HPE2-W09 Online Practice Questions and Answers

Correct Answer: A

Network Analytics Engine (NAE) is a built-in analytics framework for network assurance and remediation on ArubaOS-CX switches. NAE allows monitoring, troubleshooting, and proactive network management using scripts and agents. Virtual Switching Extension (VSX) is a high-availability technology that allows two ArubaOS-CX switches to operate as a single logical device. You can run NAE with VSX, but only the primary VSX member will actually run agents during normal operation. The secondary VSX member will only run agents if the primary member fails or is rebooted1. Therefore, this correctly describes NAE limitations on ArubaOS-CX switches.

Correct Answer: A

Instead of using a standard configuration plan to deploy the configuration, create an auto config plan that uses scripts is what you should do if you want to use NetEdit to manage ArubaOS-CX switches and deploy a standard config to the switches, but need the config to include a few device-specific settings such as hostname and IP address. An auto config plan is a type of plan that allows you to use scripts to customize the configuration for each switch based on variables such as serial number, MAC address, or user-defined parameters1.

Correct Answer: B

Create a separate OSPF process for each VRF on Switch-1. Then redistribute each process into the other VRFs' processes is not a valid strategy for meeting this goal of enabling devices in VRF B and VRF C to reach shared resources in VRF A. This strategy would create unnecessary complexity and overhead on Switch-1, and it would not guarantee optimal routing between the VRFs. A better strategy would be to use inter- VRF routing or route leaking on Switch-1, which allows direct communication between different VRFs without requiring redistribution1.

Correct Answer: A

Virtual Switching Extension (VSX) is a high-availability technology that allows two ArubaOS-CX switches to operate as a single logical device. Split-recovery mode is a feature that prevents traffic loss when the Inter-Switch Link (ISL) goes outof-sync and keepalive subsequently fails. When split-recovery mode is enabled, the secondary VSX member disables its downstream links until it synchronizes with the primary member. When split-recovery mode is disabled, the secondary VSX member keeps its downstream links up even when it is out-of-sync with the primary member1. Disabling split-recovery mode is a use case for situations where you want an admin to manually fail traffic over to the secondary member if the primary member fails. This can be useful for planned maintenance or testing purposes, where you want to avoid automatic failover and failback of traffic. To manually fail traffic over to the secondary member, you need to shut down the ISL on both VSX members1. Therefore, this is a valid use case for disabling split-recovery mode on ArubaOS-CX switches in a VSX fabric.

Correct Answer: B

The guard interval is set in units of seconds and is used to prevent frequent topology changes due to a link going up and down is not a guideline for configuring timers for Ethernet Ring Protection Switching (ERPS) on an ArubaOS-CX switch. The guard interval is set in units of milliseconds, not seconds, and it is used to prevent false ring failures due to short link outages or flapping1.

Correct Answer: A

Aruba Fabric Composer (AFC) with Nutanix Hypervisor (AHV) integration is possible. AFC is a tool that provides automation and orchestration for managing data center networks composed of ArubaOS-CX switches. AFC can integrate with various data center software such as VMware vSphere, Nutanix AHV, Microsoft Hyper-V, etc. AFC can discover, monitor, and configure Nutanix AHV clusters and hosts using REST APIs1.

Correct Answer: A

ARP and ND Suppression are features of ArubaOS-CX that reduce the broadcast traffic on EVPN VXLAN networks1. ARP and ND Suppression enable the switch to reply to ARP and ND requests with information present in the local ARP and neighbor cache, instead of flooding them to all VTEPs1. This reduces the bandwidth consumption and improves the network performance1. When ARP-Suppression is enabled, the switch replies to ARP requests with information present in the local ARP Table2. Therefore, this statement about ARP and ND Suppression is true, and the correct answer is yes. For more information on ARP and ND Suppression, refer to the Aruba Data Center Network Specialist (ADCNS) certification datasheet3 and the EVPN VXLAN Guide for your switch model1.

Correct Answer: B

Implement Virtual Switching Extension (VSX) on pairs of ERPS switches at the same site. Then combine multiple links between two data centers into VSX LAGs (MC- LAGs) is not part of a valid strategy for load sharing traffic across the links in an Ethernet Ring Protection Switching (ERPS) ring. ERPS is a feature that provides loop prevention and fast convergence for Layer 2 networks that use ring topologies. VSX is a feature that provides active-active forwarding and redundancy for ArubaOS-CX switches. VSX LAGs or MC-LAGs are LAGs that span across two VSX nodes and provide load balancing and resiliency. However, VSX LAGs or MC-LAGs are not supported by ERPS because they can create loops in the ring topology. A better way to load share traffic across the links in an ERPS ring would be to use link aggregation groups (LAGs) between two nodes in a ring as long as they are not multi-chassis LAGs (MC-LAGs)1.

Correct Answer: B

Adding a route with this command: ip route 10.1.20.0/24 vlan20 vrf A is not part of a valid setup for meeting these requirements. This command would add a static route for 10.1.20.0/24 in VRF A, but it would not be able to reach VLAN 20 on Switch-2 because Switch-2 does not have a VLAN interface for VLAN 20 in VRF A. To make the services in VLAN 30 available to devices in 10.1.20.0/24 in VRF B, you need to use inter- VRF routing or route leaking between VRF A and VRF B on Switch-11.

Correct Answer: B

VXLAN is a tunneling protocol that encapsulates layer 2 traffic over an IP network using VXLAN Network Identifiers (VNIs) to identify different layer 2 segments. VXLAN Tunnel Endpoints (VTEPs) are devices that perform the encapsulation and decapsulation of VXLAN packets. According to the exhibit, Switch-1 and Switch-2 are VTEPs that use VNI 10010 to map VLAN 10 traffic. Therefore, when Switch-1 receives a frame with destination MAC address 00:50:56:00:00:03 and VLAN 10 tag on interface 1/1/1, it should encapsulate the frame with a VXLAN header that contains VNI 10010 and send it as a unicast packet to Switch-2's loopback address (10.1.1.2) over the IP network1. Switch-1 should not switch the frame out interface 1/1/2 without VXLAN, as this would violate the VNI mapping and cause layer 2 loops. Therefore, this is not how the switch handles the traffic. https://networklessons.com/cisco/ccnp-encor-350-401/introduction-to- virtualextensible-lan-vxlan