.

A. False B. True

Discussion 0

Correct Answer: A Vote an answer

Huawei HCIE-Data Center (Written) V2.0 - H13-431 Exam Practice Test