Huawei H13-431試験情報と無料練習テストはこちら
合格させるHuawei H13-431プレミアムお試しセットテストエンジンPDFで無料問題集セット
質問 86
Which of the following components must be involved in the process of deploying disaster recovery services? (Multiple Choice)
- A. ManageOne SC
- B. Neutron
- C. Nova
- D. Cinder
正解: A,C,D
質問 87
When deploying a 10*900G disk RH2288H V3 server as one of the FusionSphere OpenStack control nodes, it is recommended that all disk groups be RAID1 before deployment.
- A. True
- B. False
正解: B
質問 88
Tenants have created a network on the cloud platform, which is not possible in the following network types?
- A. VLAN
- B. VXLAN
- C. Flat
- D. Local
正解: C
質問 89
Which of the following is not a consideration when planning for available partitions in a cloud data center scenario?
- A. Based on different storage types
- B. Based on the 2-layer network range
- C. Based on the resource SLA capabilities
- D. Based on reliability, engineering interconnection
正解: A
質問 90
ManageOne (SC) is responsible for disaster recovery management, and implements related functions such as service protection configuration, failover, and disaster recovery drills.
- A. True
- B. False
正解: B
質問 91
When planning and designing a data center, A company conducts network design based on different business scenarios. The following are some solutions when planning and designing. Which description is wrong?
- A. Deploying a single service or deploying multiple services but on-demand isolation between services requires open east-west access and controlled north-south access. You can choose a security policy that does not pass the firewall by default.
- B. Multi-service hybrid deployment, requiring security isolation between services. The gateway can deliver multiple VRFs as needed, and the VPCs and the PODs must communicate with each other inside and outside the POD.
- C. For the service front-end area, the firewall is deployed next to the firewall, and the virtualization is enabled. The AC delivers the policy route according to the access policy defined by the cloud platform.
- D. For the DMZ zone, the firewall is connected in series with the gateway. The traffic between the POD and the internal and external access must pass through the firewall.
正解: C
質問 92
The following is the description of the data center security solution design principles, which is wrong?
- A. Use the default denied policy to ensure minimum authorization, which can ensure that users without permissions cannot attack the network.
- B. The possibility of expanding network needs to be considered in future business development needs, so the principle of scalability must be followed.
- C. Adopt high reliability to avoid single point of failure and ensure the network can operate normally.
- D. In the case that all the customers purchase Huawei products, the open compatibility of the network may be disregarded, because the compatibility with the same manufacturer is the best, and the best protection effect can be achieved.
正解: D
質問 93
In the Huawei SDN solution, which description of the flexible resource pool is correct? (Multiple Choice)
- A. A set of AC supports unified management of multiple types of fabrics.
- B. Network Overlay is compatible with third-party vendor switches.
- C. Support the business chain to divert to third-party VAS services.
- D. Compatible with access to various morphological computing resources such as virtual machines, physical machines, bare metal servers, and ports.
正解: A,C,D
質問 94
In the Huawei SDN solution, which description is wrong about the FusionSphere business model?
- A. The VM is a virtual machine and the VM supports deployment across VPCs.
- B. The VDC is a resource unit, the VDC supports cross-POD deployment, and the tenant uses the VDC as the granularity for resource lease.
- C. POD is a physical unit. For example, a fabric network can be considered as a POD.
- D. VPC is a business unit, and VPC supports cross-POD deployment.
正解: A
質問 95
In a Huawei SDN solution, an iBGP neighbor and an eBGP neighbor can exist simultaneously in the BGP instance where the EVPN is deployed.
- A. True
- B. False
正解: B
質問 96
The B enterprise purchases Huawei firewall as the SDN VAS resource pool. Which of the following description about the firewall access location is wrong?
- A. When the firewall is physically connected between the gateway and the PE, the external traffic must pass through the firewall to tighten the internal security requirements.
- B. When the firewall is physically attached to both sides of the gateway, the firewall supports flexible deployment of security policies, which is recommended to use.
- C. When the firewall is physically attached to both sides of the gateway, the firewall expansion is difficult, and the data center network needs to be stable for a certain period of time.
- D. When the firewall is physically connected to the service leaf, the firewall service leaf is connected to the VXLAN network for scenarios that will be migrated to the distributed network later.
正解: C
質問 97
On the Huawei SDN solution vDC active-standby disaster recovery-active and standby egress scenarios, an active/standby external network can support multiple outlets to form one active and multiple standby.
- A. True
- B. False
正解: B
質問 98
C enterprises deploy Huawei SDN cloud network integration solution. Because of the small scale and centralized gateway deployment, it is hoped to improve the reliability of the gateway. Which of the following description about gateway reliability is wrong?
- A. Two devices form a VRRP group, and two devices have independent control planes that are backups of each other.
- B. Two devices perform CSS stacking, and gateway traffic can be load-sharing on the stack member devices.
