Easy To Download Huawei H12-351_V1.0 Exam Dumps Updated 62 Questions
New Updated H12-351_V1.0 Exam Questions 2024
Huawei H12-351_V1.0 (HCIE-WLAN (Written) V1.0) certification exam is a highly sought-after certification program for IT professionals who are looking to enhance their skills in wireless networking. HCIE-WLAN (Written) V1.0 certification is designed to help IT professionals demonstrate their knowledge and expertise in designing, deploying, and troubleshooting complex wireless networks.
NEW QUESTION # 32
Which of the following statements about attack defense is true?
- A. Attack defense can defend against spoofing packet attacks, malformed packet attacks, fragmentation attacks, and flood attacks.
- B. Fragmentation attack defense enables a device to detect packet fragments in real time and discard or rate-limit them to protect the device.
- C. Defense against flood attacks can be used to defend against Ping of Death attacks.
- D. Attack defense allows APs to analyze the contents and behaviors of incoming packets on ports to determine whether packets have attack characteristics. The APs then take defense measures on the packets that have attack characteristics.
Answer: D
Explanation:
Explanation
Attack defense is a feature that allows APs to analyze the contents and behaviors of incoming packets on ports to determine whether packets have attack characteristics. The APs then take defense measures on the packets that have attack characteristics, such as discarding them or limiting their rate. Attack defense can defend against spoofing packet attacks, malformed packet attacks, fragmentation attacks, and flood attacks.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/attack-defense
NEW QUESTION # 33
Drag the Huawei's wireless positioning solutions on the left to their corresponding features and application scenarios on the right.
Answer:
Explanation:
Explanation
According to the Huawei documents and resources, the features and application scenarios of the wireless positioning solutions are as follows:
Wi-Fi terminal positioning: Performs network-side positioning generally based on the RSSI, but provides low positioning accuracy. This method applies to scenarios such as precision marketing and customer flow analysis in shopping malls.
Bluetooth tag positioning: Runs based on the built-in Bluetooth module of an AP. The AP reports data to a positioning engine for location resolution. This positioning technology provides low positioning accuracy and applies to asset positioning and personnel positioning scenarios.
UWB positioning: Provides high positioning accuracy, and is applicable to scenarios that require high accuracy, such as intelligent manufacturing, warehousing logistics, and mechanical manufacturing.
Bluetooth terminal positioning: Runs based on the built-in Bluetooth module of an AP, which can be implemented on either the network side or terminal side.
Therefore, Wi-Fi terminal positioning - 3, Bluetooth tag positioning - 4, UWB positioning - 2, Bluetooth terminal positioning - 1 is the correct answer. References: :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/wi-fi-terminal-positioning :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/bluetooth-tag-positioning :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/uwb-positioning :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/bluetooth-terminal-positioning
NEW QUESTION # 34
WPA3 has the following advantages over WPA and WPA2: supports WPA3-SAE, provides a more secure handshake protocol, enhances the algorithm strength, and supports Suite A cryptography.
- A. False
- B. True
Answer: B
Explanation:
Explanation
WPA3 has the following advantages over WPA and WPA2:
Supports WPA3-SAE, which provides more secure authentication and key management than PSK.
Provides a more secure handshake protocol than 802.11i, which can resist offline dictionary attacks and protect forward secrecy.
Enhances the algorithm strength from AES-128 to AES-192 or AES-256.
Supports Suite A cryptography, which provides higher security levels for government or military networks.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/wpa3
NEW QUESTION # 35
Huawei Agile Cloud Authentication (HACA) supports only IMaster NCE-Campus as the HACA server.
- A. True
- B. False
Answer: B
Explanation:
Explanation
According to the Huawei documents and resources, Huawei Agile Cloud Authentication (HACA) supports iMaster NCE-Campus as well as Agile Controller-Campus as the HACA server. HACA is an authentication method that allows users to access a network without entering user names or passwords3. Therefore, B is the correct answer. References: 3: https://support.huawei.com/enterprise/en/doc/EDOC1100086527
NEW QUESTION # 36
In a multicast solution, there must be reachable unlcast routes between multicast sources and receivers.
- A. False
- B. True
Answer: B
Explanation:
Explanation
In a multicast solution, there must be reachable unicast routes between multicast sources and receivers, because multicast routing protocols use unicast routing information to build multicast forwarding trees.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/multicast
NEW QUESTION # 37
In Huawei's smart roaming solution, which of the following methods can be used by a WAC to discover and maintain neighboring AP entries of STAs? (Select All that Apply)
- A. STAs proactively report neighboring AP information.
- B. The AP listens to the Probe frames sent by STAs.
- C. The WAC obtains such entries using 802. 11v.
