HPE6-A45 Exam - Implementing Aruba Campus Switching Solutions Exam

NEW QUESTION 1
A network administrator applies the ACL shown in the exhibit. Which source IP address does the myList ACL deny?

• A. 10.1.0.10
• B. 10.1.1.10
• C. 10.1.2.10
• D. 10.2.1.10

Answer: D

NEW QUESTION 2
Refer to the exhibit.
A network administrator configures connection rate filtering on interface 1 with the throttle action. Device 1 crosses the threshold and triggers the action.
What does the switch do?

• A. It temporarily drops all IP traffic from Device 1 only.
• B. It temporarily drops all IP traffic on interface 1.
• C. It drops all IP traffic from Device 1 until the host is manually unblocked.
• D. It drops all IP traffic on interface 1 until the interface is manually unblocke

Answer: A

NEW QUESTION 3
Two AOS-Switches are directly interconnected. The network administrator wants to prevent broadcast storms and other Layer 2 issues that could occur if there is physical damage to a cable.
Which technology should the administrator implement on the connected switch interfaces?

• A. MAC Lockdown
• B. Bidirectional Forwarding Detection (BFD)
• C. Spanning Tree Root Guard
• D. Unidirectional Link Detection (UDLD)

Answer: D

NEW QUESTION 4
Refer to the exhibit.

The network administrator wants to summarize routes as much as possible in between areas. What is the correct range to specify for the router OSPF Area 2 command on Switch-2?

• A. 10.0.0.0/20
• B. 10.0.0.0/21
• C. 10.0.8.0/21
• D. 10.0.16.0/21

Answer: D

NEW QUESTION 5
A network administrator plans to apply DSCP 46 to all traffic on a port. What is required for this configuration to work?

• A. The port has trust set to default.
• B. A DSCP map that sets 46 to a priority value.
• C. The port has trust set to DSCP.
• D. A QoS policy selects traffic with DSCP 46.

Answer: C

NEW QUESTION 6
A network uses MSTP and has AOS-Switches at the access layer. The company wants edge ports on the access layer switches to meet these criteria:
They prevent all rogue switches that run STP, RSTP, or MSTP from connecting to the network.
If a rogue switch connects and is then replaced by a proper endpoint, the port recovers automatically without IT staff involvement.
How should the network administrator set up the edge ports to meet these requirements?

• A. Enable loop protection with a timeout period.
• B. Enable BPDU filtering.
• C. Enable both root guard and BPDU protection.
• D. Enable BPDU protection with a timeout perio

Answer: D

NEW QUESTION 7
Refer to the exhibits. Exhibit 1

Exhibit 2

Switch-1 has a power issue that causes it to fail. When Switch-1 comes back up, endpoints lose connectivity for a few minutes. The network administrator decides to enter this command on Switch-1:
Switch-1 (config)# vlan 10 vrrp vrid 10 preempt-delay-time 120
Exhibit 2 shows the VRRP configuration just after the change. What is the effect of this change?

• A. Switch-1 and Switch-2 both become Master in their own VRRP virtual router due to the delay timer mismatc
• B. The mismatch must be fixed.
• C. Switch-1 now waits to take over as Master if it fails and recover
• D. This should prevent the connectivity issue from occurring again.
• E. Switch-1 experiences an internal error in the VRRP proces
• F. This error causes Switch-2 to take over as Master for VLAN 2.
• G. Switch-1 continues to act as it did before the preempt delay time was se
• H. Administrators must plan additional changes to fix the issue.

Answer: C

NEW QUESTION 8
The implementation plan for AOS-Switches calls for them to implement port-based tunneled node. The Aruba Mobility Controllers that will support the AOS-Switches run software 8.1. The controllers will also support APs, are managed by Mobility Master, and use clustering.
Which issue with this plan needs to be addressed?

• A. The controllers cannot support tunneled node with AOS-Switches when they are managed by the Mobility Master.
• B. The switches cannot connect to controllers that also support APs.
• C. The controllers must have their software updated before they can support the switches.
• D. The switches must use role-based tunneled node to work with clustering controller

Answer: A

NEW QUESTION 9
A company has a Unified Communications and Collaboration (UCC) solution. Users run softphones on their desktops and laptops.
The UCC solution is configured to use a certain range of Layer 4 ports for VoIP traffic. The user devices connect to AOS-Switches.
A network administrator needs to configure the AOS-Switches to prioritize only the VoIP traffic. Where can the administrator configure a DSCP value to meet this goal?

