HPE6-A41 V14.75 FIX

HPE6-A41 Number: HPE6-A41 Passing Score: 685 Time Limit: 115 min File Version: 1

HPE6-A41

Exam A QUESTION 1 Refer to the exhibit.

Which links can be combined in the same link aggregation? A. B. C. D.

Links 3 and 4 Link Links s 3 and and 5 Link Links s 3 and and 6 Link Links s 4 and and 6

Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: Explanation: We can also aggregate link 5 and 6 QUESTION 2 Refer to the exhibit.

What should the network administrator do to permit Switch-1 to route traffic from a client in 10.1.11.0/24 to a client in 10.1.12.0/24? A. B. C. D.

Enable proxy ARP. Enab Enable le IP IP rout routin ing. g. Configure Configure a static route to 10.1.11.0/ 10.1.11.0/24 24 and a static route to 10.1.12.0/ 10.1.12.0/24. 24. Enable Enable OSPF routing routing on VLAN VLAN 11 and and on VLAN VLAN 12 in the same same area.

Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 3 How many operating system image files can a network administrator load on an ArubaOS switch? A. B. C. D.

two three four unli unlimi mite ted d

Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 4 Refer to the exhibit.

Originally, all four switches had the same region configuration. VLAN 14 was added to Switch_D and then mapped to instance 2. How does this affect the MSTP topology? A. B. C. D.

Load sharing is lost, one of the uplinks is blocked for all traffic on Switch_C and Switch_D. Load sharing sharing is lost, one one of the uplinks uplinks is blocked for all traffic traffic on Switch_D Switch_D All connectiv connectivity ity is lost, lost, both uplinks uplinks are blocked blocked on Switch_D. Switch_D. A Layer Layer 2 loop exists and will cause cause sporadic connecti connectivity vity issues. issues.



The network administrator wants to place contractor clients and employee clients in different broadcast domains. How should the administrator achieve this goal?

A. Add a router in between Switch 1 and Switch 2. Configure a different subnet on each router interface. B. Create two MSTP instances on each switch. Assign ports connected to contractor clients to one instance and ports connected to employee clients to the other instance. C. Assign the switch ports connected to contractor clients to one VLAN and ports connected to employee clients to another VLAN. Extend the VLANs between the switches. D. Create two device profiles. Apply one profile to ports connected to contractor clients, and apply the other profile to ports connected to employee clients. Correct Answer: C Section: (none) Explanation Explanation/Reference:


All of the switches shown in the exhibit are ArubaOS switches. Where should the network administrator configure an IP helper address of 10.1.1.10? A. B. C. D.

on VLAN 2 on Switch-1 on VLAN 2 on Switch-3 on VLAN 1 on Switch-1 on VLAN 1 on Switch-2

Correct Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 7 What is the relationship between a wireless client’s data rate and the throughput for the client’s traffic? A. B. C. D.

The throughput is 90 percent of the data rate. The throughput is equal to the data rate multiplied by the connection time, minus the headers’ bytes. The throughput is less than the data rate and also depends on factors such as number of clients in the cell. The data rate and the throughput are equivalent.



The network consists of two ArubaOS switches with routing disabled. How should the network administrator configure the link between Switch A and Switch B to ensure that all hosts can communicate to all the other hosts within their respective VLANs? A. B. C. D.

tagged for VLAN 20 and tagged for VLAN 30 untagged for VLAN 10 and tagged for VLAN 30 tagged for VLAN 10 and tagged for VLAN 20 untagged for VLAN 10, untagged for VLAN 20, and tagged for VLAN 30

Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 9 A company has ArubaOS switches that are already configured to support the network. The company now wants

to use Aruba AirWave to manage the switches. The network administrator creates a new group on Aruba AirWave, and then discovers several ArubaOS switches that should belong to this group. What is the best practice for the initial authorization of the switches in AirWave? A. Authorize the switches in Monitor + Firmware Updates only mode. B. Authorize the switches and immediately change the scan set credentials to match the credentials on the switches. C. Authorize the switches and immediately change the global communication settings to match the credentials on the switches. D. Authorize the switches in Managed Read/Write mode. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 10 A network administrator configures MSTP on an ArubaOS switch. The administrator wants to ensure that this switch is always the root for instance 1. What should the administrator do to accomplish this? A. B. C. D.

Specify priority 15 for spanning tree instance 1. Specify spanning tree cost 0 on all switch ports that connect to other switches that use instance 1. Specify priority 0 for spanning tree instance 1. Specify spanning tree cost 15 on all switch ports that connect to other switches that use instance 1.


QUESTION 11 Refer to the exhibit. Exhibit 1.

Exhibit 2.

The administrator enters the show spanning-tree instance 2 comm and on Switch-3 and sees the output shown in Exhibit 2. What could explain the output results? A. Switch-1 has a lower MAC address than Switch-2. B. Switch-1 Switch-1 has a higher higher MAC address address than Switch-2 Switch-2.. C. Switch-3 Switch-3 filters filters BPDUs BPDUs on port port 26. 26.

D. Switch-3 Switch-3 has incompatible incompatible MSTP region region settings settings with other switches. switches. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 12 Managers log in to an ArubaOS switch with SSH. What does SSH require to authenticate the switch to the SSH client and set up a secure session? A. an SSH authorized user key, managed by the ip ssh public-key commands B. a username username and password password set set with the passwo password rd manager manager command C. an SSH SSH key, key, managed managed by by the the crypto key ss commands. D. a self-signed self-signed certificate certificate configure configured d with the the crypto key commands Correct Answer: B Section: (none) Explanation Explanation/Reference: Reference: http:// h20564.www2.hpe.com/hpsc/doc/public/display?docId=mmr_kc-0134172 h20564.www2.hpe.com/hpsc/doc/public/display?docId=mmr_kc-0134172 QUESTION 13 A network administrator needs to configure a link aggregation on an ArubaOS switch. For which type of link aggregation is the adm inistrator required to enter the lacp command in the interface context? A. B. C. D.

a distributed LACP link aggregation a dynami dynamic c LACP LACP link link aggrega aggregatio tion n a static static LACP link aggregatio aggregation n a manual manual LACP LACP link link aggreg aggregatio ation n

Correct Answer: B Section: (none) Explanation Explanation/Reference: Reference:http://www.arubanetworks.com/techdocs/ArubaOS_60/UserGuide/LACP.php QUESTION 14 Refer to the exhibit.

Spanning tree runs on the switches shown in the exhibit. The network administrator enters these two commands: Switch-1(config)# spanning-tree priority 0 Switch-2(config)# spanning-tree priority 1

The other switches use the default spanning tree priorities. The administrator enters the show spanningtree command on Switch-2. If the configuration is correct, which roles will the output show? A. B. C. D.

A1 = Designated A2 = Alternate A3 = Alternate A1 = Root A2 A2 = Designa Designated ted A3 = Designated Designated A1 = Designate Designated d A2 = Designate Designated d A3 = Designate Designated d A1 = Root Root A2 = Alternate Alternate A3 = Alternate Alternate

Correct Answer: B Section: (none) Explanation Explanation/Reference: Reference: http://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_CLI/spanning-tree (Global).htm QUESTION 15 Refer to the exhibit.

The network administrator enters this command: Switch(config)# ip route 172.16.2.0/30 192.168.1.100 metric 1 distance 1

Why does this route fail to appear in the IP routing table? A. B. C. D.

Its prefix length is invalid. Its next next hop hop is unrea unreacha chable ble.. Its administrativ administrative e distance distance is the same as an existing existing static static route. Its metric is is the same same as an existin existing g static static route. route.



Exhibit 2.

Which devices can communicate with each other at Layer 2? A. Devices 1 and 2 can communicate at Layer 2; Devices 3 and 4 can communicate at Layer 2. B. Devices 2 and 3 can communicate at Layer 2.

C. Devices 1 and 4 can communicate at Layer 2. D. Devices 1 and 4 can communicate at Layer 2; Devices 2 and 3 can communicate at Layer 2. Correct Answer: D Section: (none) Explanation Explanation/Reference:


Exhibit 2.

