HP HPE6-A48 Online Practice Questions and Exam Preparation

HP HPE6-A48 Online Questions & Answers

• Question 31:

  A network administrator implements a SIP-based IP telephone solution. The objective is to ensure that APs use 100% of their airtime for network access whenever a voice call is taking place, to minimize communication delays. The network administrator also wants to ensure that a log entry is generated when voice calls occur.

  Which setup accomplishes these tasks?

  A. ip access-list session voice user any svc-rtsp permit log queue high user any svc-sip-udp permit log queue high
  B. ip access-list session voice user any-svc-rtsp permit disable-scanning log user any svc-sip-udp permit disable-scanning log
  C. ip access-list session voice user any svc-rtsp permit log dot1p-priority 7 user any svc-sip-udp permit log dot1p-priority 7
  D. ip access-list session voice user any svc-rtsp permit log tos 56 user any svc-sip-udp permit log tos 56
  C. ip access-list session voice user any svc-rtsp permit log dot1p-priority 7 user any svc-sip-udp permit log dot1p-priority 7

• Question 32:

  Refer to the exhibit.

  

  A network administrator deploys a multizone AP in the campus network in order to provide service for 11 SSIDs. After a few hours, the network administrator realizes that the AP is only broadcasting 5 out of the 11 SSIDs. The missing SSIDs belong to MC1 at IP address 10.254.10.114, and MC4 with IP address 10.2.100.25.

  Based on the exhibit, what should the network administrator do next to fix this problem?

  A. Confirm that AP12 is certified by the whitelist on MC1 and MC4, and confirm MC1 and MC4 are reachable by AP12.
  B. Increase the number of nodes in zones 1 and 4, and confirm MC1 and MC4 are reachable by AP12.
  C. Confirm that AP12 is certified by the whitelist on MC1 and MC4, and increase the number of nodes in zones 1 and 4.
  D. Reduce the number of nodes in zones 0 and 4, and disband the cluster in zone 0.
  D. Reduce the number of nodes in zones 0 and 4, and disband the cluster in zone 0.

• Question 33:

  Refer to the exhibit.

  

  A network administrator is validating client connectivity and executes the show command shown in the exhibit. Which authentication method was used by the wireless station?

  A. 802.1X user authentication
  B. EAP authentication
  C. 802.1X machine authentication
  D. MAC authentication
  C. 802.1X machine authentication

• Question 34:

  Refer to the exhibit.

  

  A network administrator configures a Mobility Master (MM)-Mobility Controller (MC) solution and integrates it with AirWave. The network administrator configures the SNMP and terminal credentials in the MM and MC, and then monitors the mobility devices from AirWave, including Clarity for user association and basic network services verification. However, AirWave does not display any UCC data that is available in the MM dashboard.

  Based on the information shown in the exhibit, which configuration step should the network administrator do next in the MM to complete the integration with AirWave?

  A. Define AirWave as a management server in the MM.
  B. Enable the inline network services statistics in the AMP profile.
  C. Enable UCC monitoring in the AMP profile.
  D. Verify the papi-security key in the AMP profile.
  B. Enable the inline network services statistics in the AMP profile.

• Question 35:

  Refer to the exhibits.

  Exhibit1

  

  Exhibit2

  

  A network administrator integrates a current Mobility Master (MM)-Mobility Controller (MC) deployment with a RADIUS infrastructure. After using the RADIUS server to authenticate a wireless user, the network administrator realizes that the client machine is not falling into the it_department role, as shown in the exhibits.

  Which configuration is required to map the users into the proper role, based on standard attributes returned by the RADIUS server in the Access Accept message?

  A. aaa server-group Corp-Network set role condition Filter-Id equals it-role set-value it_department
  B. aaa server-group GROUP-RADIUS set role condition Filter-Id equals it-role set-value it_department
  C. aaa server-group Corp-employee set role condition Filter-Id equals it-role set-value it_department
  D. aaa server-group Corp-employee set role condition Filter-Id value-of
  B. aaa server-group GROUP-RADIUS set role condition Filter-Id equals it-role set-value it_department

• Question 36:

  Refer to the exhibit.

  

  A network administrator wants to allow contractors to access the WLAN named EmployeesNet. In order to restrict network access, the network administrator wants to assign this category of users to the contractor firewall role.

