H12-891_V1-0 practice question 11 of 35
When you troubleshoot a local area network with Huawei equipment deployed, you find that there are a large number of unicast frames with unknown source AC addresses in the local area network . A large number of unknown source MAC addresses single-plug frames can cause the switch the biggest danger is ?
Full set: 607 questionsA large number of unicast frames with unknown source MAC addresses is characteristic of a MAC flooding attack. The switch learns each new source MAC address and adds it to its MAC address table. When an attacker sends a high volume of frames with varying, spoofed source MACs, the switch's MAC address table quickly fills up. Once the table is full, the switch can no longer learn new addresses and begins to flood all subsequent frames with unknown destination MACs out of all ports, effectively behaving like a hub. This exhaustion of the MAC address table is the primary and most significant danger.
A. While the MAC table consumes memory, option E is more specific about the logical resource being exhausted, which is the direct cause of the switch's behavioral change.
B. Increased flooding and CPU processing may slightly increase power consumption, but this is a secondary effect, not the primary danger.
C. MAC tables are often implemented in TCAM, but "MAC address table entry" is the specific logical resource being attacked, making it a more precise answer.
D. Bandwidth is consumed by the resulting frame flooding, but this is a symptom of the core problem, which is the MAC table exhaustion.
1. Huawei. (2019). Campus Switch Security Technology White Paper. Section 2.1.1 "MAC Address Attacks". This document explains: "An attacker sends a large number of data frames with different source MAC addresses to the switch. The switch adds these MAC addresses to its MAC address table. As a result, the MAC address table is exhausted."
2. Huawei. (2022). HedEx S1720, S2700, S5700, and S6700 V200R022C00 Configuration Guide - Security. Section "MAC Address Table Security". This guide details how MAC flooding attacks exhaust MAC address table entries, leading to traffic flooding.
Keep practicing
Take the free H12-891_V1-0 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other H12-891_V1-0 practice questions
- Question 1In the use of the LACP protocol, the following description is correct ?( Multiple select).
- Question 2In a shared network, what mechanism does PIM-SM use to prevent duplicate traffic?( Single…
- Question 3The default configured switch has an empty MAC address table at this time , and Host A co…
- Question 4The following description of MP-BGP is incorrect?( Single choice questions).
- Question 5A bookstore provides a wired network for customers to learn online. However, one day, it …
- Question 6If the Option field value in the 0SPFv3 Hello message issued by the router's GIgabit Ethe…
