HPE6-A45 Implementing Aruba Campus Switching Solutions Exam Questions

1. Refer to the exhibit.

AOS-Switches will enforce 802.1X authentication on edge ports. The company has two RADIUS servers, which are meant to provide redundancy and load sharing of requests. The exhibit shows the planned RADIUS settings to deploy to the switches.

What should customers understand about this plan?

2. An administrator wants to ensure that an AOS-Switch forwards all traffic that it receives on interface 1 with high priority.

– Switches should also communicate the high priority to other switches across the traffic path.

– The switch has type of service disabled.

– The administrator plans to apply 802.1p priority 5 to interface 1.

What should the administrator check to ensure that the configuration will work properly?

3. Refer to the exhibit.

A network administrator sets up prioritization for an application that runs between Device 1 and Device 2.

However, the QoS for the application is not what the administrator expects.

How can the administrator check if the network infrastructure prioritizes traffic from Device 1 and Device 2?

4. Refer to the exhibits.

Exhibit 1.

Exhibit 2.

The exhibits show the current operational state for routes on Switch-3. The company wants Switch-3 to prefer the link to Switch-1 over the link to Switch-2 for all intra-area, inter-area, and external traffic.

What can the network administrator do to achieve this goal?

5. An AOS-Switch implements tunneled node.

Which benefit does the PAPI enhanced security key provide?

6. Refer to the exhibit.

A network administrator needs to deploy AOS-Switches that implement port-based tunneled node. Their Aruba controller has IP address 10.1.10.5/24. The architect has assigned tunneled-node endpoints to VLAN 20.

What is one issue with the current configuration planned for VLAN 20 on the switch?

7. OSPF Area 1 has two ABRs. One ABR is configured with this range for Area 1: 10.10.0.0/16. The other ABR is not configured with a range for Area 1.

Which type of issue occurs due to this mismatch?

8. Refer to the exhibits. Exhibit 1.

Exhibit 2.

The company wants to minimize congestion on Link 1.

Which spanning tree implementation meets this goal?

9. Refer to the exhibit.

The network administrator enables DHCP snooping globally and on VLAN 2. An additional step is mandatory for DHCP snooping to operate correctly and for clients to receive DHCP settings.

What is the additional mandatory step?

10. Refer to the exhibit.

A network administrator configures connection rate filtering on interface 1 with the throttle action. Device 1 crosses the threshold and triggers the action.

What does the switch do?

11. What must an OSPF router do to ensure nonstop routing should a standby member take over as commander when the original VSF commander fails?

12. Two AOS-Switches are directly interconnected. The network administrator wants to prevent broadcast storms and other Layer 2 issues that could occur if there is physical damage to a cable.

Which technology should the administrator implement on the connected switch interfaces?

13. Refer to the exhibit.

The routing switches shown in the exhibit run OSPF on the links between each other. The commander in the Switch-1 VSF fabric goes down. Traffic is disrupted for several seconds.

What should a network administrator do to support a faster failover in a similar situation?

14. Which benefit is provided by MD5 authentication for BGP?

15. Refer to the exhibits. Exhibit 1.

Exhibit 2.

The VoIP phone connects, authenticates successfully, and is dynamically assigned to tagged VLAN 6. The endpoint connected to the phone does not authenticate but starts to send untagged traffic.

How does the switch handle this traffic?

16. An AOS-Switch needs to be configured to support tunneled node in role-based mode. The Mobility Controller administrators tell the switch administrators that the AOS-Switch will integrate with a cluster of Mobility Controllers. The cluster virtual IP address is 10.1.1.10.

How should switch administrator integrate the AOS-Switch with the cluster?

17. Refer to the exhibit.

A company wants to change Area 1 shown in the exhibit from a stub area to a totally stub area.

What will be one effect of this planned change?

18. An AOS-Switch runs IGMP on A VLAN.

What is a requirement for the switch to be a potential IGMP querier on that VLAN?

19. Refer to the exhibit.

Switch-1 runs BGP.

What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?

