Huawei HCIP-Datacom study materials
Huawei HCIP-Datacom study resources

Huawei HCIP-Datacom practice questions

One question at a time. Build your Huawei HCIP-Datacom understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Datacom

On a Huawei switch running VRP, which command displays the current running configuration?

  1. display current-configuration Correct answer.
  2. display saved-configuration
  3. display this
  4. display startup

Explanation

The display current-configuration command shows the configuration currently active in RAM, including changes not yet saved. It is the primary way to review effective device settings before deciding whether to persist them.

Question 2Datacom

Which Huawei VRP command saves the running configuration to the startup configuration file?

  1. write memory running
  2. commit
  3. backup configuration
  4. save Correct answer.

Explanation

In VRP, the save command writes the active configuration into the startup configuration file in storage so it survives a reboot. Without it, changes made in the CLI are lost on restart.

Question 3Datacom

A VLAN has been created on a Huawei switch but no ports are assigned to it. What is the effect on Layer 2 forwarding for that VLAN?

  1. The VLAN exists but carries no traffic until member ports are added Correct answer.
  2. The VLAN operates only on trunk ports
  3. The VLAN is automatically deleted after the creation timeout
  4. All access ports join the VLAN by default

Explanation

Creating a VLAN only defines the broadcast domain; traffic enters it solely through ports configured as members. Until member ports exist, the VLAN has no active forwarding path.

Question 4Datacom

Which port link type on a Huawei switch can carry multiple VLANs and tags frames with 802.1Q headers?

  1. Loopback
  2. Trunk Correct answer.
  3. Hybrid only with untagged rules
  4. Access

Explanation

A trunk port forwards frames for multiple VLANs and inserts 802.1Q tags so the peer can identify the VLAN. Access ports instead belong to a single VLAN and normally send untagged frames.

Question 5Datacom

Two Huawei switches are connected and running RSTP. Which port role does RSTP introduce that is absent in classic STP?

  1. Alternate port Correct answer.
  2. Root port
  3. Blocked port
  4. Designated port

Explanation

RSTP adds the alternate and backup port roles to describe ports that can rapidly replace a failed root or designated port. Classic STP only defines root, designated, and blocked states without these roles.

Question 6Datacom

In an OSPF broadcast network, which router role is elected on the segment to reduce adjacency count?

  1. Stub and NSSA
  2. DR and BDR Correct answer.
  3. Backup designated router only
  4. ABR and ASBR

Explanation

On broadcast and NBMA segments OSPF elects a Designated Router and Backup Designated Router so all other routers form adjacencies with them instead of with each other. This reduces the number of adjacencies from n(n-1)/2 to a linear count.

Question 7Datacom

Which OSPF LSA type is generated by an ASBR to advertise external routes?

  1. Type 5 Correct answer.
  2. Type 1
  3. Type 3
  4. Type 2

Explanation

Type 5 LSAs carry external route information redistributed into OSPF and are flooded throughout the domain except into stub areas. Type 1 and 2 describe intra-area topology, and type 3 summarizes inter-area routes.

Question 8Datacom

A router has two OSPF routes to the same destination with identical cost. Which tie-breaker does OSPF use before installing a route?

  1. It always prefers the older route
  2. It load-balances only if the metric differs
  3. It prefers the path learned from the higher interface IP
  4. It prefers the path with the lower router ID of the advertising router Correct answer.

Explanation

When cost and other metrics tie, OSPF selects the route advertised by the router with the lowest router ID as a deterministic final tie-breaker. Equal-cost paths with the same advertising router can still be load-balanced.

Question 9Datacom

Which protocol provides loop prevention in a Layer 2 network by exchanging BPDUs?

  1. VRRP
  2. LACP
  3. STP Correct answer.
  4. OSPF

Explanation

Spanning Tree Protocol exchanges Bridge Protocol Data Units to elect a root bridge and block redundant links, preventing Layer 2 loops. OSPF and VRRP are Layer 3 protocols, and LACP aggregates links rather than blocking loops.

Question 10Datacom

On a Huawei device, which command configures a static default route toward next hop 10.0.0.1?

  1. ip route 0.0.0.0 10.0.0.1
  2. ip default-gateway 10.0.0.1
  3. route add default 10.0.0.1
  4. ip route-static 0.0.0.0 0.0.0.0 10.0.0.1 Correct answer.

Explanation

VRP syntax for a static route is ip route-static followed by destination, mask, and next hop. A default route uses destination 0.0.0.0 with mask 0.0.0.0.

