Explanation From HCIA-Security documents:
3-tuple NAT is used to publish internal services to external users by translating destination IP address, destination port, and protocol so that an Internet user can reach an intranet server using a public address and specific service port. So the first part of the statement about enabling proactive external access through translated addresses and ports matches what 3-tuple NAT is used for.
However, NAT translation and firewall access control are two different functions. NAT only defines how addresses and ports are translated; it does not replace the firewall's security policy decision. On a Huawei firewall, whether a packet is allowed to pass is determined by the configured security policy (interzone policy). If no relevant security policy exists to permit the traffic from the external zone to the internal zone and the mapped service, the firewall will not automatically allow it just because a NAT mapping is present.
Therefore, without an appropriate permit security policy, the access packets will be denied even if 3-tuple NAT is configured.

This statement is TRUE . In VRRP, a device in a virtual router group can exist in three defined states :
Initialize , Master , and Backup . These states determine how the device participates in gateway redundancy and packet forwarding.
The Initialize state is the beginning state of a VRRP router. In this state, the device is not yet acting as the active virtual gateway and is preparing to participate in the VRRP election process. After VRRP negotiation or election, one router becomes the Master . The Master router owns the virtual IP address for the group, forwards user traffic sent to that virtual gateway, and periodically sends VRRP advertisement packets to inform the other routers that it is operating normally.
The other routers remain in the Backup state. Backup routers do not normally forward traffic for the virtual gateway, but they continuously monitor the Master's advertisements. If the Master fails or stops sending advertisements within the expected time, one of the Backup routers is elected to take over and become the new Master. This failover mechanism ensures default gateway redundancy , reduces service interruption, and improves network reliability. Therefore, the statement is correct.