HP HPE6-A45 Online Practice Questions and Exam Preparation

HP HPE6-A45 Online Questions & Answers

• Question 1:

  Which potential security issue does the captive portal URL hash key on an AOS-Switch help to prevent?

  A. unauthenticated guests to receive access before they log in to the captive portal
  B. unauthorized users to read the captive portal redirect URL in the AOS-Switch config
  C. users to change values in the URL that directs them to the captive portal
  D. hackers to eavesdrop on the RADIUS messages sent to ClearPass
  C. users to change values in the URL that directs them to the captive portal

• Question 2:

  Refer to the exhibit.

  

  Switch-1 and Switch-2 connect on interface A23. The switches experience a connectivity issue. The network administrator sees that both switches show this interface as up. The administrator sees the output shown in the exhibit on Switch-1. What is a typical issue that could cause this output?

  A. asymmetric routing introduced by a routing protocol
  B. an issue with VLAN mismatch
  C. mismatched subnet mask on the VLAN for the link
  D. a jumbo frame mismatch
  A. asymmetric routing introduced by a routing protocol

• Question 3:

  Refer to the exhibit.

  

  A known unicast packet is received from Switch-1 on the standby and must be forwarded to Switch-2. How does the VSF fabric decide which port in the aggregated link should forward the packet?

  A. The standby uses its own port in the link aggregation to forward the fabric.
  B. The standby sends the packet to the commander over a VSF link, and the commander decides the correct port.
  C. The standby uses the typical load sharing algorithm, and it might select either its port or the commander's port.
  D. The standby selects the port on the designated forwarder for the aggregation.
  A. The standby uses its own port in the link aggregation to forward the fabric.

• Question 4:

  A network administrator needs to set up an AOS-Switch to use port-based tunneled node for connected devices. However, the administrator wants the switch to forward traffic without tunneling if it cannot reach a tunneled-node server. What should the administrator do?

  A. Apply the tunneled-node profile to ports, and set the local-switching-fallback option.
  B. Make sure that the switch has an IP address on the untagged VLAN assigned to the ports.
  C. Configure a local switching profile on the Mobility Controller that acts as tunneled-node server.
  D. Set the switch to role-based tunneled node, and make sure it uses the default initial user role.
  D. Set the switch to role-based tunneled node, and make sure it uses the default initial user role.

• Question 5:

  Refer to the exhibit.

  

  Why are these switches unable to achieve adjacency?

  A. Switch-1 and Switch-2 use different area types for Area 1.
  B. Switch-2 does not support every area that Switch-1 does.
  C. The area range is incorrect on Switch-1 and missing on Switch-2.
  D. They have the same priority and cannot elect a Designated Router (DR).
  A. Switch-1 and Switch-2 use different area types for Area 1.

• Question 6:

  Network administrators need to configure a BGP neighbor on an AOS-Switch. What defines the neighbor as an iBGP neighbor?

  A. It has BGP synchronization enabled.
  B. It has an AS number in the range of 64512 to 64535.
  C. Its update source is set to a private company IP address.
  D. Its remote-AS is the same as the AOS-Switch BGP AS.
  D. Its remote-AS is the same as the AOS-Switch BGP AS.

• Question 7:

  Refer to the exhibits: Exhibit 1

  

  Exhibit 2

  

  A network administrator at a university notices high utilization on links between the access layer and core. The output shown in the exhibit is characteristic of samples taken several times an hour during congestion. The administrator suspects file sharing and other unauthorized traffic, and decides to use an ACL to permit only HTTP, HTTPS, and a few other authorized types of traffic.

  How can the administrator apply the ACL to address both the security and the congestion problem?

  A. as an inbound PACL on the link aggregations on the access switches
  B. as an inbound VACL on the student VLAN on Switch-1
  C. as an inbound PACL on the link aggregations on Switch-1
  D. as an inbound VACL on the student VLAN on the access switches
  D. as an inbound VACL on the student VLAN on the access switches

• Question 8:

  A company deploys AOS-Switches at sites with inexperienced IT staff. The main office network administrators want to monitor thresholds to generate alerts on branch switches. What should be set up for this purpose?

  A. an SNMP trap
  B. an RMON alarm
  C. an auto-config server
  D. an sFlow instance
  A. an SNMP trap

• Question 9:

  Refer to the exhibits. Exhibit 1

  

  Exhibit 2

  

  A network administrator wants to set up mirroring of traffic from port 1 on Switch-1 to port 1 on Switch-2. Exhibit-2 shows the commands that the administrator enters. The mirroring does not work correctly. What must the administrator do to correct the error?

  A. Change the port ID on Switch 1 to 50001, so that it is unique from the port ID on Switch-2.
  B. Re-configure the mirror endpoint command on Switch-2 with the IP addresses reversed in order.
  C. Remove the commands and re-enter them on Switch-1 first and then on Switch-2.
  D. Specify the mirror endpoint command in Switch-1 and the mirror 1 remote-ip command on Switch-2.
  B. Re-configure the mirror endpoint command on Switch-2 with the IP addresses reversed in order.

• Question 10:

  A company wants to implement RADIUS authentication of all managers who log in to AOS-Switches via SSH. The RADIUS server also sends VSAs that indicate which commands users can enter, and switches must honor these. What must the administrator do to meet the company's requirements?

  A. Set the command access level to manager mode; also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable.
  B. Set RADIUS for aaa authentication ssh login, also enable authentication privilege-login mode, which allows the switch to accept all RADIUS VSAs.
  C. Set command authorization to RADIUS, also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable.
  D. Set RADIUS for aaa authentication ssh enable, which allows the switch to accept all RADIUS VSAs.
  B. Set RADIUS for aaa authentication ssh login, also enable authentication privilege-login mode, which allows the switch to accept all RADIUS VSAs.