HP HP Certifications HPE6-A79 Questions & Answers

• Question 11:

  Refer to the exhibits.

  

  

  A network administrator has fully deployed a WPA3 based WLAN with 802.1X authentication. Later he defined corp-employee as the default user-role for the 802.1X authentication method in the aaa profile. When testing the setup he realizes the client gets the "guest" role.

  What is the reason "corp-employee" user role was not assigned?

  A. The administrator forgot to map a dot1x profile to the corp-employee aaa profile.

  B. The administrator forgot to enable PEFNG feature set on the Mobility Master.

  C. MC 1 has not received the configuration from the mobility master yet.

  D. The Mobility Master lacks MM-VA licenses; therefore, it shares partial configuration only.

  Correct Answer: C

• Question 12:

  A company with 535 users deploys an Aruba solution with more than 1000 Aruba APs, two 7220 Mobility Controllers, and a single Mobility Master (MM) virtual appliance at the campus server farm. The MCs run a HA Fast failover group in dual mode and operate at 50% AP capacity.

  If there is an MM or MC failure, the network administrator must ensure that the network is fully manageable and the MC load does not exceed 80%.

  What can the network administrator do to meet these requirements?

  A. Place the APs in the same hierarchy level.

  B. Create a cluster with AP load balancing.

  C. Enable oversubscription in the HA group.

  D. Add an MC and an MM in the server farm.

  E. Add an MM and enable DC redundancy.

  F. Place the APs in two different AP-Groups.

  Correct Answer: E

• Question 13:

  Users run Skype for Business on wireless clients with no WMM support over an Aruba Mobility Master (MM) - Mobility Controller (MC) based network. When traffic arrives at the wired network, it does not include either L2 or L3 markings.

  Which configuration steps should the network administrator take to classify and mark voice and video traffic with UCC heuristics mode?

  A. Enable WMM in a VAP profile, and explicitly permit voice and video UDP ports in a firewall policy.

  B. Confirm OpenFlow is enabled in the user role and VAP profile. Then enable WMM in a SSID profile, and explicitly permit voice and video UDP ports in a firewall policy.

  C. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.

  D. Confirm MM is the Openflow controller of MCs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.

  Correct Answer: A

• Question 14:

  A network administrator wants to permit explicit SSH, FTP and HHTP(s) access to servers in the 10.100.20.5 to 10.100.20.31 range, all devices in 10.100.21.0/24 network, and a host with IP address 10.100.22.70. The services must work properly at all times.

  Which configuration scripts accomplish this task with the fewer number of lines, while avoiding access to other devices not included in these ranges? (Choose two.)

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  E. Option E

  Correct Answer: AB

• Question 15:

  Refer to the exhibits. Exhibit 1

  

  Exhibit 2

  

  A network administrator adds a new Mobility Controller (MC) to the production Mobility Master (MM) and deploys APs that start broadcasting the employee SSID in the West wing of the building. Suddenly, the employees report client

  disconnects. When accessing the MM the network administrator notices that the MC is unreachable, then proceeds to access the MC's console and obtains the outputs shown in the exhibits.

  What should the network administrator do next to solve the current problem?

  A. Open a TAC case and send the output of tar crash.

  B. Kill two zombie processes then reboot the MC.

  C. Verify the license pools in the MM.

  D. Decommission the MC from the MM, and add it again.

  Correct Answer: C

• Question 16:

  Refer to the exhibit.

  

  A network administrator has a Mobility Master (MM) Mobility Controller (MC) architecture along with the MC in the DMZ for terminating RAPs. The network firewall has been provisioned to allow access to the MC in the DMZ for both UDP 500 and 4500. Then he proceeds to provision an AP as shown in the exhibit.

  Which additional configuration steps must the administrator to assure RAPs successfully contact the MC? (Choose two.)

  A. Create the RAP1 account in the InternalDB of the MC.

  B. Create an IP local pool and PSK at the device node level.

  C. Create the RAP1 account in the InternalDB of the MM.

  D. Add the RAP1 entry in the CPsec whitelist at the MM level.

  E. Create an IP local pool and PSK at the /mm/mynode level.

  Correct Answer: DE

• Question 17:

  Refer to the exhibit

  

  A network administrator deploys a standalone Mobility Controller (MC) and configures some VAPs within the CAMPUS AP group. The network administrator realizes that none of the VAPs are being broadcasted.

  Based on the output shown in the exhibit, what should the network administrator do to solve this problem?

  A. Install MC-VA licenses, then install PEF licenses and enabled the PEF feature.

  B. Install MC-VA licenses, then reprovision the APs.

  C. Install MM licenses, then install PEF licenses and enable the PEF feature.

  D. Install MM licenses and install MC-VA licenses, then install RFP licenses.

  Correct Answer: D

• Question 18:

  Refer to the exhibit.

  

  Based on the output shown in the exhibit, with which Aruba devices has Access-1 established tunnels?

  A. a pair of standalone MCs

  B. a pair of switches running VXLAN

  C. a pair of MCs within a L3 cluster

  D. a single standalone MC

  Correct Answer: C

• Question 19:

  Refer to the exhibit.

  

  A network administrator wants to allow contractors to access the WLAN named EmployeesNet. In order to restrict network access, the network administrator wants to assign this category of users to the contractor user role. To do this, the

  network administrator configures ClearPass in a way that it returns the Aruba-User-Role with the contractor value.

  When testing the solution, the network administrator receives the wrong role.

  What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?

  A. Check the Download role from the CPPM option in the AAA profile.

  B. Set contractor as the default role in the AAA profile.

  C. Create Contractor firewall role in the M.

  D. Create server deviation rules in the server group.

  Correct Answer: A

  Reference: https://www.arubanetworks.com/techdocs/ClearPass/6.7/Aruba_DeployGd_HTML/Content/Aruba%20Controller%20Configuration/AAA_profile_adding.htm

• Question 20:

  A network administrator has deployed an Airwave Management Platform (AMP) server and integrated it with a Mobility Master (MM) ?Mobility Controller (MC) based WLAN. The AMP server already has all Aruba Mobility devices including Access Points (APs) in the "UP" devices list.

  What are two actions the administrator can execute upon the APs under "Airwave>Devices>Monitor"? (Choose two.)

  A. Open the WebUI of the MC where the AP terminates.

  B. Re-provision the Access Point.

  C. Disable and change the mode of the AP's radios.

  D. Invoke MC's show commands for that Access Point.

  E. Run Spectrum Analysis locally.

  Correct Answer: DE