Question 11Datacom

A static route is configured with a preference of 100 while an OSPF route to the same prefix has the default preference of 10. Which route is installed?

  1. Neither route is installed
  2. Both routes are installed and load-balanced
  3. The OSPF route Correct answer.
  4. The static route

Explanation

In VRP a lower preference value is preferred, so the OSPF route with preference 10 beats the static route with preference 100. The static route stays inactive unless the OSPF route disappears.

Question 12Datacom

Which technology bundles multiple physical links into one logical link on Huawei switches?

  1. VLAN
  2. VRRP
  3. Eth-Trunk Correct answer.
  4. MSTP

Explanation

Eth-Trunk aggregates physical interfaces into a single logical interface, increasing bandwidth and providing redundancy. LACP can be used with it to negotiate membership automatically.

Question 13Datacom

In LACP, what distinguishes active mode from passive mode on a Huawei interface?

  1. Active mode disables the Eth-Trunk
  2. Active mode initiates LACPDU negotiation, passive mode only responds Correct answer.
  3. Passive mode initiates negotiation, active mode only responds
  4. Both modes refuse to negotiate

Explanation

An interface in active LACP mode sends LACPDUs to start negotiation, while a passive interface waits and responds to LACPDUs it receives. At least one side must be active for the bundle to form.

Question 14Datacom

Which VRRP parameter must be identical on all routers in the same VRRP group?

  1. Preemption delay
  2. Virtual router ID Correct answer.
  3. Interface IP address
  4. Priority

Explanation

The virtual router ID defines the VRRP group, so every router participating in the same group must use the same VRID. Priority values differ to determine master election, and interface addresses must be unique.

Question 15Datacom

A VRRP master with priority 120 and preemption enabled goes down, and the backup with priority 100 takes over. When the original master returns, what happens?

  1. It becomes master immediately without any delay
  2. It preempts and becomes master again after the preemption delay Correct answer.
  3. It leaves the VRRP group
  4. It stays backup permanently

Explanation

With preemption enabled, a returning router with a higher priority waits the preemption delay and then resumes the master role. The delay avoids flapping when the interface is unstable.

Question 16Datacom

Which DHCP message does a client send to request a specific offered address?

  1. DHCP Discover
  2. DHCP ACK
  3. DHCP Offer
  4. DHCP Request Correct answer.

Explanation

After receiving offers, the client sends a DHCP Request naming the chosen server and address. The server then confirms with a DHCP ACK, completing the DORA exchange.

Question 17Datacom

Which NAT technique maps many private addresses to a single public address using different source ports?

  1. NAPT Correct answer.
  2. Static NAT
  3. No-PAT
  4. NAT Server

Explanation

NAPT, also called PAT or address-and-port translation, multiplexes many internal hosts onto one public address by translating source ports. Static NAT and No-PAT map one-to-one and cannot share a single address this way.

Question 18Datacom

Which statement about ACL matching order on Huawei devices is correct?

  1. The last matching rule wins
  2. Rules are evaluated top-down and the first match decides the action Correct answer.
  3. The most specific rule wins regardless of order
  4. All matching rules are applied simultaneously

Explanation

Huawei ACLs match rules sequentially from the first to the last, and the first matching rule determines whether traffic is permitted or denied. Rule order therefore matters, and unmatched traffic falls to the default action.

Question 19Datacom

Which QoS marking field is carried in the 802.1Q tag of an Ethernet frame?

  1. 802.1p priority Correct answer.
  2. IP Precedence
  3. DSCP
  4. ToS

Explanation

The 802.1Q tag contains a 3-bit 802.1p priority field used for Layer 2 CoS marking. DSCP, IP Precedence, and ToS are fields in the IP header rather than the Ethernet tag.

Question 20Datacom

Which mechanism does IPsec use to provide data confidentiality?

  1. Encryption with ESP Correct answer.
  2. Anti-replay window
  3. Sequence numbers
  4. Checksum in AH

Explanation

IPsec confidentiality comes from encrypting the payload, typically with ESP. AH provides integrity and authentication but no encryption, and anti-replay protects against replayed packets rather than disclosure.

Question 21Datacom

In BGP, which attribute is well-known discretionary and commonly used by a router to influence its own outbound path selection?

  1. MED
  2. Next Hop
  3. Local Preference Correct answer.
  4. AS Path

Explanation

Local Preference is a well-known discretionary attribute propagated within an AS and used to choose the preferred outbound path. A higher local preference is preferred in the BGP decision process.

Question 22Datacom

Which BGP attribute is checked first in the Huawei path selection process?

