Preview real exam questions, verified answers and available explanations before choosing a study plan.
Question 1
Single choice
Which statement about in-band management is true?
A
It is more complex to implement than out-of-band management.
B
It provides better security and reliability than out-of-band management.
C
It shares the same network path as user data.
D
It can still be used if the main network is down.
Reveal answer detailsClose answer details
Correct answerC
Explanation
In-band management uses the same production network path that carries user or data traffic. Out-of-band management uses a separate management path, which is why it can remain reachable during some production-network failures and is often preferred for resiliency.
Question 2
Single choice
A network is configured with two HPE Aruba Networking 2930F switches as the aggregation layer. Each 2930F switch has ten connections. The network has twenty HPE Aruba Networking 2530 access switches connected to both aggregation switches with 1 Gb RJ45 links. Your task is to replace the aggregation switches with HPE Aruba Networking CX 6200 models. In this scenario, which configuration would provide redundancy using two ports on the access switches to the aggregation layer?
A
Create a single VSF domain for the CX 6200 and 2530 switches.
B
Create VSF on the CX 6200 switches and use stacking with the 2530 switches.
C
Create a LAG on the 2530 switches to connect to both CX 6200 switches.
D
Create VSF on the CX 6200 switches and a LAG between the CX 6200 and 2530 switches.
Reveal answer detailsClose answer details
Correct answerD
Explanation
Using VSF on the two CX 6200 aggregation switches lets them operate as one logical aggregation point, and a LAG from each access switch provides redundant uplinks. A single VSF domain cannot include the older access switches, and a LAG to two independent switches would not be valid without the aggregation pair acting as one logical system.
Question 3
Single choice
What does the acronym AAA stand for?
A
Aruba Authentication Algorithm
B
Authentication, Authorization, and Accounting
C
Access Acceptance Attributes
D
Authorization, Accessibility, and Accountability
Reveal answer detailsClose answer details
Correct answerB
Explanation
AAA stands for Authentication, Authorization, and Accounting. Authentication verifies identity, authorization determines permitted actions, and accounting records activity. The other expansions are not the standard network security meaning of AAA.
Question 4
Single choice
During initial switch setup, an administrator wants secure remote CLI access rather than clear-text terminal access.
Which management approach is preferred?
A
SSH
B
Telnet
C
TFTP
D
SNMPv2 polling only
Reveal answer detailsClose answer details
Correct answerA
Explanation
SSH is the secure remote CLI method because it encrypts the management session. Telnet is clear text, TFTP is a file-transfer protocol, and SNMPv2 polling is for monitoring rather than secure interactive CLI access.
Question 5
Single choice
With HPE Aruba Networking CX switches, which key feature is a fundamental concept of Zero Trust Security and SASE frameworks?
A
Virtual Switching Framework
B
Virtual Switching Extension
C
Network Analytics Engine
D
Dynamic Segmentation
Reveal answer detailsClose answer details
Correct answerD
Explanation
Dynamic Segmentation is the Aruba feature aligned with Zero Trust and SASE concepts because it applies role-based access and consistent policy segmentation. VSF and VSX are switching resiliency technologies, while NAE is an analytics feature.
Question 6
Single choice
Which command is appropriate when an administrator needs to verify the switch make, model, and serial number from the CLI?
A
show system
B
show arp
C
show vlan summary
D
show spanning-tree
Reveal answer detailsClose answer details
Correct answerA
Explanation
show system is the appropriate command for displaying switch identity details such as make, model, and serial number. ARP, VLAN, and spanning tree commands report forwarding or Layer 2 state rather than overall system identity.
Question 7
Single choice
Which statement about Flash memory is true?
A
Additional Flash can be added to increase available storage space.
B
It contains the configuration used when the device is running.
C
The contents of Flash survive when a device reboots or powers down.
D
The command show running-config can view the configuration stored in Flash.
Reveal answer detailsClose answer details
Correct answerC
Explanation
Flash memory is nonvolatile, so its contents survive a reboot or power loss. Running configuration is held in active memory, and show running-config displays the active configuration rather than the stored startup configuration in flash.
Question 8
Single choice
Why would a device perform an ARP request?
A
To find the source IP address for a specific MAC address.
B
To find the destination MAC address for a specific IP address.
C
To find the source MAC address for a specific IP address.
D
To find the IP address for a specific MAC address.