20. Refer to the exhibit.

An AOS-Switch has an extended ACL that is applied to several physical interfaces.

– New interfaces have been brought online.

– The ACL has been applied to them as well.

A network administrator sees the output in the exhibit and is concerned that the switch will reach the limit for rules.

What can the administrator do to address this concern?

21. Refer to the exhibit.

A company requires distribution layer switches that can provide Layer 2 and Layer 3 redundancy. The exhibit shows the proposal for these switches.

Which change to the proposal will help meet the company’s requirements?

22. Network administrators need to track when traffic matches deny entry in an ACL applied to a port. They want the alert to be sent to a syslog server that is already set up to send logs.

What should administrators do to enable alerts?

23. Refer to the exhibits.

Exhibit 1

Exhibit 2

In the exhibits, VLAN 20 under a device name indicates that the device is configured with that VLAN. The exhibits also indicate whether VLAN 20 is statically configured on each link, either as an untagged or a tagged VLAN. If the link has no label, VLAN 20 is not statically configured on that link.

A network administrator needs to deploy AOS-Switches that use port-based tunneled node. The plan calls for tunneled-node endpoints to be assigned to VLAN 20 and for the Aruba Mobility Controller to handle the tunneled-node traffic at Layer 2.

Which exhibit shows the correct plan for VLAN 20 in the wired infrastructure?

24. Refer to the exhibits.

Exhibit 1

Exhibit 2 Switch-1 has a power issue that causes it to fail. When Switch-1 comes back up, endpoints lose connectivity for a few minutes.

The network administrator decides to enter this command on Switch-1:

Switch-1 (config)# vlan 10 vrrp vrid 10 preempt-delay-time 120

Exhibit 2 shows the VRRP configuration just after the change.

What is the effect of this change?

25. Refer to the exhibits.

Exhibit 1

Exhibit 2

Exhibit 1 shows a portion of the BGP routing table when the BGP solution was first deployed. Exhibit 2

shows the same portion at the current time.

What can explain the current state?

26. Which switches can be deployed in a mesh topology for backplane stacking?

27. A network administrator needs to create a QoS policy on an AOS-Switch.

What is one component that the administrator must create before the policy?

28. Refer to the exhibits.

Exhibit 1

Exhibit 2

Switch-1 and Switch-2 are configured to provide VRRP in VLAN 2. The default gateway for VLAN 2 is set to the VRRP virtual IP. Client-1 in VLAN 2 cannot ping its default gateway.

Based on the exhibits, what can administrators determine?

29. A network administrator needs to create a backplane stack with four AOS-Switches. The administrator wants to choose which switch becomes the commander.

Which procedure meets those needs?

30. A company deploys AOS-Switches at sites with inexperienced IT staff. The main office network administrators want to monitor thresholds to generate alerts on branch switches.

What should be set up for this purpose?

31. A network administrator configures DHCP snooping on VLAN 2.

How does the switch handle DHCP traffic that arrives in this VLAN on an untrusted interface?

32. Refer to the exhibit.

A network administrator wants to add the protections of root guard to the network.

Based on the spanning tree topology, on which ports should the network administrator implement root guard?

33. The implementation plan for AOS-Switches calls for them to implement port-based tunneled node. The Aruba Mobility Controllers that will support the AOS-Switches run software 8.1. The controllers will also support APs, are managed by Mobility Master, and use clustering.

Which issue with this plan needs to be addressed?

34. What is one difference between BPDU protection and root guard?

35. Refer to the exhibit.

The exhibit shows configurations for interface 5 and VLAN 20. Note that DHCP snooping and ARP protection are also enabled.

A network administrator finds that interface 5 on an AOS-Switch is disabled. The administrator re-enables the interface, but it shuts down again.

What should the administrator investigate?

36. Refer to the exhibit.

Switch-1 and Switch-2 connect on interface A23. The switches experience a connectivity issue. The network administrator sees that both switches show this interface as up. The administrator sees the output shown in the exhibit on Switch-1.

What is a typical issue that could cause this output?

