FreeQAs
 Request Exam  Contact
  • Home
  • View All Exams
  • New QA's
  • Upload
PRACTICE EXAMS:
  • Oracle
  • Fortinet
  • Juniper
  • Microsoft
  • Cisco
  • Citrix
  • CompTIA
  • VMware
  • ISC
  • SAP
  • EMC
  • PMI
  • HP
  • Salesforce
  • Other
  • Oracle
    Oracle
  • Fortinet
    Fortinet
  • Juniper
    Juniper
  • Microsoft
    Microsoft
  • Cisco
    Cisco
  • Citrix
    Citrix
  • CompTIA
    CompTIA
  • VMware
    VMware
  • ISC
    ISC
  • SAP
    SAP
  • EMC
    EMC
  • PMI
    PMI
  • HP
    HP
  • Salesforce
    Salesforce
  1. Home
  2. Huawei Certification
  3. H12-891_V1.0 Exam
  4. Huawei.H12-891_V1.0.v2026-06-05.q295 Dumps
  • ««
  • «
  • …
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • …
  • »
  • »»
Download Now

Question 136

Which of the following statements is incorrect about Authentication Header (AH)?

Correct Answer: A
Authentication Header (AH) in IPsec
The Authentication Header (AH) protocol is part of IPsec and provides authentication, integrity, and replay protection but does NOT provide encryption.
✅ B. AH provides data origin authentication.
Ensures that packets come from a trusted source using cryptographic signatures.
✅ C. AH provides anti-replay protection.
Uses sequence numbers to prevent attackers from replaying old packets.
✅ D. AH provides data integrity authentication.
Ensures data integrity by verifying that packets have not been tampered with during transmission.
❌ A. AH provides packet encryption - Incorrect!
AH does not encrypt packet contents. It only authenticates headers.
ESP (Encapsulating Security Payload) is used for encryption in IPsec.
Reference from Huawei HCIE-Datacom Documentation:
Huawei IPsec Configuration Guide - AH vs. ESP
HCIE-Datacom Training Material - IPsec Security Mechanisms
insert code

Question 137

In a scenario where a VXLAN tunnel is dynamically established through BGP EVPN, which of the following command needs to be run on the VBDIF interface to enable the VTEP peer to generate BGP EVPN Type 2 routes based on ARP information of the local terminal?

Correct Answer: C
BGP EVPN Type 2 Route (MAC/IP Advertisement Route)
This route carries MAC and IP address bindings to inform remote VTEPs about locally learned endpoints.
Why Use arp collect host enable?
Collects ARP entries of locally connected hosts.
Enables BGP EVPN Type 2 route generation to distribute the learned ARP information.
Incorrect Answer Explanations:❌ A. mac-address xxxx-xxxx-xxxx - Manually configures a MAC address but does not enable ARP collection for EVPN Type 2 routes.❌ B. arp-proxy enable - Enables ARP Proxy but does not advertise ARP information using BGP EVPN.❌ D. arp distribute-gateway enable - Used in Distributed Anycast Gateway (DAG) mode but not for collecting host ARP data.
Reference from Huawei HCIE-Datacom Documentation:
Huawei VXLAN EVPN Configuration Guide - ARP Handling and EVPN Type 2 Routes HCIE-Datacom Training Material - VTEP ARP Advertisement in VXLAN Networks
insert code

Question 138

Which of the following messages does the BGP protocol support?

Correct Answer: A,B,C
insert code

Question 139

Which of the following statements about IPSG is incorrect?

Correct Answer: A
Comprehensive and Detailed
IP Source Guard (IPSG) is a Layer 3 security feature used to protect against IP address spoofing by filtering packets based on bound IP-MAC mappings.
Correct Statements:✔ IPSG is a Layer 3 filtering mechanism that checks if the source IP address of a packet matches the learned or configured bindings (Option B).✔ IPSG prevents unauthorized IP address changes by enforcing binding rules (Option C).✔ IPSG defends against IP spoofing attacks by dropping packets from unauthorized sources (Option D).
Incorrect Statement:❌ Option A is incorrect because IPSG does not send alarms to an NMS when an invalid packet is detected. Instead, it drops the packet.
Thus, the correct answer is A.
📖 Reference: Huawei HCIE Datacom Security Guide - IP Source Guard (IPSG)
insert code

Question 140

The following about the Router-LSA of OSPFv3 is correct?( Single choice questions).

Correct Answer: B
insert code
  • ««
  • «
  • …
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • …
  • »
  • »»
[×]

Download PDF File

Enter your email address to download Huawei.H12-891_V1.0.v2026-06-05.q295 Dumps

Email:

FreeQAs

Our website provides the Largest and the most Latest vendors Certification Exam materials around the world.

Using dumps we provide to Pass the Exam, we has the Valid Dumps with passing guranteed just which you need.

  • DMCA
  • About
  • Contact Us
  • Privacy Policy
  • Terms & Conditions
©2026 FreeQAs

www.freeqas.com materials do not contain actual questions and answers from Cisco's certification exams.