HPE6-A41.prepaway.premium.exam.

125q

Number: HPE6-A41
Passing Score: 800
Time Limit: 120 min
File Version: 4.1

HPE6-A41

Applying Aruba Switching Fundamentals for Mobility

Version 4.1
Exam A

QUESTION 1
Refer to the exhibit.

Which links can be combined in the same link aggregation?

A. Links 3 and 4
B. Links 3 and 5
C. Links 3 and 6
D. Links 4 and 6

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
We can also aggregate link 5 and 6

QUESTION 2
Which privilege level would a network administrator use to configure an ArubaOS switch?

A. Administrator
B. Manager
C. Super
D. User

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
QUESTION 3
Refer to the exhibit.

The network administrator enters this command:

Switch# reload

Which software and configuration file will load?

A. software version KA.16.01 and config3

B. software version KA.15.15 and config2
C. software version KA.15.15 and config3
D. software version KA.16.01 and config1

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 4
Refer to the exhibit.
A network administrator executes this command on an ArubaOS switch, Switch-2:
Switch-2(config)# ip route 10.1.100.0/24 10.1.1.1

The administrator successfully pings Device 1 at 10.1.100.42 from Switch-2. However, Device 2 cannot
ping Device 1.
The administrator confirms that Device 1 is correctly set up.

What should the administrator check on Switch-2 to resolve this issue?

A. that ARP proxy is enabled

B. that IP routing is enabled
C. that spanning tree is disabled
D. that ICMP is enabled

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 5
Refer to the exhibit.
What should the network administrator do to permit Switch-1 to route traffic from a client in 10.1.11.0/24 to
a client in 10.1.12.0/24?

A. Enable proxy ARP.

B. Enable IP routing.
C. Configure a static route to 10.1.11.0/24 and a static route to 10.1.12.0/24.
D. Enable OSPF routing on VLAN 11 and on VLAN 12 in the same area.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 6
How many operating system image files can a network administrator load on an ArubaOS switch?

A. two
B. three
C. four
D. unlimited

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 7
Refer to the exhibit.
Originally, all four switches had the same region configuration. VLAN 14 was added to Switch_D and then
mapped to instance 2.

How does this affect the MSTP topology?

A. Load sharing is lost, one of the uplinks is blocked for all traffic on Switch_C and Switch_D.
B. Load sharing is lost, one of the uplinks is blocked for all traffic on Switch_D
C. All connectivity is lost, both uplinks are blocked on Switch_D.
D. A Layer 2 loop exists and will cause sporadic connectivity issues.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 8
Refer to the exhibit.

The network administrator wants to place contractor clients and employee clients in different broadcast
domains.

How should the administrator achieve this goal?

A. Add a router in between Switch 1 and Switch 2. Configure a different subnet on each router interface.
B. Create two MSTP instances on each switch. Assign ports connected to contractor clients to one
instance and ports connected to employee clients to the other instance.
C. Assign the switch ports connected to contractor clients to one VLAN and ports connected to employee
 clients to another VLAN. Extend the VLANs between the switches.
D. Create two device profiles. Apply one profile to ports connected to contractor clients, and apply the
other profile to ports connected to employee clients.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 9
Refer to the exhibit.

All of the switches shown in the exhibit are ArubaOS switches.

Where should the network administrator configure an IP helper address of 10.1.1.10?

A. on VLAN 2 on Switch-1
B. on VLAN 2 on Switch-3
C. on VLAN 1 on Switch-1
D. on VLAN 1 on Switch-2

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 10
What is the relationship between a wireless client’s data rate and the throughput for the client’s traffic?

A. The throughput is 90 percent of the data rate.

B. The throughput is equal to the data rate multiplied by the connection time, minus the headers’ bytes.
C. The throughput is less than the data rate and also depends on factors such as number of clients in the
cell.
D. The data rate and the throughput are equivalent.
Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 11
Refer to the exhibit.

The network consists of two ArubaOS switches with routing disabled.

How should the network administrator configure the link between Switch A and Switch B to ensure that all
hosts can communicate to all the other hosts within their respective VLANs?

A. tagged for VLAN 20 and tagged for VLAN 30

B. untagged for VLAN 10 and tagged for VLAN 30
C. tagged for VLAN 10 and tagged for VLAN 20
D. untagged for VLAN 10, untagged for VLAN 20, and tagged for VLAN 30

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 12
A company has ArubaOS switches that are already configured to support the network. The company now
wants to use Aruba AirWave to manage the switches. The network administrator creates a new group on
Aruba AirWave, and then discovers several ArubaOS switches that should belong to this group.

What is the best practice for the initial authorization of the switches in AirWave?

A. Authorize the switches in Monitor + Firmware Updates only mode.

B. Authorize the switches and immediately change the scan set credentials to match the credentials on the
switches.
C. Authorize the switches and immediately change the global communication settings to match the
credentials on the switches.
D. Authorize the switches in Managed Read/Write mode.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 13
Refer to the exhibit.

A company has an existing Aruba Instant cluster with several Instant APs (IAPs), as shown in the exhibit.
The network administrator orders a new IAP and boots it for the first time by connecting it to the PoE switch
port shown in the exhibit.

What happens after the IAP boots?

A. The IAP attempts to contact AirWave. If it is able to reach AirWave and obtain the current VC (master)
IP address, it joins the cluster.
B. The IAP fails to join the cluster because the administrator has not yet connected to its Instant SSID and
provisioned it.
C. The IAP undergoes an election process with the current VC (master). It takes the VC role if it has a
higher MAC address unless the current VC is configured as the preferred VC.
D. The IAP hears the messages from the current VC (master), and it joins the cluster without the
occurrence of a new election.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 14
A network administrator configures MSTP on an ArubaOS switch. The administrator wants to ensure that
this switch is always the root for instance 1.

What should the administrator do to accomplish this?

A. Specify priority 15 for spanning tree instance 1.

B. Specify spanning tree cost 0 on all switch ports that connect to other switches that use instance 1.
C. Specify priority 0 for spanning tree instance 1.
D. Specify spanning tree cost 15 on all switch ports that connect to other switches that use instance 1.
Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 15
A retail company needs a quick way to deploy network infrastructure to new sites.

Which Aruba solutions provide Zero Touch Provisioning (ZTP) for Aruba Instant APs (IAPs) and ArubaOS
switches?

A. Aruba AirWave and Aruba Activate

B. Aruba Meridian and Aruba ALE
C. Aruba AirWave and Aruba Central
D. Aruba Activate and Aruba Meridian

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 16
Refer to the exhibit.

Exhibit 1.
Exhibit 2.

The administrator enters the show spanning-tree instance 2 command on Switch-3 and sees the
output shown in Exhibit 2.

What could explain the output results?

