H12-891_V1.0 Exam Dumps : HCIE-Datacom V1.0

In OSPF:

An NSSA (Not-So-Stubby Area) allows external route injection via Type 7 LSAs.

These Type 7 LSAs are generated by ASBRs inside the NSSA (R4 in this case) when external or direct routes are imported.

ABRs (such as R2) between the NSSA and backbone translate Type 7 LSAs into Type 5 LSAs for flooding into other areas.

Clarification of options:

A: Incorrect — default route is not involved here; it ' s a specific route (10.1.4.4/32).

B: Correct — R2 translates Type 7 LSAs into Type 5.

C: Incorrect — default route is not being advertised.

D: Correct — R4 imports a direct route and generates Type 7 LSAs for it.

Correct answers: B, D

In SR-MPLS (Segment Routing over MPLS), prefix SID conflicts may occur if multiple prefixes are assigned the same SID or vice versa.

Conflict resolution principle (Huawei standard):

When there are multiple SIDs for the same prefix, the SID with the lowest value wins.

When the same SID is assigned to multiple prefixes, the prefix with the smallest address wins.

Apply to this case:

Conflict: Two entries for 1.1.1.1/32 with SID 2 and SID 1.

SID 1 is lower, so 1.1.1.1/32 → SID 1 is selected.

Correct answer: D. 1.1.1.1/32 → SID 1

An IPsec Security Association (SA) includes the following critical components:

SPI (Security Parameter Index)

Destination IP address

Security Protocol (AH or ESP)

Encryption/Authentication algorithms

The Source IP address is not a defining parameter of an SA. SA is unidirectional and identified based on the SPI and destination address.

Exact Extract - Huawei Security Configuration Guide – IPsec Fundamentals:

“An SA is uniquely identified by the SPI, destination IP, and security protocol. The source address is not a determining factor in the SA.”