According to the Huawei HCIA-Cloud Computing training materials, statement D is FALSE. In the Linux operating system, permissions are determined by the User ID (UID) and the specific privileges of the account logged in (such as the root user), not by the type of interface being used. Whether an administrator uses a Graphical User Interface (GUI) or a Command-Line Interface (CLI), the ability to modify the kernel or change system files is strictly governed by the OS ' s access control lists and kernel-level security modules. In many enterprise cloud environments, such as those running Huawei’s EulerOS, the GUI is often not even installed to reduce the attack surface and save resources.

The other statements are technically correct. Statement A is true because the CLI allows for automation through scripting, making it far superior for routine maintenance and batch processing. Statement B is true because a GUI requires a display server (like X11 or Wayland) and a desktop environment, which significantly increase CPU and memory overhead compared to the text-based CLI. Statement C is true because an experienced administrator can execute complex tasks with a few keystrokes in the CLI much faster than navigating multiple windows and menus in a GUI. In the official curriculum, it is emphasized that for cloud data centers, the CLI is the primary tool for O & M (Operation and Maintenance) because it provides a direct, high-performance link to the system shell. The idea that a GUI provides " higher permissions " is a common misconception; in fact, critical kernel modifications are almost exclusively performed via the CLI or system configuration files to ensure precision and auditability.

====================

In the shown topology, RTA and RTB are directly connected on10.0.0.0/24(RTA: 10.0.0.1/24, RTB: 10.0.0.2/24). RTB and RTC are directly connected on20.1.1.0/24(RTB: 20.1.1.2/24, RTC: 20.1.1.3/24). In HCIA networking fundamentals, a router forwards packets based on its routing table, and thenext hop must be reachable on a directly connected network(or resolved via recursion), meaning it is typically theneighbor router interface on the local link.

A is false: For traffic fromRTA to RTC (20.1.1.3), RTA’s next hop should beRTB’s interface 10.0.0.2(its directly connected neighbor). The address20.1.1.2is not on RTA’s directly connected subnet, so it cannot be used as the immediate next hop in this basic routing scenario.

B is true: RTC must have a route back to10.0.0.0/24(for return traffic to RTA). Since RTC only knows its directly connected network20.1.1.0/24, a static/default route is required pointing to20.1.1.2.

C is true: RTB has two directly connected networks (10.0.0.0/24 and 20.1.1.0/24), so it can reach both RTA and RTC withno additional routes.

D is false: RTB does not need extra routing configuration for RTA↔RTC communication because both networks are alreadydirectly connectedon RTB.

Huawei FusionCompute provides a comprehensive virtualization platform with advanced management and scheduling capabilities.

Ais true. FusionCompute supportsdynamic resource adjustment, including CPU and memory scaling, helping applications adapt to workload changes.

Bis true. FusionCompute supportsx86 and Arm architectures, multiple storage backends, and mainstream operating systems such as Linux and Windows, ensuring broad application compatibility.

Cis true. SLA policies allow administrators to define priorities for virtual machines, ensuring that critical applications receive sufficient resources.

Dis true. FusionCompute supportsautomatic VM migration (such as DRS-like features)based on predefined policies to balance workloads and optimize system performance.

All listed statements correctly describe FusionCompute capabilities.

Huawei FusionCompute implementsrole-based access control (RBAC)to ensure secure and compliant system management.

Thesecurity auditor roleis designed specifically for compliance and auditing purposes. According to HCIA–Cloud Computing materials, this role hasread-only permissions, allowing the user toview and export system logsbut not modify configurations or perform operational tasks.

This restriction helps ensure the integrity of audit records and prevents unauthorized system changes.

Therefore, the statement isTRUE.

In FusionAccess architecture:

HDC (Huawei Desktop Controller) is responsible for desktop lifecycle management, including provisioning logic, policy enforcement, and resource validation.

During VM creation, HDC verifies whether the specified VM group and desktop group exist and whether configurations are valid.

Other components:

GaussDB stores metadata.

HDA runs inside desktops.

HDP is a display protocol.

Thus, the correct answer is HDC.

In FusionAccess,templates must not be joined to a domain.

HCIA–Cloud Computing materials specify that:

Templates are created in aworkgroup environment.

Domain joining is performed during desktop provisioning, not at the template stage.

Joining a template to a domain can cause conflicts such as duplicate computer accounts.

Therefore, the statement isFALSE.

In the official Huawei HCIA-Cloud Computing curriculum, the TCP/IP and OSI reference models are used to explain how data moves through a network. A standard network switch is categorized as a Data Link Layer (Layer 2) device. While the TCP/IP model typically combines the physical and data link layers into a single " Network Access " layer, Huawei’s technical training often uses the layered approach to clarify device functions. The Data Link Layer is responsible for hardware addressing and the reliable transmission of frames between adjacent nodes.