The routing configuration must support this behavior: Server 1 and Server 2 communicate over Link 1 when Link 1 is up. If Link 1 fails, Server 1 and Server 2 can continue to communicate over the path through Switch-3. What must the network administrator change to meet these criteria? A. On Switch 3, add a route to 192.168.2.0/24 through 192.168.1.9 and a route to 192.168.3.0/24 through 192.168.1.5. B. On Switch-1, Switch-2, and Switch-3, change the next hop in each static route to specify an IP address that exists on that switch. C. On Switch-1, raise the administrative distance for the second route to 192.168.3.0/24; on Switch-2, raise the administrative distance for the second route to 192.168.2.0/24 D. On Switch-1, add a route to 192.168.1.8/30 through 192.168.0.3; on Switch-2, add a route to 192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.169.1.4. E. On Switch-1, add a route to 192.168.1.8/30 through 192.168.1.2; on Switch-2, add a route to 192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.168.1.4. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 18 A network administrator needs to configure a static route. What should the administrator use as the next hop address? A. the lowest IP address on the neighboring router in the path towards its destination B. the IP address on the local interface that is used to egress traffic towards its destination

C. the IP address of the default gateway in the destination subnet D. the IP address on the connected interface of a neighboring router in the path towards its destination Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 19 Which type of 802.11 wireless network can be hosted by an endpoint device such as a laptop? A. B. C. D.

a wireless distribution system an ad hoc network a wireless mesh or bridge an infrastructure network


QUESTION 20 What is one benefit that Aruba AirWave can provide to a customer with ArubaOS switches? A. B. C. D.

It can audit switch firmware (software) and automate updates. It can enable the switches to provide mobility controller functions for connected Instant APs (IAPs). It can provide centralized authentication and authorization for users who log in to the switch CLI. It can program the switches to dynamically adjust QoS settings to prioritize Skype for Business traffic.

Correct Answer: A Section: (none) Explanation Explanation/Reference: Reference: https://www.google.co.in/url? sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0ahUKEwjKxOev5JfUAhXGLI8KHVYWDvEQFggnMAA&url=h ttp%3A%2F%2Fwww.arubanetworks.com%2Fassets%2Fds% 2FDS_AW.pdf&usg=AFQjCNG2mDuwxsqBI8MHZoKPpteQmEJ71g&sig2=r3FEvyQVngpJKqQVzkIOA&cad=rja QUESTION 21 Refer to the exhibit.

A network administrator views the configuration files on an ArubaOS switch and sees the output in the exhibit. The administrator enters this command: Switch# boot system flash primary config config2

After the switch boots, the administrator m akes some configuration changes and saves the configuration with the write memory command. The administrator then enters this command: Switch# boot

After the switch boots, the configuration changes just made are not present. How can the administrator restore the configuration with the changes? A. Use the boot set-default command to configure the switch to use the secondary software. Then reboot the switch. B. Reboot the switch and interrupt the boot process. Find the temporary file with the configuration changes and apply that file to the startup-config. C. Rename the config2 file to config1. Then reboot the switch. D. Use the startup-default command to configure the switch to use the config2 file with the primary software. Then reboot the switch. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 22 A network administrator prepares an ArubaOS switch to be monitored and managed by AirWave. Which credentials are required for AirWave to change configuration settings on the switch? A. B. C. D.

RADIUS shared secret SNMPv2c community with manager unrestricted privileges Telnet or SSH password SNMPv3c user in the ManagerPriv group


QUESTION 23 Two switches are members of a Virtual Switching Framework (VSF) fabric. Which statement correctly describes how the switches handle routing? A. Only the commander runs routing protocols and builds the IP routing table, but it programs the standby member to route traffic. B. Both members build their own IP routing tables, which they synchronize. Only static IP routing is supported with VSF. C. Only the commander runs routing protocols and builds the IP routing table, and all routed traffic must pass through the commander. D. Both members run routing protocols and build their own IP routing tables, and they synchronize the tables over VSF links. Correct Answer: C Section: (none) Explanation Explanation/Reference:


Endpoint A sends broadcast ARP requests. Where are these requests received? A. B. C. D.

at EndpointC at EndpointB at EndpointB, at EndpointC, and at EndpointD at EndpointB and at EndpointC

Correct Answer: A

Section: (none) Explanation Explanation/Reference:

QUESTION 25 A network administrator wants to be able to access an Aruba Instant cluster at the same IP address even if the current master fails. How can the administrator achieve this goal? A. B. C. D.

Configure a VC IP address that is a reserved IP address in the AP’s subnet. Configure the AirWave IP address in the instant cluster System > Admin settings. Assign static IP addresses, rather than DHCP ones, to all APs in the instant cluster. Assign a static IP addresses, rather than a DHCP one, to the AP that is elected master.


QUESTION 26 A network administrator discovers and then authorizes several ArubaOS switches in Aruba AirWave. Immediately after the administrator authorizes the switches, AirWave cannot communicate with the switches anymore. What should the administrator do to restore communication? A. Change the SNMP and Telnet/SSH credentials in the AirWave global communication settings to match those on the switches. B. Change the management level for the switches to Monitoring and Firmware Updates Only. C. Specify the SNMP and Telnet/SSH credentials on the switches to update the individual communication settings on the switches. D. Change the management level for the switches to Manage Read/Write. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 27 A company has a single routing protocol environment. What is one reason to use OSPF routing instead of static routing? A. OSPF allows ArubaOS switches to use default routes, while static routes cannot use 0.0.0.0/0 as the destination network. B. OSPF has a lower default administrative distance than static routing on ArubaOS switches. C. OSPF reduces the risk of accidentally introducing routing loops, while static routing does not. D. OSPF permits load sharing traffic over multiple routes, while static routing does not.



MSTP is implemented in the topology shown in the exhibit, and all the switches are in the same region. The network administrator does not want to use the Internal Spanning Tree (IST) or instance 0 for production traffic. How many non-IST spanning tree instances does this network need in order to have effecti ve load sharing on the uplinks from the access switches? A. B. C. D.

two three four five



Exhibit 2.

Exhibit 3.

How many MSTP regions exist in the t opology shown in the exhibit? A. B. C. D.

one two three four



Device 1 needs to send traff ic to Device 2, and it sends an ARP request in preparation. Which devices process this ARP request? A. B. C. D.

all devices in VLAN 2, 192.168.2.0/24 subnet all devices connected to Switch-2 all devices in VLAN 3, 192.168.3.0/24 subnet all devices in this network


QUESTION 31 A Virtual Switching Framework (VSF) fabric is configured to use LLDP-MAD. Which action does the standby member take if it sends a probe but receives no response? A. B. C. D.

It sends a request packet to the commander to determ ine which ports should remain active. It continues to function and assumes the role of commander. It automatically changes its status to MAD inactive fragment. It requests that the commander change its status to MAD inactive fragment.


QUESTION 32 A network administrator configures OSPF in a network with ArubaOS switches. The administrator is c oncerned that a rogue device might connect to an access layer switch and introduce OSPF routes to the company’s routing topology. The access VLANs do not contain additional routers.

What should the administrator do so switches do not form an adjacency with rogue devices on the access VLANs? A. B. C. D.

Implement BPDU filtering on interfaces assigned to these VLANs. Configure the VLANs as passive OSPF interfaces. Configure the interfaces with the highest OSPF DR priority. Apply outbound routing policies to filter routes on the VLANs.


QUESTION 33 A network administrator has copied new software to an ArubaOS switch and placed this software in the secondary ﬂash location. The switch is currently booting from the primary location. The administr ator wants the switch to start using the new software. What should the administrator do to accomplish this? A. B. C. D.

Reboot the switch, which automatically causes the switch to use the newer software. Execute the command to boot the system from the secondary flash. Rename the secondary software as the primary software. Copy the secondary software to the primary software slot.


QUESTION 34 Which security benefit does SNMPv3 offer that SNMPv2 does not offer? A. B. C. D.

SSL encryption Scopes Data integrity RADIUS groups


QUESTION 35 The network administrator wants to know which device, type, and manufacturer is c onnected to port 10 on an Aruba 3810 switch. Which command could provide this information? A. show interface 10

B. show mac-address 10 C. show lacp peer 10 D. show lldp remote-device 10 Correct Answer: D Section: (none) Explanation Explanation/Reference: Reference: https://h20565.www2.hpe.com/hpsc/doc/public/display? sp4ts.oid=1827663&docLocale=en_US&docId=emr_na-c04943204#S_commands QUESTION 36 Which benefit does Aruba Clarity in Aruba AirWave provide? A. It provides an easily searchable network topology that includes physical wired, physical wireless, and virtual network infrastructure devices. B. It helps managers use the AirWave Management Platform (AMP) with its context-specific help and links to additional resources. C. It enables managers to view all configuration templates for APs, and switches from a single dashboard. D. It provides at-a-glance views of issues such as DHCP request and 802.1X authentication failures to aid in troubleshooting. Correct Answer: D Section: (none) Explanation Explanation/Reference: Review by randi https://blogs.arubanetworks.com/industries/get-more-insight-with-aruba-clarity/ QUESTION 37 Refer to the exhibit.

