Free Practice Questions for the Huawei HCIP-WLAN H12-323_V2.0 Exam (2026 Updated)

Portal authentication controls network access by redirecting unauthenticated users to a web-based authentication page.

Before authentication succeeds, the access device restricts the user's permitted traffic. However, the station must still be able to communicate with the Portal server to display the authentication page and submit the required credentials.

Huawei implements controlled pre-authentication access through an authentication-free rule profile.

In the Portal Authentication Lab, the WAC uses a free-rule-template configuration that permits traffic to the designated iMaster NCE-Campus server, which provides the Portal service.

The example uses the following command:

[WAC1-free-rule-free1] free-rule 1 destination ip 172.18.134.230 mask 32

Therefore, traffic destined for the Portal server must be permitted, making option A correct.

However, DNS communication may also be required when the Portal URL contains a domain name rather than an IP address.

Huawei's troubleshooting lab explicitly identifies permitting the DNS server as a necessary precaution in that scenario.

Internet access is not generally required before Portal authentication, while RADIUS communication occurs between the network access device and the authentication infrastructure.

Lab Guide reference: Lab 6 — Portal Authentication → Authentication-Free Rule Profile Configuration, printed pp. 124–125; Lab 12 → Quiz, printed pp. 256–257.

────────────────────────────────────────────────────────

VLAN pools allow a Huawei WAC to distribute wireless users across multiple service VLANs instead of assigning every station associated with an SSID to a single VLAN. This reduces the concentration of users in an individual broadcast domain and improves address allocation scalability.

Huawei supports two primary VLAN assignment algorithms: hash and even.

Under hash assignment, the controller uses the station's MAC address to determine its service VLAN. Provided the pool membership remains unchanged, a returning station is ordinarily assigned the same VLAN and preferentially obtains its previous IP address. Therefore, option A is correct.

Under even assignment, VLAN selection follows the order in which stations connect. Repeated associations can result in different VLAN assignments and IP addresses, supporting option C. Option B correctly describes the scalability advantage of VLAN pooling.

Option D is false because Huawei permits an administrator to reference a VLAN ID in a VLAN pool even when the corresponding VLAN has not yet been created.

However, the configuration does not make the nonexistent VLAN operational. The administrator must subsequently create that VLAN and ensure the required forwarding path is configured; otherwise, traffic associated with it cannot function correctly.

Training Material reference: WLAN Networking Technologies → VLAN Pool Configuration → VLAN Assignment Algorithms. Huawei WLAN-AC Command Reference → vlan in VLAN Pool View.

────────────────────────────────────────────────────────

Huawei's radio calibration mechanism dynamically optimizes AP radio parameters according to the surrounding RF environment. Its principal objectives are to minimize interference, preserve coverage continuity, and improve overall wireless transmission efficiency.

The calibration process includes neighbor discovery, radio-environment analysis, channel allocation, and transmit-power adjustment.

Neighbor probing is an essential input stage. APs periodically detect neighboring radios and report information to the WAC. This information allows the controller to construct a radio-neighbor topology and evaluate interference relationships.

Channel adjustment uses Dynamic Channel Assignment (DCA) to allocate suitable operating channels, reducing co-channel and adjacent-channel interference.

Power adjustment uses Transmit Power Control (TPC) to modify AP transmit power according to coverage requirements and neighboring radio conditions.

Huawei additionally supports Dynamic Frequency Assignment (DFA) and Dynamic Bandwidth Selection (DBS) as part of broader radio calibration.

Load balancing, however, is a separate radio resource management function. It redistributes associated users among available APs or radios according to criteria such as station count and load. It is not an operation within the radio calibration sequence.

The Training Material distinguishes radio calibration from AP-based load balancing as separate RRM functions. Therefore, option A is correct.

Training Material reference: WLAN Radio Resource Management → Radio Calibration → Overview and Implementation of Radio Calibration, PDF pp. 300–307.

Lab Guide reference: Lab 8 — RRM Lab → Radio Calibration and Load Balancing Configuration.

────────────────────────────────────────────────────────

Huawei CampusInsight provides intelligent WLAN monitoring and experience evaluation by collecting network telemetry and presenting operational metrics through graphical dashboards.

The exhibit displays three wireless experience indicators: Access Success Rate, Access Time Consuming, and Roaming.

These indicators are elements of the Wireless Network Health evaluation system.

Huawei organizes wireless health assessment into three principal dimensions: access experience, roaming experience, and performance experience.

Access experience evaluates whether stations successfully complete association, authentication, and DHCP address allocation, as well as the time required for these operations.

Roaming experience measures whether stations can move between APs without significant interruption or abnormal handover delays.

Performance experience evaluates signal quality, interference, capacity health, and throughput fulfillment.

The Training Material contains a network health evaluation model showing the same graphical indicator style as the question exhibit, including circular health ratings and metric progress bars.

The other options represent different CampusInsight functions. Experience analysis focuses on investigating service-quality problems, whereas device and telemetry views provide infrastructure and data-collection information.

The screenshot's structure and metric categories correspond directly to the Wireless Network Health dashboard.

Therefore, option D is correct.

Training Material reference: WLAN O and M → CampusInsight Intelligent O & M → Wireless Network Health: Network-wide Status Visualization, PDF p. 921; Network Health Evaluation Model, p. 922, slide 34.

Lab Guide reference: Lab 11 — CampusInsight O & M → CampusInsight Function Verification.

────────────────────────────────────────────────────────

Huawei WLAN optimization encompasses coverage assessment, interference analysis, physical installation verification, antenna alignment, and network design improvement. Different tools support these activities at different stages.

CloudCampus APP (A) provides wireless signal evaluation, interference testing, network diagnostics, and service-experience measurements. Engineers use it to identify poor coverage, weak signal strength, excessive interference, and degraded service performance.

Rangefinder (B) is a physical measurement tool used during site surveys. It determines distances, installation heights, and other dimensions needed to validate AP placement. These measurements remain useful when correcting coverage problems or evaluating alternative mounting locations.

Antenna Alignment (C) is particularly important in outdoor directional and mesh deployments. Huawei describes using the CloudCampus APP's antenna-alignment function to fine-tune antenna orientation and improve wireless link performance.

WLAN Planner (D) supports predictive network design, AP placement, channel calculations, power calibration, and wireless signal simulation. It allows engineers to evaluate changes before implementing them on the live network.

Together, these tools support the wider WLAN planning and optimization lifecycle.

Scope qualification: Huawei explicitly describes rangefinders under site-survey tools, whereas CloudCampus APP and WLAN Planner provide software-based planning and evaluation functions. The four-answer selection is appropriate when optimization includes the associated survey and corrective-design activities.

Training Material reference: WLAN Planning Process → Site Survey Tools, PDF p. 449; WLAN Planning Tools → WLAN Planner, p. 399; WLAN Planning Scenarios → Antenna Alignment Method, p. 780; WLAN Optimization Overview and Tools → CloudCampus APP, p. 840.

────────────────────────────────────────────────────────

Huawei's WLAN roaming troubleshooting methodology identifies inconsistent security configurations, incorrect roaming settings, faulty mobility-group relationships, and discontinuous radio coverage as common causes of unsuccessful roaming.

Option B is a valid cause. If AP coverage areas are separated by coverage holes, a moving STA may lose its connection before it can associate with the destination AP.

Option C is a valid cause. The APs involved in roaming must use compatible security parameters. Huawei specifically requires consistent SSIDs, security-profile settings, authentication modes, and relevant authentication parameters.

Option D is a valid cause. When the STA must perform Layer 3 roaming because its destination VLAN differs from its original VLAN, disabling Layer 3 roaming prevents the required transition.

Option A is not inherently a cause of roaming failure. Huawei supports roaming with different data-forwarding architectures, including direct forwarding and tunnel forwarding. Different forwarding modes do not, by themselves, establish that roaming cannot operate.

The controller must still maintain the required forwarding path, service VLAN connectivity, and roaming configuration.

Huawei's troubleshooting flowchart focuses on security-profile consistency, Layer 3 roaming configuration, VLAN correctness, mobility-group status, continuous coverage, and duplicate SSIDs.

Therefore, A is the correct selection.

Training Material reference: WLAN Troubleshooting → Roaming Faults → Flowchart and Procedure for Troubleshooting STA Roaming Failures, PDF pp. 999–1002.

Lab Guide reference: Lab 7 — WLAN Roaming → Inter-WAC Layer 3 Roaming Configuration and Verification.

────────────────────────────────────────────────────────

AP transmit power directly affects the effective coverage area of a wireless radio. Increasing transmit power may extend signal coverage, but excessive power can also increase interference with neighboring APs operating on the same channel.

