H31-161 Exam Training Practice Tests (Huawei HCIE-Carrier IP (Written))]

Question 1

Which statement about the interworking between a VPN and the Internet is false?(D)

A. A VPN and the Internet can interwork through the PE, Internet gateway, or CE. B. For a VPN and the Internet to interwork, the user device used to access the Internet must have a route to the desired address on the Internet and a backhaul route. C. For a VPN and the Internet to interwork, network address translation (NAT) must be performed. NAT can be deployed on the interface of a PE used to connect to the Internet gateway, on the interface of a PE used to connect to a CE, or on the interface of a CE used to connect to a PE. D. A VPN and the Internet can interwork through the CE or PE.

Correct Answer: C

Question 2

Refer to the exhibit.

This figure shows the MPLS L3VPN networking. CE 1 and CE 3 belong to VPN A.
CE 2 and CE 4 belong to VPN B.
Two MPLS TE tunnels (5 Mbit/s and 10 Mbit/s) and an LSP tunnel are set up between PE 1 and PE 2.It is expected that a tunnel policy is configured on PE
1 to distribute traffic in the three tunnels and MPLS TE tunnels are preferred. Configurations on PE
1:
Configuration of PE 1
#
sysname PE1
#
ip vpn-instance vpna
route-distinguisher 100:1
tnl-policy policy1
vpn-target 111:1 export-extcommunity
vpn-target 111:1 import-extcommunity
#
ip vpn-instance vpnb
route-distinguisher 100:2
tnl-policy policy2
vpn-target 222:2 export-extcommunity
vpn-target 222:2 import-extcommunity
#
mpls lsr-id 1.1.1.1
mplsmpls te
mpls rsvp-te
mpls te cspf
#
mpls ldp
#
interface Pos1/0/0
link-protocol ppp
ip address 100.1.1.1 255.255.255.252
mpls
mpls te
mpls te max-link-bandwidth 20000
mpls te max-reservable-bandwidth 15000
mpls rsvp-te
mpls ldp
#
interface Pos2/0/0
link-protocol ppp
ip binding vpn-instance vpna
ip address 10.1.1.2 255.255.255.252
#
interface Pos2/0/1
link-protocol ppp
ip binding vpn-instance vpnb
ip address 10.2.1.2 255.255.255.252
#
interface LoopBack1
ip address 1.1.1.1 255.255.255.255
#
interface Tunnel1/0/1
ip address unnumbered interface LoopBack1
tunnel-protocol mpls te
destination 2.2.2.2
mpls te tunnel-id 11
mpls te bandwidth bc0 5000
mpls te commit
#
interface Tunnel1/0/2
ip address unnumbered interface LoopBack1
tunnel-protocol mpls te
destination 2.2.2.2mpls te tunnel-id 22
mpls te bandwidth bc0 10000
mpls te reserved-for-binding
mpls te commit
#
bgp 100
peer 2.2.2.2 as-number 100
peer 2.2.2.2 connect-interface LoopBack1
#
ipv4-family unicast
undo synchronization
peer 2.2.2.2 enable
#
ipv4-family vpnv
policy vpn-target
peer 2.2.2.2 enable
#
ipv4-family vpn-instance vpna
import-route direct
#
ipv4-family vpn-instance vpnb
import-route direct
#
ospf 1
opaque-capability enable
area 0.0.0.0
network 100.1.1.0 0.0.0.3
network 1.1.1.1 0.0.0.0
mpls-te enable
#
tunnel-policy policy1
tunnel binding destination 2.2.2.2 te Tunnel1/0/2
#
tunnel-policy policy2
tunnel select-seq cr-lsp lsp load-balance-number 3
#
returnUnder the preceding configurations, traffic cannot be distributed to the three tunnels. To implement load balancing, which of the following modifications are correct?

A. Delete policy 1 from PE 1. B. Create a GRE tunnel to 2.2.2.2 on PE 1. C. Delete policy 1 in the vpna instance view. D. Create a TE tunnel to 2.2.2.2 on PE 1.

Correct Answer: A,D

Question 3

Which of the following statements about the working principle of LDP FRR are true?

