H12-821_V1-0 Practice Questions

The Root Port election on a non-root bridge follows a specific four-step tie-breaking sequence to identify the best path to the Root Bridge.

1. RPC Comparison: The process begins by comparing the Root Path Cost (accumulated cost to the root). The port with the lowest cost is preferred.
2. Peer BID Comparison: If path costs are equal, the switch compares the Sender (Peer) Bridge ID. The port connected to the upstream switch with the lowest Bridge ID is selected.
3. Peer PID Comparison: If the Sender Bridge IDs are identical (indicating parallel links to the same switch), the switch compares the Sender (Peer) Port ID. The port receiving frames from the upstream port with the lowest PID is preferred.
4. Local PID Comparison: Finally, if all previous criteria are tied, the Local Port ID is compared, and the lowest value is chosen.

IEEE Standard 802.1D-2004, Media Access Control (MAC) Bridges. Section 17.6 "Port Role Selection", Paragraph 17.6.2. (The standard details the vector comparison: {RootID, RootPathCost, BridgeID, PortID}). https://ieeexplore.ieee.org/document/1339632

Huawei HCIA-Datacom V1.0 Training Material, Spanning Tree Protocol. Section: "STP Calculation - Root Port Election". (Explicitly lists the order: Root Path Cost -> Sender BID -> Sender PID -> Local PID).

Juniper Networks Documentation, Understanding Spanning Tree Protocol Port Selection. (Confirms the standard industry algorithm: Cost -> Sender Bridge ID -> Sender Port ID -> Receiver Port ID).

The statement provides an accurate and standard definition of a Wide Area Network (WAN). A WAN is fundamentally a network that spans a large geographical area, often crossing metropolitan, regional, or national boundaries. Its primary purpose is to provide long-distance connectivity, interconnecting geographically separate networks such as Local Area Networks (LANs), Metropolitan Area Networks (MANs), and by extension, specific large-scale LAN implementations like campus networks and data center networks. The use cases mentioned—interconnecting campus and data center networks—are typical enterprise applications for WAN technologies.

This is a "TRUE OR FALSE" question; therefore, there is no incorrect option to evaluate. The provided statement is factually correct.

1. Huawei HCIA-Datacom V1.0 Training Material. In the module covering fundamental network concepts

a WAN is defined by its large geographical scope and its function of connecting other networks like LANs. The material states

"A WAN provides long-distance communication and covers a wide range of areas

such as a country or a continent... A WAN is mainly used to connect LANs in different regions." (HCIA-Datacom V1.0 Training Material

Chapter 1: Data Communication and Network Basics).

2. Kurose

J. F.

& Ross

K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. This foundational university textbook defines network types by scale. In Chapter 1

it distinguishes between LANs and WANs

stating

"A wide area network (WAN) [...] typically spans tens or hundreds of kilometers. [...] Enterprises often use WANs to connect their geographically distributed offices." This aligns with the statement's description of connecting LANs/MANs in different areas. (Chapter 1

Section 1.2: The Network Edge).

3. Stallings

W. (2014). Data and Computer Communications (10th ed.). Pearson. This academic text provides a clear definition: "A wide area network (WAN) covers a large geographical area. A WAN typically consists of a number of interconnected switching nodes. [...] These nodes and the networks they support (which are typically LANs at subscriber sites) are connected by transmission lines." This confirms the role of a WAN in interconnecting LANs. (Chapter 1

Section 1.4: Wide Area Networks).

When an export routing policy applied to a BGP peer is modified, the new policy does not take effect immediately on the routes that have already been advertised. The BGP routing table and the advertisements sent to peers are not dynamically re-evaluated upon a policy change. To apply the new or updated policy, an administrator must manually trigger a re-advertisement of routes. This is typically done using a soft reset (route refresh) command, such as refresh bgp export on Huawei devices, which requests the router to resend its BGP UPDATE messages to the specified peer after re-applying the export policy, without tearing down the BGP session.

B. IGP routes can be injected into BGP using the network command, but also through redistribution using the import-route command. Therefore, the network command is not the only method.

C. Huawei VRP (Versatile Routing Platform) and other modern network operating systems support the configuration of multiple BGP processes, often used for features like BGP multi-instance or in VPN contexts.