Co-channel interference occurs when multiple APs using an identical frequency channel operate within overlapping RF coverage areas. Because IEEE 802.11 uses a contention-based medium-access mechanism, these APs compete for the same available channel airtime.

Excessive overlap can increase channel utilization, reduce transmission opportunities, and degrade aggregate WLAN throughput.

Huawei recommends reducing AP transmit power when coverage requirements can still be satisfied. This limits unnecessary signal propagation beyond the intended service area and can improve spatial reuse of available radio channels.

However, transmit-power reduction must be performed carefully. Excessive reduction may create coverage holes, weaken signal levels at cell boundaries, and degrade roaming performance.

Huawei's radio calibration mechanism uses Transmit Power Control (TPC) to dynamically adjust transmit power according to RF conditions and coverage requirements.

Power optimization should therefore be coordinated with channel planning, AP placement, and validation of received signal strength throughout the coverage area.

Since the statement explicitly assumes that WLAN coverage remains adequate, reducing AP transmit power is an appropriate measure for limiting co-channel interference.

Therefore, the answer is TRUE.

Training Material reference: WLAN Planning Basics → Channel Design Rules, PDF p. 473; WLAN Radio Resource Management → Power Adjustment, p. 302.

────────────────────────────────────────────────────────

Huawei's CloudCampus APP is a mobile network-assessment tool designed to simplify WLAN deployment acceptance, experience evaluation, and operational troubleshooting.

The application provides several functional modules for checking the currently connected wireless network.

Its network-information functions display wireless parameters, including signal strength, operating channel, frequency bandwidth, negotiated link rate, and connected SSID information.

The Wi-Fi experience function supports signal-strength evaluation, packet-delay measurements, download-rate assessment, website-loading analysis, and security detection.

These capabilities allow an engineer to assess wireless connectivity from multiple perspectives rather than relying exclusively on received signal strength.

Security assessment is relevant because a wireless terminal may experience acceptable RF performance while remaining exposed to local network threats or abnormal traffic manipulation.

ARP spoofing can involve forged ARP information that redirects local network traffic. DNS hijacking can involve unauthorized manipulation of name-resolution results.

The question's intended answer is TRUE because Huawei explicitly includes security detection in the CloudCampus APP's Wi-Fi experience functionality.

Training Material reference: WLAN Network Optimization Overview and Tools → WLAN Optimization Tools → CloudCampus APP → Network and Wi-Fi Experience, PDF pp. 840–841.

Lab Guide reference: Lab 9 — Indoor WLAN Planning; Lab 11 — CampusInsight O & M.

────────────────────────────────────────────────────────

Huawei's radio calibration mechanism automatically optimizes wireless channels and transmit power to maintain suitable RF conditions.

Two calibration approaches are supported: global radio calibration and partial radio calibration.

Global radio calibration evaluates the complete WLAN radio environment. It adjusts channels and transmit power across all participating APs to establish an optimized network-wide configuration. Huawei identifies a newly deployed WLAN as a typical use case for global calibration.

Partial radio calibration adjusts only the affected APs and their neighboring radios. This approach is appropriate when local environmental changes require optimization without disturbing the complete WLAN.

Option B is a valid trigger because deterioration in channel utilization, noise floor, or beacon transmission conditions can initiate localized calibration.

Option C is valid because a newly connected AP changes the existing radio-neighbor topology. The WAC can calibrate the new AP and adjust its neighboring APs accordingly.

Option D is also valid. When an AP goes offline, its neighboring APs may need transmit-power adjustments to compensate for the resulting coverage gap.

Huawei additionally identifies rogue AP interference, non-Wi-Fi interference, and manual triggering as possible causes of partial calibration.

A new WLAN deployment is associated with global calibration rather than localized partial calibration.

Therefore, option A is correct.

Training Material reference: WLAN Radio Resource Management → Radio Calibration → Implementation of Radio Calibration: Global and Partial Radio Calibration, PDF pp. 306–307.

Lab Guide reference: Lab 8 — RRM Lab → Radio Calibration Configuration.

────────────────────────────────────────────────────────

WLAN planning for indoor parking lots requires continuous wireless coverage along vehicle movement paths, entrances, exits, and areas where users or wireless-enabled equipment may move between coverage cells.

Huawei recommends deploying ceiling-mounted APs with omnidirectional antennas in a W-shaped arrangement, generally using an inter-AP spacing of approximately 35 m to 40 m.

AP positioning should follow the geometry of vehicle lanes rather than placing access points exclusively above parking spaces. This approach provides better coverage for moving terminals and reduces the likelihood of signal interruption during movement.

Additional APs should be considered where lanes connect to entrances, exits, or other critical movement paths. These locations are important because the wireless terminal may need to roam between APs while maintaining an active network connection.

The illustrated arrangement places APs along the internal lanes and near points where the vehicle movement paths connect, supporting continuous coverage across the parking area.

Huawei's planning guidance also emphasizes that AP positioning must account for obstacles and construction materials. Concrete columns, metal structures, and vehicles may affect signal propagation and produce localized coverage holes.

Therefore, deploying APs above lanes and at critical connecting points is consistent with the intended design principle.

Training Material reference: WLAN Planning Scenarios → WLAN Deployment Solution for Parking Lots, PDF pp. 542, 660 and 695.

Lab Guide reference: Lab 9 — Indoor WLAN Planning → AP Deployment Planning.

────────────────────────────────────────────────────────

Huawei's N+1 controller backup architecture allows several active wireless access controllers to share a standby WAC. During normal operation, each AP establishes a CAPWAP connection with its designated active controller.

If the active WAC becomes unavailable or its CAPWAP connection fails, the AP detects the failure and attempts to register with the standby WAC.

The Training Material describes CAPWAP heartbeat detection as the mechanism used to identify communication failure between an AP and its controller.

Huawei specifies a default CAPWAP heartbeat interval of 25 seconds and a failure threshold of three consecutive unsuccessful heartbeat detections in its dual-link cold backup explanation.

The resulting detection interval is:

25 seconds × 3 = 75 seconds.

This supports option D as the expected answer when the same default CAPWAP heartbeat parameters apply to N+1 operation.

After detecting failure, the AP must establish a new CAPWAP connection with the standby controller and obtain the required configuration. Therefore, complete service restoration may take longer than the heartbeat detection interval.

Training Material reference: WLAN Reliability Technologies → Dual-Link Cold Backup → Working Process, PDF pp. 102–103; N+1 Backup → Working Process, pp. 121–122.

────────────────────────────────────────────────────────

WPA and WPA2 use a hierarchical key-management mechanism to protect wireless communications. Different cryptographic keys serve distinct purposes during authentication, key negotiation, and data encryption.

The Pairwise Master Key (PMK) provides foundational keying material for establishing a secure relationship between a station and the network. It may be derived through a pre-shared-key mechanism or generated through an enterprise authentication process.

The Pairwise Transient Key (PTK) is established during the four-way handshake and protects individually addressed traffic exchanged between a station and its associated AP. Because it is specific to a pairwise security relationship, the PTK is not the key used to encrypt broadcast and multicast traffic for an entire wireless group.

The Group Master Key (GMK) is key-generation material maintained by the authenticator. It is used in the generation of group keying material rather than directly encrypting normal group-addressed data frames.

The Group Temporal Key (GTK) is the operational key used to protect broadcast and multicast wireless data. The authenticator distributes the appropriate GTK securely to associated stations during the key negotiation process.

Consequently, option D is correct. The distinction between PTK and GTK is fundamental to understanding how WPA/WPA2 protect unicast and group-addressed wireless communications.

Training Material reference: User Access and Authentication → WLAN Security Technologies → WPA/WPA2 Authentication and Key Negotiation.

────────────────────────────────────────────────────────

Huawei's WLAN network optimization methodology addresses wired-side architecture, VLAN planning, address allocation, and network service reliability.

Option B is correct. In large deployments, separate service VLANs can be allocated to different SSIDs. This reduces the size of broadcast domains and minimizes unnecessary broadcast traffic, improving network scalability.

Option C is correct. Huawei recommends separating management addresses used by WACs and APs from user service addresses. This improves operational control, isolates management traffic, and simplifies troubleshooting.

Option D is correct. In environments with frequent station movement, DHCP leases may continue consuming address-pool resources after users leave. Shortening the lease duration allows addresses to be reclaimed more quickly, reducing the risk of address exhaustion.

Option A contains an important wording problem. Huawei recommends that AP management VLANs and service VLANs should not use VLAN 1, and that management and service VLANs should be separated. However, the course presents these as network design recommendations rather than an absolute technical restriction preventing VLAN 1 configuration.

Therefore, B, C, and D are the three most defensible selections under a literal interpretation.

Training Material reference: WLAN Optimization Solution → Networking Optimization → Network Planning Optimization, PDF p. 846, course slide 15.

────────────────────────────────────────────────────────