Huawei H19-402_V1.0 Practice Test Questions Answers

In Huawei CloudFabric and VXLAN-based overlay networking, the overlay provides abstraction, flexibility, and scalability by decoupling logical services from the physical infrastructure. NVEs (Network Virtualization Edge nodes) can indeed be deployed on physical switches (such as leaf switches), which is a fundamental capability of hardware-based VXLAN fabrics. Additionally, overlay networks are designed to meet the needs of private cloud environments, offering high performance, simplified O & M, and enhanced security through network segmentation (e.g., VXLAN VNIs).

Overlay networks also support access for both virtual machines and physical servers, ensuring consistent connectivity regardless of workload type.

However, statement D is incorrect. In Huawei’s architecture, especially with BGP EVPN-based VXLAN, the control plane is distributed rather than relying on a controller to synchronously deliver flow tables. Devices dynamically learn and exchange forwarding information using EVPN. Even in SDN-based scenarios with iMaster NCE-Fabric, policy delivery is not strictly synchronous flow table pushing in the traditional sense (like OpenFlow).

Therefore, “controller delivers flow tables synchronously” is not a standard capability of Huawei overlay networks, making option D incorrect.

In Huawei CloudFabric architecture, service integration and flexible deployment of security devices such as firewalls are key design principles. Firewalls can be deployed in multiple ways depending on service requirements, traffic patterns, and scalability considerations.

Firewalls can be connected to:

Service leaf nodes : These are dedicated nodes used for service insertion (e.g., firewall, load balancer). Traffic can be steered through these nodes using policy-based routing or service chaining.

Border leaf nodes (combined with service leaf role) : In some designs, border leaf nodes (which connect to external networks such as WAN or Internet) can also integrate service functions, including firewall connectivity. This reduces hardware requirements and simplifies deployment.

Huawei supports both centralized and distributed service deployment models , allowing firewalls to be flexibly inserted into the network fabric. Integration is typically achieved using VXLAN, EVPN, and service chaining technologies , ensuring seamless traffic steering and policy enforcement.

This flexibility enhances:

Network scalability

Security enforcement

Operational simplicity

Therefore, the statement is TRUE .

In Huawei VXLAN architecture, different gateway types serve distinct roles in tenant communication. The Layer 2 VXLAN gateway is specifically responsible for providing tenant access to the VXLAN network and enabling intra-subnet communication .

A Layer 2 VXLAN gateway (D) connects traditional Layer 2 networks (such as VLAN-based access networks) to the VXLAN overlay. It allows tenant devices or servers to access the VXLAN fabric while maintaining Layer 2 forwarding within the same subnet (same BD/VNI). This means hosts in the same subnet can communicate directly without requiring Layer 3 routing.

In contrast, Layer 3 VXLAN gateways (B) and centralized VXLAN gateways (C) are used for inter-subnet communication , enabling routing between different VXLAN segments. The default VXLAN gateway (A) typically refers to the default gateway IP configured for hosts, which is implemented via Layer 3 gateway functionality.

Huawei CloudFabric design clearly separates Layer 2 access (tenant onboarding and intra-subnet forwarding) from Layer 3 gateway functions (inter-subnet routing) .

Therefore, the correct answer is D (Layer 2 VXLAN gateway) .

In Huawei data center network design, particularly in large-scale CloudFabric architectures, Points of Delivery (PoDs) are a fundamental concept used to enable modular scalability, simplified management, and efficient resource pooling. A PoD typically consists of a group of servers, access switches (Leaf), and sometimes aggregation resources that function as a repeatable building block within the data center.

By dividing a data center into multiple PoDs, operators can achieve horizontal scalability , where additional capacity is added by deploying new PoDs without impacting existing services. This aligns with Huawei’s spine-leaf architecture, where each PoD connects to a common spine layer, ensuring consistent performance and low latency.

PoDs also improve fault isolation and operational efficiency , as issues can be contained within a specific module. From a management perspective, this structure simplifies provisioning, monitoring, and automation through platforms like iMaster NCE-Fabric.

Therefore, the statement is TRUE , as PoD-based design is a widely adopted best practice in Huawei data center planning and modern cloud infrastructures.

In Huawei Cloud Stack (HCS) architecture, ManageOne serves as the unified cloud management platform , responsible for end-to-end orchestration, service provisioning, and lifecycle management across compute, storage, and network resources. It provides a centralized portal for administrators and tenants, enabling automated deployment and O & M of cloud services.

FusionSphere is Huawei’s virtualization platform (similar to OpenStack + hypervisor integration) and operates at the resource layer, not as the top-level management system. Hypervisor and Virtual Machine Monitor (VMM) are components of the virtualization layer that manage virtual machines on physical servers, but they lack cloud-wide orchestration capabilities.

From a Huawei CloudFabric perspective, ManageOne integrates with controllers like iMaster NCE-Fabric to automate network provisioning, enabling seamless underlay and overlay configuration. It supports multi-data-center management, self-service portals, and policy-driven automation, which are essential for modern cloud data center operations.

Therefore, ManageOne is the correct answer as the cloud management platform in HCS.