A. Switch-1 has a lower MAC address than Switch-2.

B. Switch-1 has a higher MAC address than Switch-2.
C. Switch-3 filters BPDUs on port 26.
D. Switch-3 has incompatible MSTP region settings with other switches.
Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 17
Managers log in to an ArubaOS switch with SSH.

What does SSH require to authenticate the switch to the SSH client and set up a secure session?

A. an SSH authorized user key, managed by the ip ssh public-key commands

B. a username and password set with the password manager command
C. an SSH key, managed by the crypto key ss commands.
D. a self-signed certificate configured with the crypto key commands

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=mmr_kc-0134172

QUESTION 18
A network administrator needs to configure a link aggregation on an ArubaOS switch.

For which type of link aggregation is the administrator required to enter the lacp command in the interface
context?

A. a distributed LACP link aggregation

B. a dynamic LACP link aggregation
C. a static LACP link aggregation
D. a manual LACP link aggregation

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference:http://www.arubanetworks.com/techdocs/ArubaOS_60/UserGuide/LACP.php

QUESTION 19
Refer to the exhibit.
Spanning tree runs on the switches shown in the exhibit. The network administrator enters these two
commands:
Switch-1(config)# spanning-tree priority 0
Switch-2(config)# spanning-tree priority 1

The other switches use the default spanning tree priorities. The administrator enters the show spanning-
tree command on Switch-2.

If the configuration is correct, which roles will the output show?

A. A1 = Designated A2 = Alternate A3 = Alternate

B. A1 = Root A2 = Designated A3 = Designated
C. A1 = Designated A2 = Designated A3 = Designated
D. A1 = Root A2 = Alternate A3 = Alternate

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: http://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_CLI/spanning-tree
(Global).htm

QUESTION 20
Refer to the exhibit.
The network administrator enters this command:
Switch(config)# ip route 172.16.2.0/30 192.168.1.100 metric 1 distance 1

Why does this route fail to appear in the IP routing table?

A. Its prefix length is invalid.

B. Its next hop is unreachable.
C. Its administrative distance is the same as an existing static route.
D. Its metric is the same as an existing static route.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 21
Refer to the exhibit.

Exhibit 1.

Exhibit 2.
Which devices can communicate with each other at Layer 2?

A. Devices 1 and 2 can communicate at Layer 2; Devices 3 and 4 can communicate at Layer 2.
B. Devices 2 and 3 can communicate at Layer 2.
C. Devices 1 and 4 can communicate at Layer 2.
D. Devices 1 and 4 can communicate at Layer 2; Devices 2 and 3 can communicate at Layer 2.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 22
Refer to the exhibit.

Exhibit 1.

Exhibit 2.

The routing configuration must support this behavior:

Server 1 and Server 2 communicate over Link 1 when Link 1 is up.
If Link 1 fails, Server 1 and Server 2 can continue to communicate over the path through Switch-3.

What must the network administrator change to meet these criteria?

A. On Switch 3, add a route to 192.168.2.0/24 through 192.168.1.9 and a route to 192.168.3.0/24 through
192.168.1.5.
B. On Switch-1, Switch-2, and Switch-3, change the next hop in each static route to specify an IP address
that exists on that switch.
C. On Switch-1, raise the administrative distance for the second route to 192.168.3.0/24; on Switch-2,
raise the administrative distance for the second route to 192.168.2.0/24
D. On Switch-1, add a route to 192.168.1.8/30 through 192.168.0.3; on Switch-2, add a route to
192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.169.1.4.
E. On Switch-1, add a route to 192.168.1.8/30 through 192.168.1.2; on Switch-2, add a route to
192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.168.1.4.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 23
A network administrator plans to set up a WLAN on an Aruba Instant cluster. The WLAN uses WPA/WPA2
Enterprise security. The administrator wants no authenticate users locally on the cluster.

How should the administrator configure me credentials?

A. Add a user account for each employee to the cluster internal server database.
B. Import authorized device MAC addresses to the cluster.
C. Implement a shared secret or password in the cluster WLAN settings.
D. Set up an external RADIUS server for authorization.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 24
How does a switch treat a link aggregation?

A. The switch treats the link aggregation as one logical link for spanning tree, but it learns MAC addresses
separately on each individual interface within the aggregation.
B. The switch treats the link aggregation as one logical link. It assigns one spanning tree port role to the
link aggregation, and it learns MAC addresses on the aggregation.
C. The switch treats the link aggregation as one logical link for MAC learning, but it assigns an individual
spanning tree port role to each interface within the aggregation.
D. The switch treats each interface within the interface as a separate entity for MAC address learning; it
also assigns an individual spanning tree port role to each interface.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 25
A network administrator needs to configure a static route.

What should the administrator use as the next hop address?

A. the lowest IP address on the neighboring router in the path towards its destination
B. the IP address on the local interface that is used to egress traffic towards its destination
C. the IP address of the default gateway in the destination subnet
D. the IP address on the connected interface of a neighboring router in the path towards its destination

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 26
A network administrator just received two switches and wants to use the plug-and-play method to establish
a Virtual Switching Framework (VSF) fabric with the fewest steps possible.

What must the administrator do to establish the fabric in this way?

A. Configure a VSF link on the commander, and enable VSF on the standby member.
B. Configure a VSF link on the commander, and enable VSF on the commander.
C. Enable VSF on both me commander and the standby member.
D. Configure a VSF link on both the commander and the standby member.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: https://community.arubanetworks.com/aruba/attachments/aruba/WiredNetworks/209/1/
ArubaOS%20VSF%20Configuration%20Guide.pdf#%5B%7B%22num%22%3A25%2C%22gen%22%
3A0%7D%2C%7B%22name%22%3A%22XYZ%22%7D%2C69%2C237%2C0%5D

QUESTION 27
Refer to the exhibit.

Exhibit 1.
Exhibit 2.
Assume that Switch-2 is correctly configured for OSPF.

Which additional step must the administrator take to enable Switch-1 to advertise 192.168.2.0/24 to Switch-
2?

A. Set a router ID on Switch-1.

B. Configure a route to advertise 192.168.2.0/24 on Switch-1.
C. Add Switch-2’s router ID to Switch-1’s OSPF neighbor list.
D. Enable OSPF on VLAN 2.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 28
Which type of 802.11 wireless network can be hosted by an endpoint device such as a laptop?

A. a wireless distribution system

B. an ad hoc network
C. a wireless mesh or bridge
D. an infrastructure network

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 29
What is one benefit that Aruba AirWave can provide to a customer with ArubaOS switches?

