Quizzzzzz

HPE07-01

1 / 70

Refer to the exhibit

With Core-1. what is the default value for config-revision?

0

1

1-0

0.0

2 / 70

You need to create a keepalive network between two Aruba CX 8325 switches for VSX configuration. How should you establish the keepalive connection?

SVI, VLAN trunk allowed all on ISL in default VRF

routed port in custom VRF

loopback 0 and OSPF area 0 in default VRF

SVI, VLAN trunk allowed all on ISL in custom VRF

3 / 70

With Aruba CX 6300. How do you configure ip address 10.10.10.1 for the interface in default state for interface 1/1/1?

int 1/1/1; switching; ip address 10.10.10.1/24

int 1/1/1; no switching; ip address 10.10.10.1/24

int 1/1/1; ip address 10.10.10.1/24

int 1/1/1; routing; ip address 10.10.10.1/24

4 / 70

How is Multicast Transmission Optimization implemented in an HPE Aruba wireless network?

The optimal rate for sending multicast frames is based on the highest broadcast rate across all associated clients

When this option is enabled the minimum default rate for multicast traffic is set to 12 Mbps for 5GHz

The optimal rate for sending multicast frames is based on the lowest broadcast rate across all associated clients

The optimal rate for sending multicast frames is based on the lowest unicast rate across all associated clients

5 / 70

With the Aruba CX switch configuration, what is the first-hop protocol feature that is used for VSX L3 gateway as per Aruba recommendation?

Active Gateway

Active-Active VRRP

SVI with vsx-sync

VRRP

6 / 70

You are configuring Policy Based Routing (PBR) for a subnet that will be used to test a new default route for your network Traffic originating from 10.2.250.0/24 should use a new default route to 10.1.1.253. Other non-default routes for this subnet should not be affected by this change.
What are two parts of the solution for these requirements? (Select two.)
A)

B)

C)

D)

E)

Option A

Option B

Option C

Option D

Option E

7 / 70

Which statements regarding OSPFv2 route redistribution are true for Aruba OS CX switches?

(Select two.)

The "redistribute connected" command will redistribute all connected routes for the switch including local loopback addresses

The "redistribute ospf" command will redistribute routes from all OSPF V2 and V3 processes

The "redistribute static route-map connected-routes" command will redistribute all static routes without a matching deny in the route map "connected-routes".

The "redistribute connected" command will redistribute all connected routes for the switch except local loopback addresses.

The "redistribute static route-map connected-routes" command will redistribute all static routes with a matching permit in the route map "connected-routes"

8 / 70

You are working on a network where the customer has a dedicated router with redundant Internet connections Tor outbound high-importance real-time audio streams from their datacenter All of this traffic.
• originates from a single subnet
• uses a unique range of UDP ports
• is required to be routed to the dedicated router
All other traffic should route normally The SVI for the subnet containing the servers originating the traffic is located on the core routing switch in the datacenter What should be configured?

Configure a new OSPF area including both the core routing switch and the dedicated router

Configure a BGP link between the core routing switch and the dedicated router and route filtering

Configure Policy Based Routing (PBR) on the core routing switch for the VRF with the servers’ SVI

Configure a dedicated VRF on the core routing switch and make the dedicated router the default route

9 / 70

Your customer is interested in hearing more about how roles can help keep consistent policy enforcement in a distributed overlay fabric How would you explain this concept to them?

Group Based Policy ID is applied on egress VTEP after device authentication and policy is enforced on ingress VTEP

Role-based policies are tied to IP addresses which have an advantage over IP-based policies and role names are sent between VTEPs

Group Based Policy ID is applied on ingress VTEP after device authentication and policy is enforced on egress VTEP

Role-based policies enhance User Based Tunneling across the campus network and the policy traffic is protected with IPsec

10 / 70

You need to have different routing-table requirements with Aruba CX 6300 VSF configuration Assuming the correct layer-2 VLAN already exists how would you create a new OSPF configuration for a separate routing table?