• A. in a global UDP port-based QoS policy
• B. on the interfaces through which the VoIP traffic is forwarded
• C. on the interfaces that connect to the user devices
• D. on the VLAN to which the user devices are assigned

Answer: B

NEW QUESTION 10
A company starts to have issues with too many rules in the dynamic ACLs applied to AOS-Switch ports. Administrators decide to remove some of the common rules from the dynamic ACLs and enforce them in an ACL applied to the users’ VLAN instead.
What is one rule that administrators should keep in mind to ensure that the new ACLs control traffic as they expect?

• A. ACLs applied to VLANs cannot control ICMP traffic, do the dynamic ACLs must include the ICMP rules.
• B. Administrators should add an explicit deny at the end of the dynamic ACLs, so traffic will hit VLAN ACL.
• C. Traffic must be permitted by both the dynamic ACL and the VLAN ACL in order to be permitted.
• D. If a port supports multiple clients, every dynamic ACL applied to one client filters traffic for all client

Answer: C

NEW QUESTION 11
Refer to the exhibit.

Both Switch-1 and Switch-2 redistribute RIP routes into OSPF. The network administrator wants routers in Area 1 to receive the redistributed routes from Switch-1 but not from Switch-2.
What should the administrator do to achieve this goal?

• A. Configure Area 1 as a stub area, with no summaries on Switch-2.
• B. Configure Area 1 as a stub area, and import the routes with a low metric on Switch-2.
• C. Configure Area 1 as a Not So Stubby Area (NSSA) on all routing devices in Area 1.
• D. Configure a subnet range for Area 1 on Switch-2, and set the no-advertise optio

Answer: C

NEW QUESTION 12
What is the minimum requirement for a device to pass local MAC authentication (LMA) on an AOS-Switch?

• A. The device MAC address matches a default MAC group, which is enabled but not necessarily associated with a profile.
• B. The device MAC address matches a MAC group, address, OUI, or range that is associated with an LMA profile.
• C. The device MAC address matches a default MAC group that is associated with an LMA profile.
• D. The device MAC address matches a configured MAC group, address, OUI, or range, which is not necessarily associated with a profile.

Answer: B

NEW QUESTION 13
Refer to the exhibit.

A network administrator needs to deploy AOS-Switches that implement port-based tunneled node. Their Aruba controller has IP address 10.1.10.5/24. The architect has assigned tunneled-node endpoints to VLAN 20.
What is one issue with the current configuration planned for VLAN 20 on the switch?

• A. VLAN 20 must have GRE enabled on it.
• B. VLAN 20 cannot have an IP address.
• C. VLAN 20 must have an IP address in the same subnet as the controller.
• D. VLAN 20 must not enable jumbo frame

Answer: D

NEW QUESTION 14
Refer to the exhibits. Exhibit 1

Exhibit 2

A company does not require authentication for security, but AOS-Switches are set up to use local MAC authentication (LMA) to assign the correct VLAN and priority to IP phones. IP phones and computers belong to different VLANs. Each device is supposed to connect to a specific port, but sometimes users connect their devices to the wrong ports and cannot receive access without help from IT.
How can a network administrator configure the switches to eliminate this issue?

• A. Set the address limit to 2 on the switch ports that apply LMA.
• B. Create a user role that applies the user VLAN, and set this role as the initial role.
• C. Add the MAC addresses for computers to the myPhones MAC group.
• D. Apply LMA to all edge switch ports, and set the unauth VLAN to the user VLA

Answer: C

NEW QUESTION 15
An AOS-Switch needs to be configured to support tunneled node in role-based mode. The Mobility Controller administrators tell the switch administrators that the AOS-Switch will integrate with a cluster of Mobility Controllers. The cluster virtual IP address is 10.1.1.10.
How should switch administrator integrate the AOS-Switch with the cluster?

• A. Double-check the settings with the Mobility Controller administrators because the planned configuration is incomplete with the switch settings.
• B. Configure the virtual IP address as the tunneled-node-server address, tunneled node will work, but the clustering features will not provide redundancy.
• C. Configure the virtual IP address as the tunneled-node-server addres
• D. The switch will automatically learn controller IP addresses to which to tunnel various traffic.
• E. Configure the virtual IP address for the primary tunneled-node-server and an actual controller IP address for the backup tunneled-node-server in order to receive redundancy.

Answer: B

NEW QUESTION 16
Refer to the exhibit.