A. It can audit switch firmware (software) and automate updates.

B. It can enable the switches to provide mobility controller functions for connected Instant APs (IAPs).
C. It can provide centralized authentication and authorization for users who log in to the switch CLI.
D. It can program the switches to dynamically adjust QoS settings to prioritize Skype for Business traffic.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://www.google.co.in/url?
sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0ahUKEwjKxOev5JfUAhXGLI8KHVYWDvEQFggnMAA&
url=http%3A%2F%2Fwww.arubanetworks.com%2Fassets%2Fds%
2FDS_AW.pdf&usg=AFQjCNG2mDuwxsqBI8MHZoKPpteQmEJ71g&sig2=r3FEvyQVngpJKqQVz-
kIOA&cad=rja

QUESTION 30
An ArubaOS switch operates at its factory default settings. A network administrator connects the switch to
a VLAN with a DHCP server. The switch-to-switch connection carries untagged traffic. The administrator
wants to use Telnet log in to the switch CLI.

How should the administrator contact the switch and log in?

A. Contact the switch at its default IP address 172.16.0.254/24 and log in without entering a password.
B. Contact the switch at its default IP address 192.168.1.1/24 and log in with me default password admin.
C. Contact the switch at its DHCP-assigned IP address and log in without entering a password.
D. Contact the switch at its DHCP-assigned IP address and log in with the default password aruba.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 31
Refer to the exhibit.
A network administrator views the configuration files on an ArubaOS switch and sees the output in the
exhibit. The administrator enters this command:
Switch# boot system flash primary config config2

After the switch boots, the administrator makes some configuration changes and saves the configuration
with the write memory command. The administrator then enters this command:
Switch# boot

After the switch boots, the configuration changes just made are not present.

How can the administrator restore the configuration with the changes?

A. Use the boot set-default command to configure the switch to use the secondary software. Then reboot
the switch.
B. Reboot the switch and interrupt the boot process. Find the temporary file with the configuration changes
and apply that file to the startup-config.
C. Rename the config2 file to config1. Then reboot the switch.
D. Use the startup-default command to configure the switch to use the config2 file with the primary
software. Then reboot the switch.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 32
For which task does a network administrator need to access the enable context on an ArubaOS switch?

A. to view interface statistics

B. to view CPU statistics
C. to ping an IP address
D. to view configuration files

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 33
A network administrator prepares an ArubaOS switch to be monitored and managed by AirWave.
Which credentials are required for AirWave to change configuration settings on the switch?

A. RADIUS shared secret

B. SNMPv2c community with manager unrestricted privileges
C. Telnet or SSH password
D. SNMPv3c user in the ManagerPriv group

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 34
A company has an Aruba 5400R switch, switch 1, at the network core of its campus. This switch routes all
traffic for the campus and is the RSTP root. The company now wants to add another Aruba 5400R switch
to the core in order to enhance resiliency. The company wants to use the option that provides the best
Layer 2 and Layer 3 resiliency and also the simplest setup.

What should the administrator do to add the new 5400R switch?

A. Add the new switch and migrate to MSTP with two instances.
B. Add the new switch and set up OSPF on all switches.
C. Add the new switch as a secondary root bridge in RSTP.
D. Add the new switch as a standby member in a VSF fabric with switch 1.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 35
Which settings should match on physical interfaces before a network combines them in a link aggregation?

A. speed and duplex mode

B. DSCP and media
C. speed and VLANs
D. LLDP TLVs and VLAns

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 36
Two switches are members of a Virtual Switching Framework (VSF) fabric.

Which statement correctly describes how the switches handle routing?

A. Only the commander runs routing protocols and builds the IP routing table, but it programs the standby
member to route traffic.
B. Both members build their own IP routing tables, which they synchronize. Only static IP routing is
supported with VSF.
C. Only the commander runs routing protocols and builds the IP routing table, and all routed traffic must
 pass through the commander.
D. Both members run routing protocols and build their own IP routing tables, and they synchronize the
tables over VSF links.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 37
A server connects to a port on an ArubaOS switch. The network administrator wants to ensure that the port
remains forwarding during MSTP topology changes, and changes in the port status do not cause MSTP
topology changes.

Which statement describes how the administrator can accomplish this?

A. The administrator can accept the default behavior of auto-edge.

B. The administrator can lower the port’s root path cost to zero.
C. The administrator can manually disable STP on the edge port.
D. The administrator can configure the port as an MSTP master port.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 38
Refer to the exhibit.

Endpoint A sends broadcast ARP requests.

Where are these requests received?

A. at EndpointC
B. at EndpointB
C. at EndpointB, at EndpointC, and at EndpointD
D. at EndpointB and at EndpointC

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 39
A network administrator wants to be able to access an Aruba Instant cluster at the same IP address even if
the current master fails.

How can the administrator achieve this goal?

A. Configure a VC IP address that is a reserved IP address in the AP’s subnet.

B. Configure the AirWave IP address in the instant cluster System > Admin settings.
C. Assign static IP addresses, rather than DHCP ones, to all APs in the instant cluster.
D. Assign a static IP addresses, rather than a DHCP one, to the AP that is elected master.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 40
A network administrator discovers and then authorizes several ArubaOS switches in Aruba AirWave.
Immediately after the administrator authorizes the switches, AirWave cannot communicate with the
switches anymore.

What should the administrator do to restore communication?

A. Change the SNMP and Telnet/SSH credentials in the AirWave global communication settings to match
those on the switches.
B. Change the management level for the switches to Monitoring and Firmware Updates Only.
C. Specify the SNMP and Telnet/SSH credentials on the switches to update the individual communication
settings on the switches.
D. Change the management level for the switches to Manage Read/Write.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 41
A company has a single routing protocol environment.

What is one reason to use OSPF routing instead of static routing?

A. OSPF allows ArubaOS switches to use default routes, while static routes cannot use 0.0.0.0/0 as the
destination network.
B. OSPF has a lower default administrative distance than static routing on ArubaOS switches.
C. OSPF reduces the risk of accidentally introducing routing loops, while static routing does not.
D. OSPF permits load sharing traffic over multiple routes, while static routing does not.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 42
Refer to the exhibit.

A network administrator installs a new aggregation and access layer in a campus network. All users in this
area belong to the same VLAN. The administrator plugs the switches into the network with the factory
default configurations.

Which protocol must the administrator configure to prevent broadcast storms?

A. MSTP
B. LLDP
C. OSPF
D. LACP

Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:

QUESTION 43
A network administrator is in this context in an ArubaOS switch CLI:
Switch (vlan10)#

The administrator wants to leave the configuration context with a single command/

Which command should the administrator enter?

A. logout
B. quit
C. exit
D. end

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 44
Refer to the exhibit.

MSTP is implemented in the topology shown in the exhibit, and all the switches are in the same region. The
network administrator does not want to use the Internal Spanning Tree (IST) or instance 0 for production
traffic.

