H12-811_V2.0 HCIA-Datacom V2.0 Question and Answers

A /28 subnet mask corresponds to 255.255.255.240, which means each subnet contains 16 IP addresses . The subnet boundaries in the last octet increase in steps of 16: 0, 16, 32, 48, 64, 80, 96, 112, 128, 144, 160, and so on. The host address 192.168.1.147 falls within the subnet range 192.168.1.144 to 192.168.1.159 .

In that subnet, the network address is 192.168.1.144, the usable host range is 192.168.1.145 through 192.168.1.158, and the broadcast address is 192.168.1.159. Therefore, option C is correct. Option D is the first usable host address, not the broadcast address. Option A is just another usable host address. Option B would be the broadcast address only for a /24 network, not for a /28. HCIA-Datacom requires learners to master subnetting because it is essential for IP planning, gateway deployment, route summarization, and troubleshooting Layer 3 communication issues in campus and enterprise networks.

All four options are possible causes of FTP login failure, so the correct answer is A, B, C, and D.

Option A is correct because if the FTP server function is not enabled on the Huawei device, the device cannot provide FTP services and the client cannot log in. Option B is also correct because if the authorized directory is not specified for the FTP user, the user may not be able to complete login or access file services properly, depending on the FTP user configuration requirements. Option C is correct because an FTP user account must be configured with the required username and password; otherwise, authentication cannot succeed. Option D is also correct because if the network between the FTP client and the device is unreachable, the client cannot establish the FTP connection at all.

In HCIA-Datacom troubleshooting, FTP login failure is usually checked from four aspects: service enablement, user configuration, permission or directory authorization, and network connectivity. This question tests standard remote maintenance troubleshooting logic for file transfer services on Huawei network devices.

============

Several upper-layer management and file transfer protocols use SSH as their secure transport foundation. SFTP is the SSH File Transfer Protocol and operates over SSH, making option C correct. STelnet is secure Telnet implemented over SSH, so option D is also correct. NETCONF commonly uses SSH as its transport protocol for secure configuration management and device orchestration, making option B correct as well.

Option A, DNS, does not use SSH as its normal transport protocol. Traditional DNS operates over UDP or TCP port 53, depending on the query or transfer type. Although DNS security extensions and encrypted DNS variants exist, they are not based on SSH. HCIA-Datacom emphasizes the role of SSH in secure network management because it replaces insecure plaintext protocols and provides confidentiality, integrity, and authentication. In practical Huawei enterprise deployments, SSH-based protocols are widely used for interactive device login, automated configuration delivery, and secure file operations. This question tests recognition of management protocols that inherit SSH’s secure channel rather than protocols that operate independently at the application layer.

============

The root path cost (RPC) of a switch is the total path cost from that switch to the root bridge along the selected spanning-tree path. Since SW1 is given as the root bridge, its RPC is 0. Each link in the topology has a path cost of 20 . To determine SW4’s RPC, you identify the shortest active STP path from SW4 to SW1.

Based on the topology used in the question, SW4 reaches SW1 through a path containing two links . Therefore, the total root path cost is 20 + 20 = 40 , which makes option B correct. This is a standard STP calculation. HCIA-Datacom uses RPC as one of the main comparison parameters in root-port election on non-root switches. A lower RPC means a better path toward the root bridge. If multiple candidate ports have the same RPC, the switch then compares the sender’s bridge ID and port ID. This question checks whether the learner understands that RPC is cumulative across the spanning-tree forwarding path and is not simply the cost of a single directly connected link unless the switch is directly attached to the root bridge.

============

This statement is true . In SNMP, both Trap and Inform messages are used by managed devices to proactively report alarms or events to the Network Management System (NMS) . However, their reliability behavior is different. A Trap is sent without requiring an acknowledgment from the NMS. Once it is transmitted, the sender does not confirm whether the manager actually received it.

By contrast, an Inform Request requires the NMS to send a response confirming receipt. If the managed device does not receive the acknowledgment within the expected time, it can retransmit the Inform message. Because of this, Inform is considered more reliable than Trap, although it also introduces slightly more overhead. HCIA-Datacom highlights this difference when explaining SNMP-based monitoring and alarm reporting. In real network O & M scenarios, the choice between Trap and Inform depends on the required balance between reliability and simplicity. This question tests a very standard SNMP knowledge point: Trap is unacknowledged , while Inform is acknowledged . Understanding this distinction helps network engineers choose suitable alarm reporting mechanisms in enterprise monitoring platforms.

