HPE7-A01 Practice Questions
Prepare for HPE7-A01 with more than an answer.
- Exam fee
- $300 USD
- Level
- Professional
- Valid for
- 3 years
Domains covered on the exam 5
- Managing and Monitoring the Wireless LAN (WLAN)30%
- Configuring and Using the Mobility Conductor and Mobility Controller25%
- Implementing and Operating Secure Wireless LAN Features20%
- Configuring and Optimizing Network Performance15%
- Troubleshooting WLAN Connectivity and Performance Issues10%
- 1
A retail organization is using Aruba Central to manage their network. They require a Guest WLAN that presents a branded splash page, collects customer email addresses, and enforces a 2-hour session limit. Which set of configuration steps in Aruba Central accomplishes this?
Show answer details
Correct answer: A
In Aruba Central, create the WLAN with the Visitors security level and select Cloud Guest as the captive portal. The Cloud Guest splash page profile sets the branding, the registration fields that collect the visitor's email address, and the session limit. The other options either leave out the guest portal or add unnecessary components.
- 2
Which of the following scenarios describes a valid use case for implementing Aruba's MultiZone feature?
Show answer details
Correct answer: C
MultiZone allows a single AP to terminate different SSIDs (zones) on different controllers. This is ideal for multi-tenant environments like airports where infrastructure is shared but data planes must remain completely isolated and terminated on separate controllers managed by different entities.
- 3
A network engineer is configuring an AOS 10 campus Gateway Cluster for high availability. The requirement is to support stateful failover for up to 5000 clients. Which statement correctly describes the behavior of the cluster leader and member roles?
Show answer details
Correct answer: B
In an AOS 10 gateway cluster, one gateway is elected cluster leader. It computes the bucket map that APs and UBT switches use to give each tunneled client an active User Designated Gateway (UDG) and a standby UDG (S-UDG), which spreads clients across the nodes. The client's state (station table, user table, Layer 2 and Layer 3 user state) and high-value sessions are synchronized from the UDG to the S-UDG, so if the UDG fails the S-UDG takes over without de-authenticating the client. The nodes do not share one virtual IP, the cluster is not active/passive, and state is synchronized. AOS-8 controller clusters use the equivalent UAC/S-UAC roles.
- 4
What is the primary function of the 'RAPIDS' module within the Aruba AirWave Management Platform?
Show answer details
Correct answer: A
RAPIDS (Rogue Access Point Intrusion Detection System) is the AirWave module dedicated to security. It correlates data from wired and wireless scans to identify unauthorized devices, classify them based on rules, and help locate them on floor plans.
- 5
Case Study: TechCorp Campus Design
TechCorp is redesigning their campus network. They have chosen ArubaOS-CX 8325 switches for the core and 6300M switches for the access layer.
Requirements:
- The core must survive a single device failure with sub-second convergence.
- Access switches must connect to the core with active-active uplinks utilizing all available bandwidth.
- The solution must support a stretched layer 2 domain for specific legacy applications.
Which design topology satisfies these requirements?
Show answer details
Correct answer: B
VSX (Virtual Switching Extension) on the 8325s allows them to appear as a single logical device to downstream neighbors while maintaining independent control planes. This supports MC-LAG for the access switches (active-active uplinks) and provides high availability. It enables stretched L2 domains across the core pair.
- 6
Case Study: Global Retail Corp
Global Retail Corp (GRC) is a multinational retailer with over 500 stores. They are upgrading their campus network infrastructure at their corporate headquarters. The headquarters consists of two buildings connected by redundant dark fiber links. The primary goals of the project are to achieve a fully redundant, active-active core network that can survive the complete failure of a core switch or an entire building's network closet without any service interruption. The solution must provide a single, logical default gateway for all VLANs to simplify routing for the access layer switches.
The proposed solution uses two Aruba CX 8400 switches, one in each building, as the core. The access layer consists of Aruba CX 6300 series switches. The network team is debating between VSF and VSX for the core switches. They need to ensure that control plane failures on one switch do not impact the other and that firmware updates can be performed without network downtime.
Given the explicit requirements for control plane separation and zero-downtime updates, which technology should be chosen for the core, and what is the primary mechanism that provides the active-active default gateway?
graph TD subgraph Building A CoreA[CX 8400 - A] AccessA1[CX 6300] AccessA2[CX 6300] end subgraph Building B CoreB[CX 8400 - B] AccessB1[CX 6300] AccessB2[CX 6300] end CoreA -- ISL --- CoreB CoreA -- Keepalive --- CoreB AccessA1 -- LACP --> CoreA AccessA1 -- LACP --> CoreB AccessB1 -- LACP --> CoreA AccessB1 -- LACP --> CoreBShow answer details
Correct answer: D
VSX is the correct choice as it meets the requirements for dual control planes and non-disruptive software upgrades. VSF has a single control plane. The primary mechanism in a VSX environment to provide a single, active-active default gateway is called 'Active Gateway'. It is an enhancement over traditional VRRP, allowing both VSX nodes to simultaneously forward traffic sent to the virtual IP address, thus providing true active-active first-hop redundancy.
- 7
What is the function of the
ap-rolein an Aruba access point configuration?Show answer details
Correct answer: B
The
ap-roleis a firewall role that governs the traffic originating from or destined for the access point itself, such as control plane traffic (PAPI, GRE) to the Mobility Controller. It is distinct from user roles, which apply to client traffic passing through the AP. - 8
A university is deploying a large-scale wireless network across its campus. To simplify management, they are using a Mobility Conductor (MC) with several managed Mobility Controllers (MDs). An administrator needs to configure a new 'Staff' WLAN that will be identical across all MDs. Where in the MC hierarchy should this WLAN be configured to ensure it is inherited by all managed devices?
Show answer details
Correct answer: A
The Mobility Conductor uses a hierarchical configuration model: devices inherit configuration along their node path, and child nodes can override single-instance settings. Although configuration at /md would reach every managed device, Aruba recommends not adding configuration at /md itself. Instead, place the MDs in a group node such as /md/Campus and configure the common 'Staff' WLAN there, where every MD in the group inherits it. /mm holds configuration for the Mobility Conductors, not the managed devices.