Create a new OSPF area, and attach VRF name.

Create a new OSPF process ID with vrf name.

Attach a new OSFP process ID with a custom routing table

Attach OSPF process ID in the VRF configuration.

11 / 70

A customer just upgraded aggregation layer switches and noticed traffic dropping for 120 seconds after the aggregation layer came online again. What is the best way to avoid having this traffic dropped given the topology below?

Configure the linkup delay timer to 240 seconds to double the amount of lime for the initial phase to sync

Configure the linkup delay timer to exclude LAGS 101 and 102, which will allow time for routing adjacencies to form and to learn upstream routes

Configure the linkup delay timer to include LAGs 101 and 102, which will allow time for routing adjacencies lo form and to learn upstream routes

Configure the linkup delay timer to 120 seconds, which will allow the right amount of time for the initial phase to sync

12 / 70

What is an Aruba-recommended best practice for hardening that only applies to Aruba CX 6300 series switches with dedicated management ports?

Implement a control plane ACL to limit access to approved IPs and/or subnets

Manually enable Enhanced Security Mode from a console session

Disable all management services on the default VRF

Create a dedicated management VRF, and assign the management port to it

13 / 70

Review the exhibit

You are troubleshooting an issue with a 10.102.39.0/24 subnet which is also VLAN 1000 used Tor wireless clients on a pair of Aruba CX 8360 switches The subnet SVI is configured on the 8360 pair, and the DHCP server is a Microsoft Windows Server 2022 Standard with an IP address of 10.200.1.100. The 10.102.250.0/24 subnet is used for switch management. A large number of DHCP requests are failing You are observing sporadic DHCP behavior across clients attached to the CX 6100 switch.
Which action may help fix the issue?

Option A

Option B

Option C

Option D

14 / 70

A system engineer needs to preconfigure several Aruba CX 6300 switches that will be sent to a
remote office An untrained local field technician will do the rollout of the switches and the mounting
of several AP-515s and AP-575S. Cables running to theAPs are not labeled.
The VLANs are already preconfigured to VLAN 100 (mgmt), VLAN 200 (clients), and VLAN 300 (guests)
What is the correct configuration to ensure that APs will work properly?

A)

B)

C)

D)

Option A

Option B

Option C

Option D

15 / 70

A company recently deployed new Aruba Access Points at different branch offices Wireless 802.1X authentication will be against a RADIUS server in the cloud. The security team is concerned that the traffic between the AP and the RADIUS server will be exposed.
What is the appropriate solution for this scenario?

Enable EAP-TLS on all wireless devices

Configure RadSec on the AP and Aruba Central

Enable EAP-TTLS on all wireless devices

Configure RadSec on the AP and the RADIUS server

16 / 70

A customer wants to provide wired security as close to the source as possible The wired security must meet the following requirements:

-allow ping from the IT management VLAN to the user VLAN
-deny ping sourcing from the user VLAN to the IT management VLAN

The customer is using Aruba CX 6300s
What is the correct way to implement these requirements?

Apply an outbound ACL on the user VLAN allowing temp echo-reply traffic toward the IT management VLAN

Apply an inbound ACL on the user VLAN allowing icmp echo-reply traffic toward the IT management VLAN

Apply an inbound ACL on the user VLAN denying icmp echo traffic toward the IT management VLAN

Apply an outbound ACL on the user VLAN denying icmp echo traffic toward the IT management VLAN

17 / 70

A company recently upgraded its campus switching infrastructure with Aruba 6300 CX switches. They have implemented 802.1X authentication on edge ports where laptop and loT devices typically connect. An administrator has noticed that for PoE devices the pons are delivering the maximum wattage instead of what the device actually needs Upon connecting the loT devices, the devices request their specific required wattage through information exchange

Concerned about this waste of electricity, what should the administrator implement to solve this problem?