Based on the topology shown in the exhibit, which symptom does a network adm inistrator see if the Ar ubaOS

switches are in their factory default states? A. B. C. D.

Ports places in a blocking state Mislearned MAC addresses TTL expired in transit Layer 3 loop

Correct Answer: D Section: (none) Explanation Explanation/Reference:


Switch 1 shown in the exhibit is an ArubaOS s witch that has an uplink to the network core on interface 25. T he network administrator wants to add a link on interface 26. The administrator creates a link aggregation with this command: Switch1 (config)# trunk 25-26 trk1 lacp

What else must the administrator do to enable the Switch 1 link aggregation to successfully pass all traffic to the core? A. B. C. D.

Configure VLANs 10 and 20 as tagged VLANs on interface 26. Configure VLANs 10 and 20 as tagged VLANs on trk1. Enable BPDU filtering on interface 26. Enable LACP in active or passive mode on interfaces 25 and 26.

Correct Answer: A Section: (none)

Explanation Explanation/Reference:

QUESTION 39 An ArubaOS switch is protected with a manager password. The network administrator wants to back up the configuration and apply it to other switches. The adm inistrator wants the m anager password to be available in both the saved and running configuration. To accomplish this goal, what must the administrator do before the configuration is backed up? A. Enter the password command with the plaintext option. B. Configure an SSH keypair on the switch. C. Enter the include-credentials command. D. Ensure that the server to which the configuration will be backed up uses SCP as opposed to TFTP. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 40 A company has two ArubaOS switches, Switch1 and Switch2. Switch1 will be the commander for a new Virtual Switching Framework (VSF) fabric. Switch2 is a new switch that will be the standby member. The network administrator wants to configure the proper settings on the standby member interface before the standby member joins the fabric. What should the administrator do before the switches are joined in the VSF fabric? A. B. C. D.

Configure the interface settings on Switch2. Then enable VSF on Switch2. Enable VSF on Switch2. Then configure the interface settings on Switch2. Provision member2 on Switch1. Then configure the member2 interface settings on Switch1. Provision member2 on Switch1 and member1 on Switch2. Then configure the member2 interface settings on Switch2.



The switches in the exhibit are all ArubaOS switches that run MSTP. The network administrator wants all of the switch-to-switch links shown in the exhibit to be available for forwarding routed traffic. What should the administrator do to accomplish this? A. B. C. D.

Configure link-keepalive on the switch-to-switch ports. Configure links on a switch as a standard link aggregation. Configure the switch-to-switch ports as MSTP auto-edge ports. Configure BPDU filters on the switch-to-switch ports.


QUESTION 42 A network administrator wants to deploy Aruba Instant APs (IAPs) at a remote site that does not have Internet access. The APs should receive their configuration automatically from AirWave by using Zero Touch Provisioning (ZTP). What does the administrator need to configure? A. B. C. D.

the name and password of a user with full administrative rights to AirW ave the name of the AirWave VLAN with the configuration that the APs should use the DHCP server configured with options 43 and 60 for ZTP the IP address for the DNS server with the mapping for the airwave hostname


QUESTION 43 Which technology can provide automated network optimization for unified communication applications such as

Skype for Business? A. B. C. D.

Software-defined Networking (SDN) Zero Touch Provisioning (ZTP) Simple Network Management Protocol (SNMP) Virtual Switching Framework (VSF)


QUESTION 44 A network administrator needs to set up a static LACP link aggregation. How should the administrator configure the VLAN settings for the link aggregation? A. B. C. D.

Configure the VLANs on the physical interface with the lowest port ID before link aggregation setup. Configure the VLANs on both physical interfaces after link aggregation setup. Configure the VLANs on the link aggregation interface after the link aggregation setup. Configure the VLANs on both physical interfaces before link aggregation setup.


QUESTION 45 A network administrator enters this comm and on an ArubaOS switch with IP routing enabled:

This is the only IP route to 0.0.0.0/0 on the switch. What is the effect? A. The switch uses this route to route all traffic fr om 10.1.1.1. B. The switch uses this route for all traffic unless the traffic matches a route with a lower cost than 10. C. The switch uses this route for all traffic unless the traffic matches a route with a lower administrative distance than 10. D. The switch uses this route for all traffic that does not match a specific route in its routing table. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 46 Member1 is the commander of a Virtual Switching Framework (VSF) fabric. A power distribution causes member 1 to go down. Now the network administrator wants to rejoin member1 to the VSF fabric and make

member1 the commander again. What should the administrator do? A. B. C. D.

Boot member1 and allow it to rejoin to the VSF fabric. Then reboot mem ber2. Boot member1 and allow it to rejoin the VSF fabric. Disconnect member1 from member2 before booting member1. Configure member2 with VSF priority0. Then boot member1 and allow it to rejoin the VSF fabric.



The link between Core-1 and Core-2 shown in the exhibit fails, and some users lose connectivity. What should the network administrator do to prevent this issue in a situation such as this? A. B. C. D.

Configure BPDU protection on all Core-2 ports. Enable IP routing on Core-2. Create routes to 10.1.10.0/24 and 10.1.11.0/24 through 10.1.1.3 on Core-2. Extend VLANs 10 and 11 on all switch-to-switch links.


QUESTION 48 A network administrator wants to place desktops connected to an ArubaOS switch in VLAN5. The desktops have no awareness of VLANs. How should the administrator assign desktops to the VLAN?

A. B. C. D.

Make switch ports connected to desktops tagged members of VLAN5. Make VLAN5 the Default VLAN on the switch before the desktops connect to the switch ports. Make VLAN5 the Primary VLAN on the switch. Make switch ports connected to desktops untagged members of VLAN5.


QUESTION 49 A network administrator connects an Aruba Instant AP (IAP) to an ArubaOS switch but cannot connect the AP to the Instant cluster that exists. The administrator wants to check the IAP management IP address and software version from the ArubaOS switch CLI. To obtain this information, what should the administrator ensure is enabled on the switch and switch interfaces? A. B. C. D.

SNMP ARP Device profiles LLDP

Correct Answer: D Section: (none) Explanation Explanation/Reference: review by randi QUESTION 50 A network administrator wants to form a cluster with several Aruba Instant APs. What is required to achieve this goal? A. B. C. D.

All APs must be pre-configured with WLANs with the sam e SSID. All APs must be in the same regulatory domain. All APs must operate on the same radio channel. All APs must be the same model.


QUESTION 51 Refer to the exhibits. Exhibit 1

Exhibit 2

A network uses RSTP, as shown in the exhibits. The network administrator wants switches to use the link that connects to Core-2 to forward some of the traffic. The administrator enters these commands on every switch shown in the exhibit:

The administrator then discovers that the links to Core-2 still did not forward any traffic. What should the administrator do to enable these links to carry traffic?

A. B. C. D.

Activate the MSTP region configuration on all switches. Lower the port cost on the links that connect to Core-2 on the access layer switches. Configure Core-2 with spanning tree priority 0 in instance 2. Change the spanning tree mode to MSTP on all switches.


QUESTION 52 An interface on an ArubaOS switch did not receive any BDPUs and has the spanning tree auto-edge setting. What describes the effect of this setting? A. B. C. D.

The interface has spanning tree disabled on it and ignore BPDUs. The interface remains forwarding during topology changes. The interface root path cost is automatically set to 0. The interface is preferred to be selected as master port.


QUESTION 53 What is a requirement for links to successfully participate in an aggregated link? A. B. C. D.

that links have the spanning tree protocol disabled that links use the same speed and duplex mode that links use the same media type and are untagged that links are untagged and are associated to the same VLAN


QUESTION 54 An ArubaOS switch provides PoE+ to several Aruba APs. Users might also connect PoE devices to this switch. In a situation where the switch PoE capacity is exceeded, the network administrator wants to ensure that the switch continues to power the APs in pref erence to other devices. What should the administrator do to achieve this goal? A. B. C. D.

