HP HP Certifications HPE6-A45 Questions & Answers

• Question 61:

  Refer to the exhibit.

  

  Both Switch-1 and Switch-2 redistribute RIP routes into OSPF. The network administrator wants routers in Area 1 to receive the redistributed routes from Switch-1 but not from Switch-2.

  What should the administrator do to achieve this goal?

  A. Configure Area 1 as a stub area, with no summaries on Switch-2.

  B. Configure Area 1 as a stub area, and import the routes with a low metric on Switch-2.

  C. Configure Area 1 as a Not So Stubby Area (NSSA) on all routing devices in Area 1.

  D. Configure a subnet range for Area 1 on Switch-2, and set the no-advertise option.

  Correct Answer: C

• Question 62:

  A network administrator needs to configure PIM across several AOS-Switches in the same routing domain.

  What correctly describes how they can implement PIM modes?

  A. Switches at the network edge should run PIM-SM, while switches at the network core should run PIMDM.

  B. All switches must use PIM-DM only or all switches must use PIM-SM only for the solution to work.

  C. Different interfaces on the same switch can run in different modes, but the mode must match the neighbor.

  D. Switches at the network core should run PIM-DM, while switches at the network edge should run PIMSM.

  Correct Answer: B

• Question 63:

  What is the purpose of the captive portal URL hash key on an AOS-Switch?

  A. It specifies the captive portal URL and conceals the setting in the config.

  B. It authenticates guest users based on the password the users enter in the portal.

  C. It does not let users alter the URL that redirects them to the portal.

  D. It encrypts and secures the RADIUS messages that the AOS-Switch sends to ClearPass.

  Correct Answer: C

• Question 64:

  Network administrators need to inspect all traffic that arrives on an AOS-Switch in VLAN 2 and is destined to TCP ports 50000-50010. They want to send the traffic to a protocol analyzer connected to the switch for deeper inspection.

  What else must they create to achieve their goal?

  A. an extended IP ACL that selects the TCP traffic, apply the ACL to interfaces VLAN 2, and specify interfaces in VLAN 2 as monitor ports

  B. a traffic class that selects the TCP traffic, map the class to the mirror session in a policy to VLAN 2

  C. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer

  D. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer

  E. an extended IP ACL that selects the TCP traffic, apply the ACL to the mirror session, and specify interfaces in VLAN 2 as monitor ports

  Correct Answer: B

• Question 65:

  Network administrators want to gain insight into network utilization, traffic patterns, and the types of applications in use across the network over the long term.

  Which technology can help them achieve this goal?

  A. RMON

  B. sFlow

  C. SNMP traps

  D. DiffServ

  Correct Answer: B

• Question 66:

  Refer to the exhibit.

  

  AOS-Switches will enforce 802.1X authentication on edge ports. The company has two RADIUS servers, which are meant to provide redundancy and load sharing of requests. The exhibit shows the planned RADIUS setting to deploy to the switches.

  Which adjustment to the plan should administrators make in order to meet the customers' requirements?

  A. Remove the dynamic authorization setting for both RADIUS servers.

  B. Specify a different RADIUS dynamic authorization port for each of the RADIUS servers.

  C. Specify one server on half of the switches and the other server on the other half of the switches.

  D. Change the order in which the RADIUS servers are specified on half of the switches.

  Correct Answer: D

• Question 67:

  What is a reason to implement port security on an AOS-Switch?

  A. to simplify provisioning for devices such as IP phones or printers

  B. to enhance the security of an 802.1X solution

  C. to filter traffic at the edge, based on multiple criteria in the MAC header

  D. to control management access to the switch CLI based on device, as well as user credentials

  Correct Answer: B

  Reference: http://h22208.www2.hpe.com/eginfolib/networking/docs/switches/WB/15-18/59988152_wb_2920_asg/content/ch14s02.html

• Question 68:

  Refer to the exhibit.

  

  An administrator created a backplane stack with the plug-and-play method, and did not alter the default backplane stacking settings. Later, two backplane stacking links failed, as shown in the exhibit.

  What happens to the backplane stack after the failures?

  A. The standby becomes the commander of its fragment, which remains active. The fragment with the commander becomes inactive.

  B. The fragment that contains the commander operates at Layer 2 and layer 3, and the other fragment operates at layer 2 only.

  C. The fragment that contains the commander remains active, and the fragment with the standby member is disabled.

  D. The standby becomes the commander of its fragment. Both fragments remain active and operate at both Layer 2 and Layer 3.

  Correct Answer: D

  Reference: http://h22208.www2.hpe.com/eginfolib/networking/docs/switches/WB/15-18/59988156_wb_2926_atmg/content/ch06s02.html

• Question 69:

  A customer wants to authenticate AOS-Switch managers to a RADIUS server. Managers should be assigned either read-only or full read-write level access based on the Service-Type VSA in their user account.

  What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

  A. RADIUS-based command authorization

  B. a manager and operator password

  C. privileged-mode login authentication

  D. SNMPv3 and SNMPv3 restricted access.

  Correct Answer: A

• Question 70:

  Refer to the exhibit.

  

  A network administrator needs to alter myACL so that it permits all traffic that arrives in VLAN 2 and is destined to 10.1.10.0/24. Besides this change, the ACL must continue to act as it does now. The administrator plans this new rule:

  permit ip any 10.1.10.0/24

  A. Apply the new rule without a rule ID to ensure that the switch applies the automatic processing order to it.

  B. Resequence the ACL with more space, then add the new rule with a sequence ID before the ID for the current third rule.

  C. Remove the ACL from the VLAN and re-apply it as an inbound VLAN ACL (VACL). Then, add the new rule with any ID higher than 2.

  D. Enable ACL grouping on the switch. Add the new rule in anew ACL. Then, group the new ACL with myACL.

  Correct Answer: B