HP HP Certifications HPE6-A45 Questions & Answers

• Question 111:

  Refer to the exhibit.

  

  The network administrator wants to summarize routes as much as possible in between areas. What is the correct range to specify for the router OSPF Area 2 command on Switch-2?

  A. 10.0.0.0/20

  B. 10.0.0.0/21

  C. 10.0.8.0/21

  D. 10.0.16.0/21

  Correct Answer: D

• Question 112:

  Refer to the exhibit.

  

  Several interfaces on an AOS-Switch enforce 802.1X to a Radius server at 10.254.202.202. The interface 802.1X settings are shown in the exhibit, and 802.1X is also enabled globally. The security team have added a requirement for port security on the interfaces as well.

  Before administrators enable port security, which additional step must they complete to prevent issues?

  A. Set 802.1X client limit on the interfaces.

  B. Manually add legitimate MAC addresses to the switch authorized MAC list.

  C. Enable DHCP snooping on VLAN 20.

  D. Enable eavesdropping protection on the interfaces.

  Correct Answer: C

• Question 113:

  Refer to the exhibits. Exhibit 1 Exhibit 2

  

  

  Exhibit 2 shows IGMP groups on Switch-2, which runs IGMP but not PIM. Switch-1 and Switch-3 do not have IGMP or PIM enabled. Client 1 begins to forward multicasts to 239.1.1.1.

  Which clients receive the multicasts?

  A. Client 3, but not any of the other clients

  B. Client 2, but not any of the other clients

  C. Client 3 and Client 4, but not Client 2

  D. Client 2, Client 3, and Client 4

  Correct Answer: B

• Question 114:

  A customer wants to authenticate AOS-Switch managers to a RADIUS server. The CIO wants to assign different rights to different management users for granular control over their rights and privileges.

  What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

  A. RADIUS-based command authorization

  B. a manager and operator password

  C. authentication login privileges

  D. SNMPv3 and SNMPv3 restricted access.

  Correct Answer: C

• Question 115:

  AOS-Switches authenticate guests to ClearPass with captive portal. An administrator notices that some guests are unable to reach the captive portal page.

  What will resolve this issue?

  A. Permit DNS on the ClearPass Portal

  B. Permit DHCP on the ClearPass Portal.

  C. Permit HTTP or HTTPS on the ClearPass Portal.

  D. Permit Allow All MAC-Auth on the ClearPass Portal.

  Correct Answer: A

• Question 116:

  A company wants to implement 802.1X authentication to authenticate client devices on AOS-Switch ports. The company has a RADIUS server that uses PEAP MSCHAP-v2 for the authentication method.

  What is one task administrators should complete before they implement the plan?

  A. Set up an isolated VLAN in the network for the 802.1X communications.

  B. Install personal certificates on client devices.

  C. Configure DHCP services on the AOS-Switches for pre-authenticated clients.

  D. Ensure client devices trust the RADIUS server certificate.

  Correct Answer: D

• Question 117:

  Refer to the exhibits.

  

  Exhibit 2

  

  The network administrator configures the commands shown in Exhibit 2. Which mismatch will cause an issue?

  A. the mismatch between the key IDs specified in chain10 and chain11 on Switch-1

  B. the mismatch between the key-strings in the chains for VLAN 10 and VLAN 11 on Switch-1

  C. the mismatch between the chain names associated with VLAN 11 on Switch-1 and on Switch-3

  D. the mismatch between the key-strings associated with VLAN 10 on Switch-1 and on Switch-2

  Correct Answer: D

• Question 118:

  Refer to the exhibits. Exhibit 1 Exhibit 2

  

  

  A company does not require authentication for security, but AOS-Switches are set up to use local MAC authentication (LMA) to assign the correct VLAN and priority to IP phones. IP phones and computers belong to different VLANs. Each device is supposed to connect to a specific port, but sometimes users connect their devices to the wrong ports and cannot receive access without help from IT.

  How can a network administrator configure the switches to eliminate this issue?

  A. Set the address limit to 2 on the switch ports that apply LMA.

  B. Create a user role that applies the user VLAN, and set this role as the initial role.

  C. Add the MAC addresses for computers to the myPhones MAC group.

  D. Apply LMA to all edge switch ports, and set the unauth VLAN to the user VLAN.

  Correct Answer: C

• Question 119:

  Which technologies can prevent split brain in a VSF fabric that includes Aruba 2930F switches?

  A. ARP MAD or OOBM MAD

  B. VLAN MAD or ARP MAD

  C. OOBM MAD or LLDP MAD

  D. LLDP MAD or VLAN MAD

  Correct Answer: C

• Question 120:

  An AOS-Switch is configured to use captive portal and RADIUS to integrate with an Aruba ClearPass solution.

  What should the administrator do to enable the switch to accept change of authorization (CoA) messages from ClearPass?

  A. Enable user-role authorization globally on the switch.

  B. Enable dynamic authorization in the RADIUS server settings.

  C. Enable tunneled node in role-based mode.

  D. Enable login privilege globally on the switch.

  Correct Answer: B