Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Huawei H12-811_V2.0 Exam - Topic 1 Question 9 Discussion

The following command output is displayed on R1:[R1] display aaa configurationDomain Name Delimiter : @Domainname parse direction : Left to rightDomainname location : After-delimiterAdministrator user default domain : default_adminNormal user default domain : defaultDomain : total: 256 used: 3Authentication-scheme : total: 32 used: 2Accounting-scheme : total: 32 used: 1Authorization-scheme : total: 32 used: 2Service-scheme : total: 256 used: 0Recording-scheme : total: 32 used: 0Local-user : total: 512 used: 2Remote-admin-user block retry-interval : 5 Min(s)Remote-admin-user block retry-time : 3Remote-admin-user block time : 5 Min(s)Session timeout invalid enable : NoWhich of the following statements is false?
B) The local account lockout duration is 30 minutes.
A) The maximum number of consecutive authentication failures of the local account is 3.
C) The domain name delimiter is at sign (@).
D) A maximum of 512 local users can be created. Two local users have been created.

Huawei H12-811_V2.0 Exam - Topic 1 Question 9 Discussion

Actual exam question for Huawei's H12-811_V2.0 exam
Question #: 9
Topic #: 1
[All H12-811_V2.0 Questions]

The following command output is displayed on R1:

[R1] display aaa configuration

Domain Name Delimiter : @

Domainname parse direction : Left to right

Domainname location : After-delimiter

Administrator user default domain : default_admin

Normal user default domain : default

Domain : total: 256 used: 3

Authentication-scheme : total: 32 used: 2

Accounting-scheme : total: 32 used: 1

Authorization-scheme : total: 32 used: 2

Service-scheme : total: 256 used: 0

Recording-scheme : total: 32 used: 0

Local-user : total: 512 used: 2

Remote-admin-user block retry-interval : 5 Min(s)

Remote-admin-user block retry-time : 3

Remote-admin-user block time : 5 Min(s)

Session timeout invalid enable : No

Which of the following statements is false?

Show Suggested Answer Hide Answer
Suggested Answer: B

Comprehensive and Detailed 150 to 200 words of Explanation From Datacom knowledge:

The false statement is B. From the AAA configuration output, the value of Remote-admin-user block time is clearly shown as 5 Min(s), which means the account lockout duration is 5 minutes, not 30 minutes.

Option A is true because Remote-admin-user block retry-time : 3 indicates that after 3 consecutive authentication failures, the account will be blocked. Option C is also true because the displayed Domain Name Delimiter is @, which is the separator used in usernames such as user@huawei.com. Option D is true as well because the output shows Local-user : total: 512 used: 2, meaning that the device supports a maximum of 512 local users, and currently 2 local users have been created.

This question checks the ability to correctly read AAA configuration output on Huawei devices. In HCIA-Datacom knowledge, it is important to distinguish between retry interval, retry count, and block time, because these values represent different security control parameters and are often confused during troubleshooting or configuration review.


Contribute your Thoughts:

0/2000 characters
Tamar
3 days ago
Right! The output shows no lockout duration.
upvoted 0 times
...
Thaddeus
8 days ago
Yeah, I agree. No mention of 30 minutes.
upvoted 0 times
...
Sunshine
13 days ago
I think option B is false.
upvoted 0 times
...
Hollis
19 days ago
I agree with Dorinda, B seems off.
upvoted 0 times
...
Carlton
24 days ago
Wait, only 2 local users created? Surprising!
upvoted 0 times
...
Kaitlyn
29 days ago
A is true, max failures for local accounts is 3.
upvoted 0 times
...
Dorinda
1 month ago
I think B is false, it doesn't say anything about a 30 min lockout.
upvoted 0 times
...
Basilia
1 month ago
The domain name delimiter is definitely @.
upvoted 0 times
...
Gilberto
1 month ago
I feel confident that option A is true since it mentions 3 consecutive failures, which matches what we discussed in class.
upvoted 0 times
...
Francesco
2 months ago
The local account lockout duration being 30 minutes seems off to me; I thought it was 5 minutes based on a similar practice question we did.
upvoted 0 times
...
Natalya
2 months ago
I remember something about the domain name delimiter being the at sign (@), so I think option C is true.
upvoted 0 times
...
Vilma
2 months ago
I think the maximum number of local users is correct, but I'm not sure about the lockout duration. Was it mentioned in our study materials?
upvoted 0 times
...

Save Cancel