A switch operates at this layer because its primary function is to forward data based onMAC (Media Access Control) addresses, which are unique hardware identifiers burned into Network Interface Cards (NICs). Unlike a hub, which simply repeats signals to all ports (Physical Layer/Layer 1), a switch is " intelligent. " It builds and maintains a MAC Address Table by observing the source MAC addresses of incoming frames. When a frame arrives, the switch checks the destination MAC address against its table to determine the specific physical port to which the destination device is connected. This creates a dedicated " collision domain " for each port, significantly increasing network efficiency.

In the context of Huawei Cloud Computing, understanding that switches work at the Data Link Layer is vital for configuringFusionComputenetworking. The " Distributed Virtual Switch " (DVS) functions exactly like a physical Layer 2 switch; it manages virtual ports and ensures that frames sent by one Virtual Machine reach the correct destination VM or physical uplink based on MAC discovery. While " Layer 3 switches " do exist and can perform routing, the fundamental " switch " referenced in basic networking and the HCIA-Cloud curriculum is defined by its Layer 2 forwarding logic.

In the official Huawei FusionAccess maintenance and troubleshooting documentation, High Availability (HA) between the vAG (Virtual Access Gateway) and vLB (Virtual Load Balancer) is maintained through backend synchronization and heartbeat checks. The correct answer is D because changing the ITA portal login password has no technical impact on the background communication between infrastructure VMs. The ITA portal password is the credential used by an administrator to log into the web management interface (https://ITA_IP:8448); it is an application-layer credential stored in the database, not a system-level credential used for inter-component service discovery or HA heartbeats.

In contrast, options A, B, and C can indeed lead to " HA status abnormal. " In the Huawei ecosystem, components often communicate using internal system accounts. Specifically, thegandalfaccount is the default account used for the FusionAccess management plane to log in to and manage these components. If an administrator manually changes the gandalf password on the vAG/vLB VM (Option C) without updating the corresponding credentials in the management system, the ITA will lose its ability to query the status of those nodes, resulting in an abnormal HA state.

Furthermore, while the root password (Options A and B) is generally for administrative access, the FusionAccess components are tightly integrated. Changing system-level passwords without using the official Huawei password management tools or updating the service configurations can break the scripts responsible for status reporting and synchronization. Therefore, for the HCIA exam, it is critical to understand that theITA Portal passwordis purely for the user interface and does not affect the technical " plumbing " or HA heartbeats of the underlying virtual appliances.

====================

According to the HCIA–Cloud Computing curriculum, the evolution of cloud computing architecture reflects changes intechnology openness, business importance, resource scale, and data characteristics.

OptionAis correct because early cloud platforms were often proprietary and closed, while modern cloud computing architectures increasingly adoptopen-source technologies(such as OpenStack and Kubernetes) and open architectures to improve interoperability and innovation.

OptionBis also correct. Cloud computing initially hostednon-critical workloadssuch as testing, development, and backup systems. As reliability, security, and availability improved, cloud platforms became capable of supportingmission-critical enterprise applications, including ERP, financial systems, and core business services.

OptionDcorrectly describes the evolution of cloud architecture. Early virtualization focused onsmall-scale resource integration, while modern cloud computing emphasizeslarge-scale resource pools, enabling centralized management, elastic scheduling, and efficient utilization of massive compute, storage, and network resources.

OptionCisfalse. The evolution of cloud computing data has movedfrom structured data to semi-structured and unstructured data, not the other way around. With the rise of big data, IoT, social media, logs, images, and videos, cloud platforms are increasingly designed to processmassive volumes of unstructured and semi-structured data, which is a key trend emphasized in HCIA learning materials.

According to the official Huawei FusionAccess component deployment guidelines, the statement is FALSE. In the Huawei HCIA-Cloud Computing V5.5 curriculum, the deployment modes for infrastructure components are highly flexible to accommodate different business scales.

In adistributed deployment(large scale), it is a best practice to keep roles separate for performance and security. However, in astandalone or small-scale deployment, Huawei explicitly supports and even provides a " vAG/vLB/WI " all-in-one template. In this scenario, theWeb Interface (WI),Virtual Access Gateway (vAG), andVirtual Load Balancer (vLB)are all co-deployed on the same Virtual Machine. This reduces the hardware resource footprint and simplifies the management of the desktop cloud for small offices or testing environments.

ThevLB (Virtual Load Balancer)is responsible for distributing traffic among multiple WI servers to ensure high availability. ThevAG (Virtual Access Gateway)handles the secure HDP protocol traffic from the terminal to the desktop VM. TheWIprovides the login portal. Because these three roles interact directly during the user ' s login and desktop connection phase, they are technically compatible for co-residency on a single Linux-based appliance.

While the statement correctly identifies that vAG and vLB can be co-deployed (a very common practice), it incorrectly claims that vLB and WIcannotbe co-deployed. In the HCIA exam, it is important to remember that Huawei ' s " Standalone " deployment mode allows for the consolidation of these specific access-layer components into a single VM to maximize resource efficiency. Therefore, the assertion that such a deployment is impossible is technically incorrect.