H12-891_V1.0 Practice Exam Questions and Answers

Huawei iMaster NCE-Campus provides open APIs for seamless integration with third-party applications and services. Each API serves a specific purpose in managing network security, operations, analytics, and user interactions.

1. Authentication and authorization → Third-party authentication API

This API is used to integrate third-party authentication systems, such as:

LDAP (Lightweight Directory Access Protocol)

RADIUS (Remote Authentication Dial-In User Service)

OAuth/OpenID authentication

It ensures secure user identity verification, access control, and single sign-on (SSO) in CloudCampus networks.

2. Network O&M → Infrastructure API

The Infrastructure API provides tools for network monitoring, diagnostics, and automated management.

It is used for:

Device status monitoring

Network topology visualization

Fault detection and real-time alerts

Performance optimization

3. LBS (Location-Based Services) → LBS API

The LBS API enables applications to access location data collected by the network.

It is used for:

Tracking users or assets within a campus network

Heatmap generation and movement analytics

Geo-fencing and location-based policies

4. Crowd profiling → VAS API

VAS (Value-Added Services) API is designed for advanced analytics and business intelligence.

It supports:

User behavior analytics

Demographic profiling

Marketing strategies based on network usage patterns

Reference from Huawei HCIE-Datacom Documentation:

HCIE-Datacom Training Guide – CloudCampus Solution

Huawei iMaster NCE-Campus API Documentation

Huawei CloudCampus Solution Whitepaper – Open API and Use Cases

Challenges of Static VXLAN Tunnel Configuration

A static VXLAN tunnel requires manual VTEP-to-VTEP configuration, making it complex to maintain.

✅

A.  

Static VXLAN requires manual configuration of VTEP mappings, making it difficult to scale and adjust when adding new VTEPs.

✅

B.  

Unlike BGP EVPN-based VXLAN, which advertises MAC/IP bindings through BGP, static VXLAN relies on flooding for MAC learning, causing excessive traffic.

✅

D.  

If N devices need to communicate, each must be manually configured with N(N-1)/2 VXLAN tunnels, leading to high administrative overhead.

Incorrect Statement Explanation:

❌

C.  

Wrong! Static VXLAN does not use a control plane protocol like BGP EVPN.

Instead, it relies entirely on static mappings, reducing control plane usage.

Reference from Huawei HCIE-Datacom Documentation:

Huawei VXLAN Configuration Guide – Static vs. Dynamic VXLAN Tunnel Establishment

HCIE-Datacom Training Material – Manual Configuration Challenges in Static VXLAN

In firewall hot standby (HRP - Hot Standby Routing Protocol) mode, certain data can be synchronized between the active and standby firewalls to ensure uninterrupted service.

The following data is backed up:

✅ Server mapping table: Contains information about NAT mappings and other session mappings.

✅ AAA user table (excluding the default user admin): Ensures that authenticated users do not need to re-authenticate in case of failover.

✅ Session table: Ensures that existing connections remain active when switching to the standby firewall.

❌ Dynamic MAC address table is NOT backed up because it is dynamically learned and not relevant to firewall session synchronization.

✅ Reference: Huawei HCIE-Datacom Guide - Firewall HRP Synchronization

Forwarding Equivalence Class (FEC) is a key concept in MPLS (Multiprotocol Label Switching), where packets with the same forwarding characteristics are grouped into an FEC and assigned a label.

Correct Answers (Cannot be Used for FEC Allocation):

A.  

Fragment offset is used for reassembling fragmented IP packets at the receiver side.

It is not relevant for MPLS label assignment.

B.  

MPLS does not classify packets based on application-layer protocols (e.g., HTTP, FTP).

It works mainly at Layer 2 and Layer 3.

Incorrect Answers (Valid FEC Allocation Standards):

C.  

One of the most common MPLS FEC classifications.

Packets with the same destination are grouped into the same FE

C.  

D.  

MPLS uses CoS-based traffic classification (e.g., Exp bits in MPLS headers).

Different CoS levels can be mapped to different labels.

Reference from Huawei HCIE-Datacom Documentation:

Huawei MPLS Technology Guide – FEC and Label Assignment

HCIE-Datacom MPLS VPN Configuration Guide

VXLAN Inter-Subnet Routing with Symmetric IRB

VXLAN supports inter-subnet routing using Integrated Routing and Bridging (IRB). In symmetric IRB, both ingress and egress VTEPs perform Layer 3 forwarding to ensure efficient packet forwarding across subnets.

✅

A.  

In symmetric IRB, both ingress and egress VTEPs perform Layer 3 lookup and forwarding.

The ingress routes packets before encapsulating them in VXLAN, and the egress performs another Layer 3 lookup to determine final delivery.

✅

D.  

L3VNI (Layer 3 VXLAN Network Identifier) is used for inter-subnet routing between VXLAN segments.