HPE4-A52 HPE Campus Access Switching Expert Practical Exam Practice Questions
Prepare for HPE4-A52 with more than an answer.
- Level
- Expert
- Valid for
- Until recertification is required
Domains covered on the exam 7
- Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network20%
- Design, Deploy and Troubleshoot Reliable and Resilient Layer 3 Campus Network14%
- Control and Protect Wired Switched and Routed Network24%
- Validate, Configure, and Troubleshoot a Secure Distributed Fabric12%
- Deploy a Secure and Optimized WLAN Network12%
- Plan and Configure QoS12%
- Management and Device Onboarding6%
- 1
In an EVPN-VXLAN campus fabric, you are troubleshooting a connectivity issue where a client in VLAN 10 on Edge Switch A cannot communicate with a client in VLAN 20 on Edge Switch B. The fabric uses a centralized L3 gateway on the Core. You verify that MAC addresses are learned in the local L2 tables. Which specific BGP EVPN route type is responsible for advertising the IP prefix reachability between VTEPs to allow inter-subnet routing?
Show answer details
Correct answer: C
While Type 2 carries MAC and optional IP for host routes, Type 5 (IP Prefix Route) is specifically designed to advertise IP prefixes (subnets) for inter-subnet routing, especially in centralized gateway or external connectivity scenarios within EVPN.
- 2
A customer is deploying User-Based Tunneling (UBT) 2.0. They want to ensure that specific wired clients connected to the AOS-CX access switches are tunneled to the Aruba Gateway cluster in the DMZ. Which of the following components is MANDATORY to assign the 'secondary role' that triggers the tunnel on the switch?
Show answer details
Correct answer: C
To trigger UBT, the user role assigned to the client (whether LUR or DUR) must contain the
gateway-zonecommand, which specifies the zone and effectively instructs the switch to tunnel traffic to the gateway. - 3
You are verifying the OSPF configuration on a VSX pair. The 'show ip ospf' command on the secondary member shows that it is in a 'Waiting' state for DR election on VLAN 10. The primary member is the DR. You notice that 'active-active' routing is enabled. Why is the secondary member in a Waiting/Passive-like state for OSPF adjacency establishment on this SVI?
Show answer details
Correct answer: D
In a properly configured VSX environment with OSPF, both peers should form adjacencies with neighbors (ECMP). If the secondary is stuck, it indicates a configuration issue, often related to Router-ID conflicts or OSPF not being enabled correctly on the interface. It is NOT normal for the secondary to be passive unless explicitly configured so.
- 4
A large university campus is deploying a pair of Aruba CX 8325 switches in a VSX cluster to serve as the Core aggregation point. The administrators have configured the Inter-Switch Link (ISL) using two 100GbE links and a separate 1GbE link for the Keepalive. During a failure simulation where the ISL links are physically disconnected but the Keepalive link remains active, the secondary VSX member shuts down its VSX LAG member ports. Which specific component or configuration is responsible for this behavior to prevent traffic loops?
Show answer details
Correct answer: C
When the ISL fails but the Keepalive remains up, the VSX cluster detects a split condition. The secondary switch initiates 'split-recovery' logic (often implicitly handled via the keepalive detection) and shuts down its VSX LAG member ports to prevent split-brain scenarios and loops, ensuring traffic only flows through the primary.
- 5
You are designing a Layer 2 access layer for a financial institution using AOS-CX switches. The requirement is to support Multi-Chassis Link Aggregation (MC-LAG) to downstream servers without using a proprietary stacking cable. You decide to use VSX. Which of the following statements correctly describes the configuration requirement for the downstream server LAGs on the VSX pair?
Show answer details
Correct answer: D
In AOS-CX VSX configurations, for an MC-LAG to function, the LAG interface ID (e.g., interface lag 10) must be the same on both VSX peers, and the command
multi-chassismust be applied within the LAG interface context. - 6
An administrator is configuring MSTP on an Aruba CX switch network. The network consists of three regions. While troubleshooting a connectivity issue, the administrator notices that the boundary ports between Region A and Region B are discarding traffic unexpectedly. A 'show spanning-tree' reveals a digest mismatch. What is the most likely cause of this issue?
Show answer details
Correct answer: B
In MSTP, the configuration digest is a hash calculated based on the VLAN-to-Instance mapping table. If this mapping differs even slightly between switches that are supposed to be in the same region, the digests will not match, causing them to treat each other as being in different regions or causing boundary inconsistencies.
