Huawei H12-821 Practice Test 55
Question 540
A network operator evaluates the result of a planned remediation. Two routers use incompatible VRRP group IDs on the same VLAN, causing confusing virtual-MAC behavior when users switch active gateways. The validation is: Compare host ARP for the virtual gateway, advertised VRRP virtual MAC, switch forwarding table, master state and test traffic during takeover. Which outcome BEST establishes success? Select ONE best answer.
- Hosts continue using the same logical default gateway through a master change and L2 learning converges to the correct uplink.
- Default-gateway mastership moves to a router with working upstream connectivity and recovers predictably after restoration.
- The selected timer values achieve the required failure-detection objective without causing repeated false failures under ordinary load.
- VLANs follow their intended instance roots across a consistent region without unintended boundary ports or loops.
Explanation
Correct Answer
A:That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Incorrect Answers
B:That option concerns VRRP interface tracking and controlled preemption. That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
C:That option concerns BFD detection multiplier and negotiated timers. That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
D:That option concerns MSTP region and VLAN-to-instance mappings. That follows from the targeted Recommended action: Check VRRP virtual IP and virtual MAC behavior while troubleshooting hosts that retain a stale default-gateway neighbor entry after failover.
Question 541
A Huawei HCIP-Datacom engineer investigates the following network fault: A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Diagnose outbound path choice across iBGP speakers using locally distributed LOCAL_PREF values.
- Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls.
- Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
- Investigate routing decisions by checking longest destination-prefix match before comparing preferences among competing routes for that same prefix.
Explanation
Correct Answer
C:The case-specific corrective step is: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context. The governing technical behavior is: DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool.
Incorrect Answers
A:This option proposes: Diagnose outbound path choice across iBGP speakers using locally distributed LOCAL_PREF values. It addresses the different topic BGP LOCAL_PREF within one autonomous system, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
B:This option proposes: Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls. It addresses the different topic SNMP manager polling traps and authenticated operation, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
D:This option proposes: Investigate routing decisions by checking longest destination-prefix match before comparing preferences among competing routes for that same prefix. It addresses the different topic Longest prefix match and route preferences, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
Question 542
An enterprise networking reviewer examines this Huawei Datacom situation. A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration. A colleague proposes this action: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context. Which protocol principle BEST supports that proposal? Select ONE best answer.
- DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool.
- SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions.
- BGP speakers must reach configured peer addresses and negotiate acceptable AS identities and other session parameters; the Established state is required before normal UPDATE route exchange.
- Type 1 router and type 2 network LSAs describe area-local topology, whereas ABRs create type 3 summary LSAs for destinations in other areas; a lack of appropriate LSAs affects SPF reachability.
Explanation
Correct Answer
A:The relevant protocol behavior is: DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool. In the stated scenario (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.) this supports the controlled action: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
Incorrect Answers
B:This option proposes: SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions. It addresses the different topic SNMP manager polling traps and authenticated operation, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
C:This option proposes: BGP speakers must reach configured peer addresses and negotiate acceptable AS identities and other session parameters; the Established state is required before normal UPDATE route exchange. It addresses the different topic BGP transport reachability and session states, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
D:This option proposes: Type 1 router and type 2 network LSAs describe area-local topology, whereas ABRs create type 3 summary LSAs for destinations in other areas; a lack of appropriate LSAs affects SPF reachability. It addresses the different topic OSPF router network and summary LSA scope, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
Question 543
A Huawei HCIP-Datacom engineer reviews this production networking scenario: A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration. Which TWO complementary choices together give an appropriate technical response and the direct diagnostic check needed to verify it? Select TWO answers.
- Troubleshoot a site-to-site IPsec tunnel by separating IKE security-association establishment from protected ESP payload transport.
- Examine per-VRF routing and interface membership before declaring two isolated customer networks mutually reachable.
- Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
- Review manager IP, user security level, permissions, device trap destination, authentication logs and sample interface counters or link-down notifications.
- Inspect the client's DHCP Discover/Offer exchange, relay agent address, server route, configured pool and interface addressing.
Explanation
Correct Answers
C:The case-specific corrective step is: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context. The governing technical behavior is: DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool. Verify the solution through: Inspect the client's DHCP Discover/Offer exchange, relay agent address, server route, configured pool and interface addressing.
E:The discriminating diagnostic check is: Inspect the client's DHCP Discover/Offer exchange, relay agent address, server route, configured pool and interface addressing. In this incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.) the desired evidence-led outcome is: Clients in the remote VLAN obtain valid addresses and gateway options from the intended scope without enabling unnecessary Layer 2 stretching.
Incorrect Answers
A:This option proposes: Troubleshoot a site-to-site IPsec tunnel by separating IKE security-association establishment from protected ESP payload transport. It addresses the different topic IPsec VPN IKE negotiation versus ESP data channel, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
B:This option proposes: Examine per-VRF routing and interface membership before declaring two isolated customer networks mutually reachable. It addresses the different topic VRF traffic separation and route leaking controls, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
D:This option proposes: Review manager IP, user security level, permissions, device trap destination, authentication logs and sample interface counters or link-down notifications. It addresses the different topic SNMP manager polling traps and authenticated operation, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A campus adds an isolated user VLAN and clients obtain no IP addresses because the DHCP server is across the routed core and the new gateway lacks relay configuration.).
Question 544
A Huawei HCIP-Datacom engineer investigates the following network fault: A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Verify the match criteria and behavior binding in a Modular QoS Command-Line configuration before investigating packet-marking or policing failures.
- Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
- Review broadcast-network designated-router election based on interface priority and router ID, noting that a stable election does not automatically preempt.
- Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls.
Explanation
Correct Answer
B:The case-specific corrective step is: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
Incorrect Answers
A:This option proposes: Verify the match criteria and behavior binding in a Modular QoS Command-Line configuration before investigating packet-marking or policing failures. It addresses the different topic Huawei MQC traffic classification and behavior binding, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
C:This option proposes: Review broadcast-network designated-router election based on interface priority and router ID, noting that a stable election does not automatically preempt. It addresses the different topic OSPF broadcast DR and BDR election, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
D:This option proposes: Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls. It addresses the different topic SNMP manager polling traps and authenticated operation, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
Question 545
An enterprise networking reviewer examines this Huawei Datacom situation. A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface. A colleague proposes this action: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context. Which protocol principle BEST supports that proposal? Select ONE best answer.
- DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool.
- Campus designs emphasize user access, WLAN, segmentation and availability, whereas data-center networks commonly emphasize scalable east-west service reachability, underlay/overlay design and high-density automated provisioning.
- SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions.
- Large WLAN deployments can distribute users among VLANs with a VLAN pool, but every selected VLAN still needs the correct gateway, DHCP scope and forwarding path to support client sessions.
Explanation
Correct Answer
A:The relevant protocol behavior is: DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool. In the stated scenario (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.) this supports the controlled action: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
Incorrect Answers
B:This option proposes: Campus designs emphasize user access, WLAN, segmentation and availability, whereas data-center networks commonly emphasize scalable east-west service reachability, underlay/overlay design and high-density automated provisioning. It addresses the different topic Campus design versus data center fabric operational boundaries, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
C:This option proposes: SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions. It addresses the different topic SNMP manager polling traps and authenticated operation, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
D:This option proposes: Large WLAN deployments can distribute users among VLANs with a VLAN pool, but every selected VLAN still needs the correct gateway, DHCP scope and forwarding path to support client sessions. It addresses the different topic WLAN VLAN pools and DHCP address scopes, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
Question 546
A Huawei network troubleshooter needs objective evidence for this case: A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface. Which diagnostic check MOST DIRECTLY distinguishes the relevant problem? Select ONE best answer.
- Review manager IP, user security level, permissions, device trap destination, authentication logs and sample interface counters or link-down notifications.
- Inspect the client's DHCP Discover/Offer exchange, relay agent address, server route, configured pool and interface addressing.
- Inspect VRRP group ID, configured virtual IP, device priorities, master/backup state and advertisements on both routers.
- Review the client's roam event timestamps, candidate AP signal conditions, reassociation/authentication records and address or session continuity.
Explanation
Correct Answer
B:The discriminating diagnostic check is: Inspect the client's DHCP Discover/Offer exchange, relay agent address, server route, configured pool and interface addressing. In this incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.) the desired evidence-led outcome is: Clients in the remote VLAN obtain valid addresses and gateway options from the intended scope without enabling unnecessary Layer 2 stretching.
Incorrect Answers
A:This option proposes: Review manager IP, user security level, permissions, device trap destination, authentication logs and sample interface counters or link-down notifications. It addresses the different topic SNMP manager polling traps and authenticated operation, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
C:This option proposes: Inspect VRRP group ID, configured virtual IP, device priorities, master/backup state and advertisements on both routers. It addresses the different topic VRRP master election priority and tie breaks, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
D:This option proposes: Review the client's roam event timestamps, candidate AP signal conditions, reassociation/authentication records and address or session continuity. It addresses the different topic Wireless roaming mobility and session continuity, not the directly tested DHCP relay across a routed user VLAN failure in the stated incident (A remote branch has a configured DHCP relay but receives addresses from a different subnet because the helper points to a server with no suitable scope for the relay interface.).
Question 547
A Huawei HCIP-Datacom engineer investigates the following network fault: A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Distinguish software-defined network control-plane orchestration from application-aware SD-WAN path selection in an enterprise WAN deployment.
- Select and verify a suitable root bridge for a switched domain without relying on arbitrary port names or traffic volume.
- Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
- Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls.
Explanation
Correct Answer
D:The case-specific corrective step is: Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls. The governing technical behavior is: SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions.
Incorrect Answers
A:This option proposes: Distinguish software-defined network control-plane orchestration from application-aware SD-WAN path selection in an enterprise WAN deployment. It addresses the different topic SDN WAN control and SD-WAN policy forwarding, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
B:This option proposes: Select and verify a suitable root bridge for a switched domain without relying on arbitrary port names or traffic volume. It addresses the different topic RSTP designated root and backup topology selection, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
C:This option proposes: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context. It addresses the different topic DHCP relay across a routed user VLAN, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
Question 548
An enterprise networking reviewer examines this Huawei Datacom situation. A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured. A colleague proposes this action: Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls. Which protocol principle BEST supports that proposal? Select ONE best answer.
- A stub area blocks type 5 external LSAs and receives an appropriate default through its ABR; a totally stubby configuration additionally suppresses most inter-area summaries and is incompatible with certain topology roles.
- SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions.
- MSTP can map multiple VLANs to different spanning-tree instances and balance paths, but mismatched region parameters place devices in different regions or create a boundary rather than one shared instance.
- DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool.
Explanation
Correct Answer
B:The relevant protocol behavior is: SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions. In the stated scenario (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.) this supports the controlled action: Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls.
Incorrect Answers
A:This option proposes: A stub area blocks type 5 external LSAs and receives an appropriate default through its ABR; a totally stubby configuration additionally suppresses most inter-area summaries and is incompatible with certain topology roles. It addresses the different topic Stub and totally stub area restrictions, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
C:This option proposes: MSTP can map multiple VLANs to different spanning-tree instances and balance paths, but mismatched region parameters place devices in different regions or create a boundary rather than one shared instance. It addresses the different topic MSTP region and VLAN-to-instance mappings, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
D:This option proposes: DHCP clients initially discover servers using local broadcasts, which are not ordinarily routed; a DHCP relay supplies an appropriate relay address and forwards requests so the server can select the correct address pool. It addresses the different topic DHCP relay across a routed user VLAN, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
Question 549
A Huawei network troubleshooter needs objective evidence for this case: A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured. Which diagnostic check MOST DIRECTLY distinguishes the relevant problem? Select ONE best answer.
- Review manager IP, user security level, permissions, device trap destination, authentication logs and sample interface counters or link-down notifications.
- Inspect source and destination zones, policy match, existing session, NAT translation and deny logs for the tested client flow.
- Inspect the client's DHCP Discover/Offer exchange, relay agent address, server route, configured pool and interface addressing.
- Inspect the community attached to a prefix, the matching community filter, permit or deny clauses and the route after policy application.
Explanation
Correct Answer
A:The discriminating diagnostic check is: Review manager IP, user security level, permissions, device trap destination, authentication logs and sample interface counters or link-down notifications. In this incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.) the desired evidence-led outcome is: Authorized monitoring can read intended objects and receive alerts without exposing broad device state to untrusted managers.
Incorrect Answers
B:This option proposes: Inspect source and destination zones, policy match, existing session, NAT translation and deny logs for the tested client flow. It addresses the different topic Stateful firewall sessions versus basic packet ACL filtering, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
C:This option proposes: Inspect the client's DHCP Discover/Offer exchange, relay agent address, server route, configured pool and interface addressing. It addresses the different topic DHCP relay across a routed user VLAN, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
D:This option proposes: Inspect the community attached to a prefix, the matching community filter, permit or deny clauses and the route after policy application. It addresses the different topic BGP community tagging and route-policy control, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (A network monitoring platform successfully polls router interface counters but never receives critical link-down traps because the notification target was not configured.).
Question 550
A Huawei HCIP-Datacom engineer investigates the following network fault: An operations team migrates to SNMPv3 authPriv and old unauthenticated monitors fail until the correct user security and access settings are deployed. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Trace ACL rule matching and interface direction before broadening a security filter that drops legitimate traffic.
- Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls.
- Use Bidirectional Forwarding Detection to provide rapid validated failure indications to a supported routing or redundancy protocol.
- Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context.
Explanation
Correct Answer
B:The case-specific corrective step is: Differentiate SNMP manager polling from unsolicited notifications, and protect network management using supported SNMPv3 access controls. The governing technical behavior is: SNMP managers request device state, while traps and informs carry event notifications; SNMPv3 offers user-based authentication and optional privacy protection unlike insecure shared-community assumptions. Verify the solution through: Review manager IP, user security level, permissions, device trap destination, authentication logs and sample interface counters or link-down notifications.
Incorrect Answers
A:This option proposes: Trace ACL rule matching and interface direction before broadening a security filter that drops legitimate traffic. It addresses the different topic ACL traffic filter placement and rule order, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (An operations team migrates to SNMPv3 authPriv and old unauthenticated monitors fail until the correct user security and access settings are deployed.).
C:This option proposes: Use Bidirectional Forwarding Detection to provide rapid validated failure indications to a supported routing or redundancy protocol. It addresses the different topic BFD rapid session detection and routing protocol association, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (An operations team migrates to SNMPv3 authPriv and old unauthenticated monitors fail until the correct user security and access settings are deployed.).
D:This option proposes: Configure DHCP relay to forward broadcast client discovery toward a reachable server and preserve the correct client-subnet context. It addresses the different topic DHCP relay across a routed user VLAN, not the directly tested SNMP manager polling traps and authenticated operation failure in the stated incident (An operations team migrates to SNMPv3 authPriv and old unauthenticated monitors fail until the correct user security and access settings are deployed.).