Examen profesional de conmutación certificada Aruba HPE6-A73 Guía de estudio [2022 Actualizado]

Posted by: Martina Comments: 0 Post Date: julio 19, 2022

Martina2022-07-19T09:14:27+00:00

El examen profesional de conmutación certificado Aruba HPE6-A73 es el examen de certificación HPE HOT, que prueba las habilidades necesarias para implementar y operar soluciones de conmutación de campus de Aruba a nivel empresarial. Para ayudarlo a probar bien el examen HPE6-A73, hemos actualizado la guía de estudio HPE6-A73 con las preguntas y respuestas del examen real para ayudarlo a prepararse para el examen profesional de conmutación certificado Aruba bien. Aprendizaje de la guía de estudio HPE6-A73 actualizada de Realexam.es debe ser una gran oportunidad para verificar su conocimiento y rendimiento en la prueba real Certified de Switching Certified HPE6-A73 con éxito 100% garantizado. Las nuevas preguntas y respuestas de examen HPE6-A73 actualizadas lo ayudarán a aprobar su examen real con altas calificaciones. Puede sentir primero las preguntas de demostración gratuitas HPE6-A73.

Page 1 of 4

1. An administrator is implementing a downloadable user role solution involving AOS-CX switches. The AAA solution and the AOS-CX switches can successfully authenticate users; however, the role information fails to download to the switches.

What policy should be added to an intermediate firewall to allow the downloadable role function to succeed?

Allow TCP 443

Allow UDP 1811

Allow UDP 8211

Allow TCP 22

2. A network administrator wants to centralize the management of AOS-CX switches by implementing NetEdit.

How should the administrator purchase and/or install the NetEdit solution?

Install as a hardware appliance

Installed on a supported version of RedHat Enterprise Linux

Installed in a virtualized solution by using the Aruba-supplied OVA file

Installed on a supported version of Debian Linux

3. Which option correctly defines how to identify a VLAN as a voice VLAN on an AOS-CX switch?

Switch(config)# port-access lldp-group <LLDP-group-name> Switch(config-lldp-group)# vlan <VLAN-ID>

Switch(config)# port-access role <role-name> Switch(config-pa-role)# vlan access <VLAN-ID>

Switch(config)# vlan <VLAN-ID> Switch(config-vlan-<VLAN-ID>)# voice

Switch(config)# vlan <VLAN-ID> voice

4. An administrator wants to track what configuration changes were made on a switch.

What should the administrator implement to see the configuration changes on an AOS-CX switch?

AAA authorization

Network Analysis Engine (NAE)

AAA authentication

VSX synchronization logging

5. An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

access-list ip server 10 permit tcp any web-servers group web-ports

access-list ip server 10 permit tcp any object-group web-servers object-group web-ports

access-list ip server 10 permit tcp any group web-servers group web-ports

access-list ip server 10 permit tcp any web-servers web-ports

6. A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass

servers are used to implement AAA. Each switch has the two servers defined. A network engineer notices the following command configured on the AOS-CX switches:

radius-server tracking user-name monitor password plaintext aruba123

What is the purpose of this configuration?

Implement replay protection for AAA messages

Define the account to implement downloadable user roles

Speed up the AAA authentication process

Define the account to implement change of authorization

7. A network administrator is attempting to troubleshoot a connectivity issue between a group of users and a particular server. The administrator needs to examine the packets over a period of time from their desktop; however, the administrator is not directly connected to the AOS-CX switch involved with the traffic flow.

What is correct regarding the ERSPAN session that needs to be established on an AOS-CX switch? (Choose two.)

On the source AOS-CX switch, the destination specified is the switch to which the administrator’s desktop is connected

On the source AOS-CX switch, the destination specified is the administrator’s desktop

The encapsulation protocol used is GRE

The encapsulation protocol used is VXLAN

The encapsulation protocol is UDP

8. A network administrator is managing a network that deploys a multicast service. The administrator has

multiple streams successfully being routed by PIM-DM in the network. The administrator then adds a new stream with a destination address of 239.0.0.1. However, clients who have not joined the stream are receiving it.

