HP HP Certifications HPE6-A85 Questions & Answers

• Question 21:

  Which Aruba technology will allow for device-specific passphrases to securely add headless devices to the WLAN?

  A. Wired Equivalent Privacy (WEP)

  B. Multiple Pre-Shared Key (MPSK)

  C. Opportunistic Wireless Encryption (OWE)

  D. Temporal Key Integrity Protocol (TKIP)

  Correct Answer: B

  Explanation: Multiple Pre-Shared Key (MPSK) is a feature that allows device-specific or group-specific passphrases to securely add headless devices to the WLAN Wireless Local Area Network. WLAN is a wireless computer network that links two or more devices using wireless communication to form a local area network (LAN) within a limited area such as a home, school, computer laboratory, campus, or office building. . MPSK enhances the WPA2 PSK Wi-Fi Protected Access 2 Pre-Shared Key. WPA2 PSK is a method of securing your network using WPA2 with the use of the optional Pre-Shared Key (PSK) authentication, which was designed for home users without an enterprise authentication server. mode by allowing different PSKs for different devices on the same SSID Service Set Identifier. SSID is a case-sensitive, 32 alphanumeric character unique identifier attached to the header of packets sent over a wireless local-area network (WLAN). The SSID acts as a password when a mobile device tries to connect to the basic service set (BSS) -- a component of the IEEE 802.11 WLAN architecture. . MPSK passwords can be generated or user-created and are managed by ClearPass Policy Manager12.

  References:

  https://blogs.arubanetworks.com/solutions/simplify-iot-authentication-with-multiple-pre- shared-keys/ https://www.arubanetworks.com/techdocs/ClearPass/6.8/Guest/Content/AdministrationTas ks1/Configuring-MPSK.htm

• Question 22:

  What can be done to dynamically set the PoE Priority on a switch port when deploying IP cameras APs. and other PoE devices?

  A. Enable Quick PoE on the switch modules

  B. Enable profiling for device provisioning

  C. Configure PoE power management to Class-based Mode

  D. Configure PoE power management to Dynamic Mode

  Correct Answer: B

  Explanation: Profiling is a feature that allows Aruba switches to automatically identify and classify devices connected to them based on various attributes such as MAC address, DHCP options, LLDP information, etc. Profiling can be used to dynamically set the PoE priority on a switch port based on the device type and power requirements. For example, an IP camera may have a higher PoE priority than a printer or a PC. Profiling can also be used to apply other configuration settings such as VLANs, ACLs, QoS, etc. based on the device profile.

  References: https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/ar ubaos-solutions/1-overview/profiling.htm

• Question 23:

  What does a slow amber-flashing Stack-LED indicate?

  A. One switch has a stacking failure.

  B. A port has a stacking failure Stacking mode Is not selected

  C. Stacking mode selected

  D. Stacking is synchronizing Please wait

  Correct Answer: C

  Explanation: A slow amber-flashing Stack-LED indicates that stacking mode is selected on the switch. This means that the switch is ready to join a stack or form a new stack if no other switches are present.

  References: https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/ar ubaos-solutions/1-overview/stacking-leds.htm

• Question 24:

  The customer has a requirement to create authorization policies for their users with Windows 10 clients, with a requirement Tor authorizing both device and user credentials within one Radius session.

  What would be the correct solution for the requirement?

  A. ClearPass 6.9 with EAP-TTLS

  B. ClearPass 6.9 with EAP-TLS

  C. ClearPass 6.9 with PEAP

  D. ClearPass 6.9 with EAP-TEAP

  Correct Answer: D

  Explanation: EAP-TEAP is a tunnel-based authentication method that supports both device and user authentication within a single RADIUS session. ClearPass 6.9 supports EAP-TEAP as anauthentication method for Windows 10 clients.

  References:

  https://www.arubanetworks.com/techdocs/ClearPass/6.9/Guest/Content/CPPM_UserGuide /EAP-TEAP/EAP-TEAP.htm

• Question 25:

  Which statement about manual switch provisioning with Aruba Central is correct?