Enable AAA authentication to exempt LLDP and/or CDP information

Globally enable the QoS trust setting for LLDP and/or CDP

Create device profiles with the correct power definitions.

Implement a classifier policy with the correct power definitions.

18 / 70

What is used to retrieve data stored in a Management Information Base (MIS)?

SNMPv3

DSCP

TLV

CDP

19 / 70

Your customer is having connectivity issues with a newly-deployed Microbranch group The access points in this group are online in Aruba Central, but no VPN tunnels are forming.

What is the most likely cause of this issue?

There is a time difference between the AP and the gateways The gateways should have NTP added

The SSL certificate on the gateway used to encrypt the connection has not been added to the APs trust list

There may be a firewall blocking GRE tunneling between the AP and the gateway

The gateway group is running in automatic cluster mode and should be in manual cluster mode

20 / 70

The administrator notices that wired guest users that have exceeded their bandwidth limit are not being disconnected Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.
An administrator has performed the following configuration:

What is the most likely cause of this issue?

Change of Authorization has not been globally enabled on the switch

The SSL certificate for CPPM has not been added as a trust point on the switch

There is a mismatch between the RADIUS secret on the switch and CPPM

There is a time difference between the switch and the ClearPass Policy Manager

21 / 70

Which feature supported by SNMPv3 provides an advantage over SNMPv2c?

Transport mapping

Community strings

GetBulk

Encryption

22 / 70

you are implementing ClearPass Policy Manager with EAP-TLS for authenticating all corporate-owned devices. What are two possible solutions to the problem of deploying client certificates to corporate MacBooks that are joined to a Windows domain? (Select two.)

ClearPass OnBoard

Windows Server PKl and a GPO

Apple Configurator and a GPO

ClearPass OnGuard

Mobile Device Manager

23 / 70

Describe the difference between Class of Service (CoS) and Differentiated Services Code Point (DSCP).

CoS has much finer granularity than DSCP

CoS is only contained in VLAN Tag fields DSCP is in the IP Header and preserved throughout the IP packet flow

They are similar and can be used interchangeably.

CoS is only used to determine CLASS of traffic DSCP is only used to differentiate between different Classes

24 / 70

A network administrator is troubleshooting some issues guest users are having when connecting and authenticating to the network The access switches are AOS-CX switches. What command should the administrator use to examine information on which role the guest user has been assigned?

show aaa authentication port-access interface all client-status

show port-access captiveportal profile

show port-access role

diag-dump captiveportal client verbose

25 / 70

Your customer has asked you to assign a switch management role for a new user. The customer requires the user role to only have Web Ul access to the System > Log page and only have access to the GET method for REST API for the /logs/event resource
Which default AOS-CX user role meets these requirements?

administrators

auditors

sysops

operators

26 / 70

Due to a shipping error, five (5) Aruba AP-515S and one (1) Aruba CX 6300 were sent directly to your new branch office You have configured a new group persona for the new branch office devices in Central, but you do not know their MAC addresses or serial numbers The office manager is instructed via text message on their smartphone to onboard all the new hardware into Aruba Central
What application must the office manager use on their phone to complete this task?

Aruba Onboard App

Aruba Central App

Aruba CX Mobile App

Aruba Installer App

27 / 70

Which statements regarding Aruba NAE agents are true? (Select two )

A single NAE script can be used by multiple NAE agents

NAE agents are active at all times

NAE agents will never consume more than 10% of switch processor resources

NAE scripts must be reviewed and signed by Aruba before being used

A single NAE agent can be used by multiple NAE scripts

28 / 70

You are building a configuration in Central that will be used for a standardized network design for small sites for your company, you want to use GUI configuration for gateways and Aps, while template configuration for switches. You need to align with Aruba best practices. Which set of actions will satisfy these requirements?

Create one group in Central for switches a second group for APs. and a third group for gateways Create a unique site for each location, and assign devices to the appropriate site.