  1. Origin type
  2. Local Preference
  3. Preferred value Correct answer.
  4. AS Path length

Explanation

Huawei evaluates the proprietary Preferred Value first, then Local Preference, then the locally originated route, AS Path, and Origin. Preferred Value is local to the router and is not propagated to peers.

Question 23Datacom

Which IPv6 address type is used for one-to-nearest communication in a group of nodes?

  1. Anycast Correct answer.
  2. Link-local
  3. Multicast
  4. Unicast

Explanation

An anycast address identifies a set of interfaces, and a packet is delivered to the nearest member of that set according to routing distance. Unicast targets one interface, and multicast delivers to all members of the group.

Question 24Datacom

Which IPv6 mechanism allows a host to derive its interface identifier from its MAC address?

  1. Neighbor Discovery redirect
  2. SLAAC with DHCPv6 stateful
  3. EUI-64 Correct answer.
  4. Path MTU Discovery

Explanation

EUI-64 forms a 64-bit interface identifier by inserting FFFE into the middle of the 48-bit MAC address and flipping the universal/local bit. The result is combined with the network prefix to build the full address.

Question 25Datacom

Which SNMP operation does a manager use to retrieve a subtree of MIB objects from an agent?

  1. Set
  2. Inform
  3. GetNext or Walk Correct answer.
  4. Trap

Explanation

A manager walks a MIB subtree by repeatedly issuing GetNext requests, retrieving objects in lexicographic order. Traps and Informs are agent-initiated notifications, and Set modifies values.

Question 26Datacom

On a Huawei router running IS-IS, which PDU type is used by Level 2 routers to synchronize their link-state databases within the backbone area?

  1. Level 2 Hello PDU
  2. Level 2 Link State PDU (LSP) Correct answer.
  3. Level 1 Partial Sequence Number PDU (PSNP)
  4. Level 1 Complete Sequence Number PDU (CSNP)

Explanation

IS-IS uses LSPs to carry link-state information, and Level 2 LSPs are flooded among Level 2 routers to keep the backbone link-state database synchronized. CSNPs and PSNPs only describe or request database contents rather than carrying the topology payload itself.

Question 27Datacom

A network engineer wants to prevent an OSPF interface from forming adjacencies while still advertising its connected subnet. Which Huawei configuration achieves this?

  1. Configure the interface as OSPF silent Correct answer.
  2. Set the interface OSPF network type to p2p
  3. Raise the OSPF cost on the interface
  4. Change the OSPF hello timer on the interface

Explanation

The silent-interface setting suppresses Hello packets on an OSPF interface, so no neighbor relationships form, yet the connected network is still included in the router's LSAs. This is the standard way to advertise a stub-facing or user-facing subnet without running adjacencies on it.

Question 28Datacom

Which OSPF area type injects a default route automatically and does not accept Type 3, Type 4, or Type 5 LSAs?

  1. Normal area
  2. Stub area
  3. Totally stubby area Correct answer.
  4. Not-so-stubby area

Explanation

A totally stubby area blocks Type 3, Type 4, and Type 5 LSAs and relies on a single default route injected by the ABR. A plain stub area still receives Type 3 summaries, so it is less restrictive.

Question 29Datacom

A Huawei switch port is configured with port link-type hybrid and the command port hybrid untagged vlan 10. What is the effect on frames belonging to VLAN 10 leaving that port?

  1. They are dropped because VLAN 10 is not in the tagged list
  2. They are flooded to all VLANs on the switch
  3. They are sent untagged after the VLAN tag is removed Correct answer.
  4. They are tagged with VLAN 10 in the 802.1Q header

Explanation

On a hybrid port, the untagged VLAN list determines which VLANs have their tags stripped before transmission. Frames in VLAN 10 therefore leave the port without an 802.1Q tag, which suits access devices that do not understand tagging.

Question 30Datacom

Which STP port role is elected on a non-root switch to provide the loop-free path toward the root bridge?

  1. Root port Correct answer.
  2. Designated port
  3. Alternate port
  4. Disabled port

Explanation

Each non-root bridge elects exactly one root port, the port with the lowest root path cost toward the root bridge. Designated ports face downstream segments, while alternate ports stay blocked as backups.

Question 31Datacom

A company needs to run multiple customer VLANs across a shared Layer 2 provider network while keeping each customer's VLAN space independent. Which technology should be used?

