Huawei H12-821 Exam Questions
HCIP-Datacom-Core Technology V1.0 (Page 5 )

Updated On: 12-Jun-2026

This is part of output information on router Huawei.
Which of the following statements regarding the output information is false?

  1. The group address is 225.0.0.0.
  2. The display pim rp-info command displays RP information for a multicast group.
  3. The RP address is 2.2.2.2.
  4. The RP priority is 0.

Answer(s): A

Explanation:

The output shows Group/MaskLen: 224.0.0.0/4, which means it covers the multicast group range from 224.0.0.0 to 239.255.255.255. This is the entire IPv4 multicast address range.
The claim in option A that the group address is 225.0.0.0 is incorrect because 225.0.0.0 is just one of many multicast addresses within the specified range, and the output does not limit the group address specifically to this address.



The following is part of output information on router Huawei.
Which of the following statements regarding the output information is false?

  1. The DR address on the interface is 10.1.1.1.
  2. GigabitEthernet
    /0 of the router runs PIM-SM.
  3. The PIM status on GigabitEthernet
    /0 of the router is Up.
  4. GigabitEthernet
    /0 of the router runs PIMv2.

Answer(s): A

Explanation:

PIM DR: The DR (Designated Router) address is explicitly stated as 10.1.1.2, not 10.1.1.1.



When OSPFv3 runs on a Huawei router, the router automatically selects an interface address as the Router ID of the OSPFv3 process.

  1. TRUE
  2. FALSE

Answer(s): B

Explanation:

In OSPFv3, a Router ID (RID) is a 32-bit value that uniquely identifies the router in the OSPF process.
However, unlike OSPFv2, OSPFv3 does not use IPv6 interface addresses to select the Router ID automatically because the RID must be in IPv4 format.
If a Router ID is not manually configured using the router-id command, OSPFv3 will try to select the RID automatically from the highest IPv4 address of the router's loopback interfaces. If no loopback interface is configured, it will use the highest IPv4 address among active physical interfaces.
If no IPv4 address is available on the router, OSPFv3 cannot start, and an error will be generated.
Thus, the statement is false because OSPFv3 does not automatically select an interface address unless it is explicitly in IPv4 format or manually assigned.



FILL BLANK

After a stack splits, the member switch that fails in MAD competition enters the _______ state. (Capitalize the initial letter.)

  1. Recovery

Answer(s): A

Explanation:

When a stack splits and a member switch fails in MAD (Multiple Active Detection) competition, it enters the Recovery state. This is a protective state to prevent dual-active scenarios and avoid network loops or conflicts.



At which layer does a packet filtering firewall check data packets?

  1. Data link layer
  2. Network layer
  3. Application layer
  4. Physical layer

Answer(s): B

Explanation:

A packet filtering firewall operates at the network layer (Layer 3) of the OSI model. At this layer, it inspects data packets and makes filtering decisions based on attributes such as:
Source and destination IP addresses

Protocols (e.g., TCP, UDP, ICMP)

Source and destination port numbers

Packet filtering firewalls do not examine data beyond the network layer, such as application-level data. Their primary purpose is to allow or deny packets based on the defined filtering rules.



Which of the following statements regarding Network Address and Port Translation (NAPT) and No Port Translation (No-PAT) is true?

  1. In NAPT mode, only the network layer protocol address can be converted.
  2. After NAPT translation, all packets are from the same IP address for external users.
  3. In No-PAT mode, only the transport layer protocol port number can be converted.
  4. In No-PAT mode, the network layer protocol address can be converted.

Answer(s): B,D

Explanation:

After NAPT translation, all packets are from the same IP address for external users In NAPT (Network Address and Port Translation), multiple internal private IP addresses are mapped to a single public IP address by differentiating traffic using port numbers.
For external users, all packets appear to originate from the same public IP address.

In No-PAT mode, the network layer protocol address can be converted In No-PAT mode (also known as basic NAT), only the network layer IP address is translated, while the transport layer ports remain unchanged. This mode is useful when you have one-to-one IP address mapping between internal and external networks.



Which of the following parameters are used in a firewall security policy to match traffic? (Choose all that apply.)

  1. Application
  2. Source security zone
  3. Source IP address
  4. Packet size

Answer(s): A,B,C

Explanation:

Application:
Modern firewalls, especially Next-Generation Firewalls (NGFWs), can inspect traffic at the application layer to identify specific applications (e.g., HTTP, HTTPS, FTP) and enforce application-specific policies.
Source security zone:
Security zones are logical groupings of interfaces or networks (e.g., "trust" and "untrust" zones). Traffic is matched based on the source zone it originates from.
Source IP address:
Firewalls can filter traffic based on the source IP address or range, allowing granular control over which devices or networks are permitted or denied.



The stateful inspection firewall uses the session table to trace activated TCP and UDP sessions, firewall security policies determine which sessions are established, and only the packets associated with sessions are forwarded.

  1. TRUE
  2. FALSE

Answer(s): A

Explanation:

A stateful inspection firewall tracks the state of active sessions (such as TCP and UDP) using a session table. It inspects not only the packet headers but also keeps track of the connection's state (e.g., whether the TCP three-way handshake has completed).
Session Table: The firewall creates and maintains a session table for all active sessions. This table records details such as source and destination IP addresses, ports, and connection state.
Security Policies: The firewall uses predefined security policies to determine whether a session can be established. If the session matches a policy, it is allowed, and subsequent packets belonging to the session are forwarded without being re-evaluated.
Packet Forwarding: Only packets that are part of an allowed session (or explicitly permitted by policy) are forwarded. This ensures that unauthorized traffic is dropped.
Thus, the statement is true.



Viewing page 5 of 56
Viewing questions 33 - 40 out of 433 questions


H12-821 Exam Discussions & Posts (Share your experience with others)

AI Tutor AI Tutor 👋 I’m here to help!