Create one group in Central for switches and a second group for APs and gateways. Create a unique site for each location, and assign devices to the appropriate site.

Create a single group in Central. Create a unique site for each location, and assign devices to the appropriate site.

Create a single group in Central. Create a unique site for each type of device, and assign devices to the appropriate site.

29 / 70

your customer has asked you to assign a switch management role for a new user The customer requires the user role to View switch configuration information and have access to the PUT and POST methods for REST API.
Which default AOS-CX user role meets these requirements?

administrators

auditors

sysops

helpdesk

30 / 70

On AOS10 Gateways, which device persona is only available when configuring a Gateway-only group?

Edge

Mobility

Branch

VPN Concentrator

31 / 70

Which component is used by the Aruba Network Analytics Engine (NAE)?

JSON-based scripts

Lisp-based agents

Ruby-based scripts

Current State Database

32 / 70

A customer is using Aruba Cloud Guest, but visitors keep complaining that the captive portal page keeps coming up after devices go to sleep Which solution should be enabled to deal with this issue?

MAC Caching under the splash page

MAC Caching under the user-role

Wireless Caching under the splash page

MAC Caching under the WLAN

33 / 70

What is true regarding 802.11k?

It extends radio measurements to define mechanisms for wireless network management of stations

It reduces roaming delay by pre-authenticating clients with multiple target APs before a client roams to an AP

It provides mechanisms for APs and clients to dynamically measure the available radio resources.

It considers several metrics before it determines if a client should be steered to the 5GHz band, including client RSSI

34 / 70

A customer is looking for a wireless authentication solution for all of their loT devices that meet the following requirements
– The wireless traffic between the IoT devices and the Access Points must be encrypted
– Unique passphrase per device
– Use fingerprint information to perform role-based access
Which solutions will address the customer’s requirements? (Select two.)

MPSK and an internal RADIUS server

MPSK Local with MAC Authentication

ClearPass Policy Manager

MPSK Local with EAP-TLS

Local User Derivation Rules

35 / 70

Using Aruba best practices what should be enabled for visitor networks where encryption is needed but authentication is not required?

Wi-Fi Protected Access 3 Enterprise

Opportunistic Wireless Encryption

Wired Equivalent Privacy

Open Network Access

36 / 70

You are are doing tests in your lab and with the following equipment specifications:
• AP1 has a radio that generates a 16 dBm signal.
• AP2 has a radio that generates a 13 dBm signal.
• AP1 has an antenna with a gain of 8 dBi.
• AP2 has an antenna with a gain of 12 dBi. The antenna cable for AP1 has a 4 dB loss. The
antenna cable for AP2 has a 3 dB loss.
What would be the calculated Equivalent Isotropic Radiated Power (EIRP) for AP1?

-9 dBm

20 dBm

40 dBm

15 dBm

37 / 70

In an ArubaOS 10 architecture using an AP and a gateway, what happens when a client attempts to join the network and the WLAN is configured with OWE?

Authentication information is not exchanged

The Gateway will not respond

No encryption is applied

RADIUS protocol is utilized

38 / 70

A customer has a site with 200 AP-515 access points 75AP-565 access points installed. The customer is rolling out new mobile phones with Wi-Fi-calling. 802.1X is in use for authentication What should be enabled to ensure the best roaming experience?

802.1X

802.11r

802.11w

802.11h

39 / 70

Your manufacturing client is deploying two hundred wireless IP cameras and fifty headless scanners in their warehouse. These new devices do not support 802.1X authentication.

How can HPE Aruba enhance security for these new IP cameras in this environment?

Use MPSK Local to automatically provide unique pre-shared Keys for devices.

Aruba ClearPass performs the 802.1X authentication and installs a certificate.

MPSK provides for each device in the WLAN to have its own unique pre-shared Key.

MPSK Local will allow the cameras to share a rey and the scanners to share a different

40 / 70

How is Dynamic Multicast Optimization (DMO) implemented in an HPE Aruba wireless network?