- C. Multiple devices form a DFS group, dual-active gateway mode, and gateway traffic can be load-sharing on DFS group member devices.
- D. Multiple devices form a DFS group, four active gateway mode, FW/LB value-added equipment side-by-side access or Service Leaf access
正解: D
質問 99
The following description of the cloud network integrated cloud host service flow, which is wrong?
- A. The traffic from the firewall to the Service Leaf is VLAN encapsulation.
- B. The cloud host accesses the public network traffic, and NAT is performed on the Public firewall.
- C. The traffic between the virtual machine switch and the ToR is VLAN encapsulation.
- D. The traffic inside the fabric is all VXLAN encapsulation.
正解: B
質問 100
In the SDN cloud network integration environment, customers need to directly connect the cloud host to the external network. Which of the following suitable network types is?
- A. Direct network
- B. Internal network
- C. External network
- D. Routing network
正解: D
質問 101
In the cloud data center scenario, different users have different permissions. Which of the following description is correct? (Multiple choice)
- A. The organization administrator manages resources and application forms in multiple VDCs.
- B. The main tasks of VDC salesperson include application, extension, change and deletion of services; inquiry, operation and maintenance of applied resources; VPC resource management in VDC.
- C. The main tasks of the system super administrator are the access and configuration of the cloud resource pool; organization management, VDC management, system user management; global capacity monitoring, alarm monitoring, and so on.
- D. The main tasks of the VDC administrator include application, extension, change, and deletion of services; application management, user management, and resource management in the VDC; query, operation, and maintenance of all resources.
正解: A,C,D
質問 102
Which of the following environments are supported by FusionStorage to provide block storage services? (Multiple Choice)
- A. Virtualization based on KVM environment
- B. FusionSphere environment
- C. VMware environment
- D. Traditional non-virtualized scenarios
正解: A,B,C,D
質問 103
Which of the following network planes is not the network plane that Huawei eBackup planning and design needs to consider?
- A. Storage plane
- B. Backup server and inter-agent internal communication plane
- C. Heartbeat network plane
- D. Management plane
正解: C
質問 104
Wihch of the following description is correct about Huawei Anti-DDoS solution function? (Multiple Choice)
- A. Anti-DDoS can protect against single-packet attacks
- B. Anti-DDoS can prevent intrusion
- C. Anti-DDoS can protect against viruses
- D. Anti-DDoS can prevent traffic type denial attacks
正解: A,D
質問 105
Which of the following are the services that only VPC's routing network can provide for tenants? (Multiple Choice)
- A. vRouter
- B. EIP
- C. Security Group
- D. SNAT
正解: B,D
質問 106
Which of the following is the correct description of the design sequence of disaster recovery plan?
- A. Compatibility Confirmation -> Disaster Tolerance Capacity Calculation -> Disaster Tolerance Bandwidth Calculation -> Network Design -> Disaster Recovery Function Design
- B. Network Design -> Disaster Tolerance Bandwidth Calculation -> Disaster Tolerance Capacity Calculation -> Disaster Recovery Function Design -> Compatibility Confirmation
- C. Compatibility Confirmation -> Disaster Tolerance Bandwidth Calculation -> Disaster Tolerance Capacity Calculation -> Network Design -> Disaster Recovery Function Design
- D. Disaster Tolerance Bandwidth Calculation -> Disaster Tolerance Capacity Calculation -> Network Design -> Disaster Recovery Function Design -> Compatibility Confirmation
正解: A
質問 107
In the Huawei SDN cloud network integration solution, the cloud platform uses the RESTful interface to let LBaaS plug-in pass away Agent to distribute configuration to LB devices.
- A. False
- B. True
正解: B
質問 108
SDN cloud network integration scenario, by default, which of the following traffic needs to go through the firewall? (Multiple Choice)
- A. Traffic between different routed networks
- B. Traffic between different VDCs
- C. Traffic between different security groups
- D. Traffic between different VPCs
正解: A,B,D
質問 109
What is the correct description about the security group? (Multiple Choice)
- A. By default, other security groups can access this security group.
- B. The security group allows traffic to flow in and out of the instance.
- C. A network card of a virtual machine can only be configured with one security group.
- D. Multiple rules can be configured in a security group.
正解: B,D
質問 110
In the cloud network integration scenario, a client successfully applies for a cloud host and binds the EIP. In case of a problem, the cloud host does not reach the external network, and another cloud host that reaches the same network segment does not pass. What is the possible reasons? (Multiple Choice)
- A. The cloud host uses an internal network.
- B. No virtual firewall is applied.
- C. There is no virtual firewall configured.
- D. Cloud hosts are in different security groups.
正解: C,D
質問 111
......
更新された公式認定はH13-431認証済みのH13-431問題集でPDF：https://www.goshiken.com/Huawei/H13-431-mondaishu.html