The CPU was attacked by malicious traffic. Here are some of the following ways to prevent an attack:Multi-select

Filter packets with AcL on the compromised router port

Turn off the remote login function of the router.

USE CPCAR to rate limit messages sent up to the CPU according to the protocol type

Speed limiting of messages sent to the CPu on the soil.

Filter packets with AcL on the compromised router port

Turn off the remote login function of the router.

Analyze and count the packets sent to the CPU to find out the user of the attack source or the interface of the attack source.

A workstation is connected to an Ethernet switch in the work through a super-class 5 wire, the workstation can access the entire network (that is, full connection) through the switch, but the access rate is much lower than expected, when viewing the switch interface statistics, you can detect that there are many ultra-small frames, with software to read the statistics of the workstation network card, found that there are Many FCS and frame alignment errors, what causes the machine to cause these errors?

The operating mode between the workstation and the switch does not match

The rate mismatch between the workstation and the switch

Interface mismatched to an 8021Qtrunk interface

The line between the workstation and the switch has been completely damaged

The operating mode between the workstation and the switch does not match

The network interface card on the workstation is damaged

Which of the following configurations for OSPFv3 route aggregation is correct?

[Huawei]ospf3 1 [Huawei-ospv3-1]area 1 [Huawei-ospf3-1-area-0001] abr-summary fo0:0 0:48 cost 400

[Huaweijinterface gigabitethernet 1/0/0[Huawei-GigabilEthemnet1 / 0/0] asbr-summany fcOO:0048 cost 20

[Huawei] ospfs 1 [Huawei-ospf3-1] asbr-summary fcO0:O:0:.48 cost 20 tag 10o

Huawei]ospv3 1 [Huawe-ospt/3-1]area 1 Huawei-osph3-1-area-0001]asbr-summary fc000:048 cost 20 tag 100E. [Huawei] ospfv3 1 [Huawei-ospfv3-1] abr-summary fc000:0;. 48 cost 400

Users hope to be able to make the router forward and select messages according to their own defined policies on the basis of traditional route forwarding, and can adopt policy routing, and the following description of policy routing is incorrect

Policy Routing cannot be used to set IP precedence

Policy Routing can set the next hop IP address

Policy Routing cannot be set in the next statement DSCP

Policy Routing cannot be used to set IP precedence

Policy-based routing can be used to match message lengths

The command ip as-path-fiter as-path-fiter-number (denylpermit) regular-expression to configure aspath- ilter, in this command , multiple sentences can form an as-path-filter statement, what is the relationship between so many statements?

Routes match in order When a route matches to a clause, the relationship between

and is no longer matched downwards

Routes match in order and routes need to match all sub-directions

The following description of the characteristics of Huawei device Eth-trunk link aggregation is correct?

Link aggregation can be applied to Both Layer 2 and Layer 3 devices

Link aggregation enables load balancing based on data TCP or UDP ports

Link aggregation cannot be deployed across devices

Link aggregation can be applied to Both Layer 2 and Layer 3 devices

Link aggregation can only be applied to Layer 2 devices.

The following description of the GVRP interface registration mode in Huawei switches is correct?

When fixed registration mode is selected, the interface cannot propagate dynamic VLANs

When the normal registration mode is selected, allow the interface to dynamically register and unregister the VLAN. Logout here includes deleting dynamically learned VLANs and VLANs created natively by the administrator

When the interface layer two operating mode must be hybird

GVRP when the register mode with forbidden is selected, there are four types of interface registration mode

When troubleshooting a local area network, you notice a large number of frame alignment errors, FCS errors and LAG conflicts, and the possible cause of these problems is ?

The operating mode does not match

Switches and terminals are interconnected over 10/100/1000base-T Ethernet links, and switches and terminals operate in half-duplex mode

There is a mode mismatch on the 1000base-LX/LH link

The operating mode does not match

on a 10/1000/1000base-T Ether link This type of error occurs in most environments

Protocols with TCP ports 443, 179, 137, 110, and 23 are, in order: radio

HiPS,BGP, NetBios Name Server ,POP3,TelnetE. BGP,POP3,SNMP,TFTP,Teinet

Finger,DHCP Server,NetBios Name Server,POP3,TelnetB

HiPS,BGP, NetBios Name Server ,POP3,TelnetE. BGP,POP3,SNMP,TFTP,Teinet

Compared to IPV4 multicast, which of the following descriptions is the characteristic of IP6 multicast?

The first 8bit IPV6 multicast address is always FF(11111111).

IPv6 multicast does not contain MSDP and dense mode

The first 8bit IPV6 multicast address is always FF(11111111).

IPv6 multicast clients use IGMPv3 to join multicast groups

IPv6 multicast load sharing extends the multicast routing rules and is completely independent of RPF check

If you want to advertise 19072270/27 to an EBGP neighbor, is the following command correct?

network 19072270 mask 255255255224

What is the significance of reserved multicast address 224000~22400255?