DMO is configured individually tor each SSID in use in the network.

The AP uses OOS to provide equal air time for multicast traffic

DMO is configured globally for each SSID in use in the network

The controller converts multicast streams into unicast streams

41 / 70

Which feature allows the device to remain operational when a remote link failure occurs between a Gateway cluster and a RADIUS server that is either in the cloud or a datacenter?

MAC caching

MAC Authentication

Authentication survivability

Opportunistic key caching

42 / 70

For an Aruba AOS-10 AP in mixed mode, which factors can be used to determine the forwarding role assigned to a client? (Select two.)

Client IP address

802.1X authentication result

Client MAC address

Client SSID

Client VLAN

43 / 70

You are setting up a customer’s 15 headless loT devices that do not support 802.1X. What should you use?

Multiple Pre-Shared Keys (MPSK) Local

Clearpass with WPA3-PSK

Clearpass with WPA3-AES

Multiple Pre-Shared Keys (MPSK) with WPA3-AES

44 / 70

You are doing tests in your lab and with the following equipment specifications
• AP1 has a radio that generates a 10 dBm signal
• AP2 has a radio that generates a 11 dBm signal
• AP1 has an antenna with a gain of 9 dBi
• AP2 has an antenna with a gain of 12 dBi.
• The antenna cable for AP1 has a 2 dB loss
• The antenna cable for AP2 has a 3 dB loss
What would be the calculated Equivalent Isotropic Radiated Power (EIRP) for AP1?

26 dBm

30 dBm

17 dBm

-12 dBm

45 / 70

Refer to the image

Your customer is complaining of weak Wi-Fi coverage in their office. They mention that the office on the other side of the hall has much better signal What is the likely cause of this issue?

The AP is a remote access point

The AP is using a directional antenna

The AP is an outdoor access point

The AP is configured in Mesh mode

46 / 70

A new network design is being considered to minimize client latency in a high-density environment. The design needs to do this by eliminating contention overhead by dedicating subcarriers to clients.
Which technology is the best match for this use case?

OFDMA

MU-MIMO

QWMM

Channel Bonding

47 / 70

You are deploying a bonded 40 MHz wide channel What is the difference in the noise floor perceived by a client using this bonded channel as compared to an unbonded 20MHz wide channel?

2 dB

3 dB

8 dB

4 dB

48 / 70

You are doing tests in your lab and with the following equipment specifications:
• AP1 has a radio that generates a 20 dBm signal
• AP2 has a radio that generates a 8 dBm signal
• AP1 has an antenna with a gain of 7 dBI.
• AP2 has an antenna with a gain of 12 dBI.
• The antenna cable for AP1 has a 3 dB loss
• The antenna cable forAP2 has a 3 dB loss.
What would be the calculated Equivalent Isotropic Radiated Power (EIRP) for AP1?

2 dBm

8 dBm

22 dBm

24 dBm

49 / 70

What is a primary benefit of BSS coloring?

BSS color tags improve performance by allowing APS on the same channel to be farther apart

BSS color tags improve security by identifying rogue APS and tagging them as threats

BSS color tags are applied on the wireless controllers and can reduce the threshold for interference

BSS color tags are applied to WI-Fi channels and can reduce the threshold tor interference

50 / 70

What steps are part of the Key Management workflow when a wireless device is roaming from AP1 to AP2? (Select two.)

AP1 will cache the client's information and send it to the Key Management service

The Key Management service receives from AirMatch a list of all AP2's neighbors

The Key Management service receives a list of all AP1 s neighbors from AirMatch

The Key Management service then generates R1 keys for AP2's neighbors.

A client associates and authenticates with the AP2 after roaming from AP1

51 / 70

What is a primary benefit of BSS coloring?

