Updated Sep-2021 Test Engine to Practice Test for HPE6-A45 Exam Questions and Answers!
Aruba Certified Switching Professional Exam Certification Sample Questions and Practice Exam
NEW QUESTION 62
Exhibit
Switch-1 runs BGP. What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?
- A. Configure 192.168.1.2 as a neighbor manually within the BGP context
- B. Specify 192.168.1.2 as a neighbor manually within the BGP context
- C. Enable BGP on VLAN 100
- D. Set the BGP AS number to 46501
Answer: D
NEW QUESTION 63
A customer wants to authenticate AOS-Switch manager to a RADIUS server. The CIO wants to assign different rights to different management users for granular control over their rights and privileges. What must the network administrator enable on the AOS- Switches to ensure they comply with this plan?
- A. a manager and operator password
- B. SNMPv3 and SNMPv3 restricted access
- C. authentication login privileges
- D. RADIUS-based command authorization
Answer: A
NEW QUESTION 64
Network administrators need to configure a BGP neighbor on an AOS-Switch. What defines the neighbor as an iBGP neighbor?
- A. Its update source it set to a private company IP address
- B. It has an AS number in the range of 64512 to 645535.
- C. Its remote-AS is the same as the QOS-Switch BGP AS
- D. It has BGP synchronization enabled
Answer: A
NEW QUESTION 65
Refer to the exhibits.
Exhibit 1
Exhibit 2
Exhibit 2 shows IGMP groups on Switch-2, which runs IGMP but not PIM. Switch-1 and Switch-3 do not have IGMP or PIM enabled. Client 1 begins to forward multicasts to 239.1.1.1.
Which clients receive the multicasts?
- A. Client 2, Client 3, and Client 4
- B. Client 3 and Client 4, but not Client 2
- C. Client 3, but not any of the other clients
- D. Client 2, but not any of the other clients
Answer: D
NEW QUESTION 66
An AOS-Switch implements tunneled node: Which benefit does the PAPI enhanced security key provide?
- A. It validates the signature for firmware pushed to the switch dynamically.
- B. It encrypts traffic sent and received by tunneled-node endpoints.
- C. It provides an extra layer of authentication for endpoints on tunneled-node ports.
- D. It authenticates control traffic between the switch and it Mobility Controller.
Answer: A
NEW QUESTION 67
A company has AOS-Switches deployed at sites with inexperienced IT staff. The main office network administrators want to track if configurations change on branch switches.
What should be set up for this purpose?
- A. an RMON alarm
- B. an SNMP trap
- C. an IP SLA profile
- D. an auto-config server
Answer: B
Explanation:
Reference: http://h22208.www2.hpe.com/eginfolib/networking/docs/switches/K-KA-KB/15-
18/5998-
8160_ssw_mcg/content/ch06s10.html
NEW QUESTION 68
Which situation requires an AOS-Switch interface to support MAC-based VLANs?
- A. The interface is configured to support Local MAC Authentication (LMA), authenticates endpoints against a non-default MAC group, and limits the address count to 1.
- B. The interface has an extended MAC ACL applied to it in the inbound direction, and it has multiple tagged VLAN assignments.
- C. The interface is configured to support 802.1X in user-based mode, connects to more than one endpoint at a time, and users are assigned to different dynamic VLANs.
- D. The interface has an extended MAC ACL applied to it in the outbound direction, and it uses VLAN ID as one of the criteria for rules.
Answer: B
NEW QUESTION 69
A company has a mixed wireless and wired Aruba solution. It wants to encrypt messages used to send configurations and other important messages to the APs carried outside the GRE tunnels. What can the company do to meet these goals?
- A. Deploy Aruba Meridian and integrate the AOS-Switches with it.
- B. Use PAPI enhanced security.
- C. Configure extended IP ACLs on the AOS-Switches to filter the traffic.
- D. Use tunneled node to send traffic through an Aruba Mobility Controller.
Answer: D
NEW QUESTION 70
Refer to the exhibits.
Exhibit 1.
Exhibit 2.
The VoIP phone connects, authenticates successfully, and is dynamically assigned to tagged VLAN 6. The endpoint connected to the phone does not authenticate but starts to send untagged traffic.
How does the switch handle this traffic?
- A. It forwards the traffic in VLAN 6.
- B. It drops the traffic.
- C. It relays the traffic to the RADIUS server for authentication.
- D. It forwards the traffic in VLAN 5.
Answer: C
NEW QUESTION 71
A customer wants access layer switches that support routing, ACLs, backplane stacking, and Smart rate ports. The customer asks about Aruba 5400R z 12 switches.
Which Aruba Switch model would better meet the customer's requirements?
- A. 0
- B. 1
- C. 2930F
- D. 2
Answer: B
NEW QUESTION 72
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator sets up PIM-DM to route traffic from the multicast source to clients in VLAN 24.
The server begins to forward multicasts, and the clients are set up to receive them. However, the multicasts do not reach the clients.
Based on the output, what should the administrator verify?
- A. that Switch-1 has selected Switch-2 as its RP for 239.1.1.1
- B. that state refreshes are enabled on Switch-2
- C. that Switch-2 has PIM-DM enabled on VLAN 10
- D. that VLAN 24 on Switch-1 runs both IGMP and PIM-DM
Answer: C
NEW QUESTION 73
Refer to the exhibit.
A network administrator sets up prioritization for an application that runs between Device 1 and Device 2. However, the QoS for the application is not what the administrator expects.
How can the administrator check if the network infrastructure prioritizes traffic from Device 1 and Device 2?
- A. Set up RMON alarms on the switches that trigger when a high number of packets are dropped. Then, run the application and check for the alarm.