Set the PoE priority for the ports connected to APs to critical. Set the PoE class for the ports connected to APs to Class 5. Make sure that LLDP MED is enabled on both the switch ports and the APs. Set the PoE allocation on the ports connected to APs to the maximum value permitted by PoE+.


QUESTION 55 What is a valid setup for a Virtual Switching Framework (VSF) fabric? A. B. C. D.

one 5406R zl2 switch as commander and one 5412R zl2 switch as a standby member one 5412R zl2 switch as commander and two 5406R zl2 switches as standby members one 5406R zl2 switch as commander and two 5412R zl2 switches as standby members one 5412R zl2 switch as commander and one 5412R zl2 switch as a standby member


QUESTION 56 A network administrator wants to download a configuration from an ArubaOS switch. The administrator does not have local access to the switch and wants t o copy the configuration in a secure m anner that prevents eavesdroppers from reading the configuration. Which two options can the administrator use to copy the configuration? A. B. C. D.

SFTP and HTTPS ZModem and SFTP HTTPS and TFTP HTTPS and ZModem


QUESTION 57 A network administrator needs to complete the initial setup on an ArubaOS switch with the use of remote access. How can the network administrator do this? A. Connect the switch’s OOBM port to the same VLAN as the management station, and then establish a Telnet session to the switch default IP address. B. Connect the switch’s OOBM port to the same VLAN as Aruba AirWave. Then manually discover the switch in AirWave using the switch default IP address. C. Send a Reverse ARP from the management station and assign a temporary IP to the workstation. D. Set up the network DHCP server to assign the switch a reserved IP address. Connect the switch to a VLAN with DHCP services and then establish a Telnet session to the reserved IP address. Correct Answer: B Section: (none) Explanation

Explanation/Reference:

QUESTION 58 A network administrator enters this comm and in an ArubaOS switch CLI: Switch(config)# ip route 0.0.0.0/0 The CLI shows this error: Incomplete input: 0.0.0.0/0 How can the administrator find a valid way to complete the command? A. Enter ip ––help route. B. Enter ip route 0.0.0.0/0 ? with a space before the ?. C. Enter help ip route. D. Enter ip route 0.0.0.0/0? With no space before the ?. Correct Answer: B Section: (none) Explanation Explanation/Reference:


Prior to implementing OSPF on the network, an ArubaOS switch had the IP routing table shown in the exhibit. The network administrator then sets up OSPF in the network. The switch calculates these OSPF routes to 10.1.20.0/24: Through 10.1.0.1 with cost 3 and adm inistrative distance 110 Through 10.1.0.2 with cost 3 and adm inistrative distance 110 How does the way the switch handles traffic destined to 10.1.20.0/24 change with the introduction of OSPF? A. The switch stops sending the traffic to 10.1.0.3 and instead load balances it to 10.1.0.1 and 10.1.0.2. B. The switch no longer drops this traffic and instead load balances it to 10.1.0.1 and 10.1.0.2. C. The switch continues to send the traffic to 10.1.0.3, but it now has backup routes for the traffic in case the connection to 10.1.0.3 fails. D. The switch no longer drops this traffic and instead sends it to 10.1.0.1. Correct Answer: A Section: (none) Explanation


QUESTION 60 Which configuration settings for an ArubaOS switch must be deleted from a physical interface before it can be associated with a Virtual Switching Framework (VSF) link? A. B. C. D.

Distributed trunking Virtual Router Redundancy Protocol (VRRP) Multi-Active Detection (MAD) Graceful OSPF (non-stop forwarding)



Based on the output shown in this exhibit, which statem ent is true about the 10.0.0.2 neighbor? A. B. C. D.

The neighbor rejects communications because it already has its maximum num ber of neighbors. The neighbor has mismatched settings and cannot exchange information with this switch. The neighbor communicates with this switch, but it cannot hold any more routes in its database. The neighbor communicates with this switch, and they have exchanged all topology information.


QUESTION 62 A company wants a modular switch for the core layer of its mid-sized campus. The switch requires 32 10 G ports in a single switch with the ability to scale in the future. Which ArubaOS switches series is best suited for this role? A. B. C. D.

Aruba 2930F Aruba 3800 Aruba 3810 Aruba 5400R


QUESTION 63 A network administrator implem ents a wireless network that uses three wireless APs. The administrator wants to ensure that users can roam seamlessly from one AP to another. Which type of wireless network should the administrator implement? A. B. C. D.

an ad hoc network that does not use channel bonding an infrastructure network with a different Service Set Identifier (SSID) on each AP an ad hoc network that uses channel bonding an infrastructure network with the same Service Set Identifier (SSID) on each AP



A network administrator logs in to the CLI of a Virtual Switching Framework ( VSF) fabric and enters the command shown in the exhibit. What does the output reveal? A. B. C. D.

MAD assistant at 10.1.0.2 failed to respond to probe requests. The VSF link failed, and MAD shut down the links on the other member. MAD is configured incorrectly and causes a split brain situation to occur. The VSF link failed, and MAD shut down the links on this switch.


QUESTION 65 Which standard for wireless connectivity supports the fastest data rates and Multi-User Multiple Input/Multiple

Output (MU MIMO)? A. B. C. D.

802.11a 802.11ac 802.11g 802.11n



This switch currently assigns all VLANs to MSTP instance 0 or the Internal Spanning Tree (IST). Which statement correctly describes interface 21? A. B. C. D.

The interface is down at Layer 2; it is not available for sending or receiving any traffic. The interface does not forward or accept data traffic, but it is ready to start forwarding if interface 19 fails. The interface is an edge port but has received Bridge Protocol Data Units (BPDUs), so it is disabled. The interface does not support spanning tree; it is possible that it will introduce a loop in the network.


QUESTION 67 What is true about the community string used for SNMPv1 and SNMPv2c? A. B. C. D.

The community string hashes the SNMP message, but does not encrypt it, which provides for data integrity. The community string is like a password transmitted in cleartext, which provides no data integrity or privacy. The community string encrypts the SNMP message, but does not hash it, which provides for data privacy. The community string encrypts and hashes the SNMP message, which provides for data integrity and privacy.


QUESTION 68 A company requires switches to use MSTP instead of RSTP, so that the switches can forward traffic on more than one switch-to-switch link. How does the administrator set up the solution to meet this requirement? A. B. C. D.

Set the same spanning tree cost on all redundant links on a switch. Ensure that switches use the 802.3t standard costs instead of the legacy costs. Map different VLANs to different instances, and make a different switch root bridge in each instance. Configure every switch with a unique bridge propriety in the IST, which is also called spanning tree instance 0.


QUESTION 69 Which security benefit does SNMPv3 offer that SNMPv2 does not offer? A. B. C. D.

SSL encryption Scopes Data confidentially RADIUS groups


QUESTION 70 Which security option for a WLAN provides the best access control security? A. B. C. D.

MAC authentication with WPA-PSK WPA2 Enterprise (802.1X) WPA2 Personal (preshared key) MAC authentication with WPA2 Enterprise (802.1X) fail-thru


QUESTION 71 A network administrator wants to see how much power an Aruba AP has dynamically requested from an ArubaOS switch port. Which infor mation should the administrator look at? A. LLDP with the use of the show lldp info remote-device command B. interface with the use of the show interface command

C. device class with the use of show system power-supply command D. device profile with the use of the show device-profile status command Correct Answer: A Section: (none) Explanation Explanation/Reference: Reference: https://support.hpe.com/hpsc/doc/public/display?docId=c04943217 (80) QUESTION 72 A company needs a switch that supports 10GbE and 40GbE for its mid-sized campus. The company prefers stackable, or fixed port, switches over modular switches. Which ArubaOS switch series best meet these needs? A. B. C. D.

Aruba 2530 Aruba 2930F Aruba 3810 Aruba 5400R


QUESTION 73 Which standard for wireless connectivity supports both 2.4GHz and 5GHz? A. B. C. D.

802.11a 802.11ac 802.11g 802.11n

Correct Answer: D Section: (none) Explanation Explanation/Reference: Review by randi QUESTION 74 A company has these requirements to manage its ArubaOS switches: Management and data traffic cannot share links. Managers must be able to r each switches remotely over IP connections. How should the administrator set up switches to meet these requirements? A. Assign at least one port on each switch to a Virtual Switching Framework (VSF) link and connect those ports in a dedicated network. B. Create a management VLAN and tag the VLAN on all switch-to-switch links. C. Enable IP authorized managers for the administrator subnet. D. Configure IP addressing on OOBM ports and connect them in a dedicated network.