D. A BGP OPEN message contains the standard BGP header, but it is followed by a message body containing crucial parameters for session establishment, such as BGP version, My Autonomous System number, Hold Time, and BGP Identifier.

1. For Answer A: Huawei HCIP-Datacom-Core Technology V1.0 Training Material. In the BGP route policy section

it is explained that after a policy is modified

a BGP session refresh is required for the new policy to take effect. The refresh bgp command is detailed as the mechanism for this manual intervention. (Specifically

this concept is a fundamental principle of BGP policy application covered in Huawei's official training for the H12-821 exam).

2. For Answer B: Huawei HedEx Documentation for VRP

BGP Configuration Guide. The section "Configuring BGP to Advertise Routes" describes both the network command and the import-route command as valid methods for advertising routes into BGP. This confirms that the network command is not the sole method.

3. For Answer D: IETF RFC 4271

"A Border Gateway Protocol 4 (BGP-4)". Section 4.2

"OPEN Message Format

" explicitly defines the fields within an OPEN message

which include Version

My Autonomous System

Hold Time

BGP Identifier

and Optional Parameters Length

in addition to the standard 19-octet BGP header. This proves the message carries more than just the header.

4. For Answer C: Huawei HedEx Documentation for VRP

BGP Configuration Guide. The section on "BGP Multi-Instance" describes the procedure for creating and configuring multiple BGP processes on a single router

each with its own BGP instance ID. This directly contradicts the claim that a router cannot be configured with multiple BGP processes.

Bidirectional Forwarding Detection (BFD) has two primary operating modes: asynchronous and demand. In asynchronous mode, which is the default and most commonly used mode, two systems periodically exchange BFD Control packets. Each system monitors the stream of packets from its peer. If a system does not receive a BFD packet from its neighbor within a negotiated detection interval, it considers the forwarding path to have failed and declares the BFD session down. This behavior of periodically sending and checking for control packets is the defining characteristic of asynchronous mode.

1. Huawei HedEx Documentation: HCIP-Datacom-Core Technology V1.0 Training Material. In the section covering BFD Principles

it states: "Asynchronous mode: Two systems periodically send BFD control packets to each other. If a system does not receive any BFD control packet from the peer within a specified detection period

it considers the BFD session to be down." (Refer to BFD Fundamentals > BFD Operation Modes).

2. IETF RFC 5880: Bidirectional Forwarding Detection (BFD). Section 6.2

"Asynchronous Mode"

specifies: "In Asynchronous mode

the systems periodically send BFD Control packets to one another

and if a number of those packets in a row are not received by the other system

the session is declared to be down." (DOI: https://doi.org/10.17487/RFC5880).

The statement that automatic summarization takes precedence over manual summarization is false. In Huawei's BGP implementation, manual route summarization, configured using the aggregate command, has a higher priority than automatic summarization, which is enabled by the summary automatic command. If a route matches both a manual and an automatic summary configuration, the manual summary configuration will be applied, and the automatic one will be ignored for that specific route. This allows for more granular and specific control over route advertisements, overriding the broader, classful-based automatic behavior.

A. This is a true statement. The primary function of route summarization, including automatic summarization, is to advertise a single summary route while suppressing the more specific constituent routes.

C. This is a true statement. The summary automatic command is applied within the BGP process to summarize routes that have been imported into the local BGP routing table, typically from an IGP, before they are advertised to BGP peers.

D. This is a true statement. Automatic summarization in BGP is classful, meaning it summarizes routes to their natural (classful) network boundaries (e.g., Class A, B, or C).

1. Huawei

HCIP-Datacom-Core Technology V1.0 Training Material

"BGP Route Aggregation" section. The material explicitly states: "If both automatic and manual aggregation are configured

manual aggregation takes precedence."

2. Huawei

NE40E V800R010C10SPC500 Configuration Guide - BGP

"Configuring BGP Route Summarization" section. This guide details the functions of both the summary automatic command for classful summarization of imported routes and the aggregate command for manual summarization

implicitly confirming the standard network behavior where manual

specific configurations override automatic

general ones.

In Huawei's Versatile Routing Platform (VRP), Access Control Lists (ACLs) are categorized and identified by number ranges. The number range from 4000 to 4999 is specifically allocated for Layer 2 ACLs. These ACLs are used to filter data frames based on Layer 2 information, such as source MAC address, destination MAC address, 802.1p priority, and VLAN ID. This allows for granular traffic control at the data link layer within a local area network.