  A. Manual provisioning does not require DHCP and requires DNS

  B. Manual provisioning does not require DHCP and does not require DNS

  C. Manual provisioning requires DHCP and does not require DNS

  D. Manual provisioning requires DHCP and requires DNS

  Correct Answer: B

  Explanation: Manual provisioning is a method to add switches to Aruba Central without using DHCP or DNS. It requires the user to enter the switch serial number, MAC address, and activation code in Aruba Central, and then configure the switch with the same activation code and Aruba Central's IP address.

  References:https://help.central.arubanetworks.com/latest/documentation/online_help/conte nt/devices/switches/provisioning/manual-provisioning.htm

• Question 26:

  You have been asked to onboard a new Aruba 6300M in a customer deployment You are working remotely rather than on-site You have a colleague installing the switch The colleague has provided you with a remote console session to configure the edge switch You have been asked to configure a link aggregation going back to the cores using interfaces 1/1/51 and 1/1/52 The Senior Engineer of the project has asked you to configure the switch and 1Q uplink with these guidelines

  1.

  Add VLAN 20 to the local VLAN database with name Mgmt

  2.

  Add L3 SVl on VLAN 20 for Management using address 10 in the 10.1.1 0/24 subnet 3. Add LAG 1 using LACP mode active for the uplink

  4 use vlan 20 as the native vlan on the LAG 5. Make sure the interfaces are all ON.

  Which configuration script will achieve the task?

  A. Edge1# conf t vlan 20 name Mgmt interface vlan 20 ip address 10.1.1.10/24 no shut interface lag 1 shut vlan access 20 lacp mode active Int 1/1/51.1/1/52 shut no routing lag 1 interface lag 1 no shut

  B. Edgel# conf t vlan 20 name Mgmt interface vlan 20 ip address 10 1.1 10/24 no shut interface 1/1/51.1/1/52 shut vlan trunk native 20 vlan trunk allowed all lag 1 lacp mode active interface 1/1/51.1/1/52 no shut

  C. Edgel# conf t vlan 20 name Mgmt interface vlan 20 ip address 10 1 1 10/24 no shut interface lag 1 shut vlan trunk native 20 vlan trunk allowed all lacp mode active Int 1/1/51.1/1/52 shut no routing lag 1 interface lag 1 no shut interface 1/1/51.1/1/52 no shut

  D. conf t vlan 20 name Mgmt ip address 10 1 1.10/24 no shut interface lag 1 shut vlan trunk native 1 vlan trunk allowed all lacp mode active int 1/1/51.1/1/52 shut no routing interface lag 1 no shut interface 1/1/51.1/1/52 no shut

  Correct Answer: C

  Explanation: This configuration script will achieve the task as it follows the guidelines given by the Senior Engineer. It creates VLAN 20 with name Mgmt, adds L3 SVI on VLAN 20 with IP address 10.1.1.10/24, creates LAG 1 with LACP mode active for the uplink, uses VLAN 20 as the native VLAN on the LAG, and ensures that the interfaces are all ON.

  References:https://www.arubanetworks.com/techdocs/AOS-CX/10.04/HTML/5200- 6790/GUID-8F0E7E8B-0F4B-4A3C-AE7F-0F1B5A7F9C5D.html

• Question 27:

  A customer has just implemented user and device certificates via a company-wide Group Based Policy (GPO) Which EAP method requires client certificates when authenticating to the network?

  A. EAP-TTLS

  B. EAP-TLS

  C. EAP-TEAP

  D. PEAP

  Correct Answer: B

  Explanation: EAP-TLS is an authentication method that requires client certificates when authenticating to the network. It provides mutual authentication between the client and the server using public key cryptography and digital certificates.

  References:https://www.arubanetworks.com/techdocs/ClearPass/6.9/Guest/Content/CPPM _UserGuide/EAP-TLS/EAP-TLS.htm

• Question 28:

  When using the OSPF dynamic routing protocol on an Aruba CX switch, what must match on the neighboring devices to exchange routes?