A. After LDP FRR is enabled, a backup LSP can be generated for a primary LSP to prevent serious packet loss during fast flapping of the primary LSP B. After LDP FRR is enabled, a backup LSP is generated. Both the primary and backup LSPs are stored in the forwarding table. C. LDP FRR can be deployed on the ingress node and the intermediate node.The primary and backup LSPs are recorded in the ILM table on the intermediate node and in the FIB table on the ingress node. D. Multiple LSPs can be backed up on the ingress node, that is, entries about multiple backup LSPs are generated in the forwarding table according to the priority of the LDR FRR, implementing multilayer protection.

Correct Answer: B,C

Question 4

Which statement about the Hub s MPLS VPN networking is false?

A. All Spoke PEs can receive the VPN-IPv4 routes advertised by the Hub PE. B. The Hub PE advertises the routes learned from one Spoke PE to other Spoke PEs. Therefore, Spoke sites can access other through the Hub site. C. The Hub PE can receive the VPN_IPv4 routes advertised by all Spoke PEs. D. When an MP-IBGB neighbor relationship is established between two spoke PEs, the value of the Import VPN Target attribute of one Spoke PE can be the same as tat of the Export VPN Target attribute of the other Spoke PE.

Correct Answer: D

Question 5

RTA is a leaf router that directly connects to host A through interface GigabitEthernet 1/0/0. The interface is configured as follows:
interface GigabitEthernet1/0/0
undo shutdown
ip address 192.168.4.2 255.255.255.0
pim sm
igmp enable
igmp version 3igmp ssm-mapping enable
igmp static-group 232.1.1.1
Configurations in the IGMP view are as follows:
igmp
ssm-mapping 232.1.1.0 255.255.255.0 10.10.1.1
ssm-mapping 232.1.2.0 255.255.255.0 10.10.1.1
Host A sends an IGMPv2 Report message to group 232.1.2.2. Which entry can be displayed by the display igmp ssm-mapping group command?

A. (10.10.1.1, 232.1.1.1) B. (10.10.1.1, 232.1.1.1) and (10.10.1.1, 232.1.2.2) C. (10.10.1.1, 232.1.2.2) D. No entry

Correct Answer: B

Question 6

As shown in the figure, the DiffServ model is deployed in E-LSP mode on the MPLS network. A tester connects to GE interfaces of RTA and RTC on the edge of the MPLS network through GE links. The trust upstream default command is configured for interfaces on the IP access side of RTA and RTC. When the tester sends IP packets with DSCP values 10, 12, and 14,the DSCP values of IP packets received at the receiver side are supposed to remain unchanged. However, the DSCP values of all received IP packets are 10. In this case, which of the following statements are true? (Default mapping is configured between the EXP and DSCP values on each router.)

A. The configurations on RTA or RTC are incorrect. B. If the qos phb disable command is configured for the outbound interface on the IP access side of RTC, the DSCP values of packets the tester receives remain unchanged. C. The DSCP values are 10 when RTA's IP packets leave the MPLS network because the EXP values are 1 when RTA's IP packets enter the MPLS network. D. The DSCP values of packets the tester receives are 10 regardless of whether qos phb disable is configured for the outbound interface on RTC's IP access side.

Correct Answer: B,C

Question 7

Refer to the exhibit.

As shown in the figure, PE 1 sets up an MP-IBGP neighbor relationship
with PE 2 and they communicate over MPLS LDP. A CE communicates with a PE over OSPF.
Configure the VRF on PE 1 as follows:
ip vpn-instance vrf1
route-distinguisher 100:1
vpn-target 1:1 export-extcommunity
vpn-target 1:1 import-extcommunityConfigure OSPF on PE 1 as follows:
ospf 1 vpn-instance vrf1
area 0.0.0.0
network 100.1.1.0 0.0.0.255
Configure BGP on PE 1 as follows:
bgp 100
peer 22.22.22.22 as-number 100
peer 22.22.22.22 connect-interface LoopBack0
#
ipv4-family unicast
undo synchronization
peer 22.22.22.22 enable
#
ipv4-family vpnv4
policy vpn-target
peer 22.22.22.22 enable
#
ipv4-family vpn-instance vrf1
import-route ospf 1
PE 2 has the same configurations as PE 1. MP-IBGP neighbor relationships have been set up between PEs, and OSPF neighbor relationships have been set up between PEs and CEs. A valid route 1.1.1.1/32 is imported from CE 1 to an OSPF area, but CE 1 does not learn the route. What is the reason?

A. An RD is shared by VRFs on PE 1 and PE 2. B. BGP routes must be imported to OSPF areas on a PE. C. CE can be connected to a PE through OSPF only when the PE also runs OSPF. D. CE cannot be connected to a PE through OSPF.