  To do this, the network administrator configures ClearPass in a way that it returns the Aruba-User-Role VSA with the contractor value. When testing the solution the network administrator receives the wrong role.

  What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?

  A. Set contractor as the default role in the AAA profile.
  B. Create the contractor firewall role in the MC.
  C. Create server derivation rules in the server group.
  D. Check the Download role from the CPPM option in the AAA profile.
  A. Set contractor as the default role in the AAA profile.

• Question 37:

  Refer to the exhibit.

  

  A 7008 Branch Office Controller (BOC) is deployed in a remote office behind a core router. This core router does not support 802.1q encapsulation. The Mobility Controller (MC) is the gateway for two tunneling mode SSIDs, as shown in the exhibit.

  Which two different configuration options ensure that wireless users are able to reach the branch network through the router? (Select two.)

  A. Configure all ports of the BOC as access ports on the controller VLAN, and change the gateway of clients to the core router IP.
  B. Configure the uplink of the BOC as an access port on the controller VLAN, and enable NAT for the SSID VLANs.
  C. Configure the uplink of the BOC as a trunk port, tagging the controller and the SSID VLANs, and enable NAT for the SSID VLANs.
  D. Configure the uplink of the BOC as an access port on the controller VLAN, and add static router in the router for the SSID VLAN subnets.
  E. Configure the uplink of the BOC as a trunk port that permits the controller and the SSID VLANs. The controller VLAN must be native.
  B. Configure the uplink of the BOC as an access port on the controller VLAN, and enable NAT for the SSID VLANs.
  D. Configure the uplink of the BOC as an access port on the controller VLAN, and add static router in the router for the SSID VLAN subnets.

• Question 38:

  Refer to the exhibit.

  

  A network administrator evaluates a deployment to validate that users are assigned to the proper roles. Based on the output shown in the exhibit, what can the network administrator conclude?

  A. The MC assigned the machine authentication default user role.
  B. The MC assigned the role based on user-derivation rules.
  C. The MC assigned the role based on server-derivation rules.
  D. The MC assigned the default role of the authentication method.
  D. The MC assigned the default role of the authentication method.

• Question 39:

  A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.

  Since not all locations own public IP addresses, the security team is not able to configure strict firewall policies at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.

  What should the network administrator do to ensure the solution is functional and secure?

  A. Deploy an MC at the datacenter as a VPN concentrator.
  B. Block all ports to the MMs except UDP 500 and 4500.
  C. Install a PEFV license, and configure firewall policies that protect the MM.
  D. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.
  C. Install a PEFV license, and configure firewall policies that protect the MM.

• Question 40:

  Refer to the exhibit.

  

  An organization provides WiFi access through a corporate SSID with an Aruba Mobility Master (MM)-Mobility Controller (MC) network that includes PEF functions. The organization wants to have a single firewall policy configured and applied to the employee role.

  This policy must allow users to reach Web, FTP, and DNS services, as shown in the exhibit. Other services should be exclusive to other roles. The client NICs should receive IP settings dynamically.

  Which policy design meets the organization's requirements while minimizing the number of policy rules?

  A. netdestination alias1 host 10.200.0.10 host 10.200.0.20 ip access-list session policy1 user host 10.200.0.5 svc-dns permit user host 10.200.0.5 svc-http permit user alias alias1 svc-http permit user alias alias1 svc-ftp permit
  B. netdestination alias1 host 10.200.0.5 host 10.200.0.10 host 10.200.0.20 netdestination alias2 host 10.200.0.10 host 10.200.0.20 ip access-list session policy1 any any svc-dhcp permit user host 10.200.0.5 svc-dns permit user alias alias1 svc-http permit user alias alias2 svc-ftp permit
  C. netdestination alias1 host 10.200.0.10 host 10.200.0.20 ip access-list session policy1 any any svc-dhcp permit user host 10.200.0.5 svc-dns permit user host 10.200.0.5 svc-http permit user alias alias1 svc-http permit user alias alias1 svc-ftp permit
  D. netdestination alias1 host 10.200.0.5 host 10.200.0.10 host 10.200.0.20 netdestination alias2
  C. netdestination alias1 host 10.200.0.10 host 10.200.0.20 ip access-list session policy1 any any svc-dhcp permit user host 10.200.0.5 svc-dns permit user host 10.200.0.5 svc-http permit user alias alias1 svc-http permit user alias alias1 svc-ftp permit