Reveal answer detailsClose answer details
Correct answerB
Explanation
ARP is used when a device knows the destination IP address but needs the destination MAC address for local Ethernet delivery. It does not discover a source address, and it does not map a MAC address back to an IP address in this normal forwarding case.
Question 9
Multiple choice
Which two protocols are commonly associated with remote management or monitoring of network devices?
A
SNMP
B
Telnet
C
ARP
D
STP
Reveal answer detailsClose answer details
Correct answersA, B
Explanation
SNMP is used for network monitoring and management, and Telnet is a remote terminal management protocol. ARP supports local address resolution, and STP is a Layer 2 loop-prevention protocol rather than an administrative access or monitoring protocol.
Question 10
Single choice
An HPE Aruba Networking CX switch interface has a connected cable, but the port remains administratively disabled after default setup.
Which command action is normally required on the interface?
A
Issue no shutdown.
B
Issue clear arp.
C
Issue show system.
D
Issue write memory only.
Reveal answer detailsClose answer details
Correct answerA
Explanation
The no shutdown command administratively enables the switch interface. Clearing ARP does not alter port state, show system only displays platform information, and saving configuration alone does not bring a disabled port online.
Question 11
Single choice
A four-member HPE Aruba Networking CX 6200F VSF configuration is being planned to replace the current 5412R switch.
The customer has an open-source network management solution and requires an answer to how they can monitor the switch stack.
Which statement correctly describes how SNMP operates in an Aruba CX VSF stack?
A
The SNMP service must be enabled on the mgmt VRF for each VSF member for queries.
B
The SNMP service on the Conductor switch will respond to all SNMP queries for the stack.
C
The SNMP service will be enabled by default for each member's OOBM port for queries.
D
The SNMP service will respond to queries and stack them on both Conductor and Standby members.
Reveal answer detailsClose answer details
Correct answerB
Explanation
In a CX VSF stack, the conductor represents the stack for management functions such as SNMP queries. Individual members do not each independently answer as separate managed switches for normal stack management queries.
Question 12
Single choice
You are testing a Captive Portal for wired guest access and are seeing the self-signed certificate warning below.
Which statement is true?
A
A public CA signed certificate should be deployed.
B
HTTPS should be disabled, and HTTP should be used instead.
C
The self-signed CA should be imported into the trust store.
D
An enterprise CA signed certificate should be deployed.
Reveal answer detailsClose answer details
Correct answerA
Explanation
A captive portal presented to guests should use a certificate signed by a public CA so unmanaged client devices trust it without manual certificate installation. Disabling HTTPS weakens security, and importing a private or self-signed certificate is not practical for general guest users.
Question 13
Single choice
A customer requires a network upgrade to replace their existing access switches. The new solution must support 25G speeds to the aggregation layer, with a maximum physical space of 1U, and it must be a fixed switch solution.
Which HPE Aruba Networking CX switch model would you initially propose?
A
CX 6300
B
CX 6400
C
CX 6100
D
CX 6200
Reveal answer detailsClose answer details
Correct answerA
Explanation
The CX 6300 is the appropriate fixed access switch family for high-speed uplink needs such as 25G in a 1U form factor. The CX 6400 is a chassis, while CX 6100 and CX 6200 do not match the same high-speed fixed-switch requirement in this question.
Question 14
Drag & drop
DRAG DROP
Match the device stacking or clustering feature to the correct HPE Aruba Networking CX switch series when selecting a switch family for a use case where device failure needs to be protected by using HPE Aruba Networking OS capabilities. Matches may be used more than once.
Reveal answer detailsClose answer details
Explanation
CX 6200 = VSF - 8 members; CX 8100 = VSX; CX 6100 = None; CX 6300 = VSF - 10 members; CX4100 = None. VSF and VSX are different high-availability approaches across Aruba CX families. CX 6200 supports VSF with up to 8 members, CX 6300 supports VSF with up to 10 members, and CX 8100 uses VSX rather than VSF. CX 6100 and CX 4100 do not provide the listed stacking or clustering feature.
Question 15
Single choice
A retail store chain customer is replacing 1,496 AOS-S switches with HPE Aruba Networking CX 6000 switches.
The customer is interested in using ZTP to provision the new switches.
However, they are concerned about when the switch starts the ZTP process and whether ZTP may change configurations on switches that are already deployed.
What would address this concern?
A
If the ZTP operation detects that the DHCP option provided by the TFTP server already has the switch serial number assigned as a configuration file, the ZTP operation ends.