- D. The AP periodically and proactively scans neighboring APs of STAs.
Answer: B,D
Explanation:
Explanation
In Huawei's smart roaming solution, the WAC can discover and maintain neighboring AP entries of STAs by using two methods: passive listening and active scanning. Passive listening means that the AP listens to the Probe frames sent by STAs and reports them to the WAC. Active scanning means that the AP periodically and proactively scans neighboring APs of STAs and reports them to the WAC.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/smart-roaming
NEW QUESTION # 38
In a VRRP HSB scenario, if the VRRP preemption delay is set to a small value, which of the following problems may occur after a master/backup switchover? (Select All that apply)
- A. Backup information is incomplete.
- B. A master/backup switchback is triggered too quickly.
- C. The batch backup process cannot be started.
- D. Service data on the master and backup WACs is lost.
Answer: A,B
Explanation:
Explanation
According to the Huawei documents and resources, the VRRP preemption delay is the time that an AC waits before preempting another AC with a lower priority. If the VRRP preemption delay is set to a small value, the following problems may occur after a master/backup switchover:
B: A master/backup switchback is triggered too quickly. If the master AC recovers soon after a switchover, it may preempt the backup AC again and become the master AC. This may cause frequent switchovers and affect network stability C: Backup information is incomplete. If the backup AC takes over services from the master AC too quickly, it may not have received all the data synchronized from the master AC through HSB. This may cause service interruption or data loss Therefore, B and C are the correct answers. References:
https://support.huawei.com/enterprise/en/doc/EDOC1100064368/80fc2ebd/example-for-configuring-vrrp-hsb
2: https://support.huawei.com/enterprise/en/doc/EDOC1100096325/1a753937/vrrp-hsb-configuration
NEW QUESTION # 39
In 802. IX authentication using port-based access control, once a user is authenticated successfully on a port, subsequent users on this port can access the network without authentication. When the authenticated user goes offline, all other users are denied access to the network.
- A. False
- B. True
Answer: B
Explanation:
Explanation
According to the Huawei documents and resources, 802.1X authentication using port-based access control is a method that allows only one user to access the network through a port at a time. If a user is authenticated successfully on a port, subsequent users on this port can access the network without authentication. When the authenticated user goes offline, all other users are denied access to the network . Therefore, A is the correct answer. References: 1: https://support.huawei.com/enterprise/en/doc/EDOC1100086527
NEW QUESTION # 40
Which of the following user access authentication modes are supported In Huawel's CloudCampus Solution?
(Select All that Apply)
- A. Portal authentication
- B. MAC address authentication
- C. 802. IX authentication
Answer: A,B,C
Explanation:
Explanation
Huawei's CloudCampus Solution supports three user access authentication modes: 802.1X authentication, MAC address authentication, and Portal authentication.
References:
https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/user-access-authentication-modes
NEW QUESTION # 41
Which of the following statements about the access layer design are true when Huawei's CloudCampus Solution is applied to small and midsize campus networks? (Select All that Apply)
- A. When selecting a switch, ensure that the following condition is met; Number of connected APs x AP power ^ Power provided by the PoE switch. Therefore, select PoE switches with a proper power supply based on the AP model and quantity.
- B. For relatively large networks in midsize shopping malls, supermarkets, and primary/secondary education campuses, it is recommended that stack networking be used at the access layer. If a single device can provide sufficient access capacity for downstream terminals, single-device networking can be used at the access layer. If the upstream devices of access-layer devices are stacked, it is recommended that Eth-Trunks be used to connect to such upstream devices. If more APs need to be deployed, use the PoE switch to increase the number of APs to be connected.
- C. In the mini-store scenario, APs and egress devices must be deployed if Wi-Fi coverage is required. APs cannot directly connect to egress links and do not support NAT.
- D. Select appropriate models of access switches based on whether PoE support is required and how many APs need to access the network.
Answer: A,D
Explanation:
Explanation
A is false because in the mini-store scenario, APs can directly connect to egress links and support NAT if Wi-Fi coverage is required. There is no need to deploy egress devices separately.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/access-layer-design
NEW QUESTION # 42
Which of the following statements about VXLAN is false?
- A. Layer 2 and Layer 3 VXLAN gateways must maintain VBDIF interfaces. Otherwise, users cannot communicate with each other through these interfaces.
- B. A Layer 3 VXLAN gateway is used for inter-subnet communication on a VXLAN network and communication with external non-VXLAN networks.
- C. A Layer 2 VXLAN gateway forwards traffic to a VXLAN network and can also be used for Intra-subnet communication on the same VXLAN network.
- D. A VBDIF interface is a logical interface created based on a BD. It is similar to a VLANIF interface on a traditional network.