  1. Super VLAN
  2. Port isolation
  3. QinQ VLAN stacking Correct answer.
  4. MAC VLAN

Explanation

QinQ adds an outer service-provider VLAN tag to frames that already carry a customer VLAN tag, giving each customer an independent inner VLAN space across the provider backbone. This double tagging is the standard approach for transparent multi-tenant Layer 2 transport.

Question 32Datacom

On a Huawei device, which command displays the current VRRP group status including priority and virtual IP address?

  1. display arp
  2. display vrrp Correct answer.
  3. display vrrp statistics
  4. display ip interface brief

Explanation

The display vrrp command shows VRRP group state, priorities, virtual IP addresses, and timers for the configured interfaces. The statistics variant only reports counters, while the other commands show unrelated information.

Question 33Datacom

A VRRP group uses the default advertisement interval. What is that default value on Huawei routers?

  1. 1 second Correct answer.
  2. 30 seconds
  3. 10 seconds
  4. 3 seconds

Explanation

VRRP advertises once per second by default, and the master is considered down after roughly three missed advertisements. This short interval supports fast failover to the backup router.

Question 34Datacom

Which DHCP message does a server send to confirm that an offered address has been committed to a client?

  1. DHCPNAK
  2. DHCPDISCOVER
  3. DHCPACK Correct answer.
  4. DHCPOFFER

Explanation

After the client sends a DHCPREQUEST, the server commits the lease and replies with DHCPACK, which carries the confirmed address and options. DHCPOFFER merely proposes an address before the request stage.

Question 35Datacom

A DHCP relay agent receives a broadcast DHCPDISCOVER on a client subnet. Which destination does it use when forwarding the message to the server?

  1. The unicast address of the configured DHCP server Correct answer.
  2. The broadcast address 255.255.255.255
  3. The client's own IP address
  4. The multicast address 224.0.0.1

Explanation

The relay agent converts the broadcast into a unicast packet addressed to the configured DHCP server and fills the giaddr field so the server can pick a matching address pool. This unicast forwarding lets the server sit on a different subnet.

Question 36Datacom

Which statement describes the behavior of a Huawei ACL when a packet matches no rule?

  1. The packet is dropped only in traffic-policy mode
  2. The packet is permitted by default Correct answer.
  3. The packet is logged and then permitted
  4. The packet is denied by default

Explanation

Huawei ACLs use a default permit action when a packet matches none of the configured rules, so an explicit deny rule is needed to block unmatched traffic. Administrators must therefore design rules carefully to avoid unintended forwarding.

Question 37Datacom

A traffic policy is applied to a switch interface to rate-limit outbound traffic to 100 Mbit/s. Which mechanism performs the actual rate limiting?

  1. An ACL applied with the packet-filter command
  2. A traffic behavior with a car action Correct answer.
  3. A traffic classifier alone
  4. A traffic policy without a behavior

Explanation

In Huawei's MQC model, the traffic behavior defines the action, and the committed access rate action inside the behavior performs the rate limiting. The classifier only identifies traffic, and the policy binds classifier to behavior.

Question 38Datacom

Which field in the IPv4 header does a DiffServ domain use to carry the DSCP value?

  1. Type of Service field Correct answer.
  2. Header Checksum field
  3. Fragment Offset field
  4. Identification field

Explanation

The eight-bit Type of Service field holds the six-bit DSCP plus two unused bits, and routers read it to classify packets per hop. The other fields serve fragmentation and integrity checks rather than QoS marking.

Question 39Datacom

An IPsec peer uses IKEv2 with a pre-shared key. Which statement about IKE phase 1 in this setup is correct?

  1. It negotiates the IPsec SA parameters for user data
  2. It performs data encryption with the AH protocol
  3. It distributes public keys through a certificate authority
  4. It establishes an IKE SA that protects later IKE exchanges Correct answer.

Explanation

IKE phase 1 builds the IKE SA, authenticating the peers and protecting subsequent negotiation messages. Phase 2 then uses that protected channel to negotiate the IPsec SAs that carry user traffic.

Question 40Datacom

Which BGP attribute is recognized by all BGP implementations, must be included in every update, and is used for loop detection?

  1. MED
  2. AS_PATH Correct answer.
  3. COMMUNITY
  4. LOCAL_PREF

Explanation

AS_PATH is well-known mandatory, so every update carries it, and a router rejects a route whose AS_PATH already contains its own AS number. This makes AS_PATH the primary inter-AS loop-prevention mechanism.

Question 41Datacom

A Huawei router learns the same prefix from an eBGP peer, an iBGP peer, and a local static route. Which source is preferred by BGP path selection?