How many non-IST spanning tree instances does this network need in order to have effective load sharing
on the uplinks from the access switches?

A. two
B. three
C. four
D. five

Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:

QUESTION 45
Refer to the exhibit.

Based on the exhibit, what is the problem?

A. An issue causes the spanning tree to converge and re-converge again and again.
B. Interface 25 on Switch-1 is incorrectly configured as an STP edge port and cause a loop to occur.
C. Interface 25 on Switch-1 does not support the correct VLANs and prevents the interface from receiving
the correct STP role.
D. Switch-1 and another switch are configured with the same spanning tree priority and cause the root
election to occur again and again.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 46
Refer to the exhibit.

Exhibit 1.
Exhibit 2.
Exhibit 3.
How many MSTP regions exist in the topology shown in the exhibit?

A. one
B. two
C. three
D. four

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 47
An ArubaOS switch operates at factory default settings. A network administrator enters this command:
Switch (config)# password operator plaintext mysecret

How does the switch now control access to the CLI through the console port?

A. It forces users to enter no username and password operator to gain access to basic mode. Users must
then enter password mysecret to reach enable mode.
B. It forces users du enter username operator and password mysecret to gain access to basic mode.
Users can then reach enable mode without authenticating.
C. It allows users to access basic mode without logging in, but forces them to enter password mysecret to
reach enable mode.
D. It forces users to enter no username and password mysecret to gain access to basic mode. Users can
then reach enable mode without authenticating.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 48
Refer to the exhibit.

Device 1 needs to send traffic to Device 2, and it sends an ARP request in preparation.

Which devices process this ARP request?

A. all devices in VLAN 2, 192.168.2.0/24 subnet

B. all devices connected to Switch-2
C. all devices in VLAN 3, 192.168.3.0/24 subnet
D. all devices in this network

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 49
A Virtual Switching Framework (VSF) fabric is configured to use LLDP-MAD.

Which action does the standby member take if it sends a probe but receives no response?

A. It sends a request packet to the commander to determine which ports should remain active.
B. It continues to function and assumes the role of commander.
C. It automatically changes its status to MAD inactive fragment.
D. It requests that the commander change its status to MAD inactive fragment.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 50
Refer to the exhibit.

Exhibit 1.

Exhibit 2.

A network administrator needs to set up DHCP relay in a switched network comprised of ArubaOS
switches. Switch A and Switch B have the IP settings in Exhibit 2, and no static or dynamic routes. Switch B
is the DCHP server’s default gateway. The administrator correctly configures the IP helper address on
Switch A. However, when the DHCP client attempts to acquire an IP address in VLAN 10, the process fails.

What does the administrator need to do to solve this problem?

A. Configure a static route on Switch A, and enable IP Helper on Switch B.
B. Configure a static route on Switch A.
C. Configure a static route on Switch A and Switch B, and enable IP Helper on Switch B.
D. Configure a static route on Switch A and Switch B.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 51
A network administrator configures OSPF in a network with ArubaOS switches. The administrator is
concerned that a rogue device might connect to an access layer switch and introduce OSPF routes to the
company’s routing topology. The access VLANs do not contain additional routers.

What should the administrator do so switches do not form an adjacency with rogue devices on the access
VLANs?

A. Implement BPDU filtering on interfaces assigned to these VLANs.

B. Configure the VLANs as passive OSPF interfaces.
C. Configure the interfaces with the highest OSPF DR priority.
D. Apply outbound routing policies to filter routes on the VLANs.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 52
A network administrator has copied new software to an ArubaOS switch and placed this software in the
secondary flash location. The switch is currently booting from the primary location. The administrator wants
the switch to start using the new software.

What should the administrator do to accomplish this?

A. Reboot the switch, which automatically causes the switch to use the newer software.
B. Execute the command to boot the system from the secondary flash.
C. Rename the secondary software as the primary software.
D. Copy the secondary software to the primary software slot.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 53
Which security benefit does SNMPv3 offer that SNMPv2 does not offer?

A. SSL encryption
B. Scopes
C. Data integrity
D. RADIUS groups

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 54
The network administrator wants to know which device, type, and manufacturer is connected to port 10 on
an Aruba 3810 switch.

Which command could provide this information?

A. show interface 10
B. show mac-address 10
C. show lacp peer 10
D. show lldp remote-device 10

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Reference: https://h20565.www2.hpe.com/hpsc/doc/public/display?
sp4ts.oid=1827663&docLocale=en_US&docId=emr_na-c04943204#S_commands

QUESTION 55
Which benefit does Aruba Clarity in Aruba AirWave provide?

A. It provides an easily searchable network topology that includes physical wired, physical wireless, and
virtual network infrastructure devices.
B. It helps managers use the AirWave Management Platform (AMP) with its context-specific help and links
to additional resources.
C. It enables managers to view all configuration templates for APs, and switches from a single dashboard.
D. It provides at-a-glance views of issues such as DHCP request and 802.1X authentication failures to aid
in troubleshooting.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 56
A Virtual Switching Framework (VSF) fabric currently has two members and two physical 10GbE links in its
VSF link.

Which administrative task can a network administrator perform on this VSF fabric when both members are
online?

A. Remove a VSF member.

B. Add a new 40GbE link to the VSF link.
C. Remove one of the physical links in the VSF link.
D. Change the VSF link to use 40GbE links instead of 10GbE links.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
QUESTION 57
Refer to the exhibit.

Based on the topology shown in the exhibit, which symptom does a network administrator see if the
ArubaOS switches are in their factory default states?

A. Ports places in a blocking state

B. Mislearned MAC addresses
C. TTL expired in transit
D. Layer 3 loop

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 58
Refer to the exhibit.
Exhibit 1.

Exhibit 2.

PC1 cannot reach PC2.

Based on the exhibits, what could be the cause of this issue?

A. PC1 has the wrong IP address for its default gateway setting.
B. Router A has a direct route, instead of a static route, to 10.1.10.0/24.
C. The next hop address for the 10.1.20.0/24 route is incorrect.
D. Router A has an invalid subnet mask for the VLAN 1 subnet.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 59
What does the traceroute command that is entered on an ArubaOS switch identify?

A. each physical device between the switch and a destination

B. the path to each router connected to the switch
C. each Layer 3 device between the switch and a destination
D. debug output tracing entries to the routing table

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 60
Refer to the exhibit.

Switch 1 shown in the exhibit is an ArubaOS switch that has an uplink to the network core on interface 25.
The network administrator wants to add a link on interface 26. The administrator creates a link aggregation
with this command:
Switch1 (config)# trunk 25-26 trk1 lacp

What else must the administrator do to enable the Switch 1 link aggregation to successfully pass all traffic
to the core?

