HP HP Certifications HPE6-A48 Questions & Answers

• Question 1:

  Refer to the exhibit.

  

  An Aruba network is deployed with L2 and L3 Mobility Master (MM) redundancy across two datacenters, as shown in the exhibit. The network administrator confirms that all Mobility Controllers (MC) are currently communicating with MM1, which is the L2 Active, and L3 Primary. Which MM IP will MCs communicate with if MM1 fails?

  A. 10.1.1.10

  B. 10.1.1.12

  C. 10.2.1.10

  D. 10.2.1.21

  Correct Answer: B

• Question 2:

  Refer to the exhibit.

  

  A network administrator evaluates a deployment to validate that users are assigned to the proper roles. Based on the output shown in the exhibit, what can the network administrator conclude?

  A. The MC assigned the machine authentication default user role.

  B. The MC assigned the role based on user-derivation rules.

  C. The MC assigned the role based on server-derivation rules.

  D. The MC assigned the default role of the authentication method.

  Correct Answer: D

• Question 3:

  Refer to the exhibit.

  

  A network engineer configures some VAPs in customer groups and creates a pool of licenses with enough units for seven APs. The network engineer deploys the first two APs, looks at the ap database, and notices the APs are inactive and experience licensing-related issues.

  Based on the show command outputs shown in the exhibit, what must the engineer do to solve the problem?

  A. Allocate two more MM-VA licenses to the pool.

  B. Allocate two more MC-VA-US licenses to the pool.

  C. Allocate seven more MM-VA licenses to the pool.

  D. Allocate seven more MC-VA-US licenses to the pool.

  Correct Answer: A

• Question 4:

  A network administrator needs to deploy L2 Mobility Master (MM) redundancy. MM1 uses IP address

  10.201.0.10 and MAC address 1c:98:ec:25:48:50, and MM2 uses IP address 10.201.0.20 and MAC 1c:98:ec:99:8a:80. Both run VRRP process with VRID 201.

  Which configuration should the network administrator use to accomplish this task?

  A. /mm (MM1): database synchronize period 30 /mm/mynode (MM1): master-redundancy master-vrrp 201 peer-ip-address 10.201.0.20 ipsec key123 /mm/mynode (MM2): master-redundancy master-vrrp 201 peer-ip-address 10.201.0.10 ipsec key123

  B. /mm (MM1): master-redundancy master-vrrp 10 peer-ip-address 10.201.0.20 ipsec key123 database synchronize period 30 /mm/mynode (MM2): master-redundancy master-vrrp 201 peer-ip-address 10.201.0.10 ipsec key123

  C. /mm/mynode (MM1): master-redundancy master-vrrp 201 peer-ip-address 10.201.0.20 ipsec key123 database synchronize period 30 /mm/mynode (MM2): master-redundancy master-vrrp 201 peer-ip-address 10.201.0.20 ipsec key123 database synchronize period 30

  D. /mm (MM1): database synchronize period 30 /mm/mynode (MM1): master-redundancy master-vrrp 201 peer-ip-address 10.201.0.10 ipsec key123 /mm/mynode (MM2): master-redundancy master-vrrp 201 peer-ip-address 10.201.0.20 ipsec key123

  Correct Answer: C

• Question 5:

  Refer to the exhibit.

  

  A network administrator deploys a new WLAN named Corp-Network. The security suite is WPA2 with 802.1X. A new ClearPass server is used as the authentication server. Connection attempts to this WLAN are rejected, and no trace of the attempt is seen in the ClearPass Policy Manager Access Tracker. However, the network administrator is able to see the logs shown in the exhibit.

  What must the network administrator do to solve the problem?

  A. Add the correct network device IP address in ClearPass.

  B. Change the ClearPass server IP address in the MC.

  C. Fix the RADIUS shared secret in the MC.

  D. Disable machine authentication in the MC and client PC.

  Correct Answer: D

• Question 6:

  A network administrator deploys APs with radios in Air Monitor mode and detects several APs and SSIDs that belong to stores next door. The Mobility Master (MM) classifies the APs and SSIDs as potential rogues. The network administrator wants to prevent the Air Monitor from applying countermeasures against these APs.

  How can the network administrator accomplish this?

  A. Select the BSSID and click reclassify, then select neighbor.

  B. Run the Define WIP Policy task, and define the BSSIDs of the neighboring APs as interfering.

  C. Select the BSSID and click reclassify, then select interfering.

  D. Run the Define WIP Policy task, and define the BSSIDs of the neighboring APs as Authorized.

  Correct Answer: A

• Question 7:

  An airline wants to invest in an Aruba Mobility (MM)-Mobility Controller (MC) solution for the three hubs it has throughout the country. A single MM is located in the datacenter at one of the hubs. The MCs in the other two hubs reach the MM through a site-to-site IPSec VPN.

  The operations team does not want to lose monitoring and configuration control of the MCs if something happens to the datacenter where the MM resides.

  Which solution ensures that there is management access to the MCs in case of an MM failure due to a datacenter outage?

  A. Deploy another MM in a different location, and enable L2 redundancy.

  B. Install AirWave Management Platform, and enable Read and Write Management access on devices.

  C. Deploy another MM in a different location, and enable L3 redundancy.

  D. Deploy a local MM on each hub, and synchronize the configuration between all MMs.

  Correct Answer: B

• Question 8:

  A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.

  Since not all locations own public IP addresses, the security team is not able to configure strict firewall policies at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.

  What should the network administrator do to ensure the solution is functional and secure?

  A. Deploy an MC at the datacenter as a VPN concentrator.

  B. Block all ports to the MMs except UDP 500 and 4500.

  C. Install a PEFV license, and configure firewall policies that protect the MM.

  D. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.

  Correct Answer: C

• Question 9:

  Refer to the exhibit.

  

  A network administrator configures an Instant AP (IAP) to establish an Aruba IPSec tunnel across the Internet, and configures two DHCP pools for wireless users.

  Based on the output shown in the exhibit, which device behaves as a DHCP server for the users?

  A. Mobility Master

  B. Mobility Controller

  C. External server

  D. DSL modem

  E. Virtual Controller

  Correct Answer: B

• Question 10:

  Refer to the exhibit.

  

  A network administrator configures a Mobility Master (MM)-Mobility Controller (MC) solution and integrates it with AirWave. The network administrator configures the SNMP and terminal credentials in the MM and MC, and then monitors the mobility devices from AirWave, including Clarity for user association and basic network services verification. However, AirWave does not display any UCC data that is available in the MM dashboard.

  Based on the information shown in the exhibit, which configuration step should the network administrator do next in the MM to complete the integration with AirWave?

  A. Define AirWave as a management server in the MM.

  B. Enable the inline network services statistics in the AMP profile.

  C. Enable UCC monitoring in the AMP profile.

  D. Verify the papi-security key in the AMP profile.

  Correct Answer: B