Prepare with Huawei H13-431 exam torrent, pass for sure

The following is the description of the data center security solution design principles, which is wrong?

• A. In the case that all the customers purchase Huawei products, the open compatibility of the network may be disregarded, because the compatibility with the same manufacturer is the best, and the best protection effect can be achieved.
• B. Use the default denied policy to ensure minimum authorization, which can ensure that users without permissions cannot attack the network.
• C. The possibility of expanding network needs to be considered in future business development needs, so the principle of scalability must be followed.
• D. Adopt high reliability to avoid single point of failure and ensure the network can operate normally.

In the cloud data center scenario, how much CPU is over-allocated, there is no absolute limit. How much is underlying server CPU usage rate recommended to reach, it will not be released new virtual machines?

• A. 70%~80%
• B. 50%~60%
• C. 60%~70%
• D. 80%~90%

When planning and designing a data center, A company conducts network design based on different business scenarios. The following are some solutions when planning and designing. Which description is wrong?

• A. For the service front-end area, the firewall is deployed next to the firewall, and the virtualization is enabled. The AC delivers the policy route according to the access policy defined by the cloud platform.
• B. Multi-service hybrid deployment, requiring security isolation between services. The gateway can deliver multiple VRFs as needed, and the VPCs and the PODs must communicate with each other inside and outside the POD.
• C. Deploying a single service or deploying multiple services but on-demand isolation between services requires open east-west access and controlled north-south access. You can choose a security policy that does not pass the firewall by default.
• D. For the DMZ zone, the firewall is connected in series with the gateway. The traffic between the POD and the internal and external access must pass through the firewall.

Which of the following description is correct about the Anti-DDoS drainage method? (Multiple Choice)

• A. UNR drainage
• B. BGP drainage
• C. Policy routing drainage
• D. GRE drainage

In the cloud network integration scenario, the VDC tenant creates a routing network, 192.168.123.0/24, gateway is 192.168.123.1, and enables DHCP.
Which of the following descriptions are wrong? (Multiple choice)

• A. Because there is no cloud host, no user port is online on the AC-DCN.
• B. The VBDIF gateway is automatically created on the physical switch and the DHCP function is enabled.
• C. VXLAN VNI does not need to be manually specified and is automatically assigned randomly from AC-DCN global resources.
• D. The Bridge Domain ID is automatically assigned randomly from the AC-DCN global resources.