- B. Run a packet capture on Device 1, run the application, and look in the packet capture for a high value DSCP in the IP header.
- C. Clear interface statistics on the switches. Then, run the application and check the interface queue statistics for the switch-to-switch links.
- D. Run a packet capture on Device 2, run the application, and look in the packet capture for a high value DSCP in the IP header.
Answer: D
NEW QUESTION 74
Refer to the exhibit.
An AOS-Switch connects to an unmanaged switch in a meeting room. The exhibit shows security settings for this port. Users report that they sometimes lose connectivity and then get it back.
Which best practice should network administrators follow to avoid issue?
- A. The loop protection and port security actions should be set to match.
- B. Port security and loop protection should not be enabled on the same port.
- C. Loop protection should operate in VLAN mode, rather than port mode, when port security is enabled.
- D. Eavesdrop prevention should be disabled when report security is in limited-continuous mode.
Answer: D
NEW QUESTION 75
Refer to the exhibit.
The network administrator wants to summarize routes as much as possible in between areas. What is the correct range to specify for the router OSPF Area 2 command on Switch-2?
- A. 10.0.0.0/20
- B. 10.0.16.0/21
- C. 10.0.0.0/21
- D. 10.0.8.0/21
Answer: B
NEW QUESTION 76
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator applies the ACL to Switch-2, as shown in the exhibit. Device-1, IP address
10.1.10.10/24, attempts to open an HTTP session with host 192.0.2.10 on the Internet. What happens with this attempt?
- A. Switch-2 filters both the traffic from Device-1 and the return traffic with the ACL. The return traffic is dropped.
- B. Switch-2 filters only the traffic from Device-1 with the ACL, and the session establishes successfully.
- C. Switch-2 does not filter any of this traffic with the ACL, and the session establishes successfully
- D. Switch-2 filters only the return traffic from the Internet with the ACL, and the ACL drops this traffic
Answer: C
NEW QUESTION 77
Refer to the exhibit.
Several interfaces on an AOS-Switch enforce 802.1X to a Radius server at 10.254.202.202. The interface
802.1X settings are shown in the exhibit, and 802.1X is also enabled globally. The security team have added a requirement for port security on the interfaces as well. Before administrators enable port security, which additional step must they complete to prevent issues?
- A. Manually add legitimate MAC addresses to the switch authorized MAC list.
- B. Enable eavesdropping protection on the interfaces.
- C. Enable DHCP snooping on VLAN 20.
- D. Set 802.1X client limit on the interfaces.
Answer: C
NEW QUESTION 78
Refer to the exhibit.
Switch-1 and Switch-2 are AOS-Switches, which are iBGP peers. ISP 1 and ISP 2 advertise some routes to the same Internet destinations. Switch-1 and Switch-2 must select between these routes based on AS path length.
What is required for Switch-1 and Switch-2?
- A. iBGP synchronization enabled
- B. eBGP and iBGP administrative distance set to the same value
- C. Multihop enabled for the connection to the iBGP neighbor
- D. ECMP disabled for BGP
Answer: B
NEW QUESTION 79
An architect proposes several Aruba 2930M switches, which the customer wants to combine into a single logical switch. What must be included in the proposal to meet this requirement?
- A. QSFP+ fiber transceivers and 40GbE to 10GbE cable splitters
- B. QSFP+ fiber transceivers and MPO cable
- C. backplane stacking modules and cables
- D. backplane stacking license
Answer: C
NEW QUESTION 80
Refer to the exhibit.
A network administrator sets up 802.1X authentication to a RADIUS server on an AOS-Switch. The RADIUS server and user devices are both set up to use PEAP MSCHAPv2. The administrator tests the authentication and sees the output shown in the exhibit. Which issue could cause this output?
- A. The switch port is set for user mode 802.1X, but the RADIUS server is set for port mode
- B. The administrator entered the wrong password for the test account
- C. The RADIUS shared secret does not match on the switch and the server
- D. The switch does not have a certificate for port-access installed on the switch
Answer: C
NEW QUESTION 81
Refer to the exhibit.
Switch-1 is an AOS-switch that is operating at factory default settings for QoS and has type of service disabled. It receives a frame with 802.1p value 5 on trk1, on VLAN 2. How does the switch treat the frame when it forwards it on TRK2?
- A. It forwards it with normal priority and 802.1p 0.
- B. It forwards it with higher than normal priority and 802.1p 0.
- C. It forwards it with higher than normal priority and 802.1p 5.
- D. It forwards it with normal priority and 802.1p 5
Answer: D
NEW QUESTION 82
Refer to the exhibits.
Exhibit 1
Exhibit 2
Switch-1 has a power issue that causes it to fail. When Switch-1 comes back up, endpoints lose connectivity for a few minutes. The network administrator decides to enter this command on Switch-1:
Switch-1 (config)# vlan 10 vrrp vrid 10 preempt-delay-time 120
Exhibit 2 shows the VRRP configuration just after the change. What is the effect of this change?
- A. Switch-1 now waits to take over as Master if it fails and recovers. This should prevent the connectivity issue from occurring again.
- B. Switch-1 experiences an internal error in the VRRP process. This error causes Switch-2 to take over as Master for VLAN 2.
- C. Switch-1 and Switch-2 both become Master in their own VRRP virtual router due to the delay timer mismatch. The mismatch must be fixed.
- D. Switch-1 continues to act as it did before the preempt delay time was set. Administrators must plan additional changes to fix the issue.
Answer: B
NEW QUESTION 83
......
Certification dumps Aruba Certified Switching Professional (ACSP) V1 HPE6-A45 guides - 100% valid: https://www.prep4sureguide.com/HPE6-A45-prep4sure-exam-guide.html