In FusionCompute, which of the following statements are false about security groups?
Correct Answer: C,D
According to the Huawei HCIA-Cloud Computing documentation, security groups act as a distributed virtual firewall for Virtual Machines (VMs). Statement C is FALSE because FusionCompute allows a single Virtual Machine (or more specifically, a virtual NIC) to belong to multiple security groups simultaneously. This multi- group association allows for tiered security policies, such as having one security group for general web traffic and another for specific management access. When a VM belongs to multiple groups, the rules from all groups are aggregated to determine the final access control list. Statement D is alsoFALSEbecause of the terminology regarding the "creation" location. In the FusionCompute architecture, security groups are logical objects created and managed within theVRM (Virtual Resource Management)portal, not "on the VMs" themselves. A security group exists independently of any specific VM; administrators create the group and define its rules first, and then they associate VMs with that group. Furthermore, users do not add rules "on VMs"; they add rules to the security group object in the management plane, which the system then automatically pushes to the corresponding CNA hosts where the VMs are running. The other statements are technically accurate. Statement A is correct as Huawei's security groups utilize the underlying LinuxiptablesorOVS (Open vSwitch)flow rules to filter packets at the hypervisor level. Statement B is also true; a VM's security group membership can be modified dynamically while the VM is in a running state without requiring a restart or causing a service interruption. This flexibility is a key feature of Huawei's software-defined networking, allowing for real-time security adjustments in a dynamic cloud environment.
Question 37
Which of the following statements aretrueabout distributed storage?
Correct Answer: A,B,D
Distributed storage is a core concept in cloud computing and is emphasized in HCIA-Cloud Computing as a foundational technology for large-scale cloud platforms. OptionAis true. Distributed storage is designed forhorizontal scalability, allowing storage capacity and performance to increase simply by adding more nodes. OptionBis true. Unlike traditional centralized storage systems, distributed storage typically runs ongeneral- purpose x86 servers, reducing cost and improving flexibility. OptionCis false. Distributed storagedoes not rely on traditional RAIDfor data protection. Instead, it usesdata replication or erasure coding, which are more suitable for large-scale distributed environments. OptionDis true. Distributed storage eliminates the need for dedicated controller enclosures or disk enclosures. Storage resources are directly provided bygeneral-purpose servers, which aligns with cloud-native architecture principles described in HCIA materials.
Question 38
Which of the following descriptions about Layer 3 switches and routers is wrong? (Multiple choice)
Correct Answer: B,D
Question 39
There are three levels in the computing virtualization architecture, which of the following does not belong to the three levels of the host?
Correct Answer: A
Question 40
Libvirt can be used by many applications. In addition to its own virsh command set, Virt- manager.Virt-viewer.Virt-install can manage ZVWM virtual machines through Libvirt.
