HP HP Certifications HPE6-A79 Questions & Answers

• Question 21:

  A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.

  Since not all locations own public IP addresses, the security team is not able to configure strict firewall polices at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.

  What should the network administrator do to ensure the solution is functional and secure?

  A. Deploy an MC at the datacenter as a VPN concentrator.

  B. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.

  C. Block all ports to the MMs except UDP 500 and 4500.

  D. Install a PEFV license, and configure firewall policies that protect the MM.

  Correct Answer: C

• Question 22:

  A software development company has 764 employees who work from home. The company also has small offices located in different cities throughout the world. During working hours, they use RAPs to connect to a datacenter to upload software code as well as interact with databases.

  In the past two month, cabling issues have occurred connection to the 7240XM Mobility Controller (MC) that runs ArubaOS 8 and terminates the RAPs. These RAPs disconnect, affecting the users connected to the RAPs. This also causes problems with code uploads and database synchronizations. Therefore, the company decides to add a second 7240XM controller for redundancy.

  How should the network administrator deploy both controllers in order to provide the redundancy while preventing failover events from disconnecting users?

  A. Connect both controllers with common VLANs, and create an HA fast failover group with public addresses in the internet VLAN.

  B. Connect both controllers with common VLANs, and create an L2-connected cluster using public addresses in the internet VLAN.

  C. Connect both controllers with different VLANs, and create an L2-connected cluster using public addresses in the internet VLAN.

  D. Connect both controllers with common VLANs, and configure LMS/BLMS values equal to public addresses in the internet VLAN.

  Correct Answer: A

• Question 23:

  A network administrator has updated the ArubaOS code of a standalone Mobility Controller (MC) that is used for User-Based Tunneling (UBT) to a newer early release. Ever since the MC seems to reject PAPI sessions from the switch with the 10.1.10.10 IP address. Also the controller's prompt is now followed by a star mark: "(MC_VA) [mynode] *#"

  When opening a support ticket, an Aruba TAC engineer asks the administrator to gather the crash logs and if possible replicate UBT connection attempts from the switch while running packet captures of PAPI traffic on the controller and obtain the PCAP files. The administrator has a PC with Wireshark and TFTP server using the 10.0.20.20 IP address.

  What commands must the administrator issue to accomplish these requests? (Choose two.)

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  E. Option E

  Correct Answer: BE

• Question 24:

  An organization wants to deploy a WLAN infrastructure that provides connectivity to these client categories:

  Employees Contractors Guest users Corporate IoT legacy devices that support no authentication or encryption Employees and contractors must authenticate with company credentials and get network access based on AD group membership. Guest users are required to authenticate with captive portal using predefined credentials. Only employees will run L2 encryption.

  Which implementation plan fulfills the requirements while maximizing the channel usage?

  A. Create VAP1 to run WPA2-AES and 802.1x authentication, VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal and L2 fail through.

  B. Create a single VAP to run WPA2-AES and 802.1x authentication, MAC authentication L2 fail through, captive portal, and VIA support.

  C. Create VAP1 to run WPA2-AES and 802.1x authentication, VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal.

  D. Create VAP1 to run WPA2-AES and 802.1x authentication, and VAP2 to run opensystem encryption with MAC authentication and captive portal.

  Correct Answer: D

• Question 25:

  A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.

  

  While all users authenticate with [email protected] type of credentials, radius1 has user accounts with the domain name portion. Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 26:

  Users run encrypted Skype for Business traffic with no WMM support over an Aruba Mobility Master (MM) - Mobility Controller (MC) based network. When voice, video, and application sharing traffic arrive at the wired side of the network, all the flows look alike due to the lack of L2 and L3 markings

  How can the network administrator identify these flows and mark QoS accordingly?

  A. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable WMM in a VAP profile.

  B. Use a media firewall policy that match these three flows, and use permit and TOS actions with 56, 40, and 34 values for voice, video, and application sharing, respectively. Then enable the Skype4Business ALG in the UCC profiles.

  C. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable the Skype4Business ALG in the UCC profiles.

  D. Confirm the MM is the Openflow controller of the MCs and Openflow is enabled in VAP and the firewall roles. Then integrate the MM with the Skype4Business SDN API, and enable the Skype4Business ALG in the UCC profiles.

  Correct Answer: D

• Question 27:

  A fully functional WLAN is deployed in a campus network using the following script.

  

  Which part of the script can a network administrator re-use to assign a different default role to users when they connect to the same SSID in a second building?

  A. server group and ssid profile

  B. server group and VAP profile

  C. server group, aaa profile, and ssid profile

  D. server group and VAP

  Correct Answer: A

• Question 28:

  Refer to the exhibits.

  

  A user reports slow connectivity to a network administrator when connecting to AP-Garden and suggests that there might be a problem with the WLAN. The user's device supports 802.11n in the 2.4 GHz band. The network administrator finds the user in the Mobility Master (MM) and reviews the output shown in the exhibit.

  What can the network administrator conclude after analyzing the data?

  A. 2.4Ghz band is currently congested, therefore a NIC upgrade to 802.11ac or higher is recommended so the user can move to 5Ghz.

  B. Channel usage is high and though this device has high speed the overall client rate is low on AP-Garden, there could be a few clients monopolizing the airtime on both bands at low speeds.

  C. User's SNR value over time is lower than recommended, therefore he should either get closer to the Access Point or increase the transmit power.

  D. 365s are low cost outdoor APs recommended for coverage design only. AP-Garden currently has more clients than recommended and is getting congested.

  Correct Answer: D

• Question 29:

  Refer to the exhibit.

  

  Based on the output shown in the exhibit, which channel offers the highest quality?

  A. Channel 1

  B. Channel 6

  C. Channel 11

  D. Channel 14

  Correct Answer: B

• Question 30:

  An Aruba WiFi solution for a football stadium includes 2500 APs, two Mobility Masters (MM), and eight Mobility Controllers (MCs). Key requirements are seamless roaming and even distribution of APs and clients, even during a MC failure. Which MC's deployment option offers seamless roaming, and even AP client distribution among all MCs before and after a MC failure?

  A. a two-member HA group in dual mode

  B. an eight-member L2-connected cluster

  C. two four-member L2-connected clusters

  D. an eight-member HA group in dual mode

  Correct Answer: C