HP HPE6-A69 Exam Practice Test Instant Access

Question 1

You have designed a new wired solution for a customer that uses gateways and Dynamic Segmentation Which statements about User-Based Tunneling are true? (Select two)

AIn U8T, the switch performs user authentication.

Bin UBT, the Aruba Gateway performs user authentication

CUBT is supported only with Aruba Gateway standalone

Din UBT, the switch sends user role Information to Aruba Gateway

EIn UBT, the Aruba Gateway assigns the Primary user role

Answer : B, C

Question 2

The customer is implementing new ArubaOS-CX 6300 switches into an environment that has third-party switches and uses centralized authentication from Microsoft Active Directory and TACACS* servers

What would be a valid configuration requirement for ArubaOS-CX switches for centralized user authentication?

AImporting a TACACS server certificate for TLS authentication into the switch

BDefining a TACACS server group for authentication in the switch configuration

CEnabling the active directory VSA in the switch for radius authentication

DUsing a PAM extension for LDAP authentication with Active Directory Server.

Answer : C

Question 3

A customer is having a performance issue on the network and has received complaints about users experiencing Intermittent connectivity. After performing a packet capture, It is determined that there is unwanted UDP port 68 traffic being broadcast

6300W%wit

To mitigate this issue, which ArubaOS-CX 6300M switch feature would be best to implement?

Adhcpv4-snooping

Bprivate-vlan

Cbcms-optimization

Dbroadcast-limit

Answer : A

Question 4

A customer with an ArubaOS-CX 6300M switch is having a performance issue on the network and has received complaints about users experiencing intermittent connectivity. After performing troubleshooting it is determined that many of the local websites on the LAN that users are unable to reach are resolved to an invalid MAC address.

What are the minimum steps that should be performed to mitigate this condition? (Select two)

AImplement arp ACLs to define trusted MAC address to IP bindings

BEnable 'arp inspection' on the end-user physical ports

CEnable 'arp inspections on the end-user VLAN.

DImplement dhcpv4-snooping

EEnable 'arp inspection untrusted on the end-user physical pons

Answer : A, C

Question 5

The customer has a requirement for creating security filtering for IPv4 and IPv6 traffic passing through an ArubaOS-CX 6400 switch. Which statement Is true about access-list on the selected switch model?

AIPv4 and IPv6 entries can be used in one ACL with separate rules

BSeparate IPv4 and IPv6 ACLs need to be created for inbound and outbound traffic

COnly one inbound or outbound ACL can be bound to an interface.

DRouted interfaces can have only inbound ACLs

Answer : D

Question 6

The customer is considering Implemented the following VSX configuration that will host an Aruba mobility cluster servicing 9000 dual stack employee devices.

The client's default gateways will be hosted on the VSX stack. The customer is seeking advice about how to ensure ArubaOS-CX VSX best practices have been applied.

What advice can you offer the customer? (Select two)

AThe ISL Bandwidth should be upgraded

BAgg-1 and Agg-2's hardware forwarding table profile should be changed to 'L3-agg''.

CThe -system-mac' of Agg-1 should be changed to an unused address from the unicast private address range

DThe vsx linkup-delay timer is unnecessarily high; it should be reduced to prevent excessive delay of packet forwarding when a VSX peer joins an existing master.

EThe Keepalive interface should be changed to interface LAG2 so there is redundancy through the mobility cluster.

FThe keepalive subnet is misconfigured, it has an inappropriate address on Agg-1.

Answer : B, F

Question 7

When applying me following access-Iist to an ArubaOS-CX 6300 switch:

How does this ACL behave on the selected switch? (Select two.)

AThe mp traffic to MANAGEMENT-SERVERS group is logged to me event logs

BThe tftp traffic to MANAGEMENT-SERVERS group is not logged to the event logs.

CThe snmp-trap traffic to MANAGEMENT-SERVERS is logged to the event togs.

DThe denied tcp traffic to the MANAGEMENT-SERVERS group is logged to event logs.

EThe denied tcp traffic to the MANAGEMENT-SERVERS group is not logged to event logs

Answer : B, E

HPE6-A69 Aruba Certified Switching Expert Written Exam Practice Test