A. Configure VLANs 10 and 20 as tagged VLANs on interface 26.

B. Configure VLANs 10 and 20 as tagged VLANs on trk1.
C. Enable BPDU filtering on interface 26.
D. Enable LACP in active or passive mode on interfaces 25 and 26.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 61
An ArubaOS switch is protected with a manager password. The network administrator wants to back up the
configuration and apply it to other switches. The administrator wants the manager password to be available
in both the saved and running configuration.
To accomplish this goal, what must the administrator do before the configuration is backed up?

A. Enter the password command with the plaintext option.

B. Configure an SSH keypair on the switch.
C. Enter the include-credentials command.
D. Ensure that the server to which the configuration will be backed up uses SCP as opposed to TFTP.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 62
A manager password is configured on an ArubaOS switch. The network administrator wants to ensure
managers only use SSH to connect to the ArubaOS switch for CLI access. Which step should the
administrator complete to accomplish this?

A. Enter the command no telnet-server.

B. Enter the commend include-credentials.
C. Enter the command ip ssh.
D. Enter the command secure-vty.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 63
Refer to the exhibit.

Which issue could cause the Blocked status on A2?

A. A1 and A2 are connected to different switches.

B. A1 and A2 use different trunk load balancing modes.
C. A1 and A2 support different VLANs.
D. A1 and A2 have spanning tree enabled on the link aggregation.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 64
A company has two ArubaOS switches, Switch1 and Switch2. Switch1 will be the commander for a new
Virtual Switching Framework (VSF) fabric. Switch2 is a new switch that will be the standby member. The
network administrator wants to configure the proper settings on the standby member interface before the
standby member joins the fabric.

What should the administrator do before the switches are joined in the VSF fabric?

A. Configure the interface settings on Switch2. Then enable VSF on Switch2.

B. Enable VSF on Switch2. Then configure the interface settings on Switch2.
C. Provision member2 on Switch1. Then configure the member2 interface settings on Switch1.
D. Provision member2 on Switch1 and member1 on Switch2. Then configure the member2 interface
settings on Switch2.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 65
Refer to the exhibit.

A network administrator wants to set up a link aggregation between two switches, as shown in the exhibit.
The link aggregation must meet these requirements:
Protects against misconfiguration
Can be configured with VLANs and other settings

Which type of link aggregation should the administrator create?

A. dynamic LACP
B. static LACP
C. manual (trunk)
D. distributed (trunk)

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 66
Refer to the exhibit.

The switches in the exhibit are all ArubaOS switches that run MSTP. The network administrator wants all of
the switch-to-switch links shown in the exhibit to be available for forwarding routed traffic.

What should the administrator do to accomplish this?

A. Configure link-keepalive on the switch-to-switch ports.

B. Configure links on a switch as a standard link aggregation.
C. Configure the switch-to-switch ports as MSTP auto-edge ports.
D. Configure BPDU filters on the switch-to-switch ports.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 67
A network administrator wants to deploy Aruba Instant APs (IAPs) at a remote site that does not have
Internet access. The APs should receive their configuration automatically from AirWave by using Zero
Touch Provisioning (ZTP). What does the administrator need to configure?
A. the name and password of a user with full administrative rights to AirWave
B. the name of the AirWave VLAN with the configuration that the APs should use
C. the DHCP server configured with options 43 and 60 for ZTP
D. the IP address for the DNS server with the mapping for the airwave hostname

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 68
A network administrator wants to disable physical interfaces 13-24 on an ArubaOS switch. How can the
administrator do this?

A. Assign the range of interfaces to a VLAN. Then, disable the VLAN.

B. Create a named range for interfaces 13-24. Then, disable the named range.
C. Create a named port group for interfaces 13-24. Then, disable the named port group.
D. Use the interface disabl command. Specify 13-24 for the ID.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 69
Which technology can provide automated network optimization for unified communication applications such
as Skype for Business?

A. Software-defined Networking (SDN)

B. Zero Touch Provisioning (ZTP)
C. Simple Network Management Protocol (SNMP)
D. Virtual Switching Framework (VSF)

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 70
A network administrator needs to set up a static LACP link aggregation. How should the administrator
configure the VLAN settings for the link aggregation?

A. Configure the VLANs on the physical interface with the lowest port ID before link aggregation setup.
B. Configure the VLANs on both physical interfaces after link aggregation setup.
C. Configure the VLANs on the link aggregation interface after the link aggregation setup.
D. Configure the VLANs on both physical interfaces before link aggregation setup.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
QUESTION 71
A network administrator enters this command on an ArubaOS switch with IP routing enabled:

This is the only IP route to 0.0.0.0/0 on the switch.

What is the effect?

A. The switch uses this route to route all traffic from 10.1.1.1.
B. The switch uses this route for all traffic unless the traffic matches a route with a lower cost than 10.
C. The switch uses this route for all traffic unless the traffic matches a route with a lower administrative
distance than 10.
D. The switch uses this route for all traffic that does not match a specific route in its routing table.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 72
Member1 is the commander of a Virtual Switching Framework (VSF) fabric. A power distribution causes
member 1 to go down. Now the network administrator wants to rejoin member1 to the VSF fabric and make
member1 the commander again.

What should the administrator do?

A. Boot member1 and allow it to rejoin to the VSF fabric. Then reboot member2.
B. Boot member1 and allow it to rejoin the VSF fabric.
C. Disconnect member1 from member2 before booting member1.
D. Configure member2 with VSF priority0. Then boot member1 and allow it to rejoin the VSF fabric.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 73
A network administrator wants to see the VLANs supported on one ArubaOS switch interface and if those
VLANs have tagged or untagged assignments. What should the administrator do to find this information?

A. View the MAC forwarding table for the interface and VLAN with the show mac-address command.
B. Use the detail option with the show vlans port command.
C. Use the local-device option with the show lldp info command.
D. View the interface with the show interface command.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
QUESTION 74
Refer to the exhibit.

The link between Core-1 and Core-2 shown in the exhibit fails, and some users lose connectivity. What
should the network administrator do to prevent this issue in a situation such as this?

A. Configure BPDU protection on all Core-2 ports.

B. Enable IP routing on Core-2.
C. Create routes to 10.1.10.0/24 and 10.1.11.0/24 through 10.1.1.3 on Core-2.
D. Extend VLANs 10 and 11 on all switch-to-switch links.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 75
A network administrator wants to place desktops connected to an ArubaOS switch in VLAN5. The desktops
have no awareness of VLANs. How should the administrator assign desktops to the VLAN?

A. Make switch ports connected to desktops tagged members of VLAN5.

B. Make VLAN5 the Default VLAN on the switch before the desktops connect to the switch ports.
C. Make VLAN5 the Primary VLAN on the switch.
D. Make switch ports connected to desktops untagged members of VLAN5.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 76
A network administrator connects an Aruba Instant AP (IAP) to an ArubaOS switch but cannot connect the
AP to the Instant cluster that exists. The administrator wants to check the IAP management IP address and
software version from the ArubaOS switch CLI. To obtain this information, what should the administrator
ensure is enabled on the switch and switch interfaces?

A. SNMP
B. ARP
C. Device profiles
D. LLDP

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 77
A network administrator wants to form a cluster with several Aruba Instant APs. What is required to achieve
this goal?

A. All APs must be pre-configured with WLANs with the same SSID.
B. All APs must be in the same regulatory domain.
C. All APs must operate on the same radio channel.
D. All APs must be the same model.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 78
Refer to the exhibits.

Exhibit 1
Exhibit 2

A network uses RSTP, as shown in the exhibits. The network administrator wants switches to use the link
that connects to Core-2 to forward some of the traffic. The administrator enters these commands on every
switch shown in the exhibit:

The administrator then discovers that the links to Core-2 still did not forward any traffic.

What should the administrator do to enable these links to carry traffic?

A. Activate the MSTP region configuration on all switches.

B. Lower the port cost on the links that connect to Core-2 on the access layer switches.
C. Configure Core-2 with spanning tree priority 0 in instance 2.
D. Change the spanning tree mode to MSTP on all switches.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 79
Refer to the exhibit.

Prior to implementing OSPF on the network, an ArubaOS switch had the IP routing table shown in the
exhibit.

The network administrator then sets up OSPF in the network. The switch calculates these OSPF routes to
10.1.20.0/24:

Through 10.1.0.1 with cost 2 and administrative distance 110

Through 10.1.0.2 with cost 3 and administrative distance 110
Through 10.1.0.3 with cost 4 and administrative distance 110
How does the switch now handle traffic that is destined to the 10.1.20.0/24 network?

A. It sends all of the traffic to 10.1.0.3.

B. It load balances the traffic: sends some to 10.1.0.1 and some to 10.1.0.3.
C. It load balances the traffic: sends some to 10.1.0.2 and some to 10.1.0.3.
D. It sends all of the traffic to 10.1.0.1.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 80
A network administrator uses the console to access an ArubaOS core switch and wants to find the
management IP address of another ArubaOS switch that is currently connected to port B1. Which
information should the administrator review?

A. interface with the use of the show interface command

B. LLDP with the use of the show lldp info remote-device command
C. ARP with the use of the show arp command
D. device profile with the use of the show device-profile status command

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 81
An interface on an ArubaOS switch did not receive any BDPUs and has the spanning tree auto-edge
setting. What describes the effect of this setting?

A. The interface has spanning tree disabled on it and ignore BPDUs.

B. The interface remains forwarding during topology changes.
C. The interface root path cost is automatically set to 0.
D. The interface is preferred to be selected as master port.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 82
Refer to the exhibit.
The student A client needs to connect to FTP Server B. Student A sends the necessary ARP request and
receives a reply.

Which destination MAC address does the Student A client use in the FTP packet to FTP Server B?

A. 00-1D-B3-F1-EF-40
B. 00-E0-52-F0-44-87
C. 00-1D-B3-F1-EF-31
D. 00-E0-52-F0-41-B2

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 83
What is a requirement for links to successfully participate in an aggregated link?

A. that links have the spanning tree protocol disabled

B. that links use the same speed and duplex mode
C. that links use the same media type and are untagged
D. that links are untagged and are associated to the same VLAN

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 84
An ArubaOS switch provides PoE+ to several Aruba APs. Users might also connect PoE devices to this
switch. In a situation where the switch PoE capacity is exceeded, the network administrator wants to
ensure that the switch continues to power the APs in preference to other devices.

What should the administrator do to achieve this goal?

A. Set the PoE priority for the ports connected to APs to critical.
B. Set the PoE class for the ports connected to APs to Class 5.
C. Make sure that LLDP MED is enabled on both the switch ports and the APs.
D. Set the PoE allocation on the ports connected to APs to the maximum value permitted by PoE+.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 85
What is a valid setup for a Virtual Switching Framework (VSF) fabric?

A. one 5406R zl2 switch as commander and one 5412R zl2 switch as a standby member
B. one 5412R zl2 switch as commander and two 5406R zl2 switches as standby members
C. one 5406R zl2 switch as commander and two 5412R zl2 switches as standby members
D. one 5412R zl2 switch as commander and one 5412R zl2 switch as a standby member

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 86
A network administrator wants to download a configuration from an ArubaOS switch. The administrator
does not have local access to the switch and wants to copy the configuration in a secure manner that
prevents eavesdroppers from reading the configuration. Which two options can the administrator use to
copy the configuration?

A. SFTP and HTTPS

B. ZModem and SFTP
C. HTTPS and TFTP
D. HTTPS and ZModem

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 87
A network administrator needs to complete the initial setup on an ArubaOS switch with the use of remote
access. How can the network administrator do this?

A. Connect the switch’s OOBM port to the same VLAN as the management station, and then establish a
Telnet session to the switch default IP address.
B. Connect the switch’s OOBM port to the same VLAN as Aruba AirWave. Then manually discover the
switch in AirWave using the switch default IP address.
C. Send a Reverse ARP from the management station and assign a temporary IP to the workstation.
D. Set up the network DHCP server to assign the switch a reserved IP address. Connect the switch to a
VLAN with DHCP services and then establish a Telnet session to the reserved IP address.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 88
Refer to the exhibits.

Exhibit 1

Exhibit 2

A network administrator wants to create a backup IP route to 10.1.20.0/24 on Switch-1. The backup route
should use Link2, and it should only be used if Link1 is down.

What is the correct setup to accomplish this?

A. an IP route through 10.1.20.1 with administrative distance 10

B. an IP route through 10.0.2.2 with administrative distance 10
C. an IP route through 10.0.2.2 with administrative distance 1
D. an IP route through 10.1.20.1 with administrative distance 1

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 89
Which technology enables a network administrator to group users by logical function instead of physical
location, reduce bandwidth waste by limiting broadcast traffic, and improve security by isolating users at
Layer2?

A. 802.1X
B. SNMPv3
C. VLANs
D. Virtual Switching Framework (VSF)

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 90
Refer to the exhibit.

Assume that Student A’s ARP table is empty. Student A prepares to send an FTP packet to FTP Server B
and needs to discover the proper destination MAC address.

For which IP address does Student A send an ARP request?

A. 10.1.2.2
B. 10.1.10.1
C. 10.1.10.87
D. 10.1.20.1

Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:

QUESTION 91
A network administrator enters this command in an ArubaOS switch CLI:
Switch(config)# ip route 0.0.0.0/0

The CLI shows this error:

Incomplete input: 0.0.0.0/0

How can the administrator find a valid way to complete the command?

