HP HP Certifications HPE6-A79 Questions & Answers

• Question 31:

  Refer to the exhibit.

  

  A network administrator wants to configure an 802.1x supplicant for a wireless network that includes the following:

  AES encryption EAP-MSCHAP v2-based user and machine authentication Validation of server certificate in Microsoft Windows 10

  The network administrator creates a WLAN profile and selects the change connection settings option. Then the network administrator changes the security type to Microsoft: Protected EAP (PEAP), and enables user and machine authentication under Additional Settings.

  What must the network administrator do next to accomplish the task?

  A. Change default RC4 encryption for AES.

  B. Enable user authentication under Settings

  C. Change the security type to Microsoft: Smart Card or other certificate.

  D. Enable server certificate validation under Settings.

  Correct Answer: C

• Question 32:

  Refer to the exhibit.

  

  A network engineer deploys two different DHCP pools in an Instant AP (IAP) cluster for WLANs that will have connectivity to a remote site using Aruba IPSec. Based on the output shown in the exhibit, which IAP-VPN DHCP modes are being used?

  A. distributed L3 and centralized L2

  B. local L3 and centralized L2

  C. local L3 and distributed L2

  D. centralized L3 and distributed L2

  Correct Answer: D

• Question 33:

  A network administrator has racked up a 7210 Mobility Controller (MC) that will be terminating 200+ Aps on a medium-size branch office. Next, the technician cabled the appliance with 4SPF+ Direct Attached Cables (DACs) distributed between two-member switching stack and powered it up.

  What must the administrator do next in the MCs to assure maximum wired bandwidth utilization?

  A. Map the four physical ports to port channel 0.

  B. Disable spanning tree and allocate unique VLANs to each port.

  C. Manually set 10Gbps speeds on all ports.

  D. Configure the same MSTP region that the switches have.

  E. Make all ports trunk interfaces and permit data VLANs.

  Correct Answer: C

• Question 34:

  Refer to the exhibit.

  

  An Aruba network is deployed with L2 and L3 Mobility Master (MM) redundancy across two datacenters, as shown in the exhibit. The network administrator confirms that all Mobility Controllers (MC) are currently communicating with MM1, which is the L2 Active and, L3 Primary.

  Which MM IP will MCs communicate with if MM1 fails?

  A. 10.1.1.10

  B. 10.1.1.12

  C. 10.2.1.10

  D. 10.2.1.21

  Correct Answer: C

• Question 35:

  Refer to the exhibit.

  

  A network administrator adds a Mobility Controller (MC) in the /mm level and notices that the device does not show up in the managed networks hierarchy. The network administrator accesses the CLI. executes the show switches command, and obtains the output shown in the exhibit.

  What is the reason that the MC does not appear as a managed device in the hierarchy?

  A. The network administrator added the device using the wrong Pre-Shared Key (PSK).

  B. The network administrator has not moved the device into a group yet.

  C. The digital certificate of the MC is not trusted by the MM.

  D. The IP address of the MC does not match the one that was defined in the MM.

  Correct Answer: D

• Question 36:

  An organization owns a fully functional multi-controller Aruba network with a Virtual Mobility Master (VMM) in VLAN20. They have asked a network consultant to deploy a redundant MM on a different server. The solution must offer the lowest convergence time and require no human interaction in case of failure.

  The servers host other virtual machines and are connected to different switches that implement ACLs to protect them. The organization grants the network consultant access to the servers only, and appoints a network administrator to assist with the deployment.

  What must the network administrator do so the network consultant can successfully deploy the solution? (Choose two.)

  A. Allocate VLAN20 to the second server, and extend it throughout the switches, then reserve one IP address for the second MM and another IP address for its gateway.

  B. Allocate VLAN20 to the second server, and permit routing between them, then reserve one IP address for the second MM and another IP address for its gateway.

  C. Configure an ACL entry that permits IP protocol 50, UDP port 500, and multicast IP 224.0.0.18.

  D. Allocate VLAN20 to the second server, and extend it throughout the switches, then reserve one IP address for the second MM and another for the VIP.

  E. Configure an ACL entry that permits UDP 500, TCP 4500, and multicast IP 224.0.0.5.

  Correct Answer: AE

• Question 37:

  Refer to the exhibits. Exhibit 1

  

  Exhibit 2 Exhibit 3

  

  

  Exhibit 4

  

  A captive portal-based solution is deployed in a Mobility Master (MM) - Mobility Controller (MC) network. A wireless station connects to the network and attempts the authentication process. The outputs are shown in the exhibits. Which names correlate with the authentication and captive portal servers?

  A. ClearPass.23 is the authentication server, and cp.mycompany.com is the captive portal server.

  B. ClearPass.23 is the authentication server, and MC2 is the captive portal server.

  C. Internal database in MC2 is the authentication server, and cp.mycompany.com is the captive portal server.

  D. cp.mycompany.com is the authentication server, and ClearPass.23 is the captive portal server.

  Correct Answer: A

• Question 38:

  Refer to the exhibit.

  

  A 7008 Branch Office Controller (BOC) is deployed in a remote office behind a core router. This core does not support 802.1q encapsulation. The Mobility Controller (MC) is the gateway for two tunneling mode SSIDs, as shown in the exhibit. Which two different configuration options ensure that wireless users are able to reach the branch network through the router? (Choose two.)

  A. Configure all ports of the BOC as access ports on the controller VLAN, and change the gateway of clients to the core router IP.

  B. Configure the uplink of the BOC as an access port on the controller VLAN, and add static routes in the router for the SSID VLAN subnets.

  C. Configure the uplink of the BOC as a trunk port that permits the controller and the SSID VLANs. The controller VLAN must be native.

  D. Configure the uplink of the BOC as an access port on the controller VLAN, and enable NAT for the SSID VLANs.

  E. Configure the uplink of the BOC as a trunk port, tagging the controller and the SSOD VLANs, and enable NAT for the SSID VLANs.

  Correct Answer: BE

• Question 39:

  Refer to the exhibits.

  

  

  A user reports slow response time to a network administrator and suggests that there might be a problem with the WLAN. The user's phone supports 802.11ac in the 5 GHz band. The network administrator finds the user in the Mobility Master (MM) and reviews the output shown in the exhibit.

  What can the network administrator conclude after analyzing the data?

  A. The low SNR forces the client to back off to low MCs, therefore speed is low and retransmits are high.

  B. Client health is poor, but SNR is fair. TX power must be increased in both the client and the AP.

  C. Since SNR is good, then the high retransmit rate must be due a hidden node scenario or high interference.

  D. High Successful frame count and high Max Speed is an indication of a healthy client. Connection will improve at any time.

  Correct Answer: D

• Question 40:

  Refer to the exhibit.

  

  A network administrator has created AAA profile for the corporate VAP. In addition to the regular Radius based authentication, the administrator needs to be able to disconnect the users from either of the two servers that are part of the "Radius" server group.

  What must the administrator do next in order to achieve this goal?

  A. Use the "Radius" server group as the RADIUS Accounting Server Group in the AAA profile.

  B. Create two new RFC 3576 servers and assign them as the RFC 3576 servers in the AAA profile.

  C. Use the "Radius" server group as both the Accounting Server Group and the RFC 3576 server in the AAA profile.

  D. Use the "Radius" server group as the RFC 3576 server in the AAA profile.

  Correct Answer: C

  Reference: https://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_UG/AP_Config.php