Answer: A
Explanation:
Explanation
B is false because only Layer 3 VXLAN gateways need to maintain VBDIF interfaces for inter-subnet communication on a VXLAN network or communication with external non-VXLAN networks. Layer 2 VXLAN gateways do not need VBDIF interfaces.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/vxlan-gateway
NEW QUESTION # 43
Which of the following statements are true about the WLAN site survey In different typical scenarios? (Select All that Apply)
- A. In an office scenario, the load-bearing columns and partitions affect the signal coverage. If an integrated ceiling is used, deploy APs near maintenance entrances. If a metal ceiling is used, mount APs on the ceiling or wall.
- B. In a ward-round scenario, high requirements are posed on the coverage field strength, roaming effect, and bandwidth. Determine the interference of medical equipment and the areas where Wi-Fi signals are not allowed.
- C. In a classroom scenario. If the walls are made of reinforced concrete, the signal attenuation Is high. In this case, you are advised to test the attenuation during the site survey. Additionally, pay attention to the locations of ELV rooms in the teaching building.
- D. In a stadium scenario, the onsite environment is complex and cabling is difficult. Therefore, confirm with the property management company about ELV rooms and cabling. If the transmission distance is too long, consider deploying more switches. During the survey, focus on the interference between APs and AP mounting modes.
Answer: A,B,C,D
Explanation:
Explanation
Only: All statements are true about the WLAN site survey in different typical scenarios.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/wlan-site-survey
NEW QUESTION # 44
Which of the following methods are used in IPsec to ensure secure transmission of service data on the network through encryption and authentication?
- A. The receiver verifies the identity of the sender.
- B. Data integrity is verified.
- C. The receiver rejects old or duplicate packets in order to prevent attacks initiated by malicious users who resend sniffed packets,
- D. The sender verifies the identity of the receiver.
Answer: A,B
Explanation:
Explanation
IPsec uses authentication headers (AHs) and encapsulating security payloads (ESPs) to ensure secure transmission of service data on the network. AHs provide authentication and integrity verification for the sender and the receiver, while ESPs provide encryption and optional authentication for the data.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/ipsec
NEW QUESTION # 45
Drag the reasons for AP onboarding failures on the left to the corresponding troubleshooting operations on the right.
Answer:
Explanation:
Explanation
According to the Huawei documents and resources, the troubleshooting operations for the AP onboarding failures are as follows:
APS fail to be authenticated by the WAC: Whitelist the APS. The WAC can authenticate APs based on their MAC addresses or SNs. If an AP is not whitelisted on the WAC, it cannot be authenticated and onboarded.
License resources on the WAC are insufficient: Expand the license capacity. The WAC can manage a limited number of APs based on its license. If the license resources are insufficient, some APs cannot be onboarded.
APS fail to obtain IP addresses: Check the DHCP server. The APs need to obtain IP addresses from a DHCP server before they can communicate with the WAC. If the DHCP server is not configured or reachable, the APs cannot obtain IP addresses and onboard.
APS fail to ping the WAC: Check the network between the WAC and APS. The APs need to ping the WAC to discover its IP address and establish a CAPWAP tunnel. If there is a network problem between the WAC and APs, such as incorrect VLAN configuration or firewall blocking, the APs cannot ping the WAC and onboard.
Therefore, APS fail to be authenticated by the WAC - c, License resources on the WAC are insufficient - b, APS fail to obtain IP addresses - d, APS fail to ping the WAC - a is the correct answer. References: :
https://support.huawei.com/enterprise/en/doc/EDOC1100158948/9a0d5c37/ap-onboarding-failures
NEW QUESTION # 46
Which of the following key factors is used by the CloudCampus cloud management platform to determine the tenant to which a device belongs?
- A. Device model
- B. Device MAC address
- C. Device ESN
- D. Device IP address
Answer: C
Explanation:
Explanation
The device ESN (Electronic Serial Number) is a unique identifier that is used by the CloudCampus cloud management platform to determine the tenant to which a device belongs. The device ESN is bound to a tenant when a device is added to the platform.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/device-esn
NEW QUESTION # 47
During a project lifecycle, the______ document needs to be output after the high level design be output after the low level design is complete. (Enter the acronyms in capital letters.)
Answer:
Explanation:
ATP
ATP stands for Acceptance Test Plan, which is a document that needs to be output after the low level design is complete. The ATP describes the acceptance criteria and test cases for the project.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/atp
NEW QUESTION # 48
In a dual-link backup scenario, the active/standby link switchover mode is set to priority. When the active link recovers, the AP detects that the original active link has a higher priority and triggers a switchback. How many Echo intervals does the AP wait for before switching back to the original primary WAC?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation
In a dual-link backup scenario, when the active link recovers, the AP waits for 15 Echo intervals before switching back to the original primary WAC. This prevents frequent link switchovers caused by unstable links.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/dual-link-backup
NEW QUESTION # 49
After multicast-to-unicast conversion is enabled on an AP's air interface, which of the followings is the destination MAC address of multicast packets sent over the air interface?
