HPE6-A41

Number: HPE6-A41
Passing Score: 800
Time Limit: 120 min
File Version: 1

HPE6-A41
Exam A

QUESTION 1
Refer to the exhibit.

Which links can be combined in the same link aggregation?

A. Links 3 and 4
B. Links 3 and 5
C. Links 3 and 6
D. Links 4 and 6

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
We can also aggregate link 5 and 6

QUESTION 2
Refer to the exhibit.
What should the network administrator do to permit Switch-1 to route traffic from a client in 10.1.11.0/24 to a
client in 10.1.12.0/24?

A. Enable proxy ARP.

B. Enable IP routing.
C. Configure a static route to 10.1.11.0/24 and a static route to 10.1.12.0/24.
D. Enable OSPF routing on VLAN 11 and on VLAN 12 in the same area.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 3
How many operating system image files can a network administrator load on an ArubaOS switch?

A. two
B. three
C. four
D. unlimited

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 4
Refer to the exhibit.
Originally, all four switches had the same region configuration. VLAN 14 was added to Switch_D and then
mapped to instance 2.

How does this affect the MSTP topology?

A. Load sharing is lost, one of the uplinks is blocked for all traffic on Switch_C and Switch_D.
B. Load sharing is lost, one of the uplinks is blocked for all traffic on Switch_D
C. All connectivity is lost, both uplinks are blocked on Switch_D.
D. A Layer 2 loop exists and will cause sporadic connectivity issues.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 5
Refer to the exhibit.

The network administrator wants to place contractor clients and employee clients in different broadcast
domains.

How should the administrator achieve this goal?

A. Add a router in between Switch 1 and Switch 2. Configure a different subnet on each router interface.
B. Create two MSTP instances on each switch. Assign ports connected to contractor clients to one instance
and ports connected to employee clients to the other instance.
C. Assign the switch ports connected to contractor clients to one VLAN and ports connected to employee
clients to another VLAN. Extend the VLANs between the switches.
D. Create two device profiles. Apply one profile to ports connected to contractor clients, and apply the other
profile to ports connected to employee clients.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 6
Refer to the exhibit.

All of the switches shown in the exhibit are ArubaOS switches.

Where should the network administrator configure an IP helper address of 10.1.1.10?

A. on VLAN 2 on Switch-1
B. on VLAN 2 on Switch-3
C. on VLAN 1 on Switch-1
D. on VLAN 1 on Switch-2

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
QUESTION 7
What is the relationship between a wireless client’s data rate and the throughput for the client’s traffic?

A. The throughput is 90 percent of the data rate.

B. The throughput is equal to the data rate multiplied by the connection time, minus the headers’ bytes.
C. The throughput is less than the data rate and also depends on factors such as number of clients in the cell.
D. The data rate and the throughput are equivalent.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 8
Refer to the exhibit.

The network consists of two ArubaOS switches with routing disabled.

How should the network administrator configure the link between Switch A and Switch B to ensure that all hosts
can communicate to all the other hosts within their respective VLANs?

A. tagged for VLAN 20 and tagged for VLAN 30

B. untagged for VLAN 10 and tagged for VLAN 30
C. tagged for VLAN 10 and tagged for VLAN 20
D. untagged for VLAN 10, untagged for VLAN 20, and tagged for VLAN 30

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 9
A company has ArubaOS switches that are already configured to support the network. The company now wants
to use Aruba AirWave to manage the switches. The network administrator creates a new group on Aruba
AirWave, and then discovers several ArubaOS switches that should belong to this group.

What is the best practice for the initial authorization of the switches in AirWave?

A. Authorize the switches in Monitor + Firmware Updates only mode.

B. Authorize the switches and immediately change the scan set credentials to match the credentials on the
switches.
C. Authorize the switches and immediately change the global communication settings to match the credentials
on the switches.
D. Authorize the switches in Managed Read/Write mode.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 10
A network administrator configures MSTP on an ArubaOS switch. The administrator wants to ensure that this
switch is always the root for instance 1.

What should the administrator do to accomplish this?

A. Specify priority 15 for spanning tree instance 1.

B. Specify spanning tree cost 0 on all switch ports that connect to other switches that use instance 1.
C. Specify priority 0 for spanning tree instance 1.
D. Specify spanning tree cost 15 on all switch ports that connect to other switches that use instance 1.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 11
Refer to the exhibit.

Exhibit 1.
Exhibit 2.

The administrator enters the show spanning-tree instance 2 command on Switch-3 and sees the output
shown in Exhibit 2.

What could explain the output results?

