H19-424_V1.0 Practice Questions

Question 1

In the VXLAN access scenario, the maximum number of access devices is recommended

Accepted Answer

4

Answer

1

Answer

2

Answer

3

Question 2

The description of the channel configuration template for the configuration generation tool scenario is correct

Accepted Answer

The channel template is only available to the users of the channel and can be modified

Answer

The channel template is available to all channel providers

Answer

The channel template is available to all users

Answer

The channel template is only available to the users of the channel, but cannot be modified

Question 3

In the V1R22C00 version of CloudCampus solution, the description of the FW synchronization IP-Group feature is incorrect ()

Accepted Answer

NCE-Campus supports the configuration of firewall security group policies.

Answer

When a user passes the NCE-Campus authentication or the permission changes, NCE-Campus synchronizes the user name, IP-group, and IP address information to FW, and FW identifies all user groups based on the mapping relationship between IP address, user name, and IP-group, and executes the corresponding security group policy.

Answer

Reuse the current online behavior management process, and add lP-Group information to the synchronization information of NCE-Campus and firewall.

Answer

When the user goes online and ages in FW, FW actively queries the online user to the NCE-Campus server to keep the IP-Group and other information at both ends synchronized

Question 4

When using the planning and design tool, the following statement is wrong about the layout of the campus network cabinet

Accepted Answer

The server cannot be planned and placed in the cabinet

Answer

There are two views: logical cabinet and physical cabinet

Answer

Drag and drop to adjust the position of the device

Answer

Modular switches support board design

Question 5

switch V600R022 version, about the PV6 RGuard implementation description, the incorrect is ()

Accepted Answer

22.0 also supports policy-based filtering of ND packets.

Answer

RA packets can carry a lot of network configuration information, including the default router, network prefix list, and whether to use a DHCPv6 server for stateful address allocation. An attacker can send forged RA packets to modify the network configuration of the user's host so that legitimate users cannot communicate properly. IPv6RGuard provides a defense mechanism against RA packet attacks, which can effectively prevent such network attacks.

Answer

Configure the host or router role for the interface, and then the device can forward or discard RA packets based on the interface role.

Answer

If the interface is connected to the user host, the interface role is set to host, and if the interface is connected to the router, the administrator can configure the interface role to router according to the interface networking. Version 22.0 also supports policy-based filtering of ND packets.

Free Huawei H19-424_V1.0 Exam Practice Questions & Explanations