Huawei H13-821_V3.0-ENU Exam Syllabus Topics:

Huawei HCIP-Cloud Service Solutions Architect V3.0 Sample Questions:

1. An Internet company uses Huawei Cloud to deploy its business. It plans to limit the development environment, test environment, UAT environment, and production environment to operate their respective businesses independently.
Which of the following options is most suitable?

A) Use a single VFPC to divide NameSpace for business isolation
B) Use a single VPC and set ACL forwarding rules for business isolation
C) Use multiple VFCs for business isolation
D) Use a single VPC and define a security group for business isolation

2. Cloud container instance service CCI provides serverless container (serverless container) introduction, so that users can run containers directly without creating and managing server clusters. In the following description about cloud container instance service CCI, which one is wrong?

A) Cloud container instances provide dedicated container instances, such as running Kata containers
B) Provide rich network access methods and support four-layer and seven-layer load balancing
C) Supports multiple types of CPU computing resource calls, but does not support GPU computing for the time being
D) Can call or manage Kubermetes cluster resources

3. In the actual production environment, security management on the cloud is often performed by configuring security groups and network ACLs.
For security groups and network ACLs, which of the following descriptions about the differences between the two are correct? (Multiple choice)

A) Protection object: security group, the protection is at the cloud server level, network ACL, the protection is at the subnet level
B) Priority: security group, when rules conflict, take effect in the order of binding security groups, network ACL, when multiple rules conflict, the rule with lower priority takes effect
C) Packet group: security group, only supports triplets of packets, network ACL, supports quintuples of packets
D) Apply operation: security group must be selected and automatically applied to the cloud server, network ACL, when creating a subnet, there is no ACL option

4. Which of the following is correct about the functional characteristics of the Web Application Firewall TF? (Multiple choice)

A) Web application fire prevention training supports protection against attacks launched in the IPv6 environment, and helps users' source sites realize security protection for IFV6 traffic
B) VAF can protect HITTP/HTTPS services by detecting HTTP/HITPS requests
C) VAF supports three deployment modes: cloud mode, exclusive mode and ELB mode
D) VAF supports Web Socket protocol, but it is disabled by default

5. Data express service DES is a transmission service for terabytes or petabytes of data to the cloud. It uses physical storage media (USB, eSATA interface disks, etc.) or Teleport to transmit large data to Huawei Cloud. Which description of DES is wrong?

A) Use of passwords for data security
B) It is recommended to use when uploading data to the cloud with a data age of 10TB or more
C) The sent disk will be sent back after the transfer task is completed
D) If the administrator does not receive the disk within 30 days, the default service has expired

Solutions: