Huawei H12-821 Practice Test 59
Question 580
A network operator evaluates the result of a planned remediation. An engineer claims an SSID's roaming design is successful despite every client being forced to obtain a new DHCP lease whenever it changes AP. The validation is: Review the client's roam event timestamps, candidate AP signal conditions, reassociation/authentication records and address or session continuity. Which outcome BEST establishes success? Select ONE best answer.
- A moving client authenticates and transitions to the intended next AP with tolerable interruption and no unnecessary IP renumbering.
- WLAN clients continue or recover service through an AC failure while guest and employee users receive only their permitted network segments.
- APs join the intended controller and broadcast the required SSIDs while clients use the correct routed user VLAN.
- Internal routers prefer the intended egress path while the preference stays within the correct autonomous system boundary.
Explanation
Correct Answer
A:That follows from the targeted Recommended action: Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements.
Incorrect Answers
B:That option concerns WLAN controller redundancy and NAC integration. That follows from the targeted Recommended action: Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements.
C:That option concerns Large campus WLAN AC AP and CAPWAP architecture. That follows from the targeted Recommended action: Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements.
D:This option proposes: Internal routers prefer the intended egress path while the preference stays within the correct autonomous system boundary. It addresses the different topic BGP LOCAL_PREF within one autonomous system, not the directly tested Wireless roaming mobility and session continuity failure in the stated incident (An engineer claims an SSID's roaming design is successful despite every client being forced to obtain a new DHCP lease whenever it changes AP.). The better discriminating check for this case is: Review the client's roam event timestamps, candidate AP signal conditions, reassociation/authentication records and address or session continuity. The targeted correction is: Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements.
Question 581
A Huawei HCIP-Datacom engineer investigates the following network fault: An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Validate a wireless user VLAN pool and its DHCP scope availability when client addressing becomes uneven or fails under density.
- Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements.
- Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
- Choose OSPF summarization at the correct boundary and account for reachability when advertising aggregates.
Explanation
Correct Answer
C:The case-specific corrective step is: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service. The governing technical behavior is: Enterprise WLAN high availability requires compatible AP fallback and controller state recovery, while network access control distinguishes authorized client roles and can dynamically assign VLAN or policy based on credentials and posture.
Incorrect Answers
A:This option proposes: Validate a wireless user VLAN pool and its DHCP scope availability when client addressing becomes uneven or fails under density. It addresses the different topic WLAN VLAN pools and DHCP address scopes, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
B:This option proposes: Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements. It addresses the different topic Wireless roaming mobility and session continuity, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
D:This option proposes: Choose OSPF summarization at the correct boundary and account for reachability when advertising aggregates. It addresses the different topic OSPF summarization at ABR and ASBR, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
Question 582
An enterprise networking reviewer examines this Huawei Datacom situation. An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested. A colleague proposes this action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service. Which protocol principle BEST supports that proposal? Select ONE best answer.
- Enterprise WLAN high availability requires compatible AP fallback and controller state recovery, while network access control distinguishes authorized client roles and can dynamically assign VLAN or policy based on credentials and posture.
- MQC policy operation separates traffic classifiers, traffic behaviors and policies that bind them on a supported interface and direction; defining a classifier by itself does not apply a traffic action.
- WLAN roaming is a client transition between APs, and preserving service depends on consistent SSID/security configuration, mobility coordination and the chosen network architecture, not simply RF overlap.
- In controller-managed WLANs an AP typically discovers and establishes control communication with the AC using CAPWAP, while local or centralized data forwarding depends on the chosen design and correct VLAN mapping.
Explanation
Correct Answer
A:The relevant protocol behavior is: Enterprise WLAN high availability requires compatible AP fallback and controller state recovery, while network access control distinguishes authorized client roles and can dynamically assign VLAN or policy based on credentials and posture. In the stated scenario (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.) this supports the controlled action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
Incorrect Answers
B:This option proposes: MQC policy operation separates traffic classifiers, traffic behaviors and policies that bind them on a supported interface and direction; defining a classifier by itself does not apply a traffic action. It addresses the different topic Huawei MQC traffic classification and behavior binding, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
C:This option proposes: WLAN roaming is a client transition between APs, and preserving service depends on consistent SSID/security configuration, mobility coordination and the chosen network architecture, not simply RF overlap. It addresses the different topic Wireless roaming mobility and session continuity, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
D:This option proposes: In controller-managed WLANs an AP typically discovers and establishes control communication with the AC using CAPWAP, while local or centralized data forwarding depends on the chosen design and correct VLAN mapping. It addresses the different topic Large campus WLAN AC AP and CAPWAP architecture, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
Question 583
A Huawei network troubleshooter needs objective evidence for this case: An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested. Which diagnostic check MOST DIRECTLY distinguishes the relevant problem? Select ONE best answer.
- Inspect AP discovery method, controller address reachability, CAPWAP control state, authorized AP inventory and configured service traffic forwarding mode.
- Review VLAN IGMP query source, version, group reports, membership timers and the downstream interface in multicast routing state.
- Inspect primary/backup controller registrations, AP failover behavior, RADIUS/802.1X results, user authorization attributes and policy applied to a test client.
- Compare WLAN service templates, VLAN pool membership and assignment method, gateway/SVI, relay configuration and per-VLAN available leases.
Explanation
Correct Answer
C:In this incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.) the desired evidence-led outcome is: WLAN clients continue or recover service through an AC failure while guest and employee users receive only their permitted network segments.
Incorrect Answers
A:This option proposes: Inspect AP discovery method, controller address reachability, CAPWAP control state, authorized AP inventory and configured service traffic forwarding mode. It addresses the different topic Large campus WLAN AC AP and CAPWAP architecture, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
B:This option proposes: Review VLAN IGMP query source, version, group reports, membership timers and the downstream interface in multicast routing state. It addresses the different topic IGMP querier membership reports and group timeout, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
D:This option proposes: Compare WLAN service templates, VLAN pool membership and assignment method, gateway/SVI, relay configuration and per-VLAN available leases. It addresses the different topic WLAN VLAN pools and DHCP address scopes, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested.).
Question 584
A network operator evaluates the result of a planned remediation. An AP loses its preferred AC during an outage and does not join the standby because the discovery and redundancy settings were never tested. The validation is: Inspect primary/backup controller registrations, AP failover behavior, RADIUS/802.1X results, user authorization attributes and policy applied to a test client. Which outcome BEST establishes success? Select ONE best answer.
- The peers establish valid security associations and approved subnet traffic is protected and forwarded through the intended tunnel.
- APs join the intended controller and broadcast the required SSIDs while clients use the correct routed user VLAN.
- A moving client authenticates and transitions to the intended next AP with tolerable interruption and no unnecessary IP renumbering.
- WLAN clients continue or recover service through an AC failure while guest and employee users receive only their permitted network segments.
Explanation
Correct Answer
D:That follows from the targeted action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
Incorrect Answers
A:That option concerns IPsec VPN IKE negotiation versus ESP data channel. That follows from the targeted action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
B:That option concerns Large campus WLAN AC AP and CAPWAP architecture. That follows from the targeted action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
C:That option concerns Wireless roaming mobility and session continuity. That follows from the targeted action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
Question 585
A Huawei HCIP-Datacom engineer investigates the following network fault: A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements.
- Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
- Trace PIM-SM receiver joins toward an RP and subsequent shortest-path behavior when investigating delayed or suboptimal multicast.
- Trace an enterprise wireless AP's registration to its access controller and the separation of management from user traffic in supported forwarding modes.
Explanation
Correct Answer
B:The case-specific corrective step is: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service. The governing technical behavior is: Enterprise WLAN high availability requires compatible AP fallback and controller state recovery, while network access control distinguishes authorized client roles and can dynamically assign VLAN or policy based on credentials and posture. Verify the solution through: Inspect primary/backup controller registrations, AP failover behavior, RADIUS/802.1X results, user authorization attributes and policy applied to a test client.
Incorrect Answers
A:This option proposes: Assess fast roaming within and between AP coverage cells using the configured mobility relationship and authentication requirements. It addresses the different topic Wireless roaming mobility and session continuity, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
C:This option proposes: Trace PIM-SM receiver joins toward an RP and subsequent shortest-path behavior when investigating delayed or suboptimal multicast. It addresses the different topic PIM sparse mode RP shared tree and shortest path transition, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
D:This option proposes: Trace an enterprise wireless AP's registration to its access controller and the separation of management from user traffic in supported forwarding modes. It addresses the different topic Large campus WLAN AC AP and CAPWAP architecture, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
Question 586
An enterprise networking reviewer examines this Huawei Datacom situation. A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them. A colleague proposes this action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service. Which protocol principle BEST supports that proposal? Select ONE best answer.
- Enterprise WLAN high availability requires compatible AP fallback and controller state recovery, while network access control distinguishes authorized client roles and can dynamically assign VLAN or policy based on credentials and posture.
- WLAN roaming is a client transition between APs, and preserving service depends on consistent SSID/security configuration, mobility coordination and the chosen network architecture, not simply RF overlap.
- PIM-DM generally follows a flood-and-prune model, building source-based multicast distribution where an interface without interested downstream receivers can be pruned to reduce unnecessary traffic.
- In controller-managed WLANs an AP typically discovers and establishes control communication with the AC using CAPWAP, while local or centralized data forwarding depends on the chosen design and correct VLAN mapping.
Explanation
Correct Answer
A:The relevant protocol behavior is: Enterprise WLAN high availability requires compatible AP fallback and controller state recovery, while network access control distinguishes authorized client roles and can dynamically assign VLAN or policy based on credentials and posture. In the stated scenario (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.) this supports the controlled action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
Incorrect Answers
B:This option proposes: WLAN roaming is a client transition between APs, and preserving service depends on consistent SSID/security configuration, mobility coordination and the chosen network architecture, not simply RF overlap. It addresses the different topic Wireless roaming mobility and session continuity, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
C:This option proposes: PIM-DM generally follows a flood-and-prune model, building source-based multicast distribution where an interface without interested downstream receivers can be pruned to reduce unnecessary traffic. It addresses the different topic PIM dense mode flooding and prune mechanisms, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
D:This option proposes: In controller-managed WLANs an AP typically discovers and establishes control communication with the AC using CAPWAP, while local or centralized data forwarding depends on the chosen design and correct VLAN mapping. It addresses the different topic Large campus WLAN AC AP and CAPWAP architecture, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
Question 587
A Huawei network troubleshooter needs objective evidence for this case: A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them. Which diagnostic check MOST DIRECTLY distinguishes the relevant problem? Select ONE best answer.
- Inspect AP discovery method, controller address reachability, CAPWAP control state, authorized AP inventory and configured service traffic forwarding mode.
- Inspect primary/backup controller registrations, AP failover behavior, RADIUS/802.1X results, user authorization attributes and policy applied to a test client.
- Compare received iBGP routes to the same prefix, LOCAL_PREF values, policy application points and next-hop reachability across edge routers.
- Review the client's roam event timestamps, candidate AP signal conditions, reassociation/authentication records and address or session continuity.
Explanation
Correct Answer
B:The discriminating diagnostic check is: Inspect primary/backup controller registrations, AP failover behavior, RADIUS/802.1X results, user authorization attributes and policy applied to a test client. In this incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.) the desired evidence-led outcome is: WLAN clients continue or recover service through an AC failure while guest and employee users receive only their permitted network segments.
Incorrect Answers
A:This option proposes: Inspect AP discovery method, controller address reachability, CAPWAP control state, authorized AP inventory and configured service traffic forwarding mode. It addresses the different topic Large campus WLAN AC AP and CAPWAP architecture, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
C:This option proposes: Compare received iBGP routes to the same prefix, LOCAL_PREF values, policy application points and next-hop reachability across edge routers. It addresses the different topic BGP LOCAL_PREF within one autonomous system, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.). The better discriminating check for this case is: Inspect primary/backup controller registrations, AP failover behavior, RADIUS/802.1X results, user authorization attributes and policy applied to a test client. The targeted correction is: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
D:This option proposes: Review the client's roam event timestamps, candidate AP signal conditions, reassociation/authentication records and address or session continuity. It addresses the different topic Wireless roaming mobility and session continuity, not the directly tested WLAN controller redundancy and NAC integration failure in the stated incident (A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them.).
Question 588
A network operator evaluates the result of a planned remediation. A campus grants guest Wi-Fi users employee VLAN access after a RADIUS attribute mapping change, despite an NAC policy designed to separate them. The validation is: Inspect primary/backup controller registrations, AP failover behavior, RADIUS/802.1X results, user authorization attributes and policy applied to a test client. Which outcome BEST establishes success? Select ONE best answer.
- The peers establish valid security associations and approved subnet traffic is protected and forwarded through the intended tunnel.
- WLAN clients continue or recover service through an AC failure while guest and employee users receive only their permitted network segments.
- A moving client authenticates and transitions to the intended next AP with tolerable interruption and no unnecessary IP renumbering.
- Newly associated clients receive suitable addresses across intended WLAN VLANs without repeated lease exhaustion or mismatched gateway assignment.
Explanation
Correct Answer
B:That follows from the targeted Recommended action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
Incorrect Answers
A:That option concerns IPsec VPN IKE negotiation versus ESP data channel. That follows from the targeted Recommended action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
C:That option concerns Wireless roaming mobility and session continuity. That follows from the targeted Recommended action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
D:That option concerns WLAN VLAN pools and DHCP address scopes. That follows from the targeted Recommended action: Validate resilient AC roles and per-user access decisions when WLAN controller failure or endpoint authorization affects service.
