A network serving 15,000 wireless terminals is a large-scale WLAN and should use a standalone WAC solution. A dedicated WAC provides independent controller resources, scalable AP and user management, centralized WLAN policy control, and the ability to deploy controller redundancy without tying wireless-control capacity directly to a specific core-switch service card.

Huawei recommends a standalone WAC when the wireless network scale is large or when the wireless network is deployed independently over an existing wired campus. The WAC is typically connected to the aggregation or core layer in off-path mode, and VRRP hot standby can be used to improve reliability.

Native WAC solutions are valuable for unified wired and wireless management, authentication, forwarding, and policy enforcement. However, for a very large number of wireless terminals, the controller platform must be selected according to user, AP, traffic, and forwarding-capacity specifications. A standalone WAC allows the wireless control plane to be sized and expanded independently.

Option C provides the dedicated WAC together with the required core and aggregation or access infrastructure. Therefore, it is the recommended architecture for 15,000 wireless terminals.

The statement is false because “AP” is a generic term covering several operating architectures. A Fit AP requires a WAC, and a cloud-managed AP is centrally managed through iMaster NCE-Campus. However, a Fat AP is autonomous: it can operate and be configured independently without a centralized controller. Huawei also describes the leader AP architecture, in which a capable AP integrates part of the WAC functionality, operates independently, and manages a limited number of Fit APs.

Therefore, the absolute claim that an AP cannot work independently is technically incorrect. The correct interpretation depends on the AP mode. Fit APs depend on a WAC or leader AP for centralized configuration and CAPWAP-based management, whereas Fat APs provide local control and forwarding. Huawei explicitly states that the Fat AP architecture is autonomous and requires no additional centralized control device. Because at least one recognized AP architecture operates independently, the correct answer is False.

==================

The statement is false because Huawei SD-WAN supports both priority-based link selection and load balancing. Multiple Internet or WAN links do not have to be treated equally. An administrator can define a preferred or primary link and designate another link as secondary or backup according to application requirements, link quality, cost, bandwidth, or operational policy.

For delay- and packet-loss-sensitive services such as voice and video, a higher-quality link can be configured as the primary path and another link as the backup. If the primary link no longer satisfies the configured SLA thresholds, traffic can be dynamically switched to a better path. Huawei’s material explicitly describes primary and secondary link selection based on SLA and also presents load-balancing-based steering as a separate option.

Load balancing is useful when an enterprise wants to utilize the bandwidth of multiple links concurrently. Priority-based active/standby forwarding is preferable when one provider offers better quality or when one circuit should be reserved for critical services. Intelligent traffic steering can additionally consider application priority and current bandwidth utilization. Therefore, multiple links can be prioritized, load-balanced, or used in a policy-controlled combination, making option B correct.

==================

The statement is true. In this three-layer campus design, aggregation switches function as VXLAN edge nodes and distributed gateways, while access switches provide terminal connectivity. Policy association allows the access switches to participate in user admission and policy enforcement without requiring them to support full VXLAN functions.

The access switch collects terminal access information and associates user traffic with the appropriate service or policy. The aggregation switch, acting as the fabric edge and VXLAN tunnel endpoint, performs VXLAN encapsulation, distributed gateway forwarding, and policy-related operations. Huawei specifically states that when aggregation switches operate as edge nodes, access switches do not need to support VXLAN and can cooperate with aggregation switches through policy association. This also permits legacy access switches to be reused.

The design reduces upgrade costs and avoids extending complex overlay configurations to every access device. Huawei’s automated virtual-network deployment model also explicitly includes policy association between the aggregation and access layers, allowing access switches without VXLAN capability to operate as transparent or associated access nodes. Therefore, option A is correct.

==================

The AirEngine 6776I-X6TH is the model designed to provide PCIe card-based IoT expansion. The PCIe interface enables an appropriate IoT expansion card to be installed so that the AP can support additional wireless or sensing technologies according to the deployment requirement. This allows the same physical access infrastructure to deliver enterprise Wi-Fi and IoT connectivity.

The capability is useful in retail, healthcare, education, manufacturing, and asset-management environments, where technologies such as Bluetooth, RFID, Zigbee, electronic shelf labels, location services, or specialized sensing systems may need to coexist with the WLAN. A modular card design is preferable when an organization requires selectable or upgradeable IoT functions rather than only fixed integrated capabilities.

Huawei’s Wi-Fi and IoT convergence architecture reduces repeated cabling, separate power systems, and independently managed wireless networks. It enables an IoT-capable AP to provide the installation position, power, management connectivity, and uplink data channel required by IoT modules. Among the models listed, the AirEngine 6776I-X6TH is the PCIe card-based IoT model. Therefore, option A is correct.