Switch-1 and Switch-2 are AOS-Switches, which are iBGP peers. ISP 1 and ISP 2 advertise some routes to the same Internet destinations. Switch-1 and Switch-2 must select between these routes based on AS path length.
What is required for Switch-1 and Switch-2?

• A. iBGP synchronization enabled
• B. Multihop enabled for the connection to the iBGP neighbor
• C. ECMP disabled for BGP
• D. eBGP and iBGP administrative distance set to the same value

Answer: D

NEW QUESTION 17
Refer to the exhibit.

Switch-1 is an AOS-switch that is operating at factory default settings for QoS and has type of service disabled. It receives a frame with 802.1p value 5 on trk1, on VLAN 2. How does the switch treat the frame when it forwards it on TRK2?

• A. It forwards it with higher than normal priority and 802.1p 0.
• B. It forwards it with normal priority and 802.1p 0.
• C. It forwards it with normal priority and 802.1p 5
• D. It forwards it with higher than normal priority and 802.1p 5.

Answer: B

NEW QUESTION 18
A company has AOS-switches, Aruba ClearPass, and Aruba AirWave. A network administrator needs to find the source of a performance issue that often occurs at the start of the day and early in the afternoon. Which action is likely to give the administrator the most useful information for the investigation?

• A. Access the Network Device view on ClearPass.
• B. Use the configuration audit tool on AirWave.
• C. View the current running config on each switch.
• D. View usage patterns on the switches on AirWav

Answer: A

NEW QUESTION 19
Refer to the exhibit.

Switch-1 is routing traffic to 192.0.2.0/24 over a less-than-optimal path. Which issue could prevent Switch-1 from selecting the first route listed in the table as a best BGP route?

• A. It does not have AS 46501 configured on it.
• B. It has no route to 192.168.2.1 in its IP routing table.
• C. It has no network statement for 192.168.2.0/24 in its BGP configuration.
• D. It has learned the same route using OSP

Answer: B

NEW QUESTION 20
Refer to the exhibit.

An AOS-Switch has the ACL shown in the exhibit. A network administrator then enters these commands: Switch(config)# mac-access-list standard myACL
Switch(config-std-macl)# deny 007d.45cc.0000 0000.0000.ffff How does this ACL treat these frames: 1 = 007d.45cc.ffff 2 = 007d.45cc.0000

• A. It denies both frames.
• B. It permits both frames.
• C. It denies frame 1 and permits frame 2.
• D. It permits frame 1 and denies frame 2.

Answer: C

NEW QUESTION 21
Network administrators decide to change OSPF Area 1 to a stub area in order to solve some performance issues. No routes are redistributed into area 1.
What is one implication of making this change?

• A. Endpoints in Area 1 will no longer be able to reach external networks.
• B. Routing devices in area 1 will no longer exchange Type 1 and Type 2 LSAs with each other.
• C. Endpoints in Area 1 will no longer be able to reach endpoints in other areas.
• D. Routing devices in area 1 will temporarily lose adjacency while the change is mad

Answer: A

NEW QUESTION 22
What is the purpose of the captive portal URL hash key on an AOS-Switch?

• A. It specifies the captive portal URL and conceals the setting in the config.
• B. It authenticates guest users based on the password the users enter in the portal.
• C. It does not let users alter the URL that redirects them to the portal.
• D. It encrypts and secures the RADIUS messages that the AOS-Switch sends to ClearPas

Answer: C

NEW QUESTION 23
Refer to the exhibits. Exhibit 1.

Exhibit 2.

The VoIP phone connects, authenticates successfully, and is dynamically assigned to tagged VLAN 6. The endpoint connected to the phone does not authenticate but starts to send untagged traffic.
How does the switch handle this traffic?

• A. It forwards the traffic in VLAN 5.
• B. It relays the traffic to the RADIUS server for authentication.
• C. It forwards the traffic in VLAN 6.
• D. It drops the traffi

Answer: B

NEW QUESTION 24
Refer to the exhibits. Exhibit 1

Exhibit 2

The exhibits show the current operational state for routes on Switch-3. The company wants Switch-3 to send all traffic to 172.16.0.0/16 through Switch-2.
Which single configuration change creates the desired behavior?

• A. Change the OSPF external metric type to 1 on Switch-1 and Switch-3.
• B. Change the OSPF external metric type to 2 on Switch-1 and Switch-2.
• C. Set a cost in the redistribute static command on Switch-2.
• D. Set a cost in the router ospf area 0.0.0.1 stub command on Switch-1.

Answer: C

NEW QUESTION 25
......