- A. MAC address of a STA
- B. Multicast MAC address
- C. MAC address of the multicast source
- D. Broadcast MAC address
Answer: A
Explanation:
Explanation
After multicast-to-unicast conversion is enabled on an AP's air interface, the destination MAC address of multicast packets sent over the air interface is changed to the MAC address of a STA that has joined the multicast group. This improves the transmission efficiency and reliability of multicast packets.
References:
https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/multicast-to-unicast-conversion
NEW QUESTION # 50
Which of the following are typical 802. IX authentication modes? (Select All that apply)
- A. EAP relay
- B. EAP-TLS
- C. EAP-MD5
- D. EAP termination
Answer: A,D
Explanation:
Explanation
According to the Huawei documents and resources, EAP termination and EAP relay are typical 802.1X authentication modes between the access device and authentication server. In EAP termination mode, the access device terminates EAP packets and encapsulates them into RADIUS packets. In EAP relay mode, the access device directly encapsulates the received EAP packets into RADIUS using EAP over RADIUS (EAPoR) packets2. Therefore, A and B are the correct answers. References:
https://support.huawei.com/enterprise/en/doc/EDOC1100086527
NEW QUESTION # 51
Satellite positioning can achieve high positioning accuracy in both indoor and outdoor scenarios.
- A. True
- B. False
Answer: B
Explanation:
Explanation
Satellite positioning can achieve high positioning accuracy in outdoor scenarios, but not in indoor scenarios.
This is because satellite signals are easily blocked or interfered by buildings, walls, ceilings, and other obstacles in indoor environments.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/satellite-positioning
NEW QUESTION # 52
802. 11r fast roaming (over-the-air) is enabled on the WLAN shown in the figure. A STA roams from AP1 to AP2. Sort the steps in chronological order during the 802.11r fast roaming process between WACs.
Answer:
Explanation:
Explanation
According to the Huawei documents and resources, the chronological order during the 802.11r fast roaming process between WACs is as follows:
2.The STA accesses the network through API. This is the initial association process before roaming.
1.The STA initiates an 802.11 FT authentication request to AP2. This is the first step of the roaming process when the STA moves to a new AP.
3.AP2 starts the reassociation timer, and sends an 802.11 FT authentication response to the STA. This is the second step of the roaming process when AP2 responds to the STA's request and sets a timer for reassociation.
4.The STA generates and installs a P TK based on the information contained in the response frame. This is the third step of the roaming process when the STA derives a new pairwise key for encryption.
5.The STA sends a reassociation request to AP2. This is the fourth step of the roaming process when the STA requests to reassociate with AP2.
6.AP2 generates and installs a PTK according to PMK-RI and information contained in the request frame. This is the fifth step of the roaming process when AP2 derives the same pairwise key as the STA.
7.After receiving the reassociation request, AP2 disables the reassociation timer, and then sends a reassociation reg onse to the STA. This is the sixth step of the roaming process when AP2 confirms the reassociation with the STA and stops the timer.
8.The STA receives the response frame of AP2. The roaming process is complete. This is the final step of the roaming process when the STA completes the handover to AP2.
Therefore, 2, 1, 3, 4, 5, 6, 7, 8 is the correct answer. References:
https://support.huawei.com/enterprise/en/doc/EDOC1100169459/8d79210e/configuring-wireless-mesh-networki
NEW QUESTION # 53
When a STA roams from API to AP2 at Layer 2, AP2 notifies its neighbors of from this STA is encapsulated in a tunnel and sent to API for forwarding.
- A. True
- B. False
Answer: B
Explanation:
Explanation
When a STA roams from AP1 to AP2 at Layer 2, AP2 notifies its neighbors of the MAC address learned from this STA. The MAC address is not encapsulated in a tunnel and sent to AP1 for forwarding. Instead, AP1 deletes the MAC address entry of the STA and releases the IP address lease.
References: https://support.huawei.com/enterprise/en/doc/EDOC1100058940/8a8f1c9b/layer-2-roaming
NEW QUESTION # 54
......
Updated Free Huawei H12-351_V1.0 Test Engine Questions with 62 Q&As: https://www.testkingit.com/Huawei/latest-H12-351_V1.0-exam-dumps.html
The Best HCIE-WLAN H12-351_V1.0 Professional Exam Questions: https://drive.google.com/open?id=1dJW_e1swSP-X2Ca7SLyyEmK1Hohbw-oz