H13-811_V3.5 Practice Questions

All four statements represent Huawei Cloud IAM capabilities. An agency establishes a trust relationship through which one account can delegate another account to manage specified resources according to assigned permissions. Huawei explicitly documents account delegation as an IAM function.

An IAM project corresponds to a region. Huawei defines default projects as mechanisms that group and physically isolate compute, storage, and network resources across regions. Users granted permissions in a default project can access resources covered by those permissions in the associated region. This qualification is important: IAM users do not automatically receive unrestricted access merely by existing; the project's assigned permissions determine their effective access.

A user group is explicitly defined as a collection of IAM users. Assigning permissions to groups simplifies authorization because users added to a group inherit its permissions.

Finally, Huawei's identity federation functionality allows an enterprise Identity Provider (IdP) to establish trust with Huawei Cloud so employees can use existing enterprise identities for SSO access instead of maintaining separate cloud credentials.

Reference topics: IAM Agencies; Project Management; User Groups; Identity Federation; Identity Providers.

===============

Statements B and D are correct. Huawei Cloud CBR architecture consists fundamentally of backups, vaults, and policies. A vault is the storage container used by CBR for backup data. Huawei documentation explicitly states that CBR stores backups in vaults and that different resource categories are associated with appropriate vault types, such as server backup vaults and disk backup vaults.

Statement B is also directly supported. Huawei categorizes CBR policies into backup policies and replication policies. A backup policy automatically runs backup operations according to configured schedules and retention parameters, while a replication policy periodically replicates eligible backup data to another vault or region.

Statement A is incorrect because CBR is specifically designed to automate protection through policies; regular backups do not normally need to depend on repeated manual execution. Huawei advises using backup policies for scheduled protection.

Statement C is too absolute. CBR substantially improves recoverability against accidental deletion, malware, software failures, and hardware faults, but no backup architecture legitimately guarantees that data can never be lost under every conceivable condition.

Therefore, B and D are the verified statements.

Reference topics: CBR Architecture; Vault Management; Backup Policies; Replication Policies.

===============

1 → C

2 → A

3 → D

4 → B

Each fault maps to a specific Huawei Cloud VPC control. A VPC cannot be deleted while dependent resources such as a VPC peering connection still use it, so scenario 1 maps to

C.  

For scenario 2, merely binding an EIP does not override security-group filtering. If the relevant inbound security-group rule does not permit traffic from the source IP address and required protocol/port, the ECS remains inaccessible externally; therefore it maps to

A.  

Scenario 3 maps to

D.  

Scenario 4 maps to

B.  

Reference topics: VPC Troubleshooting; Security Groups; Network ACLs; DHCP; VPC Peering Connections.

===============