H3C GB0-392 Certification Exam Sample Questions and Answers

Network Security Optimization Dumps, GB0-392 Dumps, H3C Network Security Optimization PDF, GB0-392 PDF, Network Security Optimization VCE, H3C Network Security Optimization Questions PDF, H3C Exam VCE, H3C GB0-392 VCE, Network Security Optimization Cheat SheetBefore you write the H3C Network Security Optimization (GB0-392) certification exam, you may have certain doubts in your mind regarding the pattern of the test, the types of questions asked in it, the difficulty level of the questions and time required to complete the questions. These H3C Certified Senior Engineer for Routing & Switching Plus (H3CSE-RS+) sample questions and demo exam help you in removing these doubts and prepare you to take the test.

The best approach to pass your H3C GB0-392 exam is to challenge and improve your knowledge. To test your learning and identify improvement areas with actual exam format, we suggest you practice with Premium H3C GB0-392 Certification Practice Exam. The practice test is one of the most important elements of your H3C Network Security Optimization (H3CSE-RS+) exam study strategy to discover your strengths and weaknesses, to improve your time management skills and to get an idea of the score you can expect.

H3C GB0-392 (H3CSE-RS+) Sample Questions:

01. In a newly built EVPN-VXLAN fabric with no underlay multicast, virtual machines in one VNI reach peers whose IP-to-MAC bindings the control plane has already advertised. DHCP discovery fails, and any frame addressed to a host that has not yet been advertised is discarded.
The leaves hold full type 2 adjacency with one another. Which missing element best explains the symptoms?
a) No type 3 routes, so the leaves have no flood list and cannot replicate BUM traffic to one another
b) No type 4 routes, so no designated forwarder was elected and broadcast delivery into the VNI was suppressed
c) No type 5 routes, so the tenant routing table cannot forward between the subnets involved
d) Ingress replication is in use, and a fabric with no underlay multicast group cannot deliver BUM traffic that way
 
02. A virtual machine holding a long-lived TCP session to a server in another subnet is migrated between two leaves in an EVPN fabric that runs a distributed anycast gateway. The session survives the move, and the machine never re-resolves its default gateway.
Which two properties of the design account for this?
(Choose two.)
a) The gateway MAC is withdrawn from the old leaf and re-advertised by the new one before the machine resumes
b) Every leaf answers to the same gateway IP and the same gateway MAC in that subnet
c) The type 3 flood list is recalculated so that the machine's frames reach the gateway by broadcast
d) The old leaf tunnels the machine's routed traffic to the new leaf until the ARP entry expires
e) The leaf the machine lands on routes the packet itself, so the first hop stays one leaf away
 
03. Two tenants in an EVPN fabric have been assigned overlapping IPv4 addressing, and one leaf switch serves virtual machines belonging to both. The design must keep each tenant's advertisements distinct on the wire, and must also control which EVPN instances are allowed to accept them.
How are the route distinguisher and the route target used to meet these two requirements?
a) The RD identifies the tenant VNI, and the RT is compared against the tunnel source address of the sending VTEP
b) The RD makes each tenant's advertisement unique on the wire, and matching export and import RTs decide which instances accept it
c) The RD and the RT are both compared between VTEPs, and an advertisement is accepted only when the two values agree
d) The RD selects which instances may import a route, and the RT keeps overlapping addresses unique
 
04. A tenant VNI holds several hundred virtual machines that boot in waves. After ARP suppression is enabled on the leaf switches, broadcast traffic across the fabric drops sharply, although the virtual machines themselves behave exactly as before.
What does a leaf do with an ARP request from a locally attached virtual machine once suppression is active?
a) It rewrites the request as a unicast copy and sends it to every VTEP on the type 3 flood list
b) It drops the request and lets the anycast gateway resolve the address for the machine
c) It forwards the request to the spine, which answers for every leaf holding that subnet
d) It answers the request itself from the MAC/IP binding a type 2 route already carries
 
