HP HP Certifications HPE6-A44 Questions & Answers

• Question 31:

  An administrator makes a configuration change on a Mobility Master (MM) that causes a Managed Controller to lose connectivity with the MM. The MC attempts auto roll-back, but this fails.

  How should the administrator recover from this problem?

  A. Access the CLI of the MC and execute the no command to revert the changes.

  B. Access the CLI of the MC and identify the previous configuration file the MC should use.

  C. Reboot the MC to force auto-roll back to occur.

  D. Access the CLI of the MC, execute the disaster-recovery command, and undo the changes.

  Correct Answer: D

• Question 32:

  An administrator supports a RAP to a branch office. Employees at the branch office connect to an employee SSID that allows for split tunneling of the employee traffic. The RAP initially connects to the corporate office controller, but later loses connectivity to it.

  Which operating mode should the administrator configure for a secondary SSID to be advertised during the loss of connectivity?

  A. Standard

  B. Persistent

  C. Always

  D. Backup

  Correct Answer: B

  Reference: https://support.hpe.com/hpsc/doc/public/display?docId=mmr_kc-0134124

• Question 33:

  Which device can terminate to a cluster of Aruba Mobility Controllers (MCs) that run ArubaOS.8.x?

  A. BLE Beacon

  B. Mobility Master

  C. Mesh Point

  D. RAP

  Correct Answer: B

• Question 34:

  An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic. But, when users connect with their wired desktops, they are assigned an initial role and routed to a Captive Portal page.

  What must the administrator do to enable desktop usage based on the user's role assignment?

  A. Implement ACLs on the RAP port.

  B. Apply a server-derived role policy to the RAP port.

  C. Identify the RAP port as untrusted.

  D. Map the RAP port to an authentication profile.

  Correct Answer: B

• Question 35:

  An administrator wants to implement the MultiZone feature in a company's network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company's DMZ.

  What is true about the implementation of MultiZones in this scenario?

  A. The MultiZone feature must be enabled in the data zone.

  B. The primary zone maintains full control of AP management and configuration.

  C. The primary and data zones must be in the same L2 subnet.

  D. A MultiZone AP can initially connect to any zone to obtain its configuration.

  Correct Answer: A

• Question 36:

  Which VPN component must be configured on the Mobility Master (MM) to allow a RAP to use the built-in certificate to successfully connect to a Mobility Controller (MC)?

  A. IP Address pool

  B. VPN username and password

  C. IPSec pre-shared key

  D. CPSec auto-whitelist

  Correct Answer: C

• Question 37:

  An administrator moves an AP from one campus to another. However, at the second campus, the moved AP does not connect to a controller and download an AP Group configuration.

  Which process should the administrator perform to reset the AP to the initial state?

  A. From the controller's CLI, reboot the AP.

  B. From the AP's CLI apboot mode, execute a factory reset.

  C. From the controller's CLI, stop the autoboot process of the AP.

  D. From the AP's CLI, toggle POE on the AP's port.

  Correct Answer: B

• Question 38:

  An administrator wants to determine if an IPSec session is established. In order to tunnel and protect the GRE data traffic between a RAP and an Aruba Mobility Controller (MC). Which MC command provides this information?

  A. show rap-wml

  B. show tunneled-node

  C. show crypto ipsec sa

  D. show crypto isakmp sa

  Correct Answer: C

  Reference: https://community.arubanetworks.com/t5/Wireless-Access/IPsec-vs-GRE-for-APs-to-controller

  which-one-would-Aruba/td-p/269201

• Question 39:

  An administrator supports a group of engineers that commonly troubleshoot company problems from any

  location without wired connectivity. They need secure connectivity to a corporate web-based portal with

  their Android smartphones.

  Which solution should the administrator recommend to solve the engineer's connectivity problem?

  A. Deploy site-to-site VPN

  B. Deploy VIA clients

  C. Deploy Mobile Device Management

  D. Deploy Campus APs with mesh

  Correct Answer: A

• Question 40:

  An administrator implements the MultiZone feature and uses two clusters that utilize CPSec. A primary and a data zone are created. MultiZone APs successfully build sessions to the primary cluster but fail to establish sessions to the data zone cluster.

  What must the administrator do to solve this problem?

  A. Enable CPSec in the MultiZone profile for both the primary and data zone.

  B. Enable MultiZone booting in the MultiZone AP apboot configuration mode.

  C. Add the MultiZone APs to the data zone's CPSec whitelist.

  D. Use different AP Group names for the two zones.

  Correct Answer: D