What should the administrator do to fix this problem?

Verify that IGMP is enabled between the switches connecting the multicast source and receivers

Change the destination multicast address to 239.1.1.1

Define the 239.0.0.1 stream on the rendezvous point (RP)

Define the 239.0.0.1 stream on the PIM candidate bootstrap router

9. An administrator is implementing a multicast solution in a multi-VLAN network.

Which statement is true about the configuration of the switches in the network?

IGMP snooping must be enabled on all interfaces on a switch to intelligently forward traffic

IGMP requires join and leave messages to graft and prune multicast streams between switches

IGMP must be enabled on all routed interfaces where multicast traffic will traverse

IGMP must be enabled on all interfaces where multicast sources and receivers are connected

10. An administrator creates an ACL rule with both the “count” and “log” option enabled.

What is correct about the

action taken by an AOS-CX switch when there is a match on this rule?

By default, a summarized log is created every minute with a count of the number of matches

Logging will not include certificate and TLS events, but counting will

The “count” and “log” options are processed by the AOS-CX switch’s hardware ASIC

The total in the “log” record and the count could contain different rule matching statistics

Page 2 of 4

11. A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code.

The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.

Which solution should the company implement?

RADIUS dynamic authorization

Downloadable user roles

IPSec

User-based tunneling

12. An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

802.1X must be configured to work in fallback mode

Device fingerprinting is required for authentication

The client-limit setting for port access needs to be changed

Device mode should be implemented

13. What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility

Controllers (MCs)?

Uses IPSec to protect the management and data traffic

Uses IPSec to protect the management traffic

Supports only port-based tunneling

Uses the same management protocol as Aruba APs

14. What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Only a traffic rate and burst size can be defined for a queue

Limits can be defined only for broadcast and multicast traffic

Rate limiting and egress queue shaping can be used to restrict inbound traffic

Rate limiting and egress queue shaping can be applied globally

15. An administrator in a company of 349 users has a pair of AOS-CX switches with connections to external networks. Both switches are configured for OSPF. The administrator wants to import external routes on both switches, but assigns different seed metrics to the routes, as well as imports them as external type-1 routes.

What is the best way for the administrator to accomplish this?

Create a route map with the correct route type and metrics

Define the route type and metrics in the OSPF process

Create a classifier policy with the correct route type and metrics

Define a class and policy map with the correct route type and metrics

16. A network administrator is implementing a configuration plan in NetEdit. The administrator used NetEdit to push the configuration plan to the switch.

Which option in the NetEdit planning section should the administrator select to save the configuration running on the switch to the startup-config?

EDIT

VALIDATE

COMMIT

DEPLOY

17. Examine the AOS-CS switch output:

Based on this output, what is correct?

802.1X authentication was successful, but MAC authentication is yet to start

802.1X authentication occurred and downloadable user roles are deployed

A local user role was deployed using a ClearPass solution

Only 802.1X authentication is configured on the port

18. Examine the attached diagram.

The two PCs are located in VLAN 11 (10.1.11.0/24).

Which example defines how to implement active gateway on the VSX core for VLAN 11?

interface vlan 11 active-gateway ip 10.1.11.1 active-gateway mac 02:02:00:00:01:00

interface lag 254 active-gateway vlan 11 ip 10.1.11.1 active-gateway vlan 11 mac 02:02:00:00:01:00

interface lag 254 active-gateway ip 10.1.11.1 active-gateway mac 02:02:00:00:01:00

vsx vrrp group 1

19. What is correct regarding multicasting and AOS-CX switches?

IGMP snooping is disabled, by default, on Layer-2 VLAN interfaces

IGMP query functions are enabled, by default, on Layer-2 VLAN interfaces

IGMP snooping is enabled, by default, on Layer-3 VLAN interfaces

IGMP-enabled AOS-CX switches flood unknown multicast destinations

20. A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches. The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes.