BSS color tags improve performance by allowing clients on the same channel to share airtime

BSS color tags are applied to client devices and can reduce the threshold for interference

BSS color tags are applied to Wi-Fi channels and can reduce the threshold for interference

BSS color tags improve security by identifying rogue APs and removing them from the network

52 / 70

When setting up an Aruba CX VSX pair, which information does the Inter-Switch Link Protocol configuration use in the configuration created?

QSVI

MAC tables

UDLD

RPVST+

53 / 70

When configuring UBT on a switch what will happen when a gateway role is not specified?

The switch will put the client on the access VLAN

The gateway will assign a default role to the client

The switch will assign the default deny role to the client.

The gateway will send back the deny role to the client.

54 / 70

You are configuring an SVI on an Aruba CX switch that needs to have the following characteristics:

• VLANID = 25
• IPv4 address 10 105 43 1 with mask 255 255 255.0
• IPv6 address fd00:5708::f02d:4df6 with a 64 bit prefix length
• member of VRF eng
• VRF eng and VLAN 25 have not yet been created

Which command lists will satisfy the requirements with the least number of commands?

A)

B)

C)

D)

Option A

Option B

Option C

Option D

55 / 70

What is the best practice for handling voice traffic with dynamic segmentation on AOS-CX switches?

Switch authentication and local forwarding of the voice traffic

Switch authentication and user-based tunneling of the voice traffic

Central authentication and port-based tunneling of the voice traffic

Controller authentication and port-based tunneling of all traffic

56 / 70

Which statements are true about VSX LAG? (Select two.)

The total number of configured links may not exceed 8 for the pair or 4 per switch

Outgoing traffic is switched to a port based on a hashing algorithm which may be either switch in the pair

LAG traffic is passed over VSX ISL links only while upgrading firmware on the switch pair

Outgoing traffic is preferentially switched to local members of the LAG.

Up to 255 VSX lags can be configured on all 83xx and 84xx model switches

57 / 70

With the Aruba CX switch configuration, what is the Active Gateway feature that is used for and is unique to VSX configuration?

Sixteen different VMACs are supported total as shared

Active Gateway can once MSTP instances are created for VLAN load sharing

Sixteen different VMACS are supported for each IPV4 and IPV6 stack simultaneously

copied over the ISL link for an optimized path

58 / 70

Two AOS-CX switches are configured with VSX at the the Access-Aggregation layer where servers attach to them An SVI interface is configured for VLAN 10 and serves as the default gateway for VLAN10. The ISL link between the switches fails, but the keepalive interface functions. Active gateway has been configured on the VSX switches.

What is correct about access from the servers to the Core? (Select two.)

Server 1 can access the core layer via the keepalrve link

Server 2 can access the core layer via the keepalive link

Server 2 cannot access the core layer.

Server 1 can access the core layer via both uplinks

Server 1 and Server 2 can communicate with each other via the core layer

Server 1 can access the core layer on only one uplink

59 / 70

A customer is concerned about me unprotected traffic between an AOS-CX switch and a gateway, running on AOS 10. What is a feasible option to protect this traffic?

Implement an IPSec tunnel to protect PAPI between the AOS-CX switches and the gateway

Implement an MD5 HMAC function lo protect PAPI between the AOS-CX switches and the gateway

Implement a GRE tunnel to protect PAPI between the AOS-CX switches and the gateway

no action is needed, an RSA certificate already encrypts the traffic

60 / 70

You are helping an onsite network technician bring up an Aruba 9004 gateway with ZTP for a branch office The technician was to plug in any port for the ZTP process to start Thirty minutes after the gateway was plugged in new users started to complain they were no longer able to get to the internet. One user who reported the issue stated their IP address is 172.16 0.81 However, the branch office network is supposed to be on 10.231.81.0/24.
What should the technician do to alleviate the issue and get the ZTP process started correctly?

