HPE6-A75 Online Practice Questions and Answers

In a VPN that uses certificate-based authentication, which component must be configured on the Mobility Master (MM) to allow a RAP to successfully connect to a Mobility Controller (MC)

A. RAP VPN username and password

B. WLAN and new RAP group

C. RAP IPSec pre-shared key

D. RAP whitelist

An administrator implements the MultiZone feature and uses two clusters that utilize CPSec. A primary and a data zone are created. MultiZone APs successfully build sessions to the primary cluster but fail to establish sessions to the data zone cluster.

What must the administrator do to solve this problem?

A. Enable CPSec in the MultiZone profile for both the primary and data zone.

B. Enable MultiZone booting in the MultiZone AP apboot configuration mode.

C. Add the MultiZone APs to the data zone's CPSec whitelist.

D. Use different AP Group names for the two zones.

Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown. Which action will ClearPass take based on this Enforcement Profile?

A. ClearPass will count down 600 seconds and send a RADIUS CoA message to the user to end the user's session after this time is up.

B. ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user's session after 600 seconds.

C. ClearPass will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user's session after this time is up.

D. ClearPass will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user's session after 600 seconds.

E. ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user's session will be terminated after 600 seconds.

A network administrator wants to use Aruba AirWave to audit an AOS-Switch configuration. What rs one requirement?

A. The switch defines the AirWave IP address in its zero touch provisioning (ZTP) profile.

B. The switch specifies the AirWave IP address for the RADIUS server used for Telnet and SSH authentication.

C. The switch is authorized in AirWave, which has the correct credentials to log in as a CLI manager.

D. The switch is set to Manage Read-Write mode in AirWave but is not set to Monitor Only + Firmware Updates.

Refer to the exhibit.

The network administrator needs to set up BGP between the two company switches. Switch-1 and Switch

2. The BGP connection does not establish. Based on the exhibits, what does the administrator need to do to fix the issue?

A. Enable the multihop option for the neighbor on each of the switches.

B. Enter the network command for 10.0.0.0/24 in the router BGP mode on each switch.

C. Enable BGP on the interfaces that the switches use to reach each other.

D. Set the update source for the neighbor to the local loopback interface on each switch.

What are Operator Profiles used for?

A. to enforce role based access control for Aruba Controllers

B. to enforce role based access control for ClearPass Policy Manager admin users

C. to enforce role based access control for ClearPass Guest Admin users

D. to assign ClearPass roles to guest users

E. to map AD attributes to admin privilege levels in ClearPass Guest

An administrator implements a standalone controller that runs ArubaOS 8.x. Which feature should the administrator configure to optimize the RF operation for the company's WLAN?

A. AirMatch

B. Clustering

C. ARM

D. Zones

An administrator wants to implement bandwidth limits for guest users to restrict their Internet usage. On the Mobility Master (MM), where would the administrator define these limits?

A. User role

B. Firewall policy

C. AAA policy

D. 802.1X policy

An administrator deploys Aruba Mobility Controller 7005s to a company's branch offices. The administrator wants to disable the console port to prevent unauthorized access to the controllers.

Which controller command should the administrator use to implement this policy?

A. no console enable

B. no mgmt-user console

C. mgmt-user console-block

D. console disable

A company has AOS-Switches deployed at sites with inexperienced IT staff. The main office network

administrators want to track if configurations change on branch switches.

What should be set up for this purpose?

A. an SNMP trap

B. an RMON alarm

C. an auto-config server

D. an lP SLA profile