  1. The eBGP route
  2. The iBGP route
  3. The local static route Correct answer.
  4. The route with the highest router ID

Explanation

Before comparing origin type, BGP prefers locally originated routes, which include network, aggregate, and redistributed static routes, over routes learned from peers. Only if no local route exists does the eBGP-over-iBGP preference apply.

Question 42Datacom

Which BGP mechanism limits the number of prefixes a router accepts from a peer to protect memory and session stability?

  1. Peer group
  2. Route reflector
  3. Maximum prefix limit Correct answer.
  4. Route dampening

Explanation

The maximum prefix limit caps how many prefixes a peer may advertise; exceeding it can trigger a warning or tear down the session. Route dampening instead suppresses repeatedly flapping routes.

Question 43Datacom

Which IPv6 address range is reserved for link-local addresses?

  1. 2000::/3
  2. FF00::/8
  3. FC00::/7
  4. FE80::/10 Correct answer.

Explanation

Link-local addresses use the FE80::/10 prefix and are valid only on a single link, where they support neighbor discovery and next-hop resolution. They are never routed beyond the local segment.

Question 44Datacom

A host on an IPv6 network receives a Router Advertisement with the A flag set and the O flag clear. What does the host do?

  1. It uses DHCPv6 for both address and other parameters
  2. It configures its address from the prefix using SLAAC and does not use DHCPv6 for other parameters Correct answer.
  3. It ignores the advertisement and keeps its link-local address only
  4. It requests an address from a DHCPv6 server but no other parameters

Explanation

The autonomous flag tells the host to build its address with stateless address autoconfiguration from the advertised prefix. The clear other-config flag means no DHCPv6 is needed for extra parameters such as DNS servers.

Question 45Datacom

Which ICMPv6 message does a router send to a host when a packet's hop limit reaches zero?

  1. Neighbor Solicitation
  2. Packet Too Big
  3. Time Exceeded Correct answer.
  4. Destination Unreachable

Explanation

When the hop limit is decremented to zero, the router discards the packet and returns an ICMPv6 Time Exceeded message to the source. This message type also supports traceroute operation.

Question 46Datacom

Which SNMPv3 feature provides both message integrity and authentication of the sender?

  1. The view-based access control model
  2. The community string
  3. The noAuthNoPriv security level
  4. The authNoPriv security level Correct answer.

Explanation

The authNoPriv level authenticates messages with a hash-based key so the receiver can verify integrity and origin, though payloads stay unencrypted. Adding privacy requires the authPriv level.

Question 47Datacom

A network uses NetStream to monitor traffic. Which pair of elements identifies a flow?

  1. The DSCP value and packet length
  2. The ingress interface and VLAN only
  3. Source and destination IP addresses only
  4. The five-tuple of source and destination addresses, ports, and protocol Correct answer.

Explanation

NetStream builds flow records from the classic five-tuple: source address, destination address, source port, destination port, and protocol. Packets sharing those values within the aging window are aggregated into one flow entry.

Question 48Datacom

A company runs VXLAN over an IP underlay. Which function does the VTEP perform?

  1. It converts VXLAN into MPLS labels at the provider edge
  2. It assigns IP addresses to tenant virtual machines via DHCP
  3. It encapsulates original Ethernet frames into VXLAN UDP packets Correct answer.
  4. It elects a root bridge for the Layer 2 topology

Explanation

A VTEP sits at the edge of the VXLAN overlay and encapsulates tenant Ethernet frames with a VXLAN header and outer IP/UDP headers for transport across the underlay. The peer VTEP decapsulates and delivers the frame to the correct tenant segment.

Question 49Datacom

Which technology lets a Huawei device forward traffic based on a segment list encoded in the packet header, steering it through an ordered set of nodes?

  1. Segment Routing over IPv6 (SRv6) Correct answer.
  2. BGP route reflection
  3. VRRP
  4. LACP link aggregation

Explanation

SRv6 encodes an ordered segment list in an IPv6 extension header, and each node forwards the packet to the next segment, enabling source-based traffic steering without per-hop state. This differs from traditional hop-by-hop destination routing.

Question 50Datacom

A network administrator must ensure that only the management subnet can reach a router's VTY lines. Which Huawei feature should be applied to the VTY interfaces?

  1. An ACL referenced by the user-interface configuration Correct answer.
  2. A QoS traffic policy on the uplink
  3. An SNMP community with read-write access
  4. A static route toward the management subnet

Explanation

Applying an ACL to the VTY user interfaces restricts which source addresses may open Telnet or SSH sessions, directly limiting management access. This is the standard access-control layer for remote login on Huawei devices.