Which feature should the network administrator configure on the Virtual Switching Framework (VSF) fabric to prevent issues if Links 1 and 2 fail? A. B. C. D.

Graceful OSPF (non-stop forwarding) Multi-Active Detection (MAD) Distributed trunking Virtual Router Redundancy Protocol (VRRP)


QUESTION 76 Which ArubaOS switch feature treats multiple ports as one logical port? A. OSPF B. STP C. VSF

D. Link aggregation Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 77 How can a network administrator configure an ArubaOS switch to autom atically assign the correct tagged VLANs to a port when an Aruba AP connects to that port? A. B. C. D.

Configure the tagged VLANs in the device profile and apply that profile to the port configure a MAC-to-VLANs mapping policy and enable MAC-based VLANs on the port Enable Zerp Touch Provisioning (ZTP) on the switch Enable LLDP MED Globally and on the switch port


QUESTION 78 A Network administrator wants to see how much power an Aruba AP has dynamically requested from an ArubaOS switch port. Which infor mation should the administrator look at? A. B. C. D.

LLDP with the use of the show lldp info remote-device command Interface with the use of the show interface command Device class with the use of show system power-supply command Device profile with the use of the show device-profile status command


QUESTION 79 Refer to the exhibit

MSTP is enabled on the switch shown in the exhibit. Which additional step should the network administrator take to support load sharing of traffic on different switch-to-switch link? A. Configure different spanning tree port priorities for dif ferent instances on each access layer switch. B. Assign different spanning tree port costs to different instances on each access layer switch. C. Ensure that half of the switches use config revision 1 and half of the switches use config revision 2. D. Create an identical VLAN-to-instance mapping on each switch, in which some VLANs are in each instance. Correct Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 80 How does a switch treat a link aggregation? A. The switch treats the link aggregation as one logical link for spanning tree, but it learns MAC addresses separately on each individual interface within t he aggregation. B. The switch treats the link aggregation as one logical link. It assigns one spanning tree port role to the link aggregation and it learns MAC addresses on the aggregation. C. The switch treats the link aggregation as one logical link for MAC learning, but it assigns an individual spanning tree port role to each interface within the aggregation. D. The switch treats each interface within the interface as a separate entity for MAC address learning; it also assigns an individual spanning tree port role to each interf ace. Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 81 For which task does a network administrator need to access the enable context on an ArubaOS switch?

A. B. C. D.

to view interface statistics to view CPU statistics to ping an IP address to view configuration files


QUESTION 82 An ArubaOS switch operates at factory default settings. A network administrator enters this command: Switch (config)# password operator plaintext mysecret How does the switch now control access to the CLI through the console port? A. It forces users to enter no username and password operator to gain access to basic mode. Users m ust then enter password mysecret to reach enable m ode. B. It forces users to enter username operator and password mysecret to gain access to basic mode. Users can then reach enable mode without authenticating. C. It allows users to access basic mode without logging in, but forces them to enter password mysecret to reach enable mode. D. It forces users to enter no username and password mysecret to gain access to basic mode. Users can then reach enable mode without authenticating. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 83 What often happens when a Layer2 broadcast domain has a loop? A. B. C. D.

Some switch-to-switch ports take the MSTP alternative role and stay in that role. In the switch MAC tables, the MAC addresses frequently move from one port to another. Switches automatically raise their MSTP configuration revision level by one. In the switch routing tables, some routes converge with new metrics.



A network administrator installs a new aggregation and access layer in a campus network. All users in this area belong to the same VLAN. T he administrator plugs the switches into the network with the factory default configurations. Which protocol must the administrator configure to prevent broadcast storms? A. B. C. D.

MSTP LLDP OSPF LACP


QUESTION 85 A network administrator plans to set up a W LAN on an Aruba Instant cluster. The WLAN uses W PA/WPA2 Enterprise security. The administrator wants no authenticate users locally on the cluster. How should the administrator configure me credentials?

A. B. C. D.

Add a user account for each employee to the cluster internal server database. Import authorized device MAC addresses to the cluster. Implement a shared secret or password in the cluster WLAN settings. Set up an external RADIUS server for authorization.


QUESTION 86 A network administrator plans two interfaces for a Virtual Switching Framework (VSF) link. Which best practice should the administrator follow? A. B. C. D.

Configure a low spanning tree cost on the interfaces. Configure the interfaces as a distributed trunk. Use interfaces on different modules. Use copper connections.


QUESTION 87 Refer to exhibit

Assume that Student A's ARP table is empty. Student A prepares to send an FTP packet to FTP Server B and needs to discover the proper destination MAC address. For which IP address does Student A send an ARP request? A. B. C. D.

10.1.2.2 10.1.10.1 10.1.10.87 10.1.20.1


QUESTION 88 Which technology enables a network administr ator to group users by logical function instead of physical location, reduce bandwidth waste by limiting broadcast traffic, and improve security by isolating users at Layer2? A. B. C. D.

802.1X SNMPv3 VLANs Virtual Switching Framework (VSF)

Correct Answer: C Section: (none) Explanation


QUESTION 89 How does a wireless network differ from a wired network? A. A wireless network is a shared medium, while a modern wired network typically works in fullduplex mode. B. A wireless network is inherently more secure than a wired network. C. A wireless network does not use source and destination MAC addresses, but a wired network does. D. A wireless network does not support encryption, unlike a wired network, which can support encryption. Correct Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 90 A server connects to a port on an ArubaOS switch. The network administrator wants to ensure that the port rem ains forwarding during MSTP topology changes, and changes in the port status do not cause MSTP topology changes. Which statement describes how the administrator can accomplish this? A. B. C. D.

The administrator can accept the default behavior of auto-edge. The administrator can lower the port's root path cost to zero. The administrator can manually disable STP on the edge port. The administrator can configure the port as an MSTP master port.


QUESTION 91 Refer the exhibit

A network administrator needs to set up DHCP relay in a switched network comprised of ArubaOS switches. Switch A and Switch B have the IP settings in Exhibit 2, and no static or dynamic routes. Switch B is the DCHP server's default gateway. The administr ator correctly configures the IP helper address on Switch A. However, when the DHCP client attempts to acquire an IP address in VLAN 10, t he process fails. What does the administrator need to do to solve this problem? A. B. C. D.

Configure a static route on Switch A, and enable IP Helper on Switch B. Configure a static route on Switch A. Configure a static route on Switch A and Switch B, and enable IP Helper on Switch B. Configure a static route on Switch A and Switch B.


QUESTION 92 A manager password is configured on an ArubaOS switch. The network administrator wants to ensure managers only use SSH to connect to the ArubaOS switch for CLI access. Which step should the administrator complete to accomplish this? A. Enter the command no telnet-server.

B. Enter the commend include-credentials. C. Enter the command ip ssh. D. Enter the command secure-vty. Correct Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 93 What does the traceroute command that is entered on an ArubaOS switch identify? A. B. C. D.

each physical device between the switch and a destination the path to each router connected to the switch each Layer 3 device between the switch and a destination debug output tracing entries to the routing table


QUESTION 94 An ArubaOS switch operates at its factory default settings. A network administrator connects the switch to a VLAN with a DHCP server. The switch-to-switch connection carries untagged traffic. The administrator wants to use Telnet log in to the switch CLI. How should the administrator contact t he switch and log in? A. Contact the switch at its default IP address 172.16.0.254/24 and log in without entering a password. B. Contact the switch at its default IP address 192.168.1.1/24 and log in with the default password admin. C. Contact the switch at its DHCP-assigned IP address and log in without entering a password. D. Contact the switch at its DHCP-assigned IP address and log in with the default password aruba. Correct Answer: C Section: (none) Explanation Explanation/Reference:


A network administrator executes this comm and on an ArubaOS switch, Switch-2: Switch-2(config)# ip route 10.1.100.0/24 10.1.1.1 The administrator successfully pings Device 1 at 10.1.100.42 from Switch-2. However, Device 2 cannot ping Device 1. The administrator confirms that Device 1 is correctly set up. What should the administrator check on Switch-2 to resolve this issue? A. B. C. D.

that ARP proxy is enabled that IP routing is enabled that spanning tree is disabled that ICMP is enabled



Prior to implementing OSPF on the network, an ArubaOS switch had the IP routing table shown in the exhibit. The network administrator then sets up OSPF in the network. The switch calculates these OSPF routes to 10.1.20.0/24: * Through 10.1.0.1 with cost2 and administr ative distance 110 * Through 10.1.0.2 with cost3 and administr ative distance 110 * Through 10.1.0.3 with cost4 and administr ative distance 110 How does the switch now handle traffic that is destined to the 10.1.20.0/24 network? A. B. C. D.

