HP HPE6-A71 Online Practice Questions and Exam Preparation

HP HPE6-A71 Online Questions & Answers

• Question 131:

  An administrator configures an ArubaOS switch for per-user tunneled node. Which protocol does the switch use to communicate with the Aruba Mobility Controller (MC)?

  A. GRE
  B. SSL
  C. PAPI
  D. IPSec
  A. GRE

• Question 132:

  When an administrator manually adds a Mobility Controller (MC) on the Mobility Master (MM) hierarchy, which parameters must be specified? (Select three.)

  A. IP address
  B. Device type
  C. MAC address
  D. Hostname
  E. Serial number
  B. Device type
  C. MAC address
  D. Hostname

• Question 133:

  In a VPN that uses certificate-based authentication, which component must be configured on the Mobility Master (MM) to allow a RAP to successfully connect to a Mobility Controller (MC)?

  A. RAP VPN username and password
  B. WLAN and new RAP group
  C. RAP IPSec pre-shared key
  D. RAP whitelist
  D. RAP whitelist

• Question 134:

  Refer to the exhibits.

  Exhibit 1: WLAN VAP configuration

  

  Exhibit 2: Microsoft NPS server configuration

  

  Exhibit 3: Server group configuration for the VAP.

  

  An employee authenticates with the username employee and the correct password. However, once the user authenticates, an administrator notices that the employee is assigned the authenticated role and not the desired employee role. What should the administrator do to solve this problem?

  A. Add a new server group rule on the controller.
  B. Associate the user to the employee group in Microsoft NPS.
  C. Change the server group name on the controller.
  D. Reference the employee role in the WLAN VAP on the controller.
  A. Add a new server group rule on the controller.

• Question 135:

  An administrator supports a RAP to a branch office. Employees at the branch office connect to an employee SSID that allows for split tunneling of the employee traffic. The RAP initially connects to the corporate office controller, but later loses

  connectivity to it.

  Which operating mode should the administrator configure for a secondary SSID to be advertised during the loss of connectivity?

  A. Standard
  B. Persistent
  C. Always
  D. Backup
  D. Backup

• Question 136:

  An administrator mistakenly configures the wrong VLAN setting on a managed controller's interface. This causes the controller to lose management access to the Mobility Master (MM). The administrator knows that the auto roll-back feature will revert the managed controller to a previous configuration that was used prior to the change.

  Which command can the administrator use to validate that the rollback process is successful?

  A. show debug
  B. show switches
  C. show config status
  D. show controller-ip
  B. show switches

• Question 137:

  A group of users on the same floor of a campus residence experience connectivity problems continuously throughout the morning. The administrator suspects that it is a L1 problem with physical interference. What can the administrator do to find the cause of this problem?

  A. Access a controller's spectrum analysis data directly from AirWave with Quick Links.
  B. Access RAPIDS data from AirWave's RAPIDS section.
  C. Access RAPIDS data from AirWave's dashboards, under Home.
  D. Access a controller's spectrum analysis data from AirWave's dashboards, under Home.
  A. Access a controller's spectrum analysis data directly from AirWave with Quick Links.

• Question 138:

  An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic. But, when users connect with their wired desktops, they have full access to corporate resources.

  What must the administrator do to restrict desktop usage based on the users' role assignment?

  A. Apply a server-derived role privacy to the RAP port.
  B. Identify the RAP port as untrusted.
  C. Implement ACLs on the RAP port.
  D. Implement per-user tunnel node on the RAP.
  B. Identify the RAP port as untrusted.

• Question 139:

  An administrator needs to authenticate users connected to an ArubaOS-Switch where the switch authenticates the user, assign the firewall policies to the user, and processes some of the users' traffic. Which connection method should the administrator configure on the ArubaOS-Switch?

  A. Per-user tunneled node
  B. Per-port tunneled node
  C. VLAN tunneled mode
  D. Split-tunneled mode
  A. Per-user tunneled node

• Question 140:

  An administrator sets up a firewall policy that implements split-tunneling for RAPs. Which firewall rule action should the administrator specify for traffic that the RAP should forward directly to the Internet?

  A. split-tunnel
  B. route:src-nat
  C. route:dst-nat
  D. permit
  B. route:src-nat