Question 589
A Huawei HCIP-Datacom engineer investigates the following network fault: A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication. Which corrective action should be prioritized on the stated facts? Select ONE best answer.
- Apply OSPF neighbor authentication and passive-interface policy without accidentally suppressing required route advertisements.
- Distinguish software-defined network control-plane orchestration from application-aware SD-WAN path selection in an enterprise WAN deployment.
- Check the MED value and the policy context before using BGP advertisements to suggest which entry link another AS should prefer.
- Choose the appropriate enterprise datacom architecture for a campus user edge versus a scalable data-center fabric before selecting a particular routing or switching feature.
Explanation
Correct Answer
D:The case-specific corrective step is: Choose the appropriate enterprise datacom architecture for a campus user edge versus a scalable data-center fabric before selecting a particular routing or switching feature. The governing technical behavior is: Campus designs emphasize user access, WLAN, segmentation and availability, whereas data-center networks commonly emphasize scalable east-west service reachability, underlay/overlay design and high-density automated provisioning.
Incorrect Answers
A:This option proposes: Apply OSPF neighbor authentication and passive-interface policy without accidentally suppressing required route advertisements. It addresses the different topic OSPF interface security and passive network advertisement, not the directly tested Campus design versus data center fabric operational boundaries failure in the stated incident (A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication.).
B:This option proposes: Distinguish software-defined network control-plane orchestration from application-aware SD-WAN path selection in an enterprise WAN deployment. It addresses the different topic SDN WAN control and SD-WAN policy forwarding, not the directly tested Campus design versus data center fabric operational boundaries failure in the stated incident (A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication.).
C:This option proposes: Check the MED value and the policy context before using BGP advertisements to suggest which entry link another AS should prefer. It addresses the different topic BGP MED interpretation between neighboring autonomous systems, not the directly tested Campus design versus data center fabric operational boundaries failure in the stated incident (A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication.).
Question 590
An enterprise networking reviewer examines this Huawei Datacom situation. A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication. A colleague proposes this action: Choose the appropriate enterprise datacom architecture for a campus user edge versus a scalable data-center fabric before selecting a particular routing or switching feature. Which protocol principle BEST supports that proposal? Select ONE best answer.
- An OSPF ASBR originates type 5 external LSAs in eligible areas; E1 metrics account for internal cost toward the ASBR, whereas E2 selection prioritizes external cost except for applicable tie-breakers.
- A Virtual Routing and Forwarding instance keeps a distinct routing table for assigned interfaces, and inter-VRF connectivity needs explicit appropriate route sharing or security-controlled transit rather than an assumption of global-table access.
- SDN-based WAN management centralizes policy orchestration and visibility, while SD-WAN forwarding uses measured underlay links and application or SLA policies to choose paths; controller reachability alone does not guarantee user traffic meets latency targets.
- Campus designs emphasize user access, WLAN, segmentation and availability, whereas data-center networks commonly emphasize scalable east-west service reachability, underlay/overlay design and high-density automated provisioning.
Explanation
Correct Answer
D:The relevant protocol behavior is: Campus designs emphasize user access, WLAN, segmentation and availability, whereas data-center networks commonly emphasize scalable east-west service reachability, underlay/overlay design and high-density automated provisioning. In the stated scenario (A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication.) this supports the controlled action: Choose the appropriate enterprise datacom architecture for a campus user edge versus a scalable data-center fabric before selecting a particular routing or switching feature.
Incorrect Answers
A:This option proposes: An OSPF ASBR originates type 5 external LSAs in eligible areas; E1 metrics account for internal cost toward the ASBR, whereas E2 selection prioritizes external cost except for applicable tie-breakers. It addresses the different topic OSPF external LSAs and E1 versus E2 cost, not the directly tested Campus design versus data center fabric operational boundaries failure in the stated incident (A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication.).
B:This option proposes: A Virtual Routing and Forwarding instance keeps a distinct routing table for assigned interfaces, and inter-VRF connectivity needs explicit appropriate route sharing or security-controlled transit rather than an assumption of global-table access. It addresses the different topic VRF traffic separation and route leaking controls, not the directly tested Campus design versus data center fabric operational boundaries failure in the stated incident (A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication.).
C:This option proposes: SDN-based WAN management centralizes policy orchestration and visibility, while SD-WAN forwarding uses measured underlay links and application or SLA policies to choose paths; controller reachability alone does not guarantee user traffic meets latency targets. It addresses the different topic SDN WAN control and SD-WAN policy forwarding, not the directly tested Campus design versus data center fabric operational boundaries failure in the stated incident (A multinational wants a centrally managed employee campus with many wireless users but a designer selects a server-only VXLAN service topology without considering access authentication.).