HPE6-A45 sample questions

Question 1

An AOS-Switch needs to be configured to support tunneled node in role-based mode. The Mobility Controller administrators tell the switch administrators that the AOS-Switch will integrate with a cluster of Mobility Controllers. The cluster virtual IP address is 10.1.1.10. How should switch administrator integrate the AOS-Switch with the cluster?

Accepted Answer

Configure the virtual IP address as the tunneled-node-server address, tunneled node will work, but the clustering features will not provide redundancy.

Answer

Double-check the settings with the Mobility Controller administrators because the planned configuration is incomplete with the switch settings.

Answer

Configure the virtual IP address as the tunneled-node-server address. The switch will automatically learn controller IP addresses to which to tunnel various traffic.

Answer

Configure the virtual IP address for the primary tunneled-node-server and an actual controller IP address for the backup tunneled-node-server in order to receive redundancy.

Question 2

Refer to the figure. A company wants to change Area 1 shown in the figure from a stub area to a totally stub area. What will be one effect of this planned change?

Accepted Answer

Some traffic from Area 1 to other areas will no longer follow the lowest cost path.

Answer

Routing devices within Area 0 will temporarily lose adjacency with each other.

Answer

Switch-1 and Switch-2 will adjust the cost with which they advertise area 1 traffic in the backbone.

Answer

Endpoints within Area 1 will no longer be able to reach endpoints in other areas.

Question 3

An AOS-Switch runs IGMP on A VLAN. What is a requirement for the switch to be a potential IGMP querier on that VLAN?

Accepted Answer

The switch must have an IP address on that VLAN.

Answer

The switch must run PIM-SM or PIM-DM on that VLAN

Answer

The switch must have IGMP fast leave disabled globally.

Answer

The switch must have at least one IGMP group configured on it manually.

Question 4

Refer to the figure. Switch-1 runs BGP. What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?

Accepted Answer

Configure 192.168.1.2 as a neighbor manually within the BGP context.

Answer

Specify 192.168.1.0/30 with the network command in the BGP context.

Answer

Enable BGP on VLAN 100.

Answer

Set the BGP AS number to 46501.

Question 5

Refer to the figure.

An AOS-Switch has an extended ACL that is applied to several physical interfaces.

New interfaces have been brought online.
The ACL has been applied to them as well.

A network administrator sees the output in the figure and is concerned that the switch will reach the limit for rules. What can the administrator do to address this concern?

Accepted Answer

Resequence the ACL with less space in between the entries.

Answer

Enable ACL grouping, and apply ACLs as shared ACLs.

Answer

Reconfigure the ACL as a standard ACL, and then reapply it.

Answer

Remove static ACLs, and have the RADIUS server send dynamic ACLs.

Question 6

Refer to the figure.

AOS-Switches will enforce 802.1X authentication on edge ports. The company has two RADIUS servers, which are meant to provide redundancy and load sharing of requests. The figure shows the planned RADIUS settings to deploy to the switches. What should customers understand about this plan?

Accepted Answer

Each AOS-Switch will send all RADIUS requests to the first server on the list unless that server becomes unreachable.

Answer

AOS switches do not support two RADIUS servers for redundancy, instead, a secondary authentication method is required.

Answer

Dynamic authentication is only permitted on one of the RADIUS servers and must be removed from the other.

Answer

Each RADIUS server must use a unique port number for the authentication and dynamic authorization port.

Question 7

An administrator wants to ensure that an AOS-Switch forwards all traffic that it receives on interface 1 with high priority.

Switches should also communicate the high priority to other switches across the traffic path.
The switch has type of service disabled. HP HPE6-A45 Exam 2
The administrator plans to apply 802.1p priority 5 to interface 1.

What should the administrator check to ensure that the configuration will work properly?

Accepted Answer

Interface 1 receives traffic with a tag.

Answer

The AOS-Switch is configured to use eight queues.

Answer

The forwarding path for the traffic uses VLAN tags.

Answer

An 802.1p-to-DSCP map exists for priority 5.

Question 8

Refer to the figure.

A network administrator sets up prioritization for an application that runs between Device 1 and Device 2. However, the QoS for the application is not what the administrator expects. How can the administrator check if the network infrastructure prioritizes traffic from Device 1 and Device 2?

Accepted Answer

Run a packet capture on Device 2, run the application, and look in the packet capture for a high value DSCP in the IP header.

Answer

Set up RMON alarms on the switches that trigger when a high number of packets are dropped. Then, run the application and check for the alarm.

Answer

Clear interface statistics on the switches. Then, run the application and check the interface queue statistics for the switch-to-switch links.

Answer

Run a packet capture on Device 1, run the application, and look in the packet capture for a high value DSCP in the IP header.

Question 9

The figures show the current operational state for routes on Switch-3. The company wants Switch-3 to prefer the link to Switch-1 over the link to Switch-2 for all intra-area, inter-area, and external traffic. What can the network administrator do to achieve this goal?

Accepted Answer

Set the cost in the OSPF Area 1 stub command higher than 1 on Switch-2.

Answer

Set the OSPF cost on VLAN 108 higher than 1 on Switch-2 and Switch-3.

Answer

Set the OSPF administrative distance on Switch-2 higher than 110

Answer

Set the OSPF area type to normal on all of the switches in Area 1.

Question 10

An AOS-Switch implements tunneled node. Which benefit does the PAPI enhanced security key provide?

Accepted Answer

It authenticates control traffic between the switch and its Mobility Controller.

Answer

It validates the signature for firmware pushed to the switch dynamically

Answer

It encrypts traffic sent and received by tunneled-node endpoints.

Answer

It provides an extra layer of authentication for endpoints on tunneled-node ports.

HPE6-A45 Implementing Aruba Campus Switching solutions Practice Questions

Create an account to continue.

Create an account to continue.

Related exams