Turn off the DHCP scope on the gateway, and set DNS correctly on the gateway to reach Aruba Activate

Move the cable on the gateway from port G0/0V1 tc port G0 0.0

Move the cable on the gateway to G0/0/1. and add the device's MAC and Serial number in Central

Factory default and reboot the gateway to restart the process

61 / 70

A customer wants to enable wired authentication across all their CX switches One of the requirements is that the switch must be able to authenticate a single computer connected through a VoIP phone.
Which feature should be enabled to support this requirement?

Multi-Domain Authentication

Device-Based Mode

MAC Authentication

Multi-Auth Mode

62 / 70

A customer is using stacked Aruba CX 6200 and CX 6300 switches for access and a VSX pair of Aruba CX 8325 as a collapsed core 802 1X is implemented for authentication. Due to the lack of cabling, some unmanaged switches are still in use Sometimes devices behind these switches cause network outages The switch should send a warning to the Helpdesk when the problem occurs You have been asked to implement an effective solution to the problem-
What is the solution for this?

Configure spanning tree on the Aruba CX 8325 switches Set the trap-option

Configure loop protection on all edge ports of the Aruba CX 6200 and CX 6300 switches No trap option is needed

Configure loop protection on all edge ports of the Aruba CX 6200 and CX 6300 switches Set up the trap-option

Configure spanning tree on the Aruba CX 6200 and CX 6300 switches No trap option is needed

63 / 70

You are troubleshooting an issue with a pair of Aruba CX 8360 switches configured with VSX Each switch has multiple VRFs. You need to find the IP address of a particular client device with a known MAC address You run the “show arp” command on the primary switch in the pair but do not find a matching entry for the client MAC address. The client device is connected to an Aruba CX 6100 switch by VSX LAG.
Which action can be used to find the IP address successfully?

Option A

Option B

Option C

Option D

64 / 70

You need to drop excessive broadcast traffic on an ingress port or an ArubaOS-CX switch. What is the best feature to use for this task?

DWRR queuing

Strict queuing

Rate limiting

QoS shaping

65 / 70

You need to have different routing-table requirements With Aruba CX 6300 VSF configuration. Assuming the correct layer-2 VLAN already exists, how would you create a new SVI for a separate routing table?

create a new VLAN, and attach the VRF to it

Create a new routing table, and attach VLANS to it

Create a new SVI and use attach command

Create a new VLAN. and attach the routing table to it

66 / 70

With the Aruba CX 6200 24G switch with uplinks or 1/1/25 and 1/1/26, how do you protect client ports from forming layer-2 loops?

int 1/1/1-1/1/24, loop-protect

int 1/1/1-1/1/28, loop-protect

int 1/1/1-1/1/28, loop-guard

int 1/1/1-1/1/24, loop-guard

67 / 70

A customer is using a legacy application that communicates at layer-2. The customer would like to keep this application working across the campus which is connected via layer-3. The legacy devices are connected to Aruba CX 6300 switches throughout the campus.

Which technology minimizes flooding so the legacy application can work efficiently?

Generic Routing Encapsulation (GRE)

EVPN-VXLAN

Ethernet over IP (EolP)

Static VXLAN

68 / 70

Which statements are true regarding a VXLAN implementation on Aruba Switches? (Select two.)

MTU size must be increased beyond the default

VNIs encapsulate and decapsulate VXLAN traffic

VTEPs encapsulate and decapsulate VXLAN traffic

They are only available for datacenter switches (CX 8k, 9k,10k)

All Aruba CX switches support VXLAN.

69 / 70

The customer needs a network hardware refresh to replace an aging Aruba 5406R core switch pair using spanning tree configuration with Aruba CX 8360-32YC switches What is the benefit of VSX clustering with the new solution?

stacked data-plane

faster MSTP converge processing

dual Aruba AP LAN port connectivity for PoE redundancy

dual control plane provides better resiliency

70 / 70

You must ensure the HPE Aruba network you are configuring for a client is capable of plug-and-play provisioning of access points. What enables this capability?

UCC Service

LLDP-MED

SRTP

CSMA

Your score is

The average score is 27%

0%

Blog

HPE7-A01