==================

WIPS is the correct technology because it provides wireless intrusion prevention capabilities, including detecting and containing rogue access points, rogue stations, ad hoc devices, spoofing attempts, flood attacks, and other malicious activity on the radio interface. Huawei’s security-design material groups WIDS and WIPS with wireless attack detection and rogue-device containment. It recommends attack detection in public areas and primary or secondary education environments with high security requirements.

WIDS primarily detects and reports suspicious behavior, while WIPS adds active prevention or containment actions according to the configured policy. The other options serve different purposes. Mesh is a wireless networking architecture used to provide backhaul connectivity or extend coverage between APs; it is not an attack-detection mechanism. Spectrum analysis identifies non-Wi-Fi interference sources and evaluates radio-frequency utilization, but does not provide complete security attack detection and containment. Protected Management Frames protects selected 802.11 management frames against forgery, deauthentication, and disassociation attacks, but it is a protection mechanism rather than the comprehensive detection system requested. Therefore, WIPS is the correct answer.

==================

Broadcast TWT, Individual TWT, and Implicit TWT are valid Target Wake Time concepts. Individual TWT establishes a wake schedule between an AP and a specific station. Broadcast TWT advertises scheduling information that multiple stations can use, reducing individual negotiation overhead and coordinating groups of devices. An implicit TWT agreement defines a repeating schedule in which subsequent wake times are calculated from the agreed wake interval instead of being renegotiated for every service period.

These mechanisms allow stations, particularly battery-powered IoT devices, to sleep for predictable periods and wake only when transmission or reception is scheduled. TWT consequently reduces power consumption, channel contention, collisions, and unnecessary medium access in dense WLAN environments. Research describing IEEE 802.11ax TWT confirms that the mechanism schedules station transmission periods and allows stations to remain asleep outside their negotiated service periods.

“Multicast TWT” is not one of the standard TWT concepts represented by this question. Broadcast scheduling can cover multiple stations, but that does not create a separate mechanism formally identified here as Multicast TWT. Therefore, the correct answers are A, B, and C.

==================

GRE is a multiprotocol encapsulation mechanism and can carry all the listed packet types. It inserts a GRE header around the original payload and then places the resulting GRE packet inside a delivery-protocol packet. Because the GRE header contains a Protocol Type field identifying the encapsulated payload, GRE is not restricted to ordinary IPv4 unicast traffic.

IPv6 packets can be transported as GRE payloads when supported by the tunnel endpoints. IP unicast traffic is the most common use case. GRE can also carry IP multicast and broadcast packets, which is one of its major advantages over basic IPsec tunnel selectors that traditionally focus on IP unicast traffic. This enables routing protocols, multicast applications, discovery traffic, and other non-unicast services to operate across a logical point-to-point tunnel.

RFC 2784 defines GRE as a general mechanism for encapsulating an arbitrary network-layer protocol over another network-layer protocol. It also defines the Protocol Type field used to identify the carried payload. Huawei uses GRE as an SD-WAN overlay data-channel option and can additionally secure it using IPsec when confidentiality and integrity are required.

==================

The statement is false. In Parallel Redundancy Protocol, LAN A and LAN B must remain two separate, failure-independent networks. A PRP RedBox connects a singly attached node or conventional network to both parallel LANs and behaves toward the PRP network like a doubly attached node. It duplicates outgoing frames and transmits one copy through each PRP port. For incoming traffic, it accepts the first valid copy and discards the later duplicate before forwarding the frame through its interlink port.

The RedBox must not operate as a normal bridge that directly forwards frames from its LAN A port to its LAN B port. Doing so would connect the two redundant LANs, potentially creating loops, duplicate propagation, broadcast amplification, and a common failure path. That would defeat the fundamental PRP requirement that failure or disruption in one LAN must not affect the other.

The original video contains the typing error “PPR RedBox”; the correct term is PRP RedBox , meaning Parallel Redundancy Protocol Redundancy Box. PRP topology requires two separate networks with no direct links between them, while the RedBox provides controlled redundant attachment for non-PRP devices.

==================

An AP’s transmit power must be maintained within an appropriate range. Excessive power does not automatically improve service quality. A high-power AP can enlarge its interference domain, create co-channel or adjacent-channel interference, produce asymmetric uplink and downlink coverage, and cause sticky-client behavior because a station continues hearing an AP even when its weaker transmission cannot reliably reach that AP. Huawei states that high-power APs can interfere with adjacent APs and that radio calibration dynamically adjusts AP channels, power, and frequency bands to ensure coverage while minimizing interference.

Conversely, power that is too low creates coverage holes, weak received signal strength, low modulation rates, retransmissions, and roaming instability. When a new AP is added, neighboring APs may reduce their transmit power to limit interference. When an AP goes offline, neighboring APs may increase power to compensate for the missing coverage. The engineering objective is therefore neither maximum nor minimum power, but sufficient coverage with controlled overlap and minimum interference. Accordingly, option B is correct.

==================