B
If the ZTP operation detects that the switch has already been added to HPE Aruba Networking Central, the ZTP operation ends.
C
If the ZTP operation detects that ztp force-provisioning is set, software and configuration are automatically deployed, and the ZTP operation starts.
D
If the ZTP operation detects that the switch configuration is different from the factory-default configuration, the ZTP operation ends.
Reveal answer detailsClose answer details
Correct answerD
Explanation
ZTP is intended for factory-default devices. If the switch detects that its configuration is no longer factory default, the ZTP process stops so it does not overwrite an already deployed device. This prevents unintended reprovisioning in production.
Question 16
Single choice
Users complain about poor call quality when using Microsoft Teams when the network is busy.
Which feature should you configure to address the issue?
A
CoS
B
ZIP
C
IGMP
D
QoS
Reveal answer detailsClose answer details
Correct answerD
Explanation
QoS is used to classify and prioritize latency-sensitive traffic such as voice and collaboration traffic when congestion occurs. CoS can be one marking mechanism, but QoS is the broader feature used to address poor call quality. IGMP and ZIP do not prioritize Teams media flows.
Question 17
Single choice
Which statement is true when creating VLANs on an HPE Aruba Networking CX switch?
A
A VLAN range can be created with a syntax of: vlan 100:110
B
A VLAN range can be created with a syntax of: vlan 100-110
C
A newly created VLAN needs to be enabled with a command: vlan 100 enable
D
A newly created VLAN needs to be enabled with a command: vlan 100 no shutdown
Reveal answer detailsClose answer details
Correct answerB
Explanation
AOS-CX supports VLAN range creation with hyphen syntax, such as vlan 100-110. Colon syntax is not the expected range form, and newly created VLANs do not require the listed enable or no shutdown commands in this context.
Question 18
Single choice
You have access to the CLI of an HPE Aruba Networking CX switch.
How can you output the switch make, model, and serial number displayed on the session?
A
Issue command: show support-information
B
Issue command: diag dump basic
C
Issue command: show configuration
D
Issue command: show system
Reveal answer detailsClose answer details
Correct answerD
Explanation
The show system command displays platform identity information such as make, model, and serial number. show support-information is broader support output, show configuration displays configuration, and diagnostic dump commands are not the normal quick identity command.
It is more complex to implement than out-of-band management.
B.
It provides better security and reliability than out-of-band management.
C.
It shares the same network path as user data.
D.
It can still be used if the main network is down.
Correct Answer: C
Explanation
Explanation/Reference:
In-band management uses the same production network path that carries user or data traffic. Out-of-band management uses a separate management path, which is why it can remain reachable during some production-network failures and is often preferred for resiliency.
QUESTION 2
A network is configured with two HPE Aruba Networking 2930F switches as the aggregation layer. Each 2930F switch has ten connections. The network has twenty HPE Aruba Networking 2530 access switches connected to both aggregation switches with 1 Gb RJ45 links. Your task is to replace the aggregation switches with HPE Aruba Networking CX 6200 models. In this scenario, which configuration would provide redundancy using two ports on the access switches to the aggregation layer?
A.
Create a single VSF domain for the CX 6200 and 2530 switches.
B.
Create VSF on the CX 6200 switches and use stacking with the 2530 switches.
C.
Create a LAG on the 2530 switches to connect to both CX 6200 switches.
D.
Create VSF on the CX 6200 switches and a LAG between the CX 6200 and 2530 switches.
Correct Answer: D
Explanation
Explanation/Reference:
Using VSF on the two CX 6200 aggregation switches lets them operate as one logical aggregation point, and a LAG from each access switch provides redundant uplinks. A single VSF domain cannot include the older access switches, and a LAG to two independent switches would not be valid without the aggregation pair acting as one logical system.
QUESTION 3
What does the acronym AAA stand for?
A.
Aruba Authentication Algorithm
B.
Authentication, Authorization, and Accounting
C.
Access Acceptance Attributes
D.
Authorization, Accessibility, and Accountability
Correct Answer: B
Explanation
Explanation/Reference:
AAA stands for Authentication, Authorization, and Accounting. Authentication verifies identity, authorization determines permitted actions, and accounting records activity. The other expansions are not the standard network security meaning of AAA.
QUESTION 4
During initial switch setup, an administrator wants secure remote CLI access rather than clear-text terminal access.
Which management approach is preferred?
A.
