Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 591klB651

Note! The HPE6-A45 Exam is no longer available.

HPE6-A45 Implementing Aruba Campus Switching solutions Questions and Answers

Questions 4

Refer to the exhibit.

HPE6-A45 Question 4

A network administrator wants to prevent endpoints from spoofing the MAC address of the VLAN 2 default gateway. What should the administrator configure on Switch-1?

Options:

A.

MAC lockdown of the default gateway MAC address on ports 1-20

B.

MAC lockdown of the default gateway MAC address on trk1

C.

default gateway MAC address as a port security authorized address on trk1

D.

default gateway MAC address as a port security authorized address on ports 1-20

Buy Now
Questions 5

An AOS-Switch has type of service disabled on it globally. The administrator enters:

AOS-Switch(config)# interface 1 qos trust device aruba-ap

What is the effect of this command?

Options:

A.

if the AOS-Switch is integrated with an Aruba Mobility Controller, it uses QoS settings sent by the controller to prioritize traffic sent on interface 1

B.

if interface 1 connects to an Aruba AP, it uses the incoming DSCP and a global DSCP map to prioritize traffic received on this interface

C.

if the AOS-Switch is integrated with an Aruba Mobility Controller, it uses QoS settings sent by the controller to classify traffic received on interface 1

D.

if interface 1 connects to an Aruba AP, the switch marks all traffic received on the interface with a higher than default priority value

Buy Now
Questions 6

Refer to the exhibits.

Exhibit 1

HPE6-A45 Question 6

Exhibit 2

HPE6-A45 Question 6

The network administrator needs to set up BGP between the two company switches, Switch-1 and Switch-2. The BGP connection does not establish. Based on the exhibits, what does the administrator need to do to fix the issue?

Options:

A.

Set the update source for the neighbor to the local loopback interface on each switch.

B.

Enter the network command for 10.0.0.0/24 in the router BGP mode on each switch.

C.

Enable the multihop option for the neighbor on each of the switches.

D.

Enable BGP on the interfaces that the switches use to reach each other.

Buy Now
Questions 7

The security policy for a company requires that switches use SNMPv3 and accept all read-only SNMPv2c messages. The network administrator enables SNMPv3. Which additional action should the network administrator take to comply with this policy?

Options:

A.

Disabled SNMPv3 inform timeouts.

B.

Enable SNMPv3 only operation.

C.

Enable SNMPv3 restricted mode.

D.

Disable SNMPv1/v2c.

Buy Now
Questions 8

Refer to the exhibit.

HPE6-A45 Question 8

Network administrators want the network to use PIM-DM to route multicasts from Server 1 to receivers in VLAN 24.

Which protocols should the administrators enable on which VLANs on Switch-1?

Options:

A.

PIM-DM on VLAN 24; IGMP and PIM-DM on VLAN 10

B.

IGMP on VLAN 24; IGMP on VLAN 10

C.

IGMP on VLAN 24; PIM-DM on VLAN 10

D.

IGMP and PIM-DM on VLAN 24; PIM-DM on VLAN 10

E.

IGMP and PIM-DM on VLAN 24; PIM-DM on VLAN 10

Buy Now
Questions 9

Refer to the exhibits.

Exhibit 1

HPE6-A45 Question 9

Exhibit 2

HPE6-A45 Question 9

Exhibit 1 shows the topology for the network. The network administrator sees the log entries shown in Exhibit 2. Which type of failure is indicated?

Options:

A.

A link between Switch-1 and Switch-2 went down. BFD detected the lost connectivity and behaved as expected.

B.

Graceful restart helper was not enabled on Switch-2, so BFD was unable to operate correctly, and the session was taken down.

C.

A hardware issue caused a unidirectional link; BFD detected the issue at Layer 2 and prevented a broadcast storm.

D.

BFD was set up incorrectly on Switch-2, so it caused Switch-2 to lose adjacency with Switch-1 rather than repair the session.

Buy Now
Questions 10

Refer to the exhibits.

