H12-891_V1.0 Practice Questions

???? R1 – Headend

It receives a normal IPv6 packet from CE1.

It inserts the SRH (Segment Routing Header) with segment list.

Therefore, R1 is the Headend.

Huawei Reference:

“The SRv6 headend node receives a normal IPv6 packet and inserts an SRH, becoming the source of the SR path.”

(Source: HCIE-Datacom V1.0 – SRv6 Fundamentals)

???? R2 – Transit Node

R2 simply forwards the SRv6-encapsulated packet.

It does not process any segment SI

D.  

Hence, R2 is a Transit node.

“Transit nodes in SRv6 just forward packets based on the active segment in the IPv6 destination address without processing SRH.”

(Source: HCIE-Datacom Study Guide – SRv6 Node Roles)

???? R3 – Endpoint

The first SID in SRH is FC03::3, which belongs to R3.

R3 processes the SID, pops it, and forwards the packet to the next segment FC04::4.

Thus, R3 is an Endpoint for one segment.

???? R4 – Endpoint

The final destination SID in the SRH is FC04::4, which belongs to R4.

R4 performs the final End behavior, handling the payload.

So, R4 is also an Endpoint.

Understanding HTTP Security Risks

???? What is HTTP?

HTTP (Hypertext Transfer Protocol) is a protocol used for communication between web clients (browsers) and servers.

It is unencrypted, making it vulnerable to security threats.

Potential Risks in HTTP Communication:

✅

A.  

Correct: HTTP traffic is unencrypted, meaning attackers can capture data using tools like Wireshark or MITM (Man-in-the-Middle) attacks.

Example: Hackers intercept login credentials over public Wi-Fi.

✅

B.  

Correct: Without encryption or authentication, attackers can spoof legitimate websites.

Example: A phishing website mimics a banking login page to steal user credentials.

✅

C.  

Correct: Attackers can modify HTTP data in transit, changing the content sent to users.

Example: Injecting malicious scripts into a webpage (e.g., Cross-Site Scripting - XSS).

❌

D.  

Incorrect: HTTP runs over TCP, which ensures reliable data transmission.

Packet loss is not a major security risk but rather a network performance issue.

How to Mitigate HTTP Risks?

Use HTTPS (HTTP Secure) → Encrypts data using TLS (Transport Layer Security).

Enable HSTS (HTTP Strict Transport Security) → Forces HTTPS connections.

Implement Web Application Firewalls (WAFs) → Protects against attacks like SQL Injection & XSS.

✅ Reference: Huawei HCIE-Datacom Guide – Network Security Risks in HTTP Communication

Let’s analyze the scenario and each statement carefully based on OSPF path selection and BGP behavior in Huawei routers.

✅ Option A: The preferred path is R1–R3–R4.

According to the OSPF cost values:

R1–R3–R4: Cost = 1 + 1 = 2

R1–R2–R4: Cost = 2 + 2 = 4

OSPF chooses the lowest-cost path to reach a destination. Therefore, R1 will prefer the R1–R3–R4 path to reach 172.20.1.4/32.

Huawei Datacom Reference:

" OSPF selects routes based on the shortest path calculated using link costs. The router always selects the path with the lowest cost. "

(Source: HCIE-Datacom Study Guide v3.0 – OSPF Path Selection, Chapter 5)

✅ Option B: If the stub router on-startup command is run on R3, packet loss occurs during the power-off process of R3 but no packet loss occurs during the startup process of R3.

When R3 is powered off, OSPF needs to reconverge, which causes temporary packet loss.

When R3 starts up, it will advertise itself as a stub router using the stub-router on-startup command. This tells OSPF not to use R3 as a transit path during the startup period, thus preventing traffic blackholing.

Huawei Datacom Reference:

" stub-router on-startup command prevents a newly started router from being used as a transit node by OSPF, allowing routing to remain stable during convergence. "

(Source: HCIE-Datacom Study Guide v3.0 – OSPF Stub Router Functionality, Chapter 6.2)

❌ Option C: The preferred path is R1–R2–R4.

This is incorrect because the OSPF path cost via R2 is higher (4) than the cost via R3 (2).

❌ Option D: Packet loss occurs during both the power-off and startup processes of R3.

Incorrect. As explained above, when the stub-router on-startup command is used, packet loss is avoided during startup, but still occurs during power-off since the alternate path requires convergence.

Understanding Huawei OPS and HTTP Communication

???? What is Huawei OPS?

Huawei Open Programmability System (OPS) enables API-based network automation using standard HTTP requests.

It supports NETCONF, RESTCONF, and RESTful APIs for device management.

???? Why TCP Port 80?

Port 80 is the default port for HTTP traffic.

Used for web-based device management, API calls, and telemetry data exchange.

If HTTPS (secure version) is used, the default port is 443.

Why is the Answer 80?

✅ HTTP operates on TCP port 80 by default.

✅ Huawei OPS uses HTTP APIs to manage network devices, making port 80 the standard option.

Real-World Application:

Cloud-Native Network Automation: Uses HTTP-based APIs for SDN controllers and automation tools.

Network Device Management: Enables remote configuration and monitoring over HTTP APIs.

✅ Reference: Huawei HCIE-Datacom Guide – Open Programmability System (OPS) & HTTP Communication