============

After STP convergence, only ports in the forwarding state participate in active traffic forwarding, while redundant ports may be placed into the blocking or discarding state to eliminate loops. According to the topology and STP role election shown in the question, the valid forwarding path from SW1 to SW4 is SW1 → SW3 → SW4, so option B is correct.

This means that the direct alternative path or the path through SW2 is not the active spanning-tree forwarding path after election and state transition. STP selects paths based on the root bridge, path cost, bridge ID, and port ID. Once the root bridge and port roles are determined, some links remain active and others are blocked to ensure a loop-free Layer 2 topology. HCIA-Datacom emphasizes that the resulting forwarding topology is a tree, not a mesh, even if the physical topology contains redundant links. Understanding the actual forwarding path after STP convergence is important for troubleshooting connectivity, predicting traffic behavior, and verifying whether bridge priority and path-cost settings have produced the intended design outcome in campus switching networks.

============

All four statements are correct. The code uses the Paramiko library to automate SSH login to a network device. import paramiko and import time load the Python modules required for SSH communication and delay control, so option C is correct. The statement ssh = paramiko.SSHClient() creates an SSH client object, and ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) allows the client to accept an unknown host key automatically in this example scenario.

The command ssh.connect('192.168.1.254', username='python', password='Huawei@123') establishes an SSH connection to the target device, so option B is correct. Then channel = ssh.invoke_shell() opens an interactive shell channel , which is commonly used to send CLI commands and receive output just as an administrator would in a terminal session, making option D correct. The command channel.send('screen-length 0 temporary\n') disables page-by-page output for the current session, which is useful in network automation. Finally, ssh.close() closes the SSH session and releases the connection, so option A is correct. HCIA-Datacom automation knowledge often uses Paramiko examples to demonstrate basic Python-based device O & M.

============

Duplicate Address Detection ( DAD ) is an IPv6 mechanism used to verify that a unicast address is not already in use before the address is assigned to an interface. DAD is implemented using Neighbor Solicitation (NS) and Neighbor Advertisement (NA) messages, which are part of the ICMPv6 Neighbor Discovery protocol. Therefore, options A and D are correct.

When a host wants to verify a tentative IPv6 address, it sends an NS message for that address. If another node on the link is already using that address, that node responds with an NA message, indicating the address is duplicated and cannot be assigned. If no NA is received within the required period, the host assumes the address is unique and can use it. Options B and C are incorrect because Router Solicitation (RS) and Router Advertisement (RA) are used for router discovery, prefix advertisement, and stateless address autoconfiguration, not for DAD itself. HCIA-Datacom emphasizes the distinction between Neighbor Discovery functions, including address resolution, next-hop reachability, router discovery, and duplicate address detection in IPv6 networks.

============

In a WAC + Fit AP architecture, the WAC (Wireless Access Controller) centrally manages and controls the Fit APs, so option A is correct. Service configurations such as SSIDs, security policies, radio parameters, and access control are generally delivered from the WAC to the APs. The Fit AP mainly forwards wireless user traffic and executes the configuration issued by the controller.

Option D is also correct because a Fit AP provides 802.11 wireless access for stations (STAs) and serves as a bridge between the wireless side and the wired network. This is one of its basic roles in enterprise WLAN deployment. Option B is incorrect because users or administrators do not normally need to log in to each Fit AP individually to configure wireless services; centralized management by the WAC is the whole advantage of this architecture. Option C is incorrect because CAPWAP communication between the WAC and AP does not require Layer 2 adjacency ; the WAC and AP can communicate over Layer 3 as long as IP connectivity exists. HCIA-Datacom emphasizes centralized configuration, simplified operations, and scalable deployment as key benefits of WAC + Fit AP networking.

============

In an Eth-Trunk working in manual mode , multiple physical member links are bundled into one logical interface to provide higher bandwidth and link redundancy. If one of four 1 Gbit/s member links fails, the Eth-Trunk does not go down as long as at least one valid member link remains active. Therefore, statement A is correct. Since one link has failed and three member links remain available, the total available bandwidth becomes 3 Gbit/s , so statement B is also correct.

Statement C is incorrect because the traffic originally hashed to the failed link is not permanently stopped. Instead, after the link failure is detected, traffic is redistributed across the remaining active member links according to the trunk load-balancing mechanism. Statement D is also incorrect because Eth-Trunk provides link-level redundancy. Existing upper-layer sessions such as TCP are not necessarily interrupted and re-established simply because one member link fails. HCIA-Datacom emphasizes that Eth-Trunk improves reliability and bandwidth utilization by allowing traffic to continue across surviving links when a single member fails. This is one of the main advantages of link aggregation in campus and data center switching networks.