  A. Hello timers

  B. DR configuration

  C. ECMP method

  D. BDR configuration

  Correct Answer: A

  Explanation: OSPF Open Shortest Path First. OSPF is a link-state routing protocol that uses a hierarchical structure to create a routing topology for IP networks. OSPF routers exchange routing information with their neighbors using Hello packets, which are sent periodically on each interface. To establish an adjacency Adjacency is a relationship formed between selected neighboring routers for the purpose of exchanging routing information., OSPF routers must agree on several parameters, including Hello timers, which specify how often Hello packets are sent on an interface. If the Hello timers do not match between neighboring routers, they will not form an adjacency and will not exchange routes. References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/ar ubaos-solutions/osfp/osfp.htm

• Question 29:

  What is the recommended VSF topology? (Select two.)

  A. Star

  B. Daisy chain plus MAD

  C. Full mesh

  D. Full mesh plus MAD

  E. Ring

  Correct Answer: BE

  Only: Daisy chain plus MAD and ring are the recommended VSF topologies for Aruba switches. They provide high availability and redundancy for the VSF stack. MAD (Multiple Active Detection) is a mechanism to detect and resolve split-brain scenarios in a VSF stack.

  References: https://www.arubanetworks.com/techdocs/AOS-CX/10.04/HTML/5200- 6790/GUID-D6EF042E-EEEF-49F7-B67E-4CAC41CCB24D.html

• Question 30:

  What is the ideal Aruba access switch for a cost-effective connection to 200-380 clients, printers and APs per distribution rack?

  A. Aruba CX 6400

  B. Aruba CX 6200

  C. Aruba CX 6300

  D. Aruba CX 6000

  Correct Answer: B

  The ideal Aruba access switch for a cost-effective connection to 200-380 clients, printers and APs per distribution rack is the Aruba CX 6200. This switch series is a cloud- manageable, stackable access switch series that is ideal for enterprise

  branch offices and campus networks, as well as SMBs. The CX 6200 series offers the following benefits:

  Enterprise-class connectivity: The CX 6200 series supports ACLs, robust QoS, and common protocols such as static and Access OSPF routing. Power and speed for users and IoT: The CX 6200 series provides built-in 1/10GbE uplinks and

  30W to 60W of Class 4 to Class 6 PoE for powering devices such as APs and cameras.

  Scalable growth made simple: The CX 6200 series supports Aruba Virtual Switching Framework (VSF) that allows you to quickly grow your network to eight members in a single stack using high-performance built-in 10G SFP ports.

  Management flexibility: The CX 6200 series supports a choice of management, including cloud-based and on-prem Central, CLI, switch Web GUI and programmability with AOS-CX operating system, and REST APIs.

  The other options are not ideal because:

  Aruba CX 6400: This switch series is a high-availability modular switch series that is ideal for versatile edge access to data center deployments. It offers more performance, scalability, and modularity than the CX 6200 series, but it is also

  more expensive and complex to deploy and manage. It may not be cost-effective for connecting 200-380 clients per distribution rack. Aruba CX 6300: This switch series is a layer 3 stackable access and aggregation switch series that offers

  Smart Rate and High Power PoE. It offers more features and performance than the CX 6200 series, but it is also more expensive and may not be necessary for connecting 200-380 clients per distribution rack. Aruba CX 6000: This switch

  series is a layer 2 access switch series that offers PoE. It offers less features and performance than the CX 6200 series, and it does not support VSF stacking or routing protocols. It may not be sufficient for connecting 200-380 clients per

  distribution rack.

  References: https://www.arubanetworks.com/products/switches/access/

  https://www.arubanetworks.com/products/switches/access/6200-series/

  https://www.arubanetworks.com/products/switches/access/6400-series/

  https://www.arubanetworks.com/products/switches/access/6300-series/

  https://www.arubanetworks.com/products/switches/access/6000-series/