It sends all of the traffic to 10.1.0.3. It load balances the traffic: sends some to 10.1.0.1 and some to 10.1.0.3. It load balances the traffic: sends some to 10.1.0.2 and some to 10.1.0.3. It sends all of the traffic to 10.1.0.1.


QUESTION 97 A network administrator is in the context in an ArubaOS switch CLI: Switch (vlan10)# The administrator wants to leave the configuration context with a single command. Which command should the administrator enter? A. B. C. D.

logout quit exit end



A network administrator wants to set up a link aggregation between two switches, as shown in the exhibit. The link aggregation must meet these requirements: * Protects against misconfiguration * Can be configured with VLANs and other settings Which type of link aggregation should the administrator create? A. B. C. D.

dynamic LACP static LACP manual (trunk) distributed (trunk)


QUESTION 99 A company has an Aruba 5400R switch, switch 1, at the network core of its campus. This switch routes all traffic for the campus and is the RSTP root. The company now wants to add another Aruba 5400R switch to the core in order to enhance resiliency. The company wants to use the option that provides the best Layer 2 and Layer 3 resiliency and also the simplest setup. What should the administrator do to add the new 5400R switch? A. Add the new switch and migrate to MSTP with two instances. B. Add the new switch and set up OSPF on all switches. C. Add the new switch as a secondary root bridge in RSTP.

D. Add the new switch as a standby member in a VSF fabric with switch 1. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 100 Why would a network administrator use strict provisioning to configure the standby member in a Virtual Switching Framework (VSF) fabric? A. The network administrator wants to control which device can join the VSF fabric. B. The network administrator needs to configure the correct domain ID on the standby member before this member joins the VSF fabric. C. The network administrator wants to ensure the standby member is configured with the same settings as the commander. D. The network administrator does not know the MAC address of the standby member. Correct Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 101 Several servers are connected to an ArubaOS switch. The servers send traffic with 802.1Q VLAN ID 5. How should the network administrator configure the ArubaOS switch to receive this traffic? A. B. C. D.

Make VLAN 5 the Default VLAN on the switch before the servers connect to their switch ports. Make switch ports connected to servers untagged members of VLAN 5. Make switch ports connected to servers tagged members of VLAN 5. Make VLAN 5 the Primary VLAN on the switch.


QUESTION 102 Exhibit 1

Exhibit 2

PC1 cannot reach PC2. Based on the exhibits, what could be the cause of this issue? A. B. C. D.

PC1 has the wrong IP address for its default gateway setting. Router A has a direct route, instead of a static route, to 10.1.10.0/24. The next hop address for the 10.1.20.0/24 route is incorrect. Router A has an invalid subnet mask for the VLAN 1 subnet.

Correct Answer: A Section: (none) Explanation Explanation/Reference: Seharusnya IP Gateway PC1 = 10.1.10.254 QUESTION 103 Refer to the exhibit Exhibit 1

Exhibit 2

Assume that Switch-2 is correctly configured for OSPF. Which additional step must the administrator take to enable Switch-1 to advertise 192.168.2.0/24 to Switch-2? A. B. C. D.

Set a router ID on Switch-1. Configure a route to advertise 192.168.2.0/24 on Switch-1. Add Switch-2's router ID to Switch-1's OSPF neighbor list. Enable OSPF on VLAN 2.


QUESTION 104 A network administrator creates a local user account and assigns that account to the Level-9 authorization group. The administrator tests the group assignment and is able to successfully log in with the local user credentials. However, the administrator is able to enter all the commands rather than only the commands permi tted by the Level-9 group. How can the administrator resolve this issue?

A. B. C. D.

Set an operator password. Set the command access level to enable. Set the command access level to all. Set command authorization to local.


QUESTION 105 A network administrator wants to pre-configure new MSTP region settings on ArubaOS switches, and then apply the new settings at a later tim e. How can the administrator pre-configure the settings? A. B. C. D.

Change the MSTP region name after the new settings are configured. Create a second spanning tree region on the switch and apply the settings to this region. Use the pending option in the spanning-tree commands. Change the MSTP region revision number after the new settings are configured.


QUESTION 106 Refer to the exhibits exhibit 1

Exhibit 2

A network administrator wants to create a backup IP route to 10.1.20.0/24 on Switch-1. The backup route should use Link2, and it s hould only be used if Link1 is down. What is the correct setup to accomplish this? A. B. C. D.

an IP route through 10.1.20.1 with administrative distance 10 an IP route through 10.0.2.2 with administrative distance 10 an IP route through 10.0.2.2 with administrative distance 1 an IP route through 10.1.20.1 with administrative distance 1



The student A client needs to c onnect to FTP Server B. Student A sends the necessary ARP request and receives a reply. Which destination MAC address does the Student A client use in the FTP packet to FTP Server B? A. B. C. D.

00-1D-B3-F1-EF-40 00-E0-52-F0-44-87 00-1D-B3-F1-EF-31 00-E0-52-F0-41-B2


QUESTION 108 A Virtual Switching Framework (VSF) fabric currently has two members and two physical 10GbE links in its VSF link. Which administrative task can a network administrator perform on this VSF fabric when both members are online? A. B. C. D.

Remove a VSF member. Add a new 40GbE link to the VSF link. Remove one of the physical links in the VSF link. Change the VSF link to use 40GbE links instead of 10GbE links.

Correct Answer: A

Section: (none) Explanation Explanation/Reference: reviewed by randi QUESTION 109 A network administrator uses the console to access an ArubaOS core switch and wants to find the management IP address of another ArubaOS switch that is currently connected to port B1. Which information should the administrator review? A. B. C. D.

interface with the use of the show interface command LLDP with the use of the show lldp info remote-device command ARP with the use of the show arp command device profile with the use of the show device-profile status command

Correct Answer: B Section: (none) Explanation Explanation/Reference: reviewed by randi QUESTION 110 Member 1 is the commander of a Virtual Switching Framework (VSF) fabric. A power disruption causes member1 to go down. What happens when power is restored and member 1 boots? A. B. C. D.

Member 1 fails to rejoin the VSF fabric, and the err or disrupts member 2. Member 1 rejoins the VSF fabric and becomes the commander. Member 1 rejoins the VSF fabric, and member 2 continues to act as commander. Member 1 fails to rejoin the VSF fabric, and member 2 continues to act as commander.


QUESTION 111 Which security options for a WLAN can authenticate either the computer or the user? A. B. C. D.

Open with MAC authentication MAC authentication with WPA2 Enterprise (802.1X) fail-thru Personal (preshared key) authentication with WEP Personal (preshared key) authentication with WPA2


QUESTION 112

A network administrator wants to form a cluster with several Aruba Instant APs (IAPs). What must the administrator verify? A. B. C. D.

that all APs are the same model that all APs are operating on the same radio channel that all APs are connected in the same subnet that all APs are pre-configured with WLANs with the same SSID


QUESTION 113 A network administrator just received two switches and wants to use the plug-and-play method to establish a Virtual Switching Framework (VSF) fabric with the fewest steps possible. What must the administrator do to establish the fabric in this way? A. B. C. D.

Configure a VSF link on the commander, and enable VSF on the standby member. Configure a VSF link on the commander, and enable VSF on me commander. Enable VSF on both the commander and the standby member. Configure a VSF link on both the commander and the standby member.



The routing configuration must support this behavior: What must the network administrator change to meet these criteria?

A. On Switch 3, add a route to 192.168.2.0/24 through 192.168.1.9 and a route to 192.168.3.0/24 through 192.168.1.5. B. On Switch-1, Switch-2, and Switch-3, change the next hop in each static route to specify an IP address that exists on that switch. C. On Switch-1, raise the administrative distance for the second route to 192.168.3.0/24; on Switch2, raise the administrative distance f or the second route to 192.168.2.0/24 D. On Switch-1, add a route to 192.168.1.8/30 through 192.168.0.3; on Switch-2, add a route to 192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.169.1.4. E. On Switch-1, add a route to 192.168.1.8/30 through 192.168.1.2; on Switch-2, add a route to 192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.168.1.4. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 115 A retail company needs a quick way to deploy network infrastructure to new sites. Which Aruba solutions provide Zero Touch Provisioning (ZTP) for Aruba Instant APs (IAPs) and ArubaOS switches? A. B. C. D.

Aruba AirWave and Aruba Activate Aruba Meridian and Aruba ALE Aruba AirWave and Aruba Central Aruba Activate and Aruba Meridian


QUESTION 116 A network administrator wants to use Aruba AirW ave to manage Aruba 3810 Series switches deployed at the campus access layer. How does AirW ave determine which configuration template to apply to these switches? A. B. C. D.

based on their group based on their lowest level subfolder based on their top level folder based on the global group associated with their group


QUESTION 117

A network administrator wants to disable physical interfaces 13-24 on an ArubaOS switch. How can the administrator do this? A. B. C. D.

Assign the range of interfaces to a VLAN. Then, disable the VLAN. Create a named range for interfaces 13-24. Then, disable the named range. Create a named port group for interfaces 13-24. Then, disable the named port group. Use the interface disable command. Specify 13-24 for the ID.



Based on the exhibit, what is the problem ? A. An issue causes the spanning tree to converge and re-converge again and again. B. Interface 25 on Switch-1 is incorrectly configured as an STP edge port and causes a loop to occur. C. Interface 25 on Switch-1 does not support the correct VLANs and prevents the interface from receiving the correct STP role. D. Switch-1 and another switch are configured with the same spanning tree priority and cause the root election to occur again and again. Correct Answer: A Section: (none) Explanation Explanation/Reference:


Which issue could cause the Blocked status on A2? A. B. C. D.

A1 and A2 are connected to different switches. A1 and A2 use different trunk load balancing modes. A1 and A2 support different VLANs. A1 and A2 have spanning tree enabled on the link aggregation.


QUESTION 120 Refer to exhbit

A company has an existing Aruba Instant cluster with several Instant APs (IAPs), as shown in the exhibit. The network administrator orders a new IAP and boots it for the first time by connecting it to

the PoE switch port shown in the exhibit. What happens after the IAP boots? A. The IAP attempts to contact AirW ave. If it is able to reach AirW ave and obtain the current VC (master) IP address, it joins the cluster. B. The IAP fails to join the cluster because the administrator has not yet connected to its Instant SSID and provisioned it. C. The IAP undergoes an election process with the current VC (master). It takes the VC role if it has a higher MAC address unless the current VC is configured as the preferred VC. D. The IAP hears the messages from the current VC (master), and it joins the cluster without the occurrence of a new election. Correct Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 121 Which characterizes out-of-band management? A. B. C. D.

Uses the same Ethernet link that the management station uses to transm it traffic onto the network Is the only secure method to manage switches Limits the network administrator’s ability to configure switch features and functions Separates management traffic from data traffic

Correct Answer: D Section: (none) Explanation Explanation/Reference: Out-of-band management completely isolates management traffic from data traffic. Administrators can obtain out-of band management through a switch’s console port, using the serial cable that ships with the switch, or through the OOBM port, using an Ethernet cable. QUESTION 122 Which interface identifier correctly specifies the second port on the second module of an Aruba 5400R zl2 switch? A. B. C. D.

2/2 A2/2 B2 2/0/2

Correct Answer: C Section: (none) Explanation Explanation/Reference: The Aruba modular switches identify modules with letters and starting number ports at 1, so the correct answer is B2. QUESTION 123 If a network manager enters the

include-credentials command on an

Aruba switch, what happens? A. Login credentials for switch access are stored in internal flash and are part of the configuration file. B. The switch sends login credentials to a network RADIUS server and grants access only to network administrators that the server approves. C. The local manager and operator usernames and passwords are stored in internal flash but are not part of the configuration file. D. The switch enforces 802.1X authentication for specified ports using the manager credentials configured on the switch. Correct Answer: A Section: (none) Explanation Explanation/Reference: On Aruba switches, login credentials are not stored in flash by default. If you want to store the credentials in the internal flash and view them in the config, you should enter the include-credentials command. QUESTION 124 Refer to this command output:

A network administrator changes several settings on this Aruba switch. The administrator then enters

write memory. To which configuration or configurations does the switch save the new settings? A. B. C. D.

config1 only config1 and config3 config3 only config1, config2, and config3

Correct Answer: C Section: (none) Explanation Explanation/Reference: The write memory command saves configuration changes to the active configuration file.The command output indicates that config3 is the active file. QUESTION 125 Refer to the exhibit

Switch A is an Aruba switch without IP r outing enabled, and Switch B is an Aruba switch with IP r outing enabled. Based on this topology, what is the correct configuration f or port B1 to ensure connectivity within VLAN 10 and inter-VLAN connectivity between all three VLANs? A. vlan 10 tagged B1 vlan 20 tagged B1 B. vlan 30 tagged B1 vlan 10 tagged B1 C. vlan 20 tagged B1 vlan 10 tagged B1 vlan 30 tagged B1 D. vlan 10 untagged B1 vlan 20 untagged B1 Correct Answer: B Section: (none) Explanation Explanation/Reference: B is correct. Because VLAN 10 extends between the two switches, it must be carried on the switch-toswitch link. Switch A supports devices in VLAN 20, and Switch B is the default router for this VLAN. Therefore, the switch-to-switch link must also support this traffic. QUESTION 126 Refer to the Exhibit

Users in VLAN 20 need to acquire addressing information from the DHCP server in VLAN 30. Where should the network administrator configure the IP helper address? A. B. C. D.

on VLAN 30 on Switch A on VLAN 20 on Switch A on VLAN 30 on Switch B on VLAN 20 on Switch B

Correct Answer: B Section: (none) Explanation Explanation/Reference: B is correct. You should specify the ip helper-address command for the VLAN where the clients reside on a switch that has an IP address in that VLAN. The switch m ust also have IP connectivity to the DHCP server. Switch A meets both of those criteria. QUESTION 127 Refer to the Exhibit

Switch-A, Switch-B, and Switch-C are Aruba switches. All switches are at their fact ory default configurations with the exception of spanning tree being enabled on all three switches. Based on this information, which statements about this topology are correct? ( Select two.) A. B. C. D. E. F.

Switch-A is the root switch. Switch-B is the root switch. Switch-C is the root switch. Port A1 is a designated port. Port A2 is a designated port. Port B2 is a root port.

Correct Answer: BE Section: (none) Explanation Explanation/Reference: B and E are correct. Switch-B has the lowest switch ID (lowest MAC address) and, therefore, is the root switch. (The default priori ty on all Aruba switches is 32,768.) The link with A2 is blocked because it doesn’t offer the lowest cost path to the root. One side is an alternate port, and the other side is a designated port. A2 is the designated port since both Switch-A and Switch-B advertise the same root path cost, but Switch-A has a lower bridge priority (which is the tie breaker). QUESTION 128 Refer to the exhibit

These commands were executed on all three switches, which were at their factory default configuration: spanning-tree spanning-tree config-name exam spanning-tree config-revision 1 spanning-tree instance 1 vlan 2 spanning-tree instance 2 vlan 3 These commands were then executed on Switch-A: Switch-A(config)# spanning-tree priority 0 Switch-A(config)# spanning-tree instance 1 priority 0 Switch-A(config)# spanning-tree instance 2 priority 1 These commands were then executed on Switch-B: Switch-B(config)# spanning-tree priority 1 Switch-B(config)# spanning-tree instance 1 priority 1 Switch-B(config)# spanning-tree instance 2 priority 0 This command was then executed on Switch-C: Switch-C(config)# spanning-tree pending instance 2 vlan 3-4 Which statement is true?

A. B. C. D.

A Layer 2 loop occurs exists. Switch-C is the root switch for all three instances. Switch-C carries traffic in all VLANs on the link to Switch-A. Switch-C load balances traffic on both links on a per-VLAN basis.

