HP HPE6-A45 Online Practice Questions and Exam Preparation

HP HPE6-A45 Online Questions & Answers

• Question 71:

  A company wants to implement 802.1X authentication to authenticate client devices on AOS-Switch ports. The company has a RADIUS server that uses PEAP MSCHAP-v2 for the authentication method. What is one task administrators should complete before they implement the plan?

  A. Set up an isolated VLAN in the network for the 802.1X communications.
  B. Install personal certificates on client devices.
  C. Configure DHCP services on the AOS-Switches for pre-authenticated clients.
  D. Ensure client devices trust the RADIUS server certificate.
  D. Ensure client devices trust the RADIUS server certificate.

• Question 72:

  A company wants to implement role-based tunneled node on AOS-Switches. Which solution should be included in the plan to help apply the roles?

  A. a RADIUS server, such as Aruba ClearPass
  B. an SNMP server, such as Aruba AirWave
  C. Aruba Mobility Manager (MM)
  D. Aruba Meridian
  A. a RADIUS server, such as Aruba ClearPass

• Question 73:

  Refer to the exhibit.

  

  Switch-1 and Switch-2 are configured to provide VRRP in VLAN 2. Based on the output, what will happen when a client in VLAN 2 sends an ARP request for its default gateway IP address?

  A. Only Switch-2 will respond, and it will respond with its own MAC address.
  B. Only Switch-2 will respond, and it will respond with the virtual MAC address for VRID 2.
  C. Both Switch-1 and Switch-2 will respond, and both will respond with the virtual MAC address for VRID 2.
  D. Both Switch-1 and Switch-2 will respond, and each will respond with its own MAC Address.
  B. Only Switch-2 will respond, and it will respond with the virtual MAC address for VRID 2.

• Question 74:

  Refer to the exhibit.

  

  An AOS-Switch has the ACL shown in the exhibit. A network administrator then enters these commands: Switch(config)# mac-access-list standard myACL Switch(config-std-macl)# 25 deny 007d.45cc.0000 0000.0000.ffff

  How does this ACL treat these frames: 1 = 007d.45cc.ffff 2 = 007d.45cc.0000

  A. It denies both frames.
  B. It permits both frames.
  C. It denies frame 1 and permits frame 2.
  D. It permits frame 1 and denies frame 2.
  A. It denies both frames.

• Question 75:

  

  A network administrator applies the ACL shown in the exhibit. Which source IP address does the myList ACL deny?

  A. 10.1.0.10
  B. 10.1.1.10
  C. 10.1.2.10
  D. 10.2.1.10
  D. 10.2.1.10

• Question 76:

  Refer to the exhibits. Exhibit 1

  

  Exhibit 2

  

  In the exhibits, VLAN 20 under a device name indicates that the device is configured with that VLAN. The exhibits also indicate whether VLAN 20 is statically configured on each link, either as an untagged or a tagged VLAN. If the link has no label, VLAN 20 is not statically configured on that link.

  A network administrator needs to deploy AOS-Switches at the access layer. They enforce 802.1X on edge ports. In the exhibits, Switch-1 represents the access layer switches. The plan calls for users to be dynamically assigned to VLAN 20 or VLAN 30, based on identity. If the RADIUS server authorizes the user but does not assign a VLAN, the user should be assigned to VLAN 30. Switch-2 is the default router for the user VLANs.

  Which exhibit shows the correct plan for VLAN 20 in the wired infrastructure?

  A. A
  B. B
  C. C
  D. D
  C. C

• Question 77:

  Refer to the exhibits. Exhibit 1

  

  Exhibit 2

  

  Switch-1 has a power issue that causes it to fail. When Switch-1 comes back up, endpoints lose connectivity for a few minutes. The network administrator decides to enter this command on Switch-1:

  Switch-1 (config)# vlan 10 vrrp vrid 10 preempt-delay-time 120

  Exhibit 2 shows the VRRP configuration just after the change. What is the effect of this change?

  A. Switch-1 and Switch-2 both become Master in their own VRRP virtual router due to the delay timer mismatch. The mismatch must be fixed.
  B. Switch-1 now waits to take over as Master if it fails and recovers. This should prevent the connectivity issue from occurring again.
  C. Switch-1 experiences an internal error in the VRRP process. This error causes Switch-2 to take over as Master for VLAN 2.
  D. Switch-1 continues to act as it did before the preempt delay time was set. Administrators must plan additional changes to fix the issue.
  C. Switch-1 experiences an internal error in the VRRP process. This error causes Switch-2 to take over as Master for VLAN 2.

• Question 78:

  A network administrator needs to control traffic based on Ethertype and Class of Service. What should the administrator configure for this purpose?

  A. both a standard IP ACL and a standard MAC ACL
  B. both a standard IP ACL and an extended MAC ACL
  C. an extended IP ACL only
  D. an extended MAC ACL only
  D. an extended MAC ACL only

• Question 79:

  Refer to the exhibits. Exhibit 1

  

  Exhibit 2

  

  A network administrator applies the ACL to Switch-2, as shown in the exhibit. Device-1, IP address 10.1.10.10/24, attempts to open an HTTP session with host 192.0.2.10 on the Internet. What happens with this attempt?

  A. Switch-2 filters both the traffic from Device-1 and the return traffic with the ACL. The return traffic is dropped.
  B. Switch-2 filters only the traffic from Device-1 with the ACL, and the session establishes successfully.
  C. Switch-2 does not filter any of this traffic with the ACL, and the session establishes successfully
  D. Switch-2 filters only the return traffic from the Internet with the ACL, and the ACL drops this traffic
  C. Switch-2 does not filter any of this traffic with the ACL, and the session establishes successfully

• Question 80:

  Refer to the exhibit.

  

  A network administrator wants to prevent endpoints from spoofing the MAC address of the VLAN 2 default gateway. What should the administrator configure on Switch-1?

  A. MAC lockdown of the default gateway MAC address on ports 1-20
  B. MAC lockdown of the default gateway MAC address on trk1
  C. default gateway MAC address as a port security authorized address on trk1
  D. default gateway MAC address as a port security authorized address on ports 1-20
  B. MAC lockdown of the default gateway MAC address on trk1