05. An enterprise marks voice traffic with the expedited code point at the campus edge and hands it to a carrier L3VPN. Captures on the PE-CE link confirm the marking is intact in both directions, and the carrier's core is congested at peak. Voice quality degrades inside the carrier's network, while the same traffic is scheduled correctly on every enterprise-owned link.
Which explanation is consistent with what is observed?
a) PHP pops the outer label at the penultimate LSR, and that operation clears the ToS byte of the packet underneath it
b) A transit router schedules on the label it reads, and unless the ingress PE maps the arriving class into the 3 EXP bits it imposes, the core sees none of it
c) MP-BGP advertises the VPN label without any EXP value, so the egress PE can do nothing to restore the class the enterprise set
d) The RD configured on the VPN instance carries no class information, so the VPNv4 routes reach the remote PE stripped of the enterprise's marking
 
06. A 20 Mbps WAN link uses strict-priority queueing. Video conferencing is classified into the top queue, while interactive management sessions and the routing protocol's own packets fall into lower queues. After a second conference room is commissioned, several streams run at once and the video class alone can offer more than the link carries.
Operators lose their management sessions during conferences and the WAN adjacency flaps. Which statement accounts for that behavior?
a) Queue weights are derived from the precedence of the arriving packets, and the management traffic carried the lower precedence
b) The lower queues overflowed and began discarding arrivals as they filled, while the video queue continued to drain at line rate
c) Queues are visited in turn against a byte count, and the video queue's larger packets consume most of that allowance before the other queues are reached
d) The scheduler empties the top queue before serving any other, so a class able to fill the link on its own leaves the rest unserved
 
07. Access ports on a campus switch are configured to trust the DSCP value already present in arriving packets. A user installs a client that marks its own traffic with the code point reserved for the voice class, and during busy periods the softphones sharing the same aggregation uplink begin to break up.
Which change addresses the cause?
a) Increase the bandwidth guaranteed to the voice class on the aggregation uplink, so that both the softphones and the marked client fit inside it
b) Treat the user access ports as untrusted, re-marking the arriving DSCP to the class that particular port is entitled to receive
c) Move classification to the core routers, where every campus flow converges and is marked against one consistent policy
d) Enable WRED on the voice queue, so that the flows occupying it back off well before that queue fills to its limit
 
08. An enterprise buys an L3VPN for twelve branches and one data center. Every branch-to-branch flow must traverse the data center, where firewalls inspect it.
Which two properties must the route-target design have?
(Choose two.)
a) Each branch instance exports a branch RT and imports only the RT the data center advertises.
b) The data center PE uses two VPN instances, one importing the branch RT and one exporting an RT which the branches import.
c) The data center PE peers over MP-BGP VPNv4 with each branch CE, so it can re-advertise branch routes with its own next hop.
d) All branch instances share a single route distinguisher, so the branch prefixes reach the data center as one VPNv4 route.
e) Every branch instance imports the RT exported by every other branch, and the data center instance imports the same values.
 
09. An edge firewall in front of a hosting network runs attack detection. During an incident the operations team wants every packet from an offending host discarded as early as possible, without writing a rule that describes the traffic itself.
What does a blacklist entry on such a device match?
a) The source IP address of the packet, whatever protocol or port it carries
b) The source and destination address pair carried in the packet header
c) The source MAC address learned on the interface where the packet arrived
d) The full five-tuple, as recorded for the session in the state table
 
10. Traffic from a customer site enters PE1, crosses two P routers and leaves the backbone at PE2, which serves the destination site. LDP has signaled the transport LSP and penultimate-hop popping is in effect across the core.
What arrives at PE2, and what does it do with it?
a) An unlabelled IP packet, which PE2 looks up in the public routing table before sending it on to the customer site.
b) The transport label only, which PE2 swaps for the VPN label it learned from the destination CE before forwarding.
c) Both labels, because penultimate-hop popping removes the innermost or VPN label and leaves the transport label in place.
d) One label, the VPN label, which PE2 pops to select the VPN instance or outgoing interface for the packet.

Solutions:

Question: 01

Answer: a

Question: 02

Answer: b, e

Question: 03

Answer: b

Question: 04

Answer: d

Question: 05

Answer: b

Question: 06

Answer: d

Question: 07

Answer: b

Question: 08

Answer: a, b

Question: 09

Answer: a

Question: 10

Answer: d

Note: If you find any error in these H3C Network Security Optimization (H3CSE-RS+) sample questions, you can update us by write an email on feedback@nwexam.com.

Rating: 5 / 5 (75 votes)