Huawei HCSP-Presales-Campus Network Planning and Design V2.0 H19-401_V2.0 Exam Questions

Answer : A, B, C

In Huawei's Xinghe Intelligent Campus solution, user access control is handled through three primary methods: 802.1X (B) for high-security enterprise environments, Portal (A) for flexible guest and web-based access, and MAC address authentication (C) for IoT devices like printers and IP cameras that lack a user interface. OSPF authentication (D) is a routing security feature used to verify the identity of neighboring routers, not an end-user access authentication method.

Answer : A, B, C, D

Huawei's air interface scheduling follows the WMM (Wi-Fi Multimedia) standard, which maps data packets into four Access Categories (ACs) to ensure Quality of Service (QoS). These queues are:

VO (Voice): Highest priority for low-latency voice traffic.

VI (Video): High priority for video streaming.

BE (Best Effort): Standard priority for general data traffic.

BK (Background): Lowest priority for non-time-critical tasks like file downloads or print jobs.

Answer : D

PMF (Protected Management Frames), defined in the 802.11w standard, is the primary technology used to enhance security specifically over the air interface. While WDS is for bridging, and DTLS/IPsec are used for tunnel encryption (like CAPWAP), PMF protects management frames (such as Disassociation, Deauthentication, and Robust Action frames) from being forged or spoofed by attackers. This prevents common DoS (Denial of Service) attacks where an attacker forcibly disconnects legitimate users from the Wi-Fi network.

Answer : A, B, C, D

Huawei's WIDS (Wireless Intrusion Detection System) and WIPS (Wireless Intrusion Prevention System) provide comprehensive air interface protection. They are designed to detect:

Flood attacks (A): Detecting an abnormal volume of management frames (like Auth/Deauth floods).

Spoofing attacks (B): Detecting unauthorized APs or STAs using the MAC addresses of authorized devices.

Weak IV attacks (C): Detecting attempts to exploit older encryption (like WEP) by identifying weak Initialization Vectors.

Brute force cracking (D): Monitoring for repeated authentication failures that indicate an attempt to guess WPA/WPA2-PSK or WAPI-PSK keys.

Answer : C

While the 'High-Quality 10 Gbps Campus Network' uses Wi-Fi 7 and 100G cores to improve wireless and wired speeds, the specific role of iMaster NCE-Campus is to transform the O&M (Operations & Maintenance) experience. It provides the Network Digital Map, which offers real-time visibility into user experience, automated fault location within minutes (using CampusInsight AI), and 'one-click' configuration delivery. While it enables better application awareness, its primary value proposition in the design guides is the shift from 'Device-Centric O&M' to 'Experience-Centric O&M.'

Answer : A, B, C, D

DHCP Snooping is a key security feature in campus access layer design. When a client obtains an IP address, the switch populates a binding table that links the MAC address (B) and the assigned IP address (D) to the specific physical Interface (C) and the VLAN (A) ID. This table is then used by other security features like Dynamic ARP Inspection (DAI) and IP Source Guard (IPSG) to prevent spoofing attacks by verifying that incoming traffic matches the authorized entries in the binding table.

Answer : A

Huawei's SD-WAN solution supports dual-stack (IPv4/IPv6) networking. This means that overlay tunnels (typically IPsec) can be established regardless of whether the underlying transport network (Internet, MPLS, or LTE) uses IPv4 or IPv6. This is a critical feature for enterprises undergoing transition, allowing them to build a unified virtual private network over heterogeneous physical infrastructures.