HP HP Certifications HPE6-A71 Questions & Answers

• Question 111:

  A guest establishes an authenticated wireless session to an Aruba Mobility Controller (MC). The controller uses a ClearPass server for all AAA functions.

  Which AAA component disconnects the user when the guest exceeds their allowed duration?

  A. RADIUS Change of Authorization

  B. Active Directory Session Limits

  C. RADIUS Authorization Profile

  D. SNMP Disconnect

  Correct Answer: A

• Question 112:

  Refer to the exhibit. What can the determined from the command shown in the exhibit?

  

  A. All the controllers run in standalone mode.

  B. MM2 is the Mobility Master.

  C. VRRP is used for Mobility Master redundancy.

  D. All the controllers run in a cluster.

  Correct Answer: C

• Question 113:

  An administrator manages an Aruba wireless solution, deployed in a company with locations across the world. In one country, the local government organization that controls wireless transmissions increases the maximum EIRP allowed for certain channels.

  Which component does the administrator need to update on the Mobility Master (MM) to accommodate this change?

  A. the Controller port configuration

  B. the regulatory-cert file

  C. the AP system profile

  D. the AP Group configuration

  Correct Answer: B

• Question 114:

  An Administrator supports a group of employees that connect to the corporate office using the VIA client. An Aruba Mobility Controller (MC), behind a corporate firewall, terminates the user's VPN sessions. The VPN sessions fail to establish because of the existing firewall rules.

  Which connections must the administrator allow on the firewall? (Choose three.)

  A. UDP 8202

  B. UDP 4500

  C. UDP 8211

  D. TCP 4443

  E. TCP 443

  F. UDP 500

  Correct Answer: BEF

• Question 115:

  Refer to the exhibit.

  

  Controllers are configured in a cluster as shown in the exhibit. These are the network details.

  -A Mobility Master (MM) managers the cluster.

  -The cluster contains two controllers: C1 and C2.

  -AP1 and AP2 use C1 as their Active AP Anchor Controller (A-AAC), with C2 as their Standby AAC (SAAC).

  -AP3 and AP4 use C2 as their A-AAC with, C1 as their S-AAC.

  User1 establishes a wireless connection via AP1, where the Active User Controller (U- UAC) assigned is

  C1, with C2 as the standby. What happens when User1 roams the wireless network and eventually their

  session is handled by AP3?

  A. The AP3's A-AAC switches to C1, and the user's A-UAC remains on C1.

  B. The AP3's A-AAC switches to C2, and the user's A-UAC remains on C2.

  C. The AP3's A-AAC switches to C1, and the user's A-UAC remains on C2.

  D. The AP3's A-AAC switches to C2, and the user's A-UAC remains on C1.

  Correct Answer: D

• Question 116:

  An administrator sets up a network scan set in AirWave to scan a subnet to identify devices for a firmware upgrade. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access. However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.

  What should the administrator have done before running the network scan?

  A. Define a scan credentials set for the devices.

  B. Monitor the devices for needed firmware upgrades.

  C. Change the default credentials of the devices.

  D. Manually upgrade the firmware of the devices.

  Correct Answer: C

• Question 117:

  An administrator wants to temporarily deny login access who fail 802.1x authentication functions three or more times. Which process will the administrator need to configure?

  A. EAP termination

  B. blacklisting

  C. captive portal

  D. fail through

  Correct Answer: B

• Question 118:

  An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.

  Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?

  A. Whitelist the RAP's IP address on the MC.

  B. Define the RAP's IPSec pre-shared key in Activate.

  C. Whitelist the RAP's certificate on the MC.

  D. Configure a VPN address pool in Activate.

  Correct Answer: C

• Question 119:

  Refer to the exhibit.

  

  An administrator implements an L2 cluster of Aruba Mobility Controllers (MCs) as shown in the exhibit. An

  external RADIUS AAA server authentication clients associated with the Active User Anchor Controller (A

  UAC), where the NAS IP address sent from Controller B is 10.254.1.2.

  By default, what happens to the user's session when it is handed over to the Standby UAC (S-UAC) after a failover?

  A. The user's session remains active and RADIUS messages can still be processed between the S-UAC and AAA server.

  B. The user's session remains active, but the AAA server cannot implement RADIUS Change of Authorization (CoA).

  C. The user's session is disconnected and has to reconnect, but the S-UAC automatically updates the NAS-IP address on the AAA server to record the event.

  D. The user's session is disconnected and has to reconnect, and no record of this process is stored on the AAA server.

  Correct Answer: A

• Question 120:

  Refer to the exhibit.

  

  An administrator sets up a cluster of Aruba Mobility Controllers (MCs). What can the administrator determine about the cluster from the command output shown in the exhibit?

  A. AP load balancing is enabled.

  B. User load balancing is enabled.

  C. This is an L2-connected cluster.

  D. This is an L3-connected cluster.

  Correct Answer: B