HP Aruba Certified Edge Professional (ACEP) HPE6-A75 Questions & Answers

• Question 1:

  Refer to the exhibits.

  

  

  The network administrator enters the commands shown in Exhibit 2. What is the spanning tree status on Al and A2?

  A. A1 towards traffic, and A2 blocks traffic.

  B. Both Al and A2 block traffic.

  C. A1 blocks traffic, and A2 forwards traffic.

  D. Both A1 and A2 forward traffic

  Correct Answer: D

• Question 2:

  Why is a terminate session enforcement profile used during posture checks with 802.1 x authentication?

  A. To send a RADIUS CoA message from the ClearPass server to the client

  B. To disconnect the user for 30 seconds when they are in an unhealthy posture state

  C. To blacklist the user when they are in an unhealthy posture state

  D. To force the user to re-authenticate and run through the service flow again

  E. To remediate the client applications and firewall do that updates can be installed

  Correct Answer: A

• Question 3:

  Refer to the exhibit.

  

  When configuring a Web Login Page in ClearPass Guest, the information shown is displayed. What is the Address field value 'securelogin.arubanetworks.com' used for?

  A. for ClearPass to send a TACACS+ request to the NAD

  B. for appending to the Web Login URL, before the page name

  C. for the client to POST the user credentials to the NAD

  D. for ClearPass to send a RADIUS request to the NAD

  E. for appending to the Web Login URL, after the page name.

  Correct Answer: C

• Question 4:

  A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.

  Which statements accurately describe next steps? (Select two.)

  A. The NAD should be configured with the primary node IP address for RADIUS authentication on the 802.1x network.

  B. A new Virtual IP address should be created for each NAD.

  C. Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

  D. The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

  E. The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

  Correct Answer: DE

• Question 5:

  A company has AOS-Switches deployed at sites with inexperienced IT staff. The main office network

  administrators want to track if configurations change on branch switches.

  What should be set up for this purpose?

  A. an SNMP trap

  B. an RMON alarm

  C. an auto-config server

  D. an lP SLA profile

  Correct Answer: A

• Question 6:

  Refer to the exhibit.

  

  The network administrator wants to reduce failover time If a switch link m VIAN 100 goes down. What should the administrator do?

  A. Configure echo mode BFD on VLAN 100 on all OSPF routing devices on VLAN 100.

  B. Lower the dead timer on the BDR of VLAN 100.

  C. Lower the hello timer only on the BDR of VLAN 100.

  D. Configure graceful restart on all of the OSPF routing devices on VLAN 100.

  Correct Answer: A

• Question 7:

  An administrator deploys Aruba Mobility Controller 7005s to a company's branch offices. The administrator wants to disable the console port to prevent unauthorized access to the controllers.

  Which controller command should the administrator use to implement this policy?

  A. no console enable

  B. no mgmt-user console

  C. mgmt-user console-block

  D. console disable

  Correct Answer: C

• Question 8:

  Which ArubaOS CLl command can an administrator execute to determine if AP load balancing is enabled in a cluster?

  A. show switches

  B. show lc-cluster group-membership

  C. show aaa cluster essid

  D. show ap active

  Correct Answer: B

• Question 9:

  An administrator wants to implement bandwidth limits for guest users to restrict their Internet usage. On the Mobility Master (MM), where would the administrator define these limits?

  A. User role

  B. Firewall policy

  C. AAA policy

  D. 802.1X policy

  Correct Answer: B

• Question 10:

  Refer to the exhibit.

  

  Based on the Enforcement Policy configuration, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?

  A. EMPLOYEE_VLAN

  B. RestrictedACL

  C. Deny Access Profile

  D. HR VLAN

  E. Remote Employee ACL

  Correct Answer: C