Which solution should the administrator implement?

AOS-CX 8325

AOS-CX 6300

AOS-CX 6400

AOS-CX 8400

Page 3 of 4

21. A company has recently upgraded their campus switching infrastructure with AOS-CX switches. They have implemented 802.1X authentication on access ports where laptop and IOT devices typically connect. An administrator has noticed that for POE devices, the AOS-CX switch ports are delivering the maximum wattage to the port instead of what the device actually needs.

Concerned about this waste of electricity, what should the administrator implement to solve this problem?

Implement a classifier policy with the correct power definitions

Create device profiles with the correct power definitions

Enable AAA authentication to exempt LLDP and/or CDP information

Globally enable the QoS trust setting for LLDP and/or CDP

22. An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and

secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.

What would cause this problem?

Local optimization was not enabled on the VSX LAG

The VSX LAG hash does not match the remote peer

The VSX LAG interfaces are in layer-3 mode

LACP was enabled in active mode on the VSX LAG

23. Examine the following AOS-CX switch configuration:

Which statement correctly describes what is allowed for traffic entering interface 1/1/3?

IP traffic from 10.1.11.0/24 is allowed to access 10.1.110.0/24

IP traffic from 10.0.11.0/24 is allowed to access 10.1.12.0/24

Traffic from 10.0.12.0/24 will generate a log record when accessing 10.0.11.0/24

IP traffic from 10.1.12.0/24 is allowed to access 172.0.1.0/23

24. An administrator has an aggregation layer of 8325CX switches configured as a VSX pair. The administrator is concerned that when OSPF network changes occur, the aggregation switches will respond to the changes slowly, and this will affect network connectivity, especially VoIP calls, in the connected access layer switches.

What should the administrator do on the aggregation layer switches to alleviate this issue?

Implement route aggregation

Implement bidirectional forwarding detection (BFD)

Reduce the hello and dead interval timers

Implement graceful restart

25. An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling.

How should the administrator protect this traffic?

IPSec with a digital certificate

GRE with a pre-shared key

PAPI with an MD5 pre-shared key

IPSec with a pre-shared key

26. An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities. The campus involves a core, as well as multiple access layers.

Which feature should the administrator implement to allow both VSX-capable core switches to process traffic sent to the default gateway in the campus VLANs?

VRF

VRRP

IP helper

Active gateway

27. How is NetEdit installed at a customer location?

Via an Aruba NetEdit hardware appliance

Via a DVD using a virtualized platform like Microsoft’s Hyper-V

Via the Aruba Central cloud solution

Via an OVA file and a virtualized platform like VMware’s ESXi

28. Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

LLDP

ARP

DHCP

ICMP

29. A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal.

Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

Both 802.1X and captive portal

802.1X only

Both 802.1X and MAC-Auth

802.1X, captive portal, and MAC-Auth

30. Examine the network exhibit.

A company has a guest implementation for wireless and wired access. Wireless access is implemented

through a third-party vendor. The company is concerned about wired guest traffic traversing the same network as the employee traffic. The network administrator has established a GRE tunnel between AOS-CX switches where guests are connected to a routing switch in the DMZ.

Which feature should the administrator implement to ensure that the guest traffic is tunneled to the DMZ while the employee traffic is forwarded using OSPF?