SSH
B.
Telnet
C.
TFTP
D.
SNMPv2 polling only
Correct Answer: A
Explanation
Explanation/Reference:
SSH is the secure remote CLI method because it encrypts the management session. Telnet is clear text, TFTP is a file-transfer protocol, and SNMPv2 polling is for monitoring rather than secure interactive CLI access.
QUESTION 5
With HPE Aruba Networking CX switches, which key feature is a fundamental concept of Zero Trust Security and SASE frameworks?
A.
Virtual Switching Framework
B.
Virtual Switching Extension
C.
Network Analytics Engine
D.
Dynamic Segmentation
Correct Answer: D
Explanation
Explanation/Reference:
Dynamic Segmentation is the Aruba feature aligned with Zero Trust and SASE concepts because it applies role-based access and consistent policy segmentation. VSF and VSX are switching resiliency technologies, while NAE is an analytics feature.
QUESTION 6
Which command is appropriate when an administrator needs to verify the switch make, model, and serial number from the CLI?
A.
show system
B.
show arp
C.
show vlan summary
D.
show spanning-tree
Correct Answer: A
Explanation
Explanation/Reference:
show system is the appropriate command for displaying switch identity details such as make, model, and serial number. ARP, VLAN, and spanning tree commands report forwarding or Layer 2 state rather than overall system identity.
QUESTION 7
Which statement about Flash memory is true?
A.
Additional Flash can be added to increase available storage space.
B.
It contains the configuration used when the device is running.
C.
The contents of Flash survive when a device reboots or powers down.
D.
The command show running-config can view the configuration stored in Flash.
Correct Answer: C
Explanation
Explanation/Reference:
Flash memory is nonvolatile, so its contents survive a reboot or power loss. Running configuration is held in active memory, and show running-config displays the active configuration rather than the stored startup configuration in flash.
QUESTION 8
Why would a device perform an ARP request?
A.
To find the source IP address for a specific MAC address.
B.
To find the destination MAC address for a specific IP address.
C.
To find the source MAC address for a specific IP address.
D.
To find the IP address for a specific MAC address.
Correct Answer: B
Explanation
Explanation/Reference:
ARP is used when a device knows the destination IP address but needs the destination MAC address for local Ethernet delivery. It does not discover a source address, and it does not map a MAC address back to an IP address in this normal forwarding case.
QUESTION 9
Which two protocols are commonly associated with remote management or monitoring of network devices?
A.
SNMP
B.
Telnet
C.
ARP
D.
STP
Correct Answer: AB
Explanation
Explanation/Reference:
SNMP is used for network monitoring and management, and Telnet is a remote terminal management protocol. ARP supports local address resolution, and STP is a Layer 2 loop-prevention protocol rather than an administrative access or monitoring protocol.
QUESTION 10
An HPE Aruba Networking CX switch interface has a connected cable, but the port remains administratively disabled after default setup.
Which command action is normally required on the interface?
A.
Issue no shutdown.
B.
Issue clear arp.
C.
Issue show system.
D.
Issue write memory only.
Correct Answer: A
Explanation
Explanation/Reference:
The no shutdown command administratively enables the switch interface. Clearing ARP does not alter port state, show system only displays platform information, and saving configuration alone does not bring a disabled port online.
QUESTION 11
A four-member HPE Aruba Networking CX 6200F VSF configuration is being planned to replace the current 5412R switch.
The customer has an open-source network management solution and requires an answer to how they can monitor the switch stack.
Which statement correctly describes how SNMP operates in an Aruba CX VSF stack?
A.
The SNMP service must be enabled on the mgmt VRF for each VSF member for queries.
B.
The SNMP service on the Conductor switch will respond to all SNMP queries for the stack.
C.
The SNMP service will be enabled by default for each member's OOBM port for queries.
D.
The SNMP service will respond to queries and stack them on both Conductor and Standby members.
Correct Answer: B
Explanation
Explanation/Reference:
In a CX VSF stack, the conductor represents the stack for management functions such as SNMP queries. Individual members do not each independently answer as separate managed switches for normal stack management queries.
QUESTION 12
You are testing a Captive Portal for wired guest access and are seeing the self-signed certificate warning below.
Which statement is true?
A.
A public CA signed certificate should be deployed.
B.
HTTPS should be disabled, and HTTP should be used instead.
C.
The self-signed CA should be imported into the trust store.
D.