37. What is a reason to implement PIM-DM as opposed to PIM-SM?

38. An AOS-Switch enforces 802.1X. It receives an Access-Accept with this HPE VSA from its Radius server:

Attribute Name and ID = HPE-User-Role (25) Value = contractor

The switch then rejects the client.

What is one requirement for the switch to accept the message and authorize the client?

39. Network administrators need to configure a BGP neighbor on an AOS-Switch.

What defines the neighbor as an iBGP neighbor?

40. Refer to the exhibits.

Exhibit 1

Exhibit 2

Exhibit 1 shows the topology for the network. The network administrator sees the log entries shown in Exhibit 2.

Which type of failure is indicated?

41. A company has AOS-switches, Aruba ClearPass, and Aruba AirWave. A network administrator needs to find the source of a performance issue that often occurs at the start of the day and early in the afternoon.

Which action is likely to give the administrator the most useful information for the investigation?

42. Refer to the exhibits.

Exhibit 1

Exhibit 2

Network administrators are alerted to high interface utilization on a switch by a management solution. They examine the utilization on the uplink interfaces several times an hour during problem times. The exhibit shows output typical of times of congestion. The administrators want to allocate bandwidth fairly and reduce congestion on the uplinks.

What could help meet these requirements?

43. Refer to the exhibit.

Every switch in the exhibit will route traffic. The company requires a topology in which failover for switch-to ­switch links is exclusively handled by the routing protocol and occurs as quickly as possible.

Which topology should the administrator use?

44. Refer to the exhibit.

Switch-1 is an AOS-switch that is operating at factory default settings for QoS and has type of service disabled. It receives a frame with 802.1p value 5 on trk1, on VLAN 2.

How does the switch treat the frame when it forwards it on TRK2?

45. The security policy for a company requires that switches use SNMPv3 and accept all read-only SNMPv2c messages. The network administrator enables SNMPv3.

Which additional action should the network administrator take to comply with this policy?

46. Refer to the exhibits.

The network administrator enters the commands shown in Exhibit 2, and Switch-1 and Switch-2 exchange keepalive messages.

What is the expected behavior if Switch-1 later fails to receive keepalive messages from Switch-2?

47. Two AOS-Switches connect on VLAN 10 in OSPF Area 1, which is defined as a stub area on both.

Which mismatch can cause OSPF routers to lose adjacency?

48. A network administrator applies port security to a port with the send-alarm action.

What does the switch do if it detects traffic from an unauthorized MAC address on the port?

49. Which technologies can prevent split brain in a VSF fabric that includes Aruba 2930F switches?

50. An AOS-Switch is configured to use captive portal and RADIUS to integrate with an Aruba ClearPass solution.

What should the administrator do to enable the switch to accept change of authorization (CoA) messages from ClearPass?

51. Refer to the exhibits.

Exhibit 1

Exhibit 2

A company does not require authentication for security, but AOS-Switches are set up to use local MAC authentication (LMA) to assign the correct VLAN and priority to IP phones. IP phones and computers belong to different VLANs. Each device is supposed to connect to a specific port, but sometimes users connect their devices to the wrong ports and cannot receive access without help from IT.

How can a network administrator configure the switches to eliminate this issue?

52. A company wants to implement 802.1X authentication to authenticate client devices on AOS-Switch ports. The company has a RADIUS server that uses PEAP MSCHAP-v2 for the authentication method.

What is one task administrators should complete before they implement the plan?

53. AOS-Switches authenticate guests to ClearPass with captive portal. An administrator notices that some guests are unable to reach the captive portal page.

What will resolve this issue?

54. A customer wants to authenticate AOS-Switch managers to a RADIUS server. The CIO wants to assign different rights to different management users for granular control over their rights and privileges.

What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

55. Refer to the exhibits.

Exhibit 1

Exhibit 2

Exhibit 2 shows IGMP groups on Switch-2, which runs IGMP but not PIM. Switch-1 and Switch-3 do not have IGMP or PIM enabled. Client 1 begins to forward multicasts to 239.1.1.1.