The multicast address range is reserved for link-local multicast traffic, including network control messages, and the address range is only valid locally

The multicast address range is reserved for the management of multicast addresses, and is valid locally

The address identifies Global lnternet, and the address range is valid for the entire network

This multicast address range is reserved for the management of multicast addresses, which cannot transmit multicast traffic to the Internet

Any legitimate multicast traffic and multicast application Junhui adopts an address change

The multicast address range is reserved for link-local multicast traffic, including network control messages, and the address range is only valid locally

Regarding the WRR (Weight Round Robin) description of the error is ?( Multiple select).

WRR avoids congestion in the network

WRR on GE interfaces to ensure that critical services are prioritized for

WRR avoids congestion in the network

WRR guarantees that various queues are allocated to a certain amount of bandwidth

WRR is a congestion management technique

WRR on GE interfaces to ensure that critical services are prioritized for

Why is BGP an enhanced distance vector routing protocol?

BGP uses the ASPATH attribute to record all autonomous system numbers that a route passes through into an AS list, and based on that attribute, routes with shorter AS-PATH are preferred

According to the routing rules of BGP routing, the route with lower MED is preferred

BGP uses the ASPATH attribute to record all autonomous system numbers that a route passes through into an AS list, and based on that attribute, routes with shorter AS-PATH are preferred

NEXT_HOP is a recognized mandatory attribute

BGP cannot accept routes that carry a local AS number in the AS_PATH

Which of the following options is correct?

Multicast technology is able to reduce redundant traffic, so network bandwidth can be saved C.Multicast technology is used for "-to-many" applications

Since multicast is based on TCP to establish a connection, multicast technology can ensure the reliable transmission of data

Unicast and broadcasting cannot effectively achieve data transmission between one source and multiple destinations on P2MP, but multicast technology can

Multicast technology is able to reduce redundant traffic, so network bandwidth can be saved C.Multicast technology is used for "-to-many" applications

Since multicast is based on TCP to establish a connection, multicast technology can ensure the reliable transmission of data

What is the exact description of the SSM features?

Using SSM, the receiver can use INCLUDE in IGMPv3 to indicate that the source

SSM he wishes to join is an extension of the DVMP protocol. to efficiently transmit one-to-many communication traffic

SSM requires MSDP to discover active sources in other PIM domains

Routing multicast traffic in the SSM is done by relying on the number of sources, and the RP is used for the receiver to answer the corresponding number of sources

Configuring filter-policy 2000 export in the IS-IS process, the wrong statement about the function of the command is ?

This command will filter the link status information released to the outside world

which needs to be used in conjunction with route ingestion, acts as an external route sender neighbor that only partially introduces.

If you do not configure this command, the device will by default introduce the external routing protocol to the IS-IS route all outgoing

Restricts the external publication of route entries generated by the device itself

This command will filter the link status information released to the outside world

An engineer uses 2 routers to test Pv6 services and runs OSPFV3 to achieve interconnection and interoperability of IPV6 networks The RI has access to the loopback address of R2 The engineer looks at ri's OSPF3 routing table entry and finds that there is no route reaching the R2 loopback address It can't be caused by which of the following?

R2 does not advertise the loopback address

R2 does not enable OSPFv3 on the loopback port

R2 does not advertise the loopback address

R2 in area 0 to advertise the loopback into a different OSPFv3 process

R2 does not configure the Router ID used in the OSPFv3 process

MACsec provides users with secure MAC layer data sending and receiving services. Which of the following is not a service available by ACsec?

Data source authenticity verification

The following statement about the concept of multicast is wrong?

Multicast Source: The sender of the message needs to join the multicast group to provide forwarding of multicast group messages

Multicast router: A router or layer-three switch that supports layer-3 multicast functionality

Multicast Group Members: Multicast group members can be widely distributed anywhere in the network

Multicast Groups: A collection identified by ip multicast addresses

About multi-instance CE (Multi-VPN-Instance CE, MCE). What is the error described below?

The MCE vs. PE direction must have multiple physical links to achieve isolation between different VPN instances

Users who connect to the same MCE but are not part of a VPN instance cannot access each other

The MCE vs. PE direction must have multiple physical links to achieve isolation between different VPN instances

MCE-enabled devices can access multiple VPI instances in BGP/RPLS IPVPN applications, reducing user network equipment investment

On the MCE device, you need to create their own routing tables for different VPNs and bind to the corresponding interface

Huawei H12-891 Practice Test 14 - Free Online Exam Prep & Questions

The following description of the Layer 6 functionality in the OSI reference model is correct?

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-891 Practice Test 14

Question

Huawei H12-891 Practice Tests

Practice Tests