HP HPE6-A71 Online Practice Questions and Exam Preparation

HP HPE6-A71 Online Questions & Answers

• Question 11:

  An administrator needs to authenticate users connected to an ArubaOS-Switch. The Aruba Mobility Controller (MC) authenticates the user and assigns user roles to wired users. Which mode should the administrator configure on the MC?

  A. Per-user tunneled node
  B. Per-port tunneled node
  C. VLAN tunneled node
  D. Split-tunneled node
  B. Per-port tunneled node

• Question 12:

  An administrator deploys Aruba Mobility Controller 7005s to a company's branch offices. The administrator wants to disable the console port to prevent unauthorized access to the controllers. Which controller command should the administrator use to implement this policy?

  A. no console enable
  B. no mgmt-user console
  C. mgmt-user console-block
  D. console disable
  C. mgmt-user console-block

• Question 13:

  Refer to the exhibit.

  

  An administrator configures a cluster with only the members shown in the exhibit. AP load balancing is enabled. There are no other cluster parameters configured. What occurs when a cluster member experiences a failure?

  A. High value sessions are synchronized.
  B. APs and clients are fully replicated.
  C. Connected users are de-authenticated
  D. APs reboot and rejoin the cluster.
  C. Connected users are de-authenticated

• Question 14:

  Refer to the exhibit.

  

  The C1 controller is connected to AP1 and AP2.

  The C2 controller is connected to AP3 and AP4.

  VLAN mobility is enabled in the VAPs of both AP Groups.

  Both C1 and C2 support the same VLANs.

  User1's wireless device supports BSS Fast Transitioning and is currently connected to AP1.

  Two Aruba Mobility Controllers (MC) are managed by a Mobility Master (MM) in a non- cluster deployment as shown in the exhibit.

  What happens if User1 roams across the network and the user's device associates to AP3?

  A. User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and re-obtain a new IP address.
  B. User1's traffic is terminated on the C2 controller, and they will not have to re- authenticate but will need to obtain a new IP address.
  C. User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and can keep their original IP address.
  D. User1's traffic is tunneled to the C1 controller, where they will not have to re- authenticate and can keep their original IP address.
  D. User1's traffic is tunneled to the C1 controller, where they will not have to re- authenticate and can keep their original IP address.

• Question 15:

  An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8.x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user. However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server.

  Which two items should the administrator verify that might be the cause of this problem? (Choose two.)

  A. Enablement of user roles on the controller
  B. Spelling of the role on the ClearPass server
  C. Server-derived role assignment on the ClearPass server
  D. Role existence on the Managed Network
  E. Order assignment that the controller uses to select a user role
  B. Spelling of the role on the ClearPass server
  D. Role existence on the Managed Network

• Question 16:

  An administrator wants to implement 802.1X authentication on Ethernet ports on branch office controllers. What must the administrator do to implement this policy?

  A. Define the port an untrusted, and assign an AAA policy to the port.
  B. Define the port as trusted, and assign an AAA policy to the port.
  C. Define the port as untrusted, and assign an AAA policy to the VLAN.
  D. Define the port as trusted, and assign an AAA policy to the VLAN.
  A. Define the port an untrusted, and assign an AAA policy to the port.

• Question 17:

  An administrator creates new pre-and post-authentication roles for a new WLAN. For which profile should the administrator assign these new roles under the Managed Network section?

  A. Server Groups
  B. Virtual AP
  C. 802.1X
  D. AAA profile
  D. AAA profile

• Question 18:

  An administrator configures the MultiZone feature for a company network, where a mobility cluster is the primary zone and a standalone controller in the company's DMZ represents a secondary data zone. The administrator configures two AP Groups and respective VAPs for the zones on the Mobility Master (MM) in the primary zone. When the APs boot up and establish connections to both zones, the administrator notices that no data connections are established to the data zone.

  What must the administrator do to fix this problem?

  A. Configure the same AP Groups and VAPs on the standalone controller, and associate the MultiZone APs to both groups.
  B. Configure the same AP Group in the data zone as it is in the primary zone, and configure the VAPs in the data zone.
  C. Have the MultiZone APs initially boot from the standalone controller in the data zone.
  D. Create different AP groups and VAPs on the Mobility Master and standalone controllers, and associate the MultiZone APs to both groups.
  B. Configure the same AP Group in the data zone as it is in the primary zone, and configure the VAPs in the data zone.

• Question 19:

  An administrator has a standalone controller that runs ArubaOS 8.x software and wants to upgrade it to a newer release. The upgrade will be performed from the front panel of the physical controller. The administrator places the new software in the root directory of a USB drive. On the controller's LCD panel, no image is found.

  What is the cause of this problem?

  A. The image must be placed in the /Upgrade subdirectory.
  B. The image must be placed in the /Images subdirectory.
  C. The image must be placed in the /ArubaImage subdirectory.
  D. The upgrade must be performed from the controller's WebUI.
  C. The image must be placed in the /ArubaImage subdirectory.

• Question 20:

  An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.

  Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?

  A. Whitelist the RAP's IP address on the MC.
  B. Define the RAP's IPSec pre-shared key in Activate.
  C. Whitelist the RAP's certificate on the MC.
  D. Configure a VPN address pool in Activate.
  C. Whitelist the RAP's certificate on the MC.