Correct Answer: B

Question 8

As shown in the figure, the asymmetric VLL FRR networking is used. AC
interfaces on PE 1, PE 2, and PE 3 are configured as follows:
Configuration of the AC interface on PE 1:
interface Pos3/0/1link-protocol ppp
undo shutdown
oam detect lcp-terminal notify lcp-terminal
ip address 208.1.1.1 255.255.255.0
ip address 208.2.2.1 255.255.255.0 sub
mpls l2vc pw-template pw1 13579 ip-interworking
mpls l2vc pw-template pw2 24680 ip-interworking secondary
mpls l2vpn oam-mapping
mpls l2vpn reroute immediately resume 0
Configuration of the AC interface on PE 2:
interface Pos1/0/3
link-protocol ppp
undo shutdown
ip address 208.1.1.2 255.255.255.0
mpls l2vc pw-template pw1 13579 ip-interworking
mpls l2vpn oam-mapping
Configuration of the AC interface on PE 3:
interface Pos1/0/0
link-protocol hdlc
undo shutdown
oam detect hello-stop notify hello-stop
ip address 208.2.2.2 255.255.255.0
mpls l2vc pw-template pw1 24680 ip-interworking
mpls l2vpn oam-mapping
Which of the following statements are true on the condition that IGP and MPLS are configured correctly on the public network?

A. If a forwarding fault is detected on the PW between PE 1 and PE 2, traffic can be switched to the backup PW on PE 1. B. The PW between PE 1 and PE 2 is the primary PW. C. If a forwarding fault is detected on the public network side of the PW between PE 1 and PE 2, traffic from CE 2 to CE 1 can be switched to the PW between PE 1 and PE 3. D. If a forwarding fault is detected on the PW between PE 1 and PE 2, traffic from CE 1 to CE 2 can be switched to the PW between PE 1 and PE 3.

Correct Answer: A,B,D

Question 9

The secure sockets layer (SSL) protocol mainly provides confidentiality and reliability between communication applications. It is found at the transport layer and the application layer, and provides encrypted data transmission. Which of the following protocols are required for encrypted data transmission?

A. Handshake protocol B. Alarm protocol C. Record protocol D. Tunnel protocol

Correct Answer: A,B,C

Question 10

As shown I the figure, the asymmetric VLL FRR networking is used AC interfaces on PE 1, PE 2 and PE 3 are configured as follows:

Which of the following statements are the true on the condition that IGP and MPLS are configured correctly on the public network?

A. If a forwarding fault is detected on the public network side of the between PE 1 and PE 2, traffic from CE 2 to CE 1 can be switched to the PW between PE 1 and PE3. B. If a forwarding fault is detected on the PW between PE a and PE 2 , traffic from CE 1 to CE 2 can be switched to the PW between PE 1 and PE 3. C. If a forwarding fault is detected on the PW between PE a and PE 2 , traffic can be switched to the backup PW on PE 1. D. The PW between PE1 and PE 2 is the primary PW.

Correct Answer: B

Question 11

The RADIUS or Huawei Terminal Access Controller Access Control System (HWTACACS) protocol can be used for authentication during network access. Which of the following statements about these two protocols are false?

A. The HWTACACS uses TCP to transmit data while the RADIUS uses UDP to transmit data. B. Both the HWTACACS and RADIUS encrypt all data in the packet body. C. The RADIUS uses the Triple Data Encryption Standard (3Des) to encrypt passwords and some important data packets. The RADIUS provides a higher level of security than the HWTACACS. D. The RADIUS implements authentication and authorization separately to improve security

Correct Answer: B,C,D

Question 12

As shown in the figure, the primary tunnel uses the path RTA -> RTB -> RTC. There are two FRR paths: One protects the link between RTA and RTB and the other one protects the link between RTB and RTC.If a path in the primary tunnel is faulty, which command can be used on RTA to locate the fault?

A. display mpls te tunnel verbose B. display mpls te tunnel-interface C. display mpls te tunnel path D. display mpls lsp verbose

Correct Answer: C

Question 13

Which message does the pseudo wire emulation edge-to-edge (PWE3) add for LDP signaling extension compared with Martini VLL?

A. Request B. Notification C. Mapping D. Release E. Withdraw

Correct Answer: B

Huawei HCIE-Carrier IP (Written) - H31-161 Exam Practice Test