A. User-defined ACLs use the number range 5000-5999 to match packets against user-defined rule formats, which are more flexible than standard ACLs.

B. Basic ACLs use the number range 2000-2999 and filter packets based only on the source IP address.

D. Advanced ACLs (Advance is a common typo) use the number range 3000-3999 and can filter packets based on source/destination IP, protocol type, and port numbers.

1. Huawei HedEx Documentation for S Series Switches: In the S12700 V200R019C10 Configuration Guide - Security

Section "ACL Configuration > ACL Overview > ACL Classification"

the document explicitly states: "Layer 2 ACL (number range: 4000-4999)". This guide details the classification of ACLs by number.

2. Huawei AR Router Documentation: The AR100

AR120

AR150

AR160

AR200

AR1200

AR2200

AR3200

and AR3600 V300R019C10 Configuration Guide - Security

Section "ACL Configuration > ACL Overview > ACL Classification"

provides a table that maps ACL types to their number ranges

confirming that 4000-4999 is for Layer 2 ACLs.

3. HCIP-Datacom-Core Technology V1.0 Training Material: In the official courseware

the module on "ACL Principles and Configuration" details the different types of ACLs and their corresponding number ranges. The material specifies that Layer 2 ACLs are identified by the 4000-4999 range.

1. pat: The question requires configuring NAPT (Network Address Port Translation). In Huawei USG firewall syntax, the command mode pat enables NAPT, which allows multiple private IPs to share a single public IP by translating ports. (Using no-pat would result in a one-to-one mapping, which is not NAPT).
2. trust: The source-zone parameter defines where the traffic originates. As shown in the topology diagram, PC1 is located in the trust zone (12.1.1.0/24 network) and is initiating traffic toward the untrust zone.
3. 12.1.1.0: The source-address command specifies the packet source filter. The syntax shown includes a trailing 24, indicating a subnet mask length. The value 12.1.1.0 correctly identifies the subnet 12.1.1.0/24 where PC1 resides.
4. inner: The command action source-nat address-group binds the NAT policy to a specific address pool. The configuration snippet at the top creates a NAT address group named inner ([FW1]nat address-group inner), so the policy must reference this exact name to function.

Huawei Technologies Co., Ltd. (n.d.). Configuring NAT Rules in a NAT Policy. Huawei Support - USG6000 Series Documentation. Retrieved from https://info.support.huawei.com

Huawei Technologies Co., Ltd. (n.d.). CLI: Example for Configuring NAT No-PAT. Huawei Support - Security Configuration Guide. (Verifies mode pat vs mode no-pat syntax and source-zone usage).

Huawei Technologies Co., Ltd. (n.d.). Nat-policy command reference. USG6000 Series Command Reference. (Verifies source-address syntax requiring network ID when mask is specified).

Open Shortest Path First (OSPF) is designed for stability and accuracy. To ensure the Link-State Database (LSDB) on all routers in an area remains synchronized and to prevent stale information, OSPF periodically refreshes its Link-State Advertisements (LSAs). Each LSA is reflooded every 30 minutes (1800 seconds) by its originating router, even if no network topology changes have occurred. This process resets the LSA's age, confirming its validity and maintaining the integrity of the LSDB across the OSPF domain.

A. OSPF runs directly over the IP protocol (protocol number 89) and has its own built-in reliability mechanism, including explicit Link-State Acknowledgment (LSAck) packets. It does not use TCP.

C. OSPF is a link-state protocol that uses the Dijkstra (Shortest Path First) algorithm to calculate the best path, not the Bellman-Ford algorithm, which is used by distance-vector protocols like RIP.

D. OSPF floods Link-State Update (LSU) packets immediately upon detecting a network topology change, not at a fixed 5-second interval. The periodic refresh interval is 30 minutes.

1. Huawei HCIP-Datacom-Core Technology V1.0 Training Material. In the "OSPF Principles" section

it is stated that "To ensure LSDB synchronization

OSPF periodically floods LSAs every 30 minutes." This document also confirms OSPF uses the Dijkstra algorithm and has its own reliability mechanisms.