An enterprise CA signed certificate should be deployed.
Correct Answer: A
Explanation
Explanation/Reference:
A captive portal presented to guests should use a certificate signed by a public CA so unmanaged client devices trust it without manual certificate installation. Disabling HTTPS weakens security, and importing a private or self-signed certificate is not practical for general guest users.
QUESTION 13
A customer requires a network upgrade to replace their existing access switches. The new solution must support 25G speeds to the aggregation layer, with a maximum physical space of 1U, and it must be a fixed switch solution.
Which HPE Aruba Networking CX switch model would you initially propose?
A.
CX 6300
B.
CX 6400
C.
CX 6100
D.
CX 6200
Correct Answer: A
Explanation
Explanation/Reference:
The CX 6300 is the appropriate fixed access switch family for high-speed uplink needs such as 25G in a 1U form factor. The CX 6400 is a chassis, while CX 6100 and CX 6200 do not match the same high-speed fixed-switch requirement in this question.
QUESTION 14
DRAG DROP
Match the device stacking or clustering feature to the correct HPE Aruba Networking CX switch series when selecting a switch family for a use case where device failure needs to be protected by using HPE Aruba Networking OS capabilities. Matches may be used more than once.
Correct Answer:
Explanation
Explanation/Reference:
CX 6200 = VSF - 8 members; CX 8100 = VSX; CX 6100 = None; CX 6300 = VSF - 10 members; CX4100 = None. VSF and VSX are different high-availability approaches across Aruba CX families. CX 6200 supports VSF with up to 8 members, CX 6300 supports VSF with up to 10 members, and CX 8100 uses VSX rather than VSF. CX 6100 and CX 4100 do not provide the listed stacking or clustering feature.
QUESTION 15
A retail store chain customer is replacing 1,496 AOS-S switches with HPE Aruba Networking CX 6000 switches.
The customer is interested in using ZTP to provision the new switches.
However, they are concerned about when the switch starts the ZTP process and whether ZTP may change configurations on switches that are already deployed.
What would address this concern?
A.
If the ZTP operation detects that the DHCP option provided by the TFTP server already has the switch serial number assigned as a configuration file, the ZTP operation ends.
B.
If the ZTP operation detects that the switch has already been added to HPE Aruba Networking Central, the ZTP operation ends.
C.
If the ZTP operation detects that ztp force-provisioning is set, software and configuration are automatically deployed, and the ZTP operation starts.
D.
If the ZTP operation detects that the switch configuration is different from the factory-default configuration, the ZTP operation ends.
Correct Answer: D
Explanation
Explanation/Reference:
ZTP is intended for factory-default devices. If the switch detects that its configuration is no longer factory default, the ZTP process stops so it does not overwrite an already deployed device. This prevents unintended reprovisioning in production.
QUESTION 16
Users complain about poor call quality when using Microsoft Teams when the network is busy.
Which feature should you configure to address the issue?
A.
CoS
B.
ZIP
C.
IGMP
D.
QoS
Correct Answer: D
Explanation
Explanation/Reference:
QoS is used to classify and prioritize latency-sensitive traffic such as voice and collaboration traffic when congestion occurs. CoS can be one marking mechanism, but QoS is the broader feature used to address poor call quality. IGMP and ZIP do not prioritize Teams media flows.
QUESTION 17
Which statement is true when creating VLANs on an HPE Aruba Networking CX switch?
A.
A VLAN range can be created with a syntax of: vlan 100:110
B.
A VLAN range can be created with a syntax of: vlan 100-110
C.
A newly created VLAN needs to be enabled with a command: vlan 100 enable
D.
A newly created VLAN needs to be enabled with a command: vlan 100 no shutdown
Correct Answer: B
Explanation
Explanation/Reference:
AOS-CX supports VLAN range creation with hyphen syntax, such as vlan 100-110. Colon syntax is not the expected range form, and newly created VLANs do not require the listed enable or no shutdown commands in this context.
QUESTION 18
You have access to the CLI of an HPE Aruba Networking CX switch.
How can you output the switch make, model, and serial number displayed on the session?
A.
Issue command: show support-information
B.
Issue command: diag dump basic
C.
Issue command: show configuration
D.
Issue command: show system
Correct Answer: D
Explanation
Explanation/Reference:
The show system command displays platform identity information such as make, model, and serial number. show support-information is broader support output, show configuration displays configuration, and diagnostic dump commands are not the normal quick identity command.