CPU attack defense uses a multi-level security mechanism to implement hierarchical device protection. Match the following levels with the corresponding protection functions.

On a Huawei router, if no ACL is configured or an ACL is configured but no ACL rule is configured, the ACL matching result is Unmatched.
The figure shows an inter-AS multicast network. Which of the following protocols will be applied to this network architecture?

There are two types of routing entries on a PIM network. (S, G) routing entries are used to set up on a PIM network and are applicable to both PIM-DM and PIM-SM networks.
On an OSPF network, routers learn routing information on the entire network by exchanging LSAs. Which of the following values is the LS Age in the LSA header when an LSA is deleted?
Security policy is the core feature of firewalls. Only valid traffic that complies with security policies can be forwarded by firewalls. Which of the following statements are true about security policy matching rules?
The Next_Hop attribute in BGP records the next hop of a route. Similar to the next hop in an IGP, the Next_Hop attribute in BGP must be the IP address of a peer interface.
The IP prefix list configuration on a Huawei router is shown below. Which of the following routes can match the IP prefix list and be permitted?
ip ip-prefix huawei index 10 deny 10.1.1.0 24
ip ip-prefix huawei index 20 permit 10.1.1.1 32
ip ip-prefix huawei index 30 permit 10.1.2.0 24 less-equal 32
The native AC function allows an agile switch to integrate AC capabilities, achieving wired and wireless convergence. The agile switch centrally manages wired and wireless service traffic.
Which of the following statements is false about BFD?
TESTED 24 Aug 2026