2. RFC 2328 - OSPF Version 2. Section 13

"The Aging of Link State Advertisements

" specifies: "LSAs are also refreshed from time to time. Each LSA is reflooded every LSRefreshTime seconds. LSRefreshTime is a constant

set to 30 minutes."

3. RFC 2328 - OSPF Version 2. Appendix B

"Architectural Constants

" defines LSRefreshTime as 1800 seconds (30 minutes).

4. Kurose

J. F.

& Ross

K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Chapter 5

"The Network Layer: Control Plane

" explains that OSPF routers broadcast LSAs to all other routers in the domain and use Dijkstra's algorithm for path computation. It also clarifies that OSPF messages are carried directly over IP.

The ORIGINATORID is an optional, non-transitive BGP attribute created by a Route Reflector (RR) to prevent routing loops. When the first RR (RTB) receives the route 10.1.1.0/24 from its client (RTA), it creates the ORIGINATORID attribute and sets its value to the Router ID of the route's originator, which is RTA's Router ID (1.1.1.1). RTB then reflects this route to its other client, RTC. When RTC, also an RR, receives this route, it sees that the ORIGINATORID attribute already exists. According to the BGP route reflection rules, an RR does not modify an existing ORIGINATORID. Therefore, RTC reflects the route to its client RTD with the ORIGINATORID unchanged. RTD receives the route with the ORIGINATORID of 1.1.1.1.

1. Bates

J.

Chandra

R.

Katz

D.

& Rekhter

Y. (2006). BGP Route Reflection: An Alternative to Full Mesh Internal BGP (iBGP). RFC 4456

Internet Engineering Task Force. Section 8

"Operation"

page 7. Retrieved from https://doi.org/10.17487/RFC4456. This document states

"The RR creates a new attribute

ORIGINATORID

and sets its value to the ROUTERID of the originator of the route. An RR does not create a new ORIGINATORID if one already exists."

2. Huawei. (2021). NE40E-X8 V800R012C10 Configuration Guide - BGP. Section: "Route Reflector". This guide explains

"OriginatorID: ... It is created by an RR and carries the router ID of the route originator. The OriginatorID attribute is used to prevent routing loops."

3. Kurose

J. F.

& Ross

K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. Chapter 5

Section 5.6.3

"BGP Route Selection". The text describes iBGP scaling solutions

including route reflectors and the function of attributes like ORIGINATORID for loop prevention.

The question requires identifying the attack that does not operate at the Network Layer (OSI Layer 3). The Network Layer is primarily concerned with IP addressing and routing. IP spoofing, ICMP attacks, and Smurf attacks all exploit protocols that function at this layer (IP and ICMP).

ARP (Address Resolution Protocol) spoofing, however, is a Data Link Layer (OSI Layer 2) attack. ARP's function is to map a known Network Layer address (IP address) to a Data Link Layer address (MAC address) within a local network segment. The attack involves sending forged ARP messages to associate the attacker's MAC address with the IP address of a legitimate host, thereby intercepting traffic at Layer 2.

A. IP spoofing attack: This is a quintessential Network Layer attack, as it involves forging the source address in the IP (Layer 3) packet header.

B. ICMP attack: This is a Network Layer attack because ICMP (Internet Control Message Protocol) is a core protocol of the IP suite operating at Layer 3.

C. Smurf attack: This is a type of denial-of-service attack that explicitly uses Network Layer protocols, namely ICMP echo requests and IP address spoofing.

1. Huawei HCIP-Datacom-Core Technology V1.0 Training Material: In the "LAN Security Technologies" section

ARP attacks (including spoofing) are discussed as a primary threat at the data link layer

distinct from network layer threats like IP spoofing.

2. Kurose

J. F.

& Ross

K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson. Chapter 5

Section 5.4.1 ("Link-Layer Addressing and ARP")

describes the Address Resolution Protocol (ARP) as a protocol that resides in the Link Layer

translating between network-layer and link-layer addresses. Attacks leveraging ARP are therefore link-layer attacks.

3. Braden

R. (Ed.). (1989). Requirements for Internet Hosts -- Communication Layers. RFC 1122. Section 3.2.2 discusses ICMP

placing it firmly as an integral part of the IP layer (Network Layer). Section 2.3.2.1 discusses ARP

describing its function of binding IP (Layer 3) addresses to link-layer (Layer 2) addresses.