Which clients receive the multicasts?

56. Refer to the exhibit.

Several interfaces on an AOS-Switch enforce 802.1X to a Radius server at 10.254.202.202. The interface 802.1X settings are shown in the exhibit, and 802.1X is also enabled globally. The security team have added a requirement for port security on the interfaces as well.

Before administrators enable port security, which additional step must they complete to prevent issues?

57. What is the minimum requirement for a device to pass local MAC authentication (LMA) on an AOS-Switch?

58. Refer to the exhibit.

The network administrator wants to summarize routes as much as possible in between areas.

What is the correct range to specify for the router OSPF Area 2 command on Switch-2?

59. Refer to the exhibit.

Switch-2, Switch-5, and Switch-6 currently have many OSPF routes to Area 1 networks. The network administrator wants to replace these routes with a single aggregated route to 10.1.0.0/16 on each switch. Where should the administrator specify the 10.1.0.0/16 range?

60. Refer to the exhibit.

An AOS-Switch has the ACL shown in the exhibit.

A network administrator then enters these commands:

Switch(config)# mac-access-list standard myACL

Switch(config-std-macl)# deny 007d.45cc.0000 0000.0000.ffff

How does this ACL treat these frames:

1 = 007d.45cc.ffff

2 = 007d.45cc.0000

61. Refer to the exhibits.

Exhibit 1

Exhibit 2

A network administrator wants to set up mirroring of traffic from port 1 on Switch-1 to port 1 on Switch-2. Exhibit-2 shows the commands that the administrator enters. The mirroring does not work correctly.

What must the administrator do to correct the error?

62. Refer to the exhibits.

Exhibit 1

Exhibit 2

Switch-1(config)# spanning-tree

Switch-1(config)# spanning-tree config-name “exam”

Switch-1(config)# spanning-tree instance 1 vlan 10-19

Switch-1(config)# spanning-tree instance 2 vlan 20-29

Switch-2(config)# spanning-tree

Switch-2(config)# spanning-tree config-name “exam”

Switch-2(config)# spanning-tree instance 1 vlan 10-19

Switch-2(config)# spanning-tree instance 2 vlan 20-29

Switch-2(config)# spanning-tree priority 0

Switch-2(config)# spanning-tree instance 1 priority 0

Switch-2(config)# spanning-tree instance 2 priority 1

Switch-3(config)# spanning-tree

Switch-3(config)# spanning-tree config-name “exam”

Switch-3(config)# spanning-tree instance 1 vlan 10-19

Switch-3(config)# spanning-tree instance 2 vlan 20-29

Switch-3(config)# spanning-tree priority 1

Switch-3(config)# spanning-tree instance 1 priority 1

Switch-3(config)# spanning-tree instance 2 priority 0

Switch-4(config)# spanning-tree

Switch-4(config)# spanning-tree config-name “exam”

Switch-4(config)# spanning-tree instance 1 vlan 10-19

Switch-4(config)# spanning-tree instance 2 vlan 20-29

The network administrator enters the commands shown in Exhibit 2.

What is the spanning tree status on A1 and A2?

63. A company has a Unified Communications and Collaboration (UCC) solution.

– Users run softphones on their desktops and laptops.

– The UCC solution is configured to use a certain range of Layer 4 ports for VoIP traffic.

– The user devices connect to AOS-Switches.

A network administrator needs to configure the AOS-Switches to prioritize only the VoIP traffic.

Where can the administrator configure a DSCP value to meet this goal?

64. Two 5400R AOS-Switches are OSPF neighbors. The network administrator wants routing paths to update as quickly as possible in the event of a failure on a neighboring switch.

Which technology should the administrator implement on the connected switch interfaces?

65. Refer to the exhibit.

Network administrators want the network to use PIM-DM to route multicasts from Server 1 to receivers in VLAN 24.

Which protocols should the administrators enable on which VLANs on Switch-1?

66. A network administrator applies the ACL shown in the exhibit.

Which source IP address does the myList ACL deny?