Refined HPE6-A45 Keys 2021

NEW QUESTION 1
A network administrator needs to control traffic based on TCP or UDP application, as well as IP protocol, such as GRE or ICMP. What should the administrator configure for this purpose?

• A. a standard IP ACL and an extended MAC ACL only


• B. both a standard IP ACL and an extended MAC ACL


• C. an extended IP ACL only


• D. both a standard IP ACL and a standard MAC ACL

Answer: C

NEW QUESTION 2
Refer to the exhibits. Exhibit 1

Exhibit 2

The network administrator needs to set up BGP between the two company switches, Switch-1 and Switch-2. The BGP connection does not establish. Based on the exhibits, what does the administrator need to do to fix the issue?

• A. Set the update source for the neighbor to the local loopback interface on each switch.


• B. Enter the network command for 10.0.0.0/24 in the router BGP mode on each switch.


• C. Enable the multihop option for the neighbor on each of the switches.


• D. Enable BGP on the interfaces that the switches use to reach each othe

Answer: A

NEW QUESTION 3
A customer wants to authenticate AOS-Switch managers to a RADIUS server. Managers should be assigned either read- only or full read-write level access based on the Service-Type VSA in their user account.
What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

• A. RADIUS-based command authorization


• B. a manager and operator password


• C. privileged-mode login authentication


• D. SNMPv3 and SNMPv3 restricted acces

Answer: A

NEW QUESTION 4
Network administrators need to inspect all traffic that arrives on an AOS-Switch in VLAN 2 and is destined to TCP ports 50000-50010. They want to send the traffic to a protocol analyzer connected to the switch for deeper inspection.
What else must they create to achieve their goal?

• A. an extended IP ACL that selects the TCP traffic, apply the ACL to interfaces VLAN 2, and specify interfaces in VLAN 2 as monitor ports


• B. a traffic class that selects the TCP traffic, map the class to the mirror session in a policy to VLAN 2


• C. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer


• D. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer


• E. an extended IP ACL that selects the TCP traffic, apply the ACL to the mirror session, and specify interfaces in VLAN 2 as monitor ports

Answer: B

NEW QUESTION 5
A company has AOS-switches, Aruba ClearPass, and Aruba AirWave. A network administrator needs to find the source of a performance issue that often occurs at the start of the day and early in the afternoon. Which action is likely to give the administrator the most useful information for the investigation?

• A. Access the Network Device view on ClearPass.


• B. Use the configuration audit tool on AirWave.


• C. View the current running config on each switch.


• D. View usage patterns on the switches on AirWav

Answer: A

NEW QUESTION 6
A company wants to implement role-based tunneled node on AOS-Switches. Which solution should be included in the plan to help apply the roles?

• A. a RADIUS server, such as Aruba ClearPass


• B. an SNMP server, such as Aruba AirWave


• C. Aruba Mobility Manager (MM)


• D. Aruba Meridian

Answer: A

NEW QUESTION 7
An AOS-Switch needs to be configured to support tunneled node in role-based mode. The Mobility Controller administrators tell the switch administrators that the AOS-Switch will integrate with a cluster of Mobility Controllers. The cluster virtual IP address is 10.1.1.10.
How should switch administrator integrate the AOS-Switch with the cluster?

• A. Double-check the settings with the Mobility Controller administrators because the planned configuration is incomplete with the switch settings.


• B. Configure the virtual IP address as the tunneled-node-server address, tunneled node will work, but the clustering features will not provide redundancy.


• C. Configure the virtual IP address as the tunneled-node-server addres


• D. The switch will automatically learn controller IP addresses to which to tunnel various traffic.


• E. Configure the virtual IP address for the primary tunneled-node-server and an actual controller IP address for the backup tunneled-node-server in order to receive redundancy.

Answer: B

NEW QUESTION 8
Refer to the exhibit.

A company wants to change Area 1 shown in the exhibit from a stub area to a totally stub area. What will be one effect of this planned change?

• A. Routing devices within Area 0 will temporarily lose adjacency with each other.


• B. Switch-1 and Switch-2 will adjust the cost with which they advertise area 1 traffic in the backbone.


• C. Some traffic from Area 1 to other areas will no longer follow the lowest cost path.


• D. Endpoints within Area 1 will no longer be able to reach endpoints in other area

Answer: C

NEW QUESTION 9
Which technologies can prevent split brain in a VSF fabric that includes Aruba 2930F switches?

• A. ARP MAD or OOBM MAD


• B. VLAN MAD or ARP MAD


• C. OOBM MAD or LLDP MAD


• D. LLDP MAD or VLAN MAD

Answer: C

NEW QUESTION 10
A customer wants access layer switches that support routing, ACLs, backplane stacking, and Smart rate ports. The customer asks about Aruba 5400R z 12 switches.
Which Aruba Switch model would better meet the customer’s requirements?

• A. 2530


• B. 2930F


• C. 3810


• D. 8400

Answer: C

NEW QUESTION 11
AOS-Switches authenticate guests to ClearPass with captive portal. An administrator notices that some guests are unable to reach the captive portal page. What will resolve this issue?

• A. Permit DNS on the ClearPass Portal


• B. Permit DHCP on the ClearPass Portal.


• C. Permit HTTP or HTTPS on the ClearPass Portal.


