Huawei H12-891_V1.0 Exam With Confidence Using Practice Dumps

The incorrect statement is Option C, which says “A site can only belong to only one VPN.” This is false because a single site can belong to multiple VPNs if needed. For example, in some enterprise designs, a site may be part of both the Finance VPN and the Management VPN by configuring multiple routing instances (VRFs) and policies accordingly.

Exact Extract - HCIE-Datacom VPN Technologies Chapter:

“A site may be associated with one or more VPNs, depending on business requirements. This is achieved through VRF and route-target configurations.”

In Huawei’s CloudCampus Solution, VNs (Virtual Networks) are isolated by default for security purposes. To enable inter-VN communication, you must explicitly configure policies that allow traffic between different VNs.

The correct way to control and enable this communication is via routing policies, especially inter-VN routing policies on the core or border nodes.

Static routes or OSPF deployments are not sufficient or appropriate for policy-controlled VN communication in this context.

Correct answer: D. Deploy a routing policy

Option B is incorrect because it falsely states that EBGP cannot be configured on Spoke-PE or Spoke-CE if the Hub-CE and Hub-PE run IGP. In reality, EBGP can still be used between Spoke sites and PE devices, regardless of the protocol between the Hub PE and CE. EBGP is often used for PE-CE communication, including in Hub-and-Spoke architectures.

Exact Extract - Huawei HCIE-Datacom VPN Section:

“In Hub & Spoke deployments, EBGP can be deployed between Spoke-CE and Spoke-PE. The choice of routing protocol between Hub-CE and Hub-PE does not limit this.”