The statement is incorrect because the traffic limiting policy feature on Huawei firewalls, often referred to as session limiting, is more versatile. While it does support limiting the number of connections based on a specified source or destination IP address, it is not restricted to only these criteria. The feature can also apply limits to the total number of connections matching an entire security policy rule, or on a per-user basis, providing more granular control than just per-IP limits.

The "True" option is incorrect because the word "only" in the statement creates a false limitation. The feature's capabilities extend beyond just per-source and per-destination IP connection limiting, as it also includes options for per-user and per-policy limits.

1. Huawei HedEx Documentation: In the HUAWEI USG6000E & USG6000

and Eudemon1000E/8000E/Eudemon200E-X Series V600R007C20 Administrator Guide

the section on "Security Policy" details the configuration of session limits. When configuring the action for a security policy

an administrator can set session limits based on multiple criteria.

Reference: HUAWEI USG6000E & USG6000

and Eudemon1000E/8000E/Eudemon200E-X Series V600R007C20 Administrator Guide

Section: Security Policy > Configuring a Security Policy > Action. This section describes creating a session limit profile which can be applied to the entire policy

per source IP

or per destination IP

demonstrating capabilities beyond just the two mentioned in the question.

2. Huawei HCIP-Security Courseware: The official training materials for the HCIP-Security certification (the exam this question is for) explain the session limiting function.

Reference: HCIP-Security V3.0 Firewall Technology Training Material

Chapter: Firewall Security Policy. This chapter explains that session limits can be configured in a security policy to control the maximum number of concurrent connections for each IP address

each user

or the entire traffic flow that matches the policy. The inclusion of "each user" and "the entire traffic flow" explicitly contradicts the "only" in the provided statement.