Exhibit 1

HPE6-A45 Question 10

Exhibit 2

HPE6-A45 Question 10

Exhibit 1 shows a portion of the BGP routing table when the BGP solution was first deployed. Exhibit 2 shows the same portion at the current time. What can explain the current state?

Options:

A.

Due to changes in the private network, Switch-1 can no longer reach 192.168.2.1.

B.

Switch-1 can no longer reach ISP 1 at 192.168.1.1.

C.

Due to changes at ISP 1, Switch-1 now selects a different best route.

D.

An administrator has applied a route map on Switch-1 that filters advertised routes.

Buy Now
Questions 11

A network administrator plans to apply DSCP 46 to all traffic on a port. What is required for this configuration to work?

Options:

A.

The port has trust set to default.

B.

A DSCP map that sets 46 to a priority value.

C.

The port has trust set to DSCP.

D.

A QoS policy selects traffic with DSCP 46.

Buy Now
Questions 12

Refer to the exhibit.

HPE6-A45 Question 12

Switch-1 and Switch-2 are configured to provide VRRP in VLAN 2. Based on the output, what will happen when a client in VLAN 2 sends an ARP request for its default gateway IP address?

Options:

A.

Only Switch-2 will respond, and it will respond with its own MAC address.

B.

Only Switch-2 will respond, and it will respond with the virtual MAC address for VRID 2.

C.

Both Switch-1 and Switch-2 will respond, and both will respond with the virtual MAC address for VRID 2.

D.

Both Switch-1 and Switch-2 will respond, and each will respond with its own MAC Address.

Buy Now
Questions 13

A company requires AOS-Switches at the campus core. The switches:

  • Will act as the default gateways for several campus VLANs
  • Must provide redundancy for their services and tolerate the loss of a link or an entire switch
  • Must recover from the failure of one of the switches within a second or less

VRRP and MSTP are proposed to meet these requirements. What is an issue with this proposal?

Options:

A.

VRRP provides redundancy against lost links but not a failed switch.

B.

VRRP provides routing redundancy but not default gateway redundancy.

C.

VRRP does not interoperate with MSTP.

D.

VRRP takes longer than a second to fail over.

Buy Now
Questions 14

Refer to the exhibit.

HPE6-A45 Question 14

Which issue needs to be addressed in this design?

Options:

A.

a new plan for ISP redundancy, because Switch-1 can only support one AS number, so it cannot connect to both ISP 1 and ISP 2

B.

an adjustment to the physical links, because both links to the ISP routers must be on the commander to prevent a split-brain situation

C.

a new way to provide core redundancy, because AOS-Switches in VSF fabrics can only establish BGP relationships with AOS-Switches

D.

a way to ensure that the company private network does not become a transit for traffic between ISP 1 and ISP 2

Buy Now
Questions 15

OSPF Area 1 has two ABRs. One ABR is configured with this range for Area 1: 10.10.0.0/16. The other ABR is configured with this range for Area 1: 10.10.0.0/17.

Which type of issue occurs due to this mismatch?

Options:

A.

The ABRs lose adjacency entirely and cannot route traffic between each other at all.

B.

The ABRs create a discontiguous area and disrupt intra-area routing between devices within Area 1.

C.

The ABRs advertise routes inconsistently, and they could potentially introduce a routing loop.

D.

The ABRs lose adjacency in Area 1 and must route all traffic to each other through Area 0.

Buy Now
Questions 16

Refer to the exhibit.

HPE6-A45 Question 16

The company wants the fastest convergence and best load sharing of traffic over the links between Switch-1 and the VSF fabric. Which technology should the network administrator implement on these links?

Options:

A.

RPVST+

B.

MSTP

C.

loop protection

D.

LACP

Buy Now
Questions 17

A network administrator sets up MAC-Auth and captive portal to Aruba ClearPass on AOS-Switches. The solution seems to work for most guests. However, some guests open their browsers and are not redirected to the captive portal.

How should the administrator address the likely cause of the issue?

Options:

A.

Set the RADIUS server time window to 0 because some guest computers likely have the incorrect system time.

B.

Replace MAC-Auth on switch ports with Web-Auth because this authentication method offers more reliability with captive portal.

C.

Reconfigure the captive portal URL hash key on some of the switches, which likely have the wrong password.

D.

Replace expired certificates on the switches and set their usage to captive portal since some guests have an HTTPS homepage.

Buy Now
Questions 18

A company wants to implement role-based tunneled node on AOS-Switches. Which solution should be included in the plan to help apply the roles?

Options:

A.

a RADIUS server, such as Aruba ClearPass

B.

an SNMP server, such as Aruba AirWave

C.

Aruba Mobility Manager (MM)

D.

Aruba Meridian

Buy Now
Questions 19

A company deploys AOS-Switches at sites with inexperienced IT staff. The main office network administrators want to monitor thresholds to generate alerts on branch switches. What should be set up for this purpose?

Options:

A.

an SNMP trap

B.

an RMON alarm

C.

an auto-config server

D.

an sFlow instance

Buy Now
Questions 20

An AOS-Switch enforces 802.1X authentication to an Aruba ClearPass server. A user connects but cannot receive network access, even though the ClearPass administrator finds an Access-Accept for the user on this switch. The switch administrator suspects that there is an issue with the dynamic settings returned by ClearPass.

Where should the administrator look for information about these settings?

Options:

A.

in the details for port-access clients

B.

in the detailed RADIUS server statistics

C.

in the interface statistics

D.

in the running-config for the interface

Buy Now
Questions 21

What must an OSPF router do to ensure nonstop routing should a standby member take over as commander when the original VSF commander fails?

Options:

A.

It must run the shortest path first algorithm.

B.

It must participate in a new election for the Designated Router.

C.

It must initiate a graceful restart.

D.

It must re-establish adjacency with its Designated Router.

Buy Now
Questions 22

An AOS-Switch implements tunneled node.

Which benefit does the PAPI enhanced security key provide?

Options:

A.

It validates the signature for firmware pushed to the switch dynamically.

B.

It encrypts traffic sent and received by tunneled-node endpoints.

C.

It authenticates control traffic between the switch and its Mobility Controller.

D.

It provides an extra layer of authentication for endpoints on tunneled-node ports.

Buy Now
Questions 23

Refer to the exhibit.

HPE6-A45 Question 23

A network administrator wants to add the protections of root guard to the network. Based on the spanning tree topology, on which ports should the network administrator implement root guard?

Options:

A.

3-24

B.

1 and 2

C.

A1 and A2

D.

2 and A3

Buy Now
Questions 24

Refer to the exhibits.

HPE6-A45 Question 24

Exhibit 2

HPE6-A45 Question 24

The network administrator configures the commands shown in Exhibit 2. Which mismatch will cause an issue?

Options:

A.

the mismatch between the key IDs specified in chain10 and chain11 on Switch-1

B.

the mismatch between the key-strings in the chains for VLAN 10 and VLAN 11 on Switch-1

C.

the mismatch between the chain names associated with VLAN 11 on Switch-1 and on Switch-3

D.

the mismatch between the key-strings associated with VLAN 10 on Switch-1 and on Switch-2

Buy Now
Questions 25

Network administrators need to track when traffic matches deny entry in an ACL applied to a port. They want the alert to be sent to a syslog server that is already set up to send logs.

What should administrators do to enable alerts?

Options:

A.

Specify the log option for the ACL entry, and enable ACL debugging.

B.

Set the debug destination to session, and enable ACL debugging.

C.

Enable ACL debugging, and enable SNMP port security traps.

D.

Specify the log option for the ACL entry, and enable SNMP port security traps.

Buy Now
Exam Code: HPE6-A45
Exam Name: Implementing Aruba Campus Switching solutions
Last Update: Nov 28, 2023
Questions: 169
dumpsmate guaranteed to pass
24/7 Customer Support

DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.

Site Secure

mcafee secure

TESTED 19 Apr 2024