Pass the Huawei HCIP-Cloud Computing H13-527_V5.0 Questions and answers with CertsForce

The correct answer is D . Huawei’s official HUAWEI CLOUD Stack NAT Gateway documentation explains that DNAT is used to map the private IP address and port of a cloud server in a VPC to a public IP address and port by binding an EIP. In practical terms, DNAT allows requests that arrive at a public IP address to be forwarded to the private IP address of a server inside the cloud network. That matches option D exactly.

Option A describes SNAT , not DNAT. Huawei explicitly states that SNAT translates a private IP address into an extranet/public IP address so cloud servers can access the Internet. Option B is also related to SNAT behavior, because Huawei notes that multiple cloud servers in a VPC can share an EIP for outbound Internet access through SNAT. Option C describes a filtering or firewall-style function rather than NAT translation.

Therefore, in Huawei Cloud Stack networking, DNAT is specifically used for inbound mapping from public addresses to private cloud-server addresses , so the verified answer is D .

========

The correct answer is A (TRUE) . Huawei Cloud Stack compute resource management documentation explicitly describes the behavior of soft-affinity , which is the practical equivalent of weak affinity in scheduling policy terms. Huawei states that if host resources are sufficient, VMs in the same soft-affinity group will be scheduled to the same host . It further states that if resources are insufficient or the current host is faulty, the VMs can be scheduled to different hosts . This matches the wording of the question almost exactly.

Huawei ECS group documentation also explains that an ECS group can be configured with affinity, anti-affinity, weak affinity, or weak anti-affinity policies, which confirms that weak affinity is an officially recognized scheduling policy in Huawei Cloud Stack. The “weak” part means the scheduler prefers a placement rule but is allowed to violate it when necessary to ensure successful deployment or continuity.

Therefore, the statement accurately reflects Huawei’s documented scheduling behavior: under normal conditions, VMs tend to be placed together, but if resources are inadequate, the rule may be broken. So the verified answer is TRUE .

The correct answer is PKI. In OpenStack Keystone, PKI (Public Key Infrastructure) tokens are cryptographically signed and specifically rely on a public/private key pair. Official OpenStack Keystone documentation states that PKI tokens are signed documents and that the Identity service uses public/private key pairs and certificates to create and validate them. It also explains that PKI and PKIZ tokens can be verified offline using Keystone’s public signing key, which directly matches the wording in the question about signing and verification.

By contrast, UUID tokens are simple persisted identifiers and do not inherently depend on public/private key signing. Fernet tokens are also a Keystone token format, but they are based on symmetric cryptography and shared key repositories rather than a public/private key pair. OpenStack documentation explicitly distinguishes Fernet and UUID from the deprecated PKI token mechanism. Therefore, among the listed options, the authentication method that uses a pair of private and public keys is clearly PKI. This aligns with standard OpenStack identity-service architecture and is consistent with Huawei Cloud Stack training topics that build on Keystone authentication concepts.

The correct answer is C. Unified hardware model. Huawei’s System Integration description states that it provides a unified access mode and drive development standard for connecting cloud platforms to ManageOne. Huawei’s cloud-service architecture materials also explicitly reference items such as Unified Authentication, which is part of the common-component layer used during login and service access.

Within Huawei Cloud Stack’s unified access and integration model, service-facing capabilities such as unified service catalog, unified authentication, and unified metering belong to the logical platform-access specification set. These are cloud-management and service-governance functions. By contrast, unified hardware model does not fit that category, because the “10 Unified Access Specifications” are about access, integration, management, and service consistency, not about forcing all infrastructure hardware into one model. Huawei Cloud Stack supports heterogeneous infrastructure and abstracts it through the platform rather than treating “unified hardware model” as an access specification. Therefore, the item that is not included is C.

========

The statement is TRUE . In HUAWEI CLOUD Stack, a resource set is a logical grouping of cloud resources under a tenant or VDC for purposes such as authorization, organization, and management. Huawei documentation describes resource sets as being used to classify and manage resources within a tenant context, which means their scope is tied to the tenant’s own resource domain. This is why resource sets are commonly used to separate production, test, departmental, or project resources inside the same tenant or VDC rather than as a cross-tenant migration mechanism. ( )

Operationally, resources can be reassigned or moved between resource sets when administrators need to reorganize management boundaries, but the resource-set model itself is not designed to move resource sets across tenants . Cross-tenant transfer would break the tenant-based isolation and authorization structure that Huawei Cloud Stack uses for cloud governance. This is consistent with Huawei’s hierarchical cloud management approach, where tenants are major security and administration boundaries, while resource sets are subordinate organizational tools. Therefore, the verified answer is A (TRUE) because resource migration between resource sets is allowed within the management domain, but resource sets themselves are not intended for migration across tenants. ( )

========

The correct answer is C. show . Official OpenStack command-line documentation explicitly lists the command openstack server show < server > and explains that it is used to show server details . The same documentation states that the < server > argument represents the server name or ID , which matches the wording in your question exactly.

The other options are not correct in this context. openstack server list displays a list of servers rather than the details of one specific instance. query and conf are not valid standard subcommands for this OpenStack server-detail operation. Since HUAWEI CLOUD Stack operations in this area follow OpenStack command syntax for instance inspection and lifecycle management, the proper command for viewing one instance’s details is openstack server show < server > .

Therefore, after correcting the sentence format, the blank should be filled with show , and the full verified command is openstack server show < server > . That makes the correct answer C .

========

The best verified answer is A, B, and C. Huawei’s Managing Network Resources documentation states that on Service OM, administrators can view the number of created physical networks and virtual networks, which supports option C. The same Huawei material also says administrators can collect information for handling VM network faults, and related VPC/API guidance shows Service OM visibility into ports, including VM NIC-related ports, which supports A.

Huawei documentation for Direct Connect further shows that administrators can create Direct Connect access points on Service OM before tenants can use Direct Connect. In training-style wording, this aligns with the idea of creating private line access points, so B is also correct.

Option D is the one that does not fit as a standard Service OM network resource management action in the same way. Huawei documentation emphasizes viewing physical network information and managing related network resources, but creation or low-level configuration of physical networks is generally handled through platform network configuration workflows rather than as a routine Service OM tenant/resource function. Therefore, the correct set is A, B, C.

========

Comprehensive and Detailed 150 to 200 words of Explanation From HUAWEI CLOUD Computing Topics:

The correct answer is B. AutoOps . In HUAWEI CLOUD Stack, AutoOps is the automation platform used for standardized O & M task execution. Its core value is that it can take individual atomic operations and organize them into automated workflows, allowing repeated maintenance and troubleshooting procedures to be executed in a consistent, efficient, and less error-prone manner. This makes it highly suitable for routine operational tasks, fault handling, and platform maintenance scenarios where manual execution would be slower and more risky.

The other options have different roles. CMDB is mainly used for configuration and dependency information management. FusionCare is more focused on inspection, health check, and troubleshooting support. CloudNetDebug is designed for network fault diagnosis, especially for virtual network path troubleshooting. None of these primarily serve as the orchestration and automation engine for O & M workflows.

Therefore, when the requirement is to automate standardized operations and execute orchestration-based maintenance tasks in HUAWEI CLOUD Stack, the best answer is AutoOps , so the correct option is B .