A. Enter ip ––help route.

B. Enter ip route 0.0.0.0/0 ? with a space before the ?.
C. Enter help ip route.
D. Enter ip route 0.0.0.0/0? With no space before the ?.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 92
Refer to the exhibit.

Prior to implementing OSPF on the network, an ArubaOS switch had the IP routing table shown in the
exhibit. The network administrator then sets up OSPF in the network. The switch calculates these OSPF
routes to 10.1.20.0/24:

Through 10.1.0.1 with cost 3 and administrative distance 110

Through 10.1.0.2 with cost 3 and administrative distance 110

How does the way the switch handles traffic destined to 10.1.20.0/24 change with the introduction of
OSPF?

A. The switch stops sending the traffic to 10.1.0.3 and instead load balances it to 10.1.0.1 and 10.1.0.2.
B. The switch no longer drops this traffic and instead load balances it to 10.1.0.1 and 10.1.0.2.
C. The switch continues to send the traffic to 10.1.0.3, but it now has backup routes for the traffic in case
the connection to 10.1.0.3 fails.
D. The switch no longer drops this traffic and instead sends it to 10.1.0.1.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 93
Which configuration settings for an ArubaOS switch must be deleted from a physical interface before it can
be associated with a Virtual Switching Framework (VSF) link?

A. Distributed trunking
B. Virtual Router Redundancy Protocol (VRRP)
C. Multi-Active Detection (MAD)
D. Graceful OSPF (non-stop forwarding)

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 94
Refer to the exhibit.

Based on the output shown in this exhibit, which statement is true about the 10.0.0.2 neighbor?

A. The neighbor rejects communications because it already has its maximum number of neighbors.
B. The neighbor has mismatched settings and cannot exchange information with this switch.
C. The neighbor communicates with this switch, but it cannot hold any more routes in its database.
D. The neighbor communicates with this switch, and they have exchanged all topology information.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 95
A network administrator plans two interfaces for a Virtual Switching Framework (VSF) link. Which best
practice should the administrator follow?

A. Configure a low spanning tree cost on the interfaces.

B. Configure the interfaces as a distributed trunk.
C. Use interfaces on different modules.
D. Use copper connections.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 96
A company wants a modular switch for the core layer of its mid-sized campus. The switch requires 32 10 G
ports in a single switch with the ability to scale in the future. Which ArubaOS switches series is best suited
for this role?

A. Aruba 2930F
B. Aruba 3800
C. Aruba 3810
D. Aruba 5400R

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 97
A network administrator implements a wireless network that uses three wireless APs. The administrator
wants to ensure that users can roam seamlessly from one AP to another. Which type of wireless network
should the administrator implement?

A. an ad hoc network that does not use channel bonding

B. an infrastructure network with a different Service Set Identifier (SSID) on each AP
C. an ad hoc network that uses channel bonding
D. an infrastructure network with the same Service Set Identifier (SSID) on each AP

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 98
Which ArubaOS switch feature treats multiple ports as one logical port?

A. OSPF
B. STP
C. VSF
D. link aggregation

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 99
A network administrator creates a local user account and assigns that account to the Level-9 authorization
group. The administrator tests the group assignment and is able to successfully log in with the local user
credentials. However, the administrator is able to enter all the commands rather than only the commands
permitted by the Level-9 group.

How can the administrator resolve this issue?

A. Set an operator password.

B. Set the command access level to enable.
C. Set the command access level to all.
D. Set command authorization to local.
Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 100
How can a network administrator configure an ArubaOS switch to automatically assign the correct tagged
VLANs to a port when an Aruba AP connects to that port?

A. Configure the tagged VLANs in the device profile and apply that profile to the port.
B. Configure a MAC-to-VLAN mapping policy and enable MAC-based VLANs on the port.
C. Enable Zero Touch Provisioning (ZTP) on the switch.
D. Enable LLDP MED globally and on the switch port.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 101
Refer to the exhibit.

A network administrator logs in to the CLI of a Virtual Switching Framework (VSF) fabric and enters the
command shown in the exhibit.

What does the output reveal?

A. MAD assistant at 10.1.0.2 failed to respond to probe requests.

B. The VSF link failed, and MAD shut down the links on the other member.
C. MAD is configured incorrectly and causes a split brain situation to occur.
D. The VSF link failed, and MAD shut down the links on this switch.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 102
How does a wireless network differ from a wired network?

A. A wireless network is a shared medium, while a modern wired network typically works in full-duplex
mode.
B. A wireless network is inherently more secure than a wired network.
C. A wireless network does not use source and destination MAC addresses, but a wired network does.
D. A wireless network does not support encryption, unlike a wired network, which can support encryption.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 103
Which standard for wireless connectivity supports the fastest data rates and Multi-User Multiple Input/
Multiple Output (MU MIMO)?

A. 802.11a
B. 802.11ac
C. 802.11g
D. 802.11n

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 104
A network administrator wants to pre-configure new MSTP region settings on ArubaOS switches, and then
apply the new settings at a later time. How can the administrator pre-configure the settings?

A. Change the MSTP region name after the new settings are configured.
B. Create a second spanning tree region on the switch and apply the settings to this region.
C. Use the pending option in the spanning-tree commands.
D. Change the MSTP region revision number after the new settings are configured.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 105
Why would a network administrator use strict provisioning to configure the standby member in a Virtual
Switching Framework (VSF) fabric?

A. The network administrator wants to control which device can join the VSF fabric.
B. The network administrator needs to configure the correct domain ID on the standby member before this
member joins the VSF fabric.
C. The network administrator wants to ensure the standby member is configured with the same settings as
the commander.
D. The network administrator does not know the MAC address of the standby member.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 106
Refer to the exhibit.

This switch currently assigns all VLANs to MSTP instance 0 or the Internal Spanning Tree (IST).

Which statement correctly describes interface 21?

A. The interface is down at Layer 2; it is not available for sending or receiving any traffic.
B. The interface does not forward or accept data traffic, but it is ready to start forwarding if interface 19
fails.
C. The interface is an edge port but has received Bridge Protocol Data Units (BPDUs), so it is disabled.
D. The interface does not support spanning tree; it is possible that it will introduce a loop in the network.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 107
What often happens when a Layer2 broadcast domain has a loop?

A. Some switch-to-switch ports take the MSTP alternative role and stay in that role.
B. In the switch MAC tables, the MAC addresses frequently move from one port to another.
C. Switches automatically raise their MSTP configuration revision level by one.
D. In the switch routing tables, some routes converge with new metrics.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 108
What is true about the community string used for SNMPv1 and SNMPv2c?

