HP Aruba Certified Switching Professional (ACSP) V1 HPE6-A45 Questions & Answers

• Question 1:

  What is a typical reason to implement MAC authentication on an AOS-Switch?

  A. to filter traffic at the edge, based on multiple criteria in the MAC header

  B. to provision switch ports to support devices such as IP phones or printers

  C. to enhance the security of an 802.1X solution

  D. to control management access to the switch CLI based on device, as well as user credentials

  Correct Answer: C

• Question 2:

  Refer to the exhibit.

  

  An AOS-Switch has the ACL shown in the exhibit. A network administrator then enters these commands: Switch(config)# mac-access-list standard myACL Switch(config-std-macl)# 25 deny 007d.45cc.0000 0000.0000.ffff

  How does this ACL treat these frames: 1 = 007d.45cc.ffff 2 = 007d.45cc.0000

  A. It denies both frames.

  B. It permits both frames.

  C. It denies frame 1 and permits frame 2.

  D. It permits frame 1 and denies frame 2.

  Correct Answer: A

• Question 3:

  OSPF Area 1 has two ABRs. One ABR is configured with this range for Area 1: 10.10.0.0/16. The other ABR is configured with this range for Area 1: 10.10.0.0/17.

  Which type of issue occurs due to this mismatch?

  A. The ABRs lose adjacency entirely and cannot route traffic between each other at all.

  B. The ABRs create a discontiguous area and disrupt intra-area routing between devices within Area 1.

  C. The ABRs advertise routes inconsistently, and they could potentially introduce a routing loop.

  D. The ABRs lose adjacency in Area 1 and must route all traffic to each other through Area 0.

  Correct Answer: C

• Question 4:

  The security plan for AOS-Switches calls for ARP protection. For ARP protection to function properly, which other feature should also be implemented?

  A. MAC lockout

  B. proxy ARP

  C. DHCP snooping

  D. connection-rate filtering

  Correct Answer: C

• Question 5:

  Refer to the exhibits.

  Exhibit 1

  

  Exhibit 2

  

  In the exhibits, VLAN 20 under a device name indicates that the device is configured with that VLAN. The exhibits also indicate whether VLAN 20 is statically configured on each link, either as an untagged or a tagged VLAN. If the link has no label, VLAN 20 is not statically configured on that link.

  A network administrator needs to deploy AOS-Switches at the access layer. They enforce 802.1X on edge ports. In the exhibits, Switch-1 represents the access layer switches. The plan calls for users to be dynamically assigned to VLAN 20 or VLAN 30, based on identity. If the RADIUS server authorizes the user but does not assign a VLAN, the user should be assigned to VLAN 30. Switch-2 is the default router for the user VLANs.

  Which exhibit shows the correct plan for VLAN 20 in the wired infrastructure?

  A. A

  B. B

  C. C

  D. D

  Correct Answer: C

• Question 6:

  An AOS-Switch needs to implement tunneled node in role-based mode. Aruba ClearPass is configured to assign users for which the traffic should be tunneled to a role named tunnel. The Aruba Mobility Controller should apply policies associated with the employees group to these users.

  What is the correct user role configuration on the AOS-Switch for this scenario?

  A. two user roles, one named tunnel that uses the tunneled-node-redirect command, and one named employees

  B. two user roles, one named employees that uses the tunneled-node-redirect command, and one named tunnel

  C. one user role named tunnel with employees set as the secondary role in the tunneled-node-redirect command

  D. one user role named employees with tunnel set as the secondary role in the tunneled-node-redirect command

  Correct Answer: D

• Question 7:

  Refer to the exhibits.

  Exhibit 1

  

  Exhibit 2

  

  The network administrator enters the commands shown in Exhibit 2. What is the spanning tree status on A1 and A2?

  A. Both A1 and A2 forward traffic.

  B. A1 forwards traffic, and A2 blocks traffic.

  C. A1 blocks traffic, and A2 forwards traffic.

  D. Both A1 and A2 block traffic.

  Correct Answer: D

• Question 8:

  Refer to the exhibits

  Exhibit 1

  

  Exhibit 2

  

  Both Switch-1 and Switch-2 have an OSPF inter-area route to 10.2.0.0/16 with metric 10 in their IP routing table. Switch-3 has the default setting for ECMP. Based on the exhibits, what should the Switch-3 routing table display if the network operates as normal?

  A. no route to 10.2.0.0/16

  B. two routes to 10.2.0.0/16 through both 10.1.0.1 and 10.1.0.5

  C. a route to 10.2.0.0/16 through 10.1.0.5

  D. a route to 10.2.0.0/16 through 10.1.0.1

  Correct Answer: A

• Question 9:

  Refer to the exhibit.

  

  Endpoints in VLAN 2 connect directly to this switch. These devices should only be able to send DHCP, DNS, HTTP, and HTTPS traffic. However, they are able to send any traffic. Based on the exhibit, what is the issue?

  A. The switch does not have an IP address on VLAN 2.

  B. The ACL lacks a deny ip any any statement at the end.

  C. The ACL is applied in the wrong direction.

  D. The name of the ACL applied to VLAN 2 is incorrect.

  Correct Answer: D

• Question 10:

  Refer to the exhibit.

  

  Which issue needs to be addressed in this design?

  A. a new plan for ISP redundancy, because Switch-1 can only support one AS number, so it cannot connect to both ISP 1 and ISP 2

  B. an adjustment to the physical links, because both links to the ISP routers must be on the commander to prevent a split-brain situation

  C. a new way to provide core redundancy, because AOS-Switches in VSF fabrics can only establish BGP relationships with AOS-Switches

  D. a way to ensure that the company private network does not become a transit for traffic between ISP 1 and ISP 2

  Correct Answer: D