• D. Permit Allow All MAC-Auth on the ClearPass Porta

Answer: A

NEW QUESTION 12
Refer to the exhibit.

AOS-Switches will enforce 802.1X authentication on edge ports. The company has two RADIUS servers, which are meant to provide redundancy and load sharing of requests. The exhibit shows the planned RADIUS settings to deploy to the switches.
What should customers understand about this plan?

• A. AOS switches do not support two RADIUS servers for redundancy, instead, a secondary authentication method is required.


• B. Dynamic authentication is only permitted on one of the RADIUS servers and must be removed from the other.


• C. Each RADIUS server must use a unique port number for the authentication and dynamic authorization port.


• D. Each AOS-Switch will send all RADIUS requests to the first server on the list unless that server becomes unreachabl

Answer: D

NEW QUESTION 13
Refer to the exhibit.

The access layer AOS-Switches currently run DHCP snooping on VLAN 2 and connection rate filtering on edge ports. They are at default settings for ARP protection. A network administrator then enters these commands on each of the access layer switches:
Switch(config)# arp-protect vlan 2 Switch(config)# arp-protect Which behavior accurse?

• A. The switches will forward legitimate traffic and prevent ARP poisoning attacks, but interfere with connection rate filtering.


• B. The switches can now prevent ARP poisoning attacks and do not interfere with legitimate communications.


• C. The switches can prevent ARP poisoning attacks, but legitimate communications with VLAN 2 could also be disrupted.


• D. The switches will not apply ARP protection due to interference from DHCP snooping, so the commands have no effect on current behavior.

Answer: B

NEW QUESTION 14
Refer to the exhibits.
Exhibit 1

Exhibit 2

Exhibit 2 shows IGMP groups on Switch-2, which runs IGMP but not PIM. Switch-1 and Switch-3 do not have IGMP or PIM enabled. Client 1 begins to forward multicasts to 239.1.1.1.
Which clients receive the multicasts?

• A. Client 3, but not any of the other clients


• B. Client 2, but not any of the other clients


• C. Client 3 and Client 4, but not Client 2


• D. Client 2, Client 3, and Client 4

Answer: B

NEW QUESTION 15
Refer to the exhibit.
A network administrator configures connection rate filtering on interface 1 with the throttle action. Device 1 crosses the threshold and triggers the action.
What does the switch do?

• A. It temporarily drops all IP traffic from Device 1 only.


• B. It temporarily drops all IP traffic on interface 1.


• C. It drops all IP traffic from Device 1 until the host is manually unblocked.


• D. It drops all IP traffic on interface 1 until the interface is manually unblocke

Answer: A

NEW QUESTION 16
Refer to the exhibit.

A network administrator sets up prioritization for an application that runs between Device 1 and Device 2. However, the QoS for the application is not what the administrator expects.
How can the administrator check if the network infrastructure prioritizes traffic from Device 1 and Device 2?

• A. Run a packet capture on Device 2, run the application, and look in the packet capture for a high value DSCP in the IP header.


• B. Set up RMON alarms on the switches that trigger when a high number of packets are droppe


• C. Then, run the application and check for the alarm.


• D. Clear interface statistics on the switche


• E. Then, run the application and check the interface queue statistics for the switch-to-switch links.


• F. Run a packet capture on Device 1, run the application, and look in the packet capture for a high value DSCP in the IP header.

Answer: A

NEW QUESTION 17
Refer to the exhibit.

A network administrator needs to deploy AOS-Switches that implement port-based tunneled node. Their Aruba controller has IP address 10.1.10.5/24. The architect has assigned tunneled-node endpoints to VLAN 20.
What is one issue with the current configuration planned for VLAN 20 on the switch?

• A. VLAN 20 must have GRE enabled on it.


• B. VLAN 20 cannot have an IP address.


• C. VLAN 20 must have an IP address in the same subnet as the controller.


• D. VLAN 20 must not enable jumbo frame

Answer: D

NEW QUESTION 18
Refer to the exhibit.

The exhibit shows configurations for interface 5 and VLAN 20. Note that DHCP snooping and ARP protection are also enabled.
A network administrator finds that interface 5 on an AOS-Switch is disabled. The administrator re-enables the interface, but it shuts down again. What should the administrator investigate?

• A. a device that sends too much unicast traffic


• B. rogue DHCP server


• C. a loop on the interface


• D. a device that sends unauthorized ARP messages

Answer: C

NEW QUESTION 19
Refer to the exhibit.

The network administrator enables DHCP snooping globally and on VLAN 2. An additional step is mandatory for DHCP snooping to operate correctly and for clients to receive DHCP settings.
What is the additional mandatory step?

• A. Define trk1 as a trusted DHCP port.


• B. Define an authorized DHCP server.


• C. Enable ARP protection.


• D. Define edge ports as untrusted DHCP port

Answer: D

NEW QUESTION 20
Refer to the exhibit.

Switch-1 and Switch-2 connect on interface A23. The switches experience a connectivity issue. The network administrator sees that both switches show this interface as up. The administrator sees the output shown in the exhibit on Switch-1.
What is a typical issue that could cause this output?

• A. asymmetric routing introduced by a routing protocol


• B. an issue with VLAN mismatch


• C. mismatched subnet mask on the VLAN for the link


• D. a jumbo frame mismatch

Answer: A

NEW QUESTION 21
......