A. The community string hashes the SNMP message, but does not encrypt it, which provides for data
integrity.
B. The community string is like a password transmitted in cleartext, which provides no data integrity or
privacy.
C. The community string encrypts the SNMP message, but does not hash it, which provides for data
privacy.
D. The community string encrypts and hashes the SNMP message, which provides for data integrity and
privacy.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
QUESTION 109
Which security options for a WLAN can authenticate either the computer or the user?

A. Open with MAC authentication

B. MAC authentication with WPA2 Enterprise (802.1X) fail-thru
C. Personal (preshared key) authentication with WEP
D. Personal (preshared key) authentication with WPA2

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 110
Refer to the exhibit.

Exhibit 1.

Exhibit 2.
Which devices can communicate with each other at Layer 2?

A. Devices 1 and 2 can communicate at Layer 2; Devices 3 and 4 can communicate at Layer 2.
B. Devices 2 and 3 can communicate at Layer 2.
C. Devices 1 and 3 can communicate at Layer 2.
D. Devices 1 and 4 can communicate at Layer 2; Devices 2 and 3 can communicate at Layer 2.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 111
A company requires switches to use MSTP instead of RSTP, so that the switches can forward traffic on
more than one switch-to-switch link. How does the administrator set up the solution to meet this
requirement?

A. Set the same spanning tree cost on all redundant links on a switch.
B. Ensure that switches use the 802.3t standard costs instead of the legacy costs.
C. Map different VLANs to different instances, and make a different switch root bridge in each instance.
D. Configure every switch with a unique bridge propriety in the IST, which is also called spanning tree
instance 0.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 112
What is one advantage of OSPF over static routing?

A. OSPF allows ArubaOS switches to use default routes, while static routes cannot use 0.0.0.0/0 as the
destination network.
B. OSPF has a lower default administrative distance than static routing on ArubaOS switches.
C. OSPF better meets the needs of a complex topology with many redundant routes that static routing.
D. OSPF permits load sharing traffic over multiple routes, while static routing does not.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 113
Which security benefit does SNMPv3 offer that SNMPv2 does not offer?

A. SSL encryption
B. Scopes
C. Data confidentially
D. RADIUS groups

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 114
Which security option for a WLAN provides the best access control security?

A. MAC authentication with WPA-PSK

B. WPA2 Enterprise (802.1X)
C. WPA2 Personal (preshared key)
D. MAC authentication with WPA2 Enterprise (802.1X) fail-thru

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 115
A network administrator wants to see how much power an Aruba AP has dynamically requested from an
ArubaOS switch port. Which information should the administrator look at?
A. LLDP with the use of the show lldp info remote-device command
B. interface with the use of the show interface command
C. device class with the use of show system power-supply command
D. device profile with the use of the show device-profile status command

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://support.hpe.com/hpsc/doc/public/display?docId=c04943217 (80)

QUESTION 116
Refer to the exhibit.

MSTP is enabled on the switches shown in the exhibit.

Which additional step should the network administrator take to support load sharing of traffic on different
switch-to-switch links?

A. Configure different spanning tree port priorities for different instances on each access layer switch.
B. Assign different spanning tree port costs to different instances on each access layer switch.
C. Ensure that half of the switches use config revision 1 and half of the switches use config revision 2.
D. Create an identical VLAN-to-instance mapping on each switch, in which some VLANs are in each
instance.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 117
Several servers are connected to an ArubaOS switch. The servers send traffic with 802.1Q VLAN ID 5.
How should the network administrator configure the ArubaOS switch to receive this traffic?

A. Make VLAN 5 the Default VLAN on the switch before the servers connect to their switch ports.
B. Make switch ports connected to servers untagged members of VLAN 5.
C. Make switch ports connected to servers tagged members of VLAN 5.
D. Make VLAN 5 the Primary VLAN on the switch.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 118
A network administrator wants to use Aruba AirWave to manage Aruba 3810 Series switches deployed at
the campus access layer. How does AirWave determine which configuration template to apply to these
switches?

A. based on their group

B. based on their lowest level subfolder
C. based on their top level folder
D. based on the global group associated with their group

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 119
Member 1 is the commander of a Virtual Switching Framework (VSF) fabric. A power disruption causes
member1 to go down. What happens when power is restored and member 1 boots?

A. Member 1 fails to rejoin the VSF fabric, and the error disrupts member 2.
B. Member 1 rejoins the VSF fabric and becomes the commander.
C. Member 1 rejoins the VSF fabric, and member 2 continues to act as commander.
D. Member 1 fails to rejoin the VSF fabric, and member 2 continues to act as commander.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 120
A company needs a switch that supports 10GbE and 40GbE for its mid-sized campus. The company
prefers stackable, or fixed port, switches over modular switches. Which ArubaOS switch series best meet
these needs?

A. Aruba 2530
B. Aruba 2930F
C. Aruba 3810
D. Aruba 5400R

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 121
A network administrator wants to form a cluster with several Aruba Instant APs (IAPs). What must the
administrator verify?

A. that all APs are the same model

B. that all APs are operating on the same radio channel
C. that all APs are connected in the same subnet
D. that all APs are pre-configured with WLANs with the same SSID

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 122
Which standard for wireless connectivity supports both 2.4GHz and 5GHz?

A. 802.11a
B. 802.11ac
C. 802.11g
D. 802.11n

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 123
Refer to the exhibit.

A network administrator connects several new Aruba Instant APs (at factory defaults), as shown in the
exhibit. After waiting several minutes for the cluster to form, the administrator is ready to provision the
cluster. The administrator wants to be redirected to the Instant UI without the need to know the correct IP
address.

How should the administrator connect the management station to enable access to the virtual controller
(VC)?

A. to a switch port in the same VLAN

B. directly to one instant AP’s second Ethernet port
C. to the Instant SSID
D. directly to one Instant AP’s Basic Service Set (BSS)

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 124
A company has these requirements to manage its ArubaOS switches:

Management and data traffic cannot share links.

Managers must be able to reach switches remotely over IP connections.

How should the administrator set up switches to meet these requirements?

A. Assign at least one port on each switch to a Virtual Switching Framework (VSF) link and connect those
ports in a dedicated network.
B. Create a management VLAN and tag the VLAN on all switch-to-switch links.
C. Enable IP authorized managers for the administrator subnet.
D. Configure IP addressing on OOBM ports and connect them in a dedicated network.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 125
Refer to the exhibit.
Which feature should the network administrator configure on the Virtual Switching Framework (VSF) fabric
to prevent issues if Links 1 and 2 fail?

A. Graceful OSPF (non-stop forwarding)

B. Multi-Active Detection (MAD)
C. Distributed trunking
D. Virtual Router Redundancy Protocol (VRRP)

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference: