Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmas50

HP HPE6-A73 - Aruba Certified Switching Professional Exam

Page: 1 / 4
Total 127 questions

An administrator implements interim accounting for guest users so that ClearPass can track the amount of bandwidth that guests upload and download. Guests that abuse bandwidth consumption should be disconnected from the network. The administrator configures the following on the AOS-CX access switches:

After performing this configuration, the administrator notices that guest users that have exceeded the guest bandwidth limit are not being disconnected. Upon further investigation, Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.

What is causing this issue?

A.

RADIUS change of authorization is not enabled on the AOS-CX switch.

B.

Bandwidth consumption of the guests is not being reported by the AOS-CX switch.

C.

NTP is not configured on the AOS-CX switch.

D.

There is a time discrepancy between the AOS-CX switch and ClearPass.

An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling. How should the administrator protect this traffic?

A.

IPSec with a digital certificate

B.

GRE with a pre-shared key

C.

PAPI with an MD5 pre-shared key

D.

IPSec with a pre-shared key

When implementing user-based tunneling on an AOS-CX switch, which component defines the primary and backup Aruba gateways?

A.

Transit VLAN

B.

Gateway role

C.

Server group

D.

Zone

An administrator is replacing the current access switches with AOS-CX switches. The access layer switches

must authenticate user and networking devices connecting to them. Some devices support no form of

authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same

port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

A.

802.1X must be configured to work in fallback mode

B.

Device fingerprinting is required for authentication

C.

The client-limit setting for port access needs to be changed

D.

Device mode should be implemented

What is true regarding VSX and keepalives on AOS-CX switches?

A.

A separate VLAN on the ISL link is used.

B.

A VSX LAG for the keepalives is a best practice.

C.

The OOBM port must be used.

D.

A 1GbE or faster port is used.

A network administrator is implementing a configuration plan in NetEdit. The administrator used NetEdit to push the configuration plan to the switch. Which option in the NetEdit planning section should the administrator select to save the configuration running on the switch to the startup-config?

A.

EDIT

B.

VALIDATE

C.

COMMIT

D.

DEPLOY

What is the correct way of associating a VRF instance to either a VLAN or an interface?

A.

Switch(config)# interface

Switch(config-if)# vlan access vrf attach

B.

Switch(config)# vlan vrf attach < vrf-name >

C.

Switch(config)# vlan

Switch(config-vlan-# vrf attach < vrf-name >

D.

Switch(config)# vlan vrf < vrf-name >

An administrator of a company has concerns about upgrading the access layer switches. The users rely

heavily on wireless and VoIP telephony. Which is the best recommendation to ensure a short downtime for the users during upgrading the access layer switches?

A.

Install the in-service software upgrade (ISSU) feature with clustering enabled

B.

Install AOS-CX 6300 or 6400 switches with always-on POE

C.

Implement VSF on the AOS-CX access switches

D.

Implement VSX on the AOS-CX access switches

The network is configured for OSPF with the following attributes:

Core1 and Core2 and ABRs

Area 1 has 20 networks in the 10.1.0.0/16 range

Area 0 has 10 networks in the 10.0.0.0/16 range

Area 2 has 50 networks in the 10.2.0.0/16 range

The ASBR is importing a static route into Area 1

Core2 has a summary for Area 2: area 0.0.0.2 range 10.2.0.0/16 type inter-area

Here is the OSPF configuration performed on Core1:

Based on the above information, what is correct?

A.

Area 0 has 13 routes

B.

Core1 has no OSPF routes

C.

Core1 has received one LSA Type 5 from the ASBR

D.

Area 1 has 23 routes

A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS-CX

switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility

Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.

What is correct about how the company should implement a security solution where the wired traffic is

processed by the gateways?

A.

Implement downloadable user roles with a gateway role defined on the AOS-CX switches

B.

Implement local user roles with a gateway role defined on the AOS-CX switches

C.

Implement standards-based RADIUS VSAs to pass policy information directly to the AOS-CX switches and MCs

D.

Implement downloadable user roles with a device role defined on the AOS-CX switches and MCs