OSPF route maps using the “set metric” command

Policy-based routing (PBR)

User-based tunneling (UBT)

Classifier policies

Page 4 of 4

31. What is correct regarding the operation of VSX and multicasting with PIM-SM routing configured?

Each VSX peers runs PIM and builds its own group database. One of the VSX peers is elected as the designated router (DR) to forward multicast streams to a receiver VLAN

Each VSX peers runs PIM and creates a shared group database. Both VSX peers can forward multicast streams to receivers in a VLAN, achieving load sharing

Each VSX peers runs PIM and builds its own group database. Both VSX peers can forward multicast streams to receivers in a VLAN, achieving load sharing

Each VSX peers runs PIM and creates a shared group database. One of the VSX peers is elected as the designated router (DR) to forward multicast streams to a receiver VLAN

32. Which protocols are used by NetEdit to interact with third-party devices? (Choose two.)

telnet

SNMP

SSH

Restful API

CDP

33. Examine the following AOS-CX configuration:

Based on this configuration, which statement is correct regarding IoT traffic?

If 10.100.1.2 is not reachable, the IoT traffic will be automatically dropped by the switch

If a specific route is not available in the routing table, the traffic will be routed to 10.100.1.2

The next hop of 10.100.1.2 can be one or more hops away from the AOS-CX switch

All routes are ignored in the routing table for IoT traffic, which is routed to 10.100.1.2

34. Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving

downloadable user roles:

Switch# show port-access role clearpass

Role information:

Name: icxarubadur_employee-3044-2

Type: clearpass

Status: failed, parsing_failed

Reauthentication Period:

Authentication Mode:

Session Timeout:

The downloadable user roles are not being downloaded to the AOS-CX switch.

Based on the above output, what is the problem?

The certificate that ClearPass uses in invalid

The AOS-CX switch does not have the ClearPass certificate involved

DNS fails to resolve the ClearPass server’s FQDN

There is a date/time issue between the ClearPass server and the switch

35. How is voice traffic prioritized correctly on AOS-CX switches?

By defining device profiles with QOS settings

By placing it in the strict priority queue

By implementing voice VLANs

By implementing weighted fair queueing (WFQ)

36. 1.Which statement is correct regarding ACLs and TCAM usage?

Applying an ACL to a group of ports consumes the same resources as specific ACE entries

Using object groups consumes the same resources as specific ACE entries

Compression is automatically enabled for ASIC TCAMs on AOS-CX switches

Applying an ACL to a group of VLANs consumes the same resources as specific ACE entries

37. A network engineer is having a problem adding a custom-written script to an AOS-CX switch’s NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches.

The engineer examines the following items from the CLI of the switch:

What should the engineer perform to fix this issue?

Install the script’s signature before installing the new script

Ensure the engineer’s desktop and the AOS-CX switch are synchronized to the same NTP server

Enable trust settings for the AOS-CX switch’s SSL certificate

Remove a script that is no longer used before installing the new script

38. A network engineer is using NetEdit to manage AOS-CX switches. The engineer notices that a lot of thirdparty VoIP phones are showing up in the NetEdit topology. The engineer deletes these, but they are

automatically rediscovered by NetEdit and added back in.

What should the administrator do to solve this problem?

Change the VoIP phone SNMP community string to something unknown by NetEdit

Disable LLDP globally on the AOS-CX switches where phones are connected

Disable SSH access on all the VoIP phones

Disable the RESTful API on all the VoIP phones

39. Examine the network exhibit:

The ACL configuration defined on Core-1 is as follows:

If telnet was being used, which device connection would be permitted and functional in both directions?

(Choose two.)

Client 3 to Client 2

Client 1 to Client 2

Server 2 to Client 2

Server 1 to Client 1

Client 1 to Client 3

40. An administrator has an AOS-CX switch configured with:

router ospf 1

area 0

area 1 stub no-summary

It is the only ABR for area 1. The switch has the appropriate adjacencies to routing switches in areas 0 and 1.

The current routes in each area are:

Area 0: 5 routes (LSA Type 1 and 2)

Area 1: 10 routes (LSA Type 1 and 2)

External routes: 2 (LSA Type 5)

Based on the above configuration, how many OSPF routes will routing switches see in Area 1?

Examen profesional de conmutación certificada Aruba HPE6-A73 Guía de estudio [2022 Actualizado]

Author

Deja una respuesta Cancelar la respuesta