Correct Answer: D Section: (none)

Explanation Explanation/Reference: D is correct. The first commands configured the switches with identical MSTP region settings. Then Switch-A and Switch-B were configured with priorities that r esulted in Switch-A being elected root in instance 0 and 1 and Switch- B being elected root in instance 2. This means that Switch-C has a different active link in each instance. A change to Switch-C’s VLAN-to instance mappings would place Switch-C in a different region. However, the command was entered with the pending keyword, and the pending changes have not yet been applied. QUESTION 129 An Aruba switch connects to a server on port 1 and port 2, which are configured as a link aggregation. Examine the output for this switch:

Based on this configuration and output, which statement is true. concerning the link aggregation configuration and load-sharing operation? A. The switch and server have failed to form an aggregated link. B. The server is not using LACP, so the aggregated link has formed but is not load balancing. C. The link aggregation is not carrying enough conversations for effective load balancing, and Layer 4 balancing might work better. D. The link aggregation should use dynamic LACP, rather than static LACP, so that it can provide better load

balancing. Correct Answer: B Section: (none) Explanation Explanation/Reference: B is correct. Based on the show lacp command, both sides have successf ully negotiated link aggregation. If only one link is carrying most traffic most of the time, the link probably carries just a few conversations, which happen to be assigned mostly to one link. Aruba switches use Layer 3 load balancing for IP traffic, by default. This server seems to most communicate with a couple IP addresses, and Layer 4 load balancing might work better. QUESTION 130 A network administrator is setting up an LACP aggregated link between two Aruba switches. What must the administrator match so the switches set up the link successfully? (Select two.) A. B. C. D. E.

Media type MSTP setting VLAN setting Duplex mode Qos setting

Correct Answer: AD Section: (none) Explanation Explanation/Reference: A and D are correct. When using LACP to establish an aggregated link, Aruba switches check media speed and duplex mode. QUESTION 131 Refer to the exibit

Also examine this command output:

Based on this information, for which networks will Switch-C receive an OSPF route? A. B. C. D.

10.1.0.0/30 and 10.1.1.0/24 10.1.0.0/30 and 10.1.2.0/24 10.1.1.0/24 and 10.1.2.0/24 10.1.0.0/30, 10.1.1.0/24, and 10.1.2.0/24

Correct Answer: A Section: (none) Explanation Explanation/Reference: A is correct. The command output shows that Switch-B has become fully adjacent neighbors with both Switch-A and Switch-C, which means that all three switches will have identical databases. Switch-C learns OSPF routes to all the networks on which Switch-A and Switch-B enable OSPF. Based on the show ip ospf interface command, these are 10.1.0.0/30 and 10.1.1.0/24. (Switch-C is dir ectly connected to 10.1.0.4/30.) QUESTION 132 An Aruba switch knows two routes to 10.1.2.0/24 with the same administrative distance. How does

the Aruba switch determine which routes t o add to its IP routing table? A. It always adds both routes. B. It adds the route with the lowermetric, and adds both routes, if the metric is same. C. It adds the route with the higher metric, and then the higher next hop IP address, if the metric is the same. D. It adds the route with the lower next hop IP address. Correct Answer: B Section: (none) Explanation Explanation/Reference: B is correct. A routing switch uses metrics to distinguish between routes that are learned in the sam e way such as two routes learned through OSPF. These routes have the same administrative distance, so the switch selects the route that has the lower metric. If the metric is the same, the switch adds both routes. QUESTION 133 Refer to the exhibit

Switch-A is currently routing traffic to 10.1.4.0/24 over Link 1 using a static route entered with the default administrative distance and metric. A network administrator wants to create a redundant IP route to 10.1.4.0/24 on Switch-A. The redundant route should use Link 2, and the switch should load balance traffic over both routes. What is the correct setup? A. B. C. D.

An IP route through next hop 10.1.4.1 with distance 1 and metric 1 An IP route through next hop 10.1.4.1 with distance 60 and metric 1 An IP route through next hop 10.1.20.1 with distance 1 and metric 1 An IP route through next hop 10.1.20.1 with distance 60 and metric 1

Correct Answer: C Section: (none) Explanation Explanation/Reference: C is correct. To use Link 2, the route must use 10.1.20.1, an IP address on a neighboring router interface, as the next hop. To ensure that the switch will load share across the redundant routes, the second route must use the same administrative distance and metric as the first route: 1. QUESTION 134 Examine the command output on a VSF fabric:

Member 1 is currently commander, and member 2 has the standby role. The VSF link fails. What occurs next?

A. B. C. D.

Both member 1 and mem ber 2 take the commander role, but m ember 2 uses 10.1.1.3 as its IP address. Both member 1 and member 2 take the standby role. Member 2 sends a probe to 10.1.1.3. Member 1 sends a keepalive to member 2’s VLAN 101 IP address.

Correct Answer: C Section: (none) Explanation Explanation/Reference: C is correct. The failure of the port causes the VSF link to fail. The command output shows that LLDP15. MAD is active, so member 2, the standby member, sends a probe to 10.1.1.3 to determine whether member 1

is still up. QUESTION 135 What advantages does VSF provide over multiple spanning tree protocol (MSTP)? (Select two.) A. B. C. D. E.

Faster failover The ability to provide link redundancy Device redundancy for Layer 3 functions Support for multiple VLANs Deployment at both access and core layers

Correct Answer: AC Section: (none) Explanation Explanation/Reference: A and C are correct. VSF fabrics have a much faster failover than MSTP, which was designed for legacy networks and can take as long as one second to reconverge. A VSF f abric also provides device redundancy for Layer 3 functions, which MSTP does not off er. QUESTION 136 Which are the responsibilities of only the commander in a VSF fabric? (Select two.) A. B. C. D. E.

Run IP routing protocols Forward traffic Build MAC addressing table Support ports that learn MAC addresses Build new Layer 2 headers for forwarding routed traffic

Correct Answer: AC Section: (none) Explanation Explanation/Reference: A and C are correct. In a VSF fabric, the commander’s responsibilities include running the IP routing protocols and building the MAC addressing tables. The com mander forwards the MAC addressing tables to the other member of the VSF fabric. QUESTION 137 A network administrator connects a new Aruba Instant AP (IAPs) to a PoE switch in a network that has no other IAPs. What happens when the IAP boots up? A. B. C. D.

It searches for a mobility controller to take control of it. It connects to Aruba ClearPass and downloads a configuration from ClearPass. It elects itself virtual controller (VC) and starts advertising the default SSID. It enters an error state and must be provisioned through its console port.

Correct Answer: C Section: (none) Explanation Explanation/Reference: C is correct. If an IAP does not receive any beacons from a VC in an active cluster, the IAP elects itself as the VC. Because this is a new IAP, it

advertises the default Instant SSID, which allows administrators to connect to the SSID and provision the IAP. QUESTION 138 Match the wireless security setting with the appropriate description. A. WEP with 802.1X B. WPA2-PSK C. WPA2 with 802.1X D. MAC-Auth alone _______i. Often used by small companies that want a simple solution _______ii. Not recommended for secure authentication because it can be easily spoofed _______iii. Not supported with 802.11n or ac _______iv. Recommend for enterprises that want the most secure option A. B. C. D.

bdac abcd dacb adcb

Correct Answer: A Section: (none) Explanation Explanation/Reference: b i. Often used by small companies that want a simple solution d ii. Not recomm ended for secure authentication because it can be easily spoofed a iii. Not supported with 802.11n or ac c iv. Recommend for enterprises that want the most secure option QUESTION 139 Which credentials does Aruba AirWave use to discover and configure Aruba switches? A. B. C. D.

SNMP to discover and Telnet/SSH login to configure Telnet/SSH login to discover and SNMP to configure SNMP to discover and configure Telnet/SSH login to discover and configure

Correct Answer: A Section: (none) Explanation Explanation/Reference: A is correct. AirWave uses SNMP to discover Aruba switches and Telnet/SSH login to configure them. QUESTION 140 Aruba AirWave has discovered several Aruba Instant clusters. W hat is one step that administrators must complete to enable configuration of the clusters from the Instant GUI in AirWave? A. B. C. D.

Generating certificates on AirW ave and deploying the certificates to the Instant devices Ensuring that AirWave has the correct Telnet/SSH credentials to log into the Instant devices Ensuring that AirWave has the correct SNMP read-write credentials for the Instant devices Placing the Instant devices to Manage Read/Write mode

HPE6-A41 V14.75 FIX

Recommend Documents