[Sep 29, 2022] Get New HPE6-A75 Practice Test Questions Answers
HPE6-A75 Dumps and Exam Test Engine
HP HPE6-A75 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION 36
Which is a valid policy simulation types in ClearPass? (Select three.)
- A. Endpoint Profiler
- B. Role Mapping
- C. Posture token derivation
- D. Enforcement Policy
- E. Chained simulation
Answer: B,D,E
NEW QUESTION 37
Which ArubaOS CLl command can an administrator execute to determine if AP load balancing is enabled in a cluster?
- A. show switches
- B. show aaa cluster essid
- C. show ap active
- D. show lc-cluster group-membership
Answer: D
NEW QUESTION 38
An administrator wants to implement bandwidth limits for guest users to restrict their Internet usage. On the Mobility Master (MM), where would the administrator define these limits?
- A. 802.1X policy
- B. Firewall policy
- C. User role
- D. AAA policy
Answer: B
NEW QUESTION 39
A company has AOS-Switches, Aruba ClearPass, and Aruba Airwave. A network administrator needs to set up a new switch with the same settings found on other switches in the company. Which action rs likely to be the most useful to perform the task?
- A. Access the Network Device view on ClearPass.
- B. View the current running config on each switch.
- C. View usage patterns on the switches on AirWave.
- D. Use the configuration audit tool on AirWave.
Answer: A
NEW QUESTION 40
An administrator implements the MultiZone feature and uses two clusters that utilize CPSec. A primary and a data zone are created. MultiZone APs successfully build sessions to the primary cluster but fail to establish sessions to the data zone cluster.
What must the administrator do to solve this problem?
- A. Enable CPSec in the MultiZone profile for both the primary and data zone.
- B. Use different AP Group names for the two zones.
- C. Add the MultiZone APs to the data zone's CPSec whitelist.
- D. Enable MultiZone booting in the MultiZone AP apboot configuration mode.
Answer: B
NEW QUESTION 41
Which protocol do Mobility Controllers (MCs) use to detect a failed Mobility Master (MM)?
- A. SNMP
- B. PAPI
- C. IPSec
- D. VRRP
Answer: A
NEW QUESTION 42
Which technologies can prevent split brain in a VSF fabric that includes Aruba 2930F switches?
- A. LLDP MAD or VLAN MAD
- B. VLAN MAD or ARP MAD
- C. ARP MAD or OOBM MAD
- D. OOBM MAD or LLDP MAD
Answer: A
NEW QUESTION 43
Refer to the exhibit.
The network administrator needs to set up BGP between the two company switches. Switch-1 and Switch-2. The BGP connection does not establish. Based on the exhibits, what does the administrator need to do to fix the issue?
- A. Enable BGP on the interfaces that the switches use to reach each other.
- B. Enable the multihop option for the neighbor on each of the switches.
- C. Set the update source for the neighbor to the local loopback interface on each switch.
- D. Enter the network command for 10.0.0.0/24 in the router BGP mode on each switch.
Answer: C
NEW QUESTION 44
Refer to the exhibit.
The network administrator wants to reduce failover time If a switch link m VIAN 100 goes down. What should the administrator do?
- A. Lower the hello timer only on the BDR of VLAN 100.
- B. Configure echo mode BFD on VLAN 100 on all OSPF routing devices on VLAN 100.
- C. Configure graceful restart on all of the OSPF routing devices on VLAN 100.
- D. Lower the dead timer on the BDR of VLAN 100.
Answer: B
NEW QUESTION 45
The administrator expects the AP to connect to a cluster, but the AP tails to connect. The administrator examines the configuration of an AP from apboot mode shown in the exhibit. What can the administrator determine about the configuration of the AP?
- A. The AP is configured to terminate on a Mobility Controller in a cluster.
- B. The AP is configured to terminate on a non-cluster Mobility Controller.
- C. The AP is configured as a RAP to terminate on a stand-alone controller.
- D. The AP is configured as a RAP to terminate on a Mobility Master.
Answer: D
NEW QUESTION 46
An administrator configures the MultiZone feature for a company network, where a mobility cluster is the primary zone and a standalone controller in the company's DMZ represents a secondary data zone. The administrator configures two AP Groups and respective VAPs for the zones on the Mobility Master (MM) in the primary zone. When the APs boot up and establish connections to both zones, the administrator notices that no data connections are established to the data zone.
What must the administrator do to fix this problem?
- A. Create different AP groups and VAPs on the Mobility Master and standalone controllers, and associate the MultiZone APs to both groups.
- B. Have the MultiZone APs initially boot from the standalone controller in the data zone.
- C. Configure the same AP Groups and VAPs on the standalone controller, and associate the MultiZone APs to both groups.
- D. Configure the same AP Group in the data zone as it is in the primary zone, and configure the VAPs in the data zone.
Answer: A
NEW QUESTION 47
in a VPN that uses certificate-based authentication, which component must be configured on the Mobility Master (MM) to allow a RAP to successfully connect to a Mobility Controller (MC)
- A. WLAN and new RAP group
- B. RAP IPSec pre-shared key
- C. RAP VPN username and password
- D. RAP whitelist
Answer: D
NEW QUESTION 48
Refer to the exhibit.
Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?
- A. The attribute values of department and memberOf are directly applied as ClearPass roles.
- B. The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.
- C. Only the attribute values of department and memberOf can be used in role mapping policies.
- D. Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.
- E. Only the attribute value of company can be used in role mapping policies, not the other attributes.
Answer: A
NEW QUESTION 49
Refer to the exhibit.
A network administrator sets up 802.1X authentication to a RADIUS server on an AOS-Switch. The RADIUS server and user devices are both set up to use REAP MSCHAPv2. The administrator tests the authentication and sees the output shown in the exhibit. Which issue could cause this output?
- A. The RADIUS shared secret does not match on the switch and the server.
- B. The switch port is set for user mode 801. IX. but the RADIUS server is set for port mode.
- C. The administrator entered the wrong password for the test account.
- D. The switch does not have a certificate tor port-access installed on the switch.
Answer: A
NEW QUESTION 50
An administrator deploys Aruba Mobility Controller 7005s to a company's branch offices. The administrator wants to disable the console port to prevent unauthorized access to the controllers.
Which controller command should the administrator use to implement this policy?
- A. console disable
- B. no mgmt-user console
- C. no console enable
- D. mgmt-user console-block
Answer: D
NEW QUESTION 51
What is the purpose of the captive portal URL hash key on an AOS-Switch?
- A. It encrypts and secures the RADIUS messages that the AOS-Switch sends to ClearPass.
- B. It authenticates guest users based on the password the users enter hi the portal.
- C. It specifies the captive portal URL and conceals the setting in the config.
- D. It does not let users alter the URL that redirects them to the portal.
Answer: D
NEW QUESTION 52
An administrator supports a RAP to a branch office. Employees at the branch office connect to an employee SSID that allows for split tunneling of the employee traffic. The RAP initially connects to the corporate office controller, but later loses connectivity to it.
Which operating mode should the administrator configure for a secondary SSID to be advertised during the loss of connectivity?
- A. Backup
- B. Persistent
- C. Standard
- D. Always
Answer: B
NEW QUESTION 53
Refer to the exhibit.
A company has attempted to implement OSPF without success. The devices in Area I need to be able to reach Area 2. Routes should be aggregated for advertisement in other areas. What must be changed to meet these requirements?
- A. Add Area 1 and Area 2 on VIAN 100 on both Switch-1 and Switch-2. Remove Area 3.
- B. Add the 10.2.0.0/16 range on Swttch-1 and the 10.1.0.0/16 range on Switch-2.
- C. Move the 10.1.0.0/16 range to Area 2 on Switch-1 and the 10.2.0.0/16rangetoArea 1 onSwitch-2.
- D. Change Area 3 to Area 0; remove Area 1 from Switch-2 and Area 2 from Switch-1.
Answer: D
NEW QUESTION 54
What are Operator Profiles used for?
- A. to assign ClearPass roles to guest users
- B. to enforce role based access control for Aruba Controllers
- C. to enforce role based access control for ClearPass Guest Admin users
- D. to enforce role based access control for ClearPass Policy Manager admin users
- E. to map AD attributes to admin privilege levels in ClearPass Guest
Answer: C
NEW QUESTION 55
An administrator supports a cluster of four Aruba Mobility Controllers (MCs) with management addresses of 10.1.100.101, 10.1.100.102, 10.1.100.103, and 10.1.202.181. The administrator accesses an AP associated with this cluster, reboots it and accesses apboot mode. The administrator executes the printenv command. Which AP parameter contains the IP addresses of the cluster members that the AP should use to connect to the cluster?
- A. Master_ip
- B. Noodelist
- C. Servername
- D. Cfg_lms
Answer: B
NEW QUESTION 56
Refer to the exhibit.
Several interfaces on an AOS-Switch enforce 802. IX to a RADIUS server at 10.254.378.521. The interface 802. IX settings are shown in the exhibit, and 802. IX is also enabled globally. The security team have added a requirement tor port security on the interfaces as well. Before administrators enable port security, which additional step must they complete to prevent issues?
- A. Set an 802. l X client limit on the interfaces.
- B. Enable eavesdropping protection on the interfaces.
- C. Enable DHCP snooping on VLAN 20.
- D. Manually add legitimate MAC addresses to the switch authorized MAC list.
Answer: C
NEW QUESTION 57
Refer to the exhibit.
Based on the configuration of the Enforcement Profiles In the Onboard Authorization service shown, which Onboarding action will occur?
- A. The device's onboard authorization request will be denied.
- B. The device will be disconnected from and reconnected to the network after Onboarding is completed.
- C. The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.
- D. After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.
- E. The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.
Answer: B
NEW QUESTION 58
......
2022 New PracticeDump HPE6-A75 PDF Recently Updated Questions: https://pass4sure.practicedump.com/HPE6-A75-exam-questions.html