Huawei Updated H12-891_V1.0 Exam Questions and Answers by millicent

Understanding BGP EVPN and VXLAN Routing

EVPN (Ethernet VPN) with VXLAN is used for data center networking and L3 VPN interconnection.

???? BGP EVPN Route Types & Their Purpose

Type 2: MAC/IP Advertisement Route (Carries MAC + IP)

Type 3: Inclusive Multicast Route (Carries VTEP Multicast Information)

Type 5: IP Prefix Route (Used for Layer 3 VXLAN Routing)

???? What does Type 5 route contain?

✅ Route Distinguisher (RD): Identifies a unique VPN instance.

✅ GW IP Address: Specifies the Gateway IP for L3 VXLAN routing.

✅ IP Prefix Length: Defines the IPv4/IPv6 network mask for routing.

❌ MAC Address is NOT included in Type 5

Why is Option B (MAC Address) Correct?

✅ MAC addresses are carried in EVPN Type 2 routes, NOT in Type 5.✅ Type 5 routes focus on IP prefixes, not MAC forwarding.

???? Real-World Application:

VXLAN L3 Gateways (EVPN Type 5) allow routers to forward IP traffic across VXLAN tunnels, removing the need for traditional L3 VPNs.

✅ Reference: Huawei HCIE-Datacom Guide – BGP EVPN and VXLAN Routing

Comprehensive and Detailed Explanation:

The reset isis all command resets the entire IS-IS process, including:✔ Neighbor adjacencies✔ LSDB (Link-State Database)✔ All IS-IS-related statistics

Key Points:

This command resets IS-IS completely, causing temporary route convergence delays.

All IS-IS statistics are cleared because the process restarts from scratch.

Since the question states that IS-IS statistics are not cleared, which is incorrect, the correct answer is FALSE.

???? Reference: Huawei HCIE Datacom – IS-IS Troubleshooting and Reset Commands

Understanding SSH Authentication and Key Exchange

???? What Happens When an SSH Client Connects to a Server?1️⃣ Key Exchange Phase (KEX)

Even if only password authentication is used, SSH still performs key exchange.

The server and client negotiate encryption keys using algorithms like Diffie-Hellman (DH).

2️⃣ User Authentication Phase

After encryption keys are exchanged, the user authenticates using a username and password.

Why is the Answer FALSE?

❌ Even with password authentication, SSH still performs key exchange to establish an encrypted session.✅ The SSH session is always encrypted using cryptographic keys generated during KEX.

Real-World Application:

Secure Remote Access: Protects login credentials from MITM (Man-in-the-Middle) attacks.

Cloud & Datacenter Networks: Ensures secure SSH connections across remote infrastructure.

✅ Reference: Huawei HCIE-Datacom Guide – SSH Key Exchange and Authentication

Comprehensive and Detailed Explanation:

iMaster NCE-CampusInsight is Huawei's intelligent network analysis platform that:✔ Collects real-time telemetry data using SNMP, NetStream, and Telemetry.✔ Analyzes traffic patterns to detect network anomalies.✔ Uses AI-driven analytics to optimize network performance.

Thus, the statement is TRUE.

???? Reference: Huawei HCIE Datacom – iMaster NCE-CampusInsight Features