============

This statement is false because although Area 0 is indeed the backbone area , the statement about the area ID range is incorrect. In OSPF, the area ID is a 32-bit value , which can be represented either in decimal format or in IPv4 address format such as 0.0.0.0. It is not limited to the numeric range 0 to 255 .

For example, an area can be configured as 0, 1, 100, or in dotted-decimal form such as 0.0.0.1 or 0.0.0.10, depending on implementation and configuration style. HCIA-Datacom teaches that OSPF uses hierarchical area design to improve scalability, reduce SPF calculation scope, and optimize LSA flooding. The backbone area , which is Area 0, serves as the transit area connecting all non-backbone areas in a standard OSPF design. Therefore, the second part of the statement is correct, but the first part is wrong, making the entire statement false. This question tests whether the learner understands both the function of Area 0 and the actual format of OSPF area identifiers.

============

The correct statements are B and C . Option B is true because general-purpose computing data center networks focus heavily on stability, reliability, service continuity, and flexible VM deployment. Technologies such as M-LAG improve gateway and uplink redundancy and support fast failover, while VXLAN enables large-scale Layer 2 extension for VM mobility and resource flexibility.

Option C is also true because intelligent computing networks, especially those serving AI training and distributed GPU clusters, require an extremely low-loss or lossless forwarding environment. Technologies such as PFC and ECN are standard methods used to build such networks and reduce congestion-related packet loss. Option A is not selected because modern general-purpose data center networks do not necessarily require the traditional core-aggregation-access three-layer architecture ; contemporary data centers commonly use leaf-spine fabrics instead. Option D is not selected because although intelligent computing networks do require ultra-low latency and RoCE helps reduce network communication latency, the wording about “latency of data transmission within a compute node” is not the standard network-side requirement emphasized in HCIA-Datacom. The focus is mainly on inter-node network transport efficiency and lossless forwarding.

============

A /27 subnet mask is 255.255.255.224, which means each subnet contains 32 IP addresses. The subnet increments in blocks of 32 in the last octet: 0, 32, 64, 96, 128, 160, 192, 224. The address 192.168.1.200/27 belongs to the subnet 192.168.1.192/27.

For this subnet, the network address is 192.168.1.192, the broadcast address is 192.168.1.223, and the valid host range is from 192.168.1.193 to 192.168.1.222. Therefore, 192.168.1.221/27, 192.168.1.193/27, and 192.168.1.222/27 are all valid host addresses in the same subnet and are reachable at Layer 2 without routing. That makes A, C, and D correct.

Option B is not correct because 192.168.1.192/27 is the network address of the subnet and cannot be assigned to a host by default. This question checks IP subnetting and the ability to identify valid hosts within the same broadcast domain.

According to the original topology and service-planning question, the required VLANs are VLAN 100 , VLAN 101 , and VLAN 102 , so options A , B , and C are correct. In HCIA-Datacom campus design questions, VLAN planning is usually based on service separation, such as user services, voice services, wireless services, management services, or specific departmental segmentation. Each service type is assigned an appropriate VLAN so that broadcast domains are separated and policies can be applied more effectively.

The reason option D is not selected is that it does not match the service requirements shown in the original figure. VLAN planning must follow the actual service design rather than arbitrary numbering. HCIA-Datacom emphasizes that campus VLAN planning should align with traffic isolation, gateway design, security policy deployment, and future scalability. Proper VLAN assignment helps simplify troubleshooting, reduce unnecessary broadcasts, and support service-based policy enforcement. This question tests the ability to read a service topology and identify which VLANs are actually required by the depicted design rather than choosing extra VLANs that are not part of the planned campus solution.

ospf 1 → [R1]

area 0 → [R1-ospf-1]

network 10.0.12.1 0.0.0.0 → [R1-ospf-1-area-0.0.0.0]

ospf enable 1 area 0 → [R1-GE0/0/0]

Huawei devices support two common ways to enable OSPF on an interface.

The first method is the process-based method . In this method, you first enter system view, then enter the OSPF process view using ospf 1, so this command belongs to [R1] . After that, you enter the area view using area 0, so this command belongs to [R1-ospf-1] . Inside the area view, the command network 10.0.12.1 0.0.0.0 is used to match the interface with IP address 10.0.12.1, so it belongs to [R1-ospf-1-area-0.0.0.0] .

The second method is the interface-based method . In this method, OSPF is enabled directly under the interface using ospf enable 1 area 0, so this command belongs to [R1-GE0/0/0] .

This question tests the difference between global OSPF process configuration and direct interface OSPF enabling , both of which are standard Huawei OSPF configuration methods.

============