HP HP Certifications HPE6-A29 Questions & Answers

• Question 211:

  ip access-list session anewone

  user network 10.1.1.0 255.255.255.0 any permit

  user any any permit

  host 10.1.1.1 host 10.2.2.2 any deny

  A user sends a frame with the following attributes:

  Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25

  Based on the above Mobility Controller configuration file segment, what will this policy do with the user

  frame?

  A. The frame is discarded because of the implicit deny all at the end of the policy.

  B. The frame is discarded because of the statement:user host 10.1.1.1 host 10.2.2.2 deny.

  C. The frame is accepted because of the statement:user any any permit.

  D. The frame is accepted because of the statement:user network 10.1.1.0 255.255.255.0 any permit.

  E. This is not a valid policy.

  Correct Answer: C

• Question 212:

  What can an AM do that an AP cannot do?

  A. Detect rogue APs

  B. Detect an AP failure

  C. Scans all channels in under 1 minute

  D. Detect interfering APs

  E. Scan all valid channels

  Correct Answer: C

• Question 213:

  A campus AP has been provisioned with a VAP in bridge forwarding and standard operation modes. Which of the following authentication types are supported? (Choose two)

  A. 802.1X authentication

  B. Open System authentication

  C. Local authentication

  D. Captive portal authentication

  E. VPN authentication

  Correct Answer: AB

• Question 214:

  Which of the following functions cannot be configured in the WIPS wizard?

  A. Configure APs as Air Monitors.

  B. Configure rules for AP classification.

  C. Configure preset levels for intrusion detection

  D. Identify encryption method used in your network.

  Correct Answer: A

• Question 215:

  As illustrated in the above diagram and screen capture, a wireless hacker injects messages into your network to detach a client from your Aruba AP.

  

  What action should you take to identify and prevent the Intruder from connecting to your system?

  A. enable Detect disconnect Station Attack

  B. enable Spoofed Deauth Blacklist

  C. take no action as there is no protection against this form of attack

  D. take no action as the Aruba system ignores this attack because it is against the client

  Correct Answer: AB

• Question 216:

  Which parameter(s) does a Master controller use to determine where a provisioned AP should terminate its GRE tunnel?

  A. the IP address of the AP

  B. the MAC address of the AP

  C. the IP address of the switch nearest to the AP

  D. the name and group settings of the AP

  E. the VLAN the AP is attached to

  Correct Answer: D

• Question 217:

  

  

  View the Server group and User Roles screen shots above.

  A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius attribute of filter-Id with a value of "employee". The user was placed in the guest Role. What statements below are correct? (Choose two.)

  A. The user was placed in the 802.1x authentication default Role guest

  B. The user was placed in the initial Role guest

  C. Role derivation failed because roles are case sensitive

  D. Role derivation failed because the incorrect operation "value-of" was used

  E. 802.1x authentication failed so the user was automatically placed in the guest Role

  Correct Answer: AC

• Question 218:

  A Master switch can serve as an AP backup for a local switch.

  A. True

  B. False

  Correct Answer: A

• Question 219:

  A client Roams from one Local controller-1 to another Local controller-2. The controllers are in different subnets and L3 Mobility is enabled. How is the client traffic sent back to Local-controller-1?

  A. IP-IP tunneled

  B. FTP

  C. Multicast

  D. L2 GRE Tunnel

  E. Routed locally

  Correct Answer: D

• Question 220:

  Which of the following describes a Remote AP provisioned in "Split-Tunnel" Forwarding mode?

  A. Local user traffic first goes to the controller and is then spilt back to the local network.

  B. All data and control traffic goes to the controller unsecured.

  C. The user role must have a "Permit" statement in order to locally bridge the traffic.

  D. The user role must have a "route src-nat" statement to locally bridge the traffic.

  E. The RAP uses PAPI to send data traffic to the controller.

  Correct Answer: D