A. Switch-1 has a lower MAC address than Switch-2.

B. Switch-1 has a higher MAC address than Switch-2.
C. Switch-3 filters BPDUs on port 26.
D. Switch-3 has incompatible MSTP region settings with other switches.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 12
Managers log in to an ArubaOS switch with SSH.

What does SSH require to authenticate the switch to the SSH client and set up a secure session?

A. an SSH authorized user key, managed by the ip ssh public-key commands

B. a username and password set with the password manager command
C. an SSH key, managed by the crypto key ss commands.
D. a self-signed certificate configured with the crypto key commands

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=mmr_kc-0134172

QUESTION 13
A network administrator needs to configure a link aggregation on an ArubaOS switch.

For which type of link aggregation is the administrator required to enter the lacp command in the interface
context?

A. a distributed LACP link aggregation

B. a dynamic LACP link aggregation
C. a static LACP link aggregation
D. a manual LACP link aggregation

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference:http://www.arubanetworks.com/techdocs/ArubaOS_60/UserGuide/LACP.php

QUESTION 14
Refer to the exhibit.
Spanning tree runs on the switches shown in the exhibit. The network administrator enters these two
commands:
Switch-1(config)# spanning-tree priority 0
Switch-2(config)# spanning-tree priority 1

The other switches use the default spanning tree priorities. The administrator enters the show spanning-
tree command on Switch-2.

If the configuration is correct, which roles will the output show?

A. A1 = Designated A2 = Alternate A3 = Alternate

B. A1 = Root A2 = Designated A3 = Designated
C. A1 = Designated A2 = Designated A3 = Designated
D. A1 = Root A2 = Alternate A3 = Alternate

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: http://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_CLI/spanning-tree
(Global).htm

QUESTION 15
Refer to the exhibit.
The network administrator enters this command:
Switch(config)# ip route 172.16.2.0/30 192.168.1.100 metric 1 distance 1

Why does this route fail to appear in the IP routing table?

A. Its prefix length is invalid.

B. Its next hop is unreachable.
C. Its administrative distance is the same as an existing static route.
D. Its metric is the same as an existing static route.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 16
Refer to the exhibit.

Exhibit 1.

Exhibit 2.
Which devices can communicate with each other at Layer 2?

A. Devices 1 and 2 can communicate at Layer 2; Devices 3 and 4 can communicate at Layer 2.
B. Devices 2 and 3 can communicate at Layer 2.
C. Devices 1 and 4 can communicate at Layer 2.
D. Devices 1 and 4 can communicate at Layer 2; Devices 2 and 3 can communicate at Layer 2.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 17
Refer to the exhibit.

Exhibit 1.

Exhibit 2.
The routing configuration must support this behavior:
Server 1 and Server 2 communicate over Link 1 when Link 1 is up.
If Link 1 fails, Server 1 and Server 2 can continue to communicate over the path through Switch-3.

What must the network administrator change to meet these criteria?

A. On Switch 3, add a route to 192.168.2.0/24 through 192.168.1.9 and a route to 192.168.3.0/24 through
192.168.1.5.
B. On Switch-1, Switch-2, and Switch-3, change the next hop in each static route to specify an IP address that
exists on that switch.
C. On Switch-1, raise the administrative distance for the second route to 192.168.3.0/24; on Switch-2, raise the
administrative distance for the second route to 192.168.2.0/24
D. On Switch-1, add a route to 192.168.1.8/30 through 192.168.0.3; on Switch-2, add a route to 192.168.1.4/30
through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.169.1.4.
E. On Switch-1, add a route to 192.168.1.8/30 through 192.168.1.2; on Switch-2, add a route to 192.168.1.4/30
through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.168.1.4.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 18
A network administrator needs to configure a static route.

What should the administrator use as the next hop address?

A. the lowest IP address on the neighboring router in the path towards its destination
B. the IP address on the local interface that is used to egress traffic towards its destination
C. the IP address of the default gateway in the destination subnet
D. the IP address on the connected interface of a neighboring router in the path towards its destination

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 19
Which type of 802.11 wireless network can be hosted by an endpoint device such as a laptop?

A. a wireless distribution system

B. an ad hoc network
C. a wireless mesh or bridge
D. an infrastructure network

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 20
What is one benefit that Aruba AirWave can provide to a customer with ArubaOS switches?

A. It can audit switch firmware (software) and automate updates.

B. It can enable the switches to provide mobility controller functions for connected Instant APs (IAPs).
C. It can provide centralized authentication and authorization for users who log in to the switch CLI.
D. It can program the switches to dynamically adjust QoS settings to prioritize Skype for Business traffic.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://www.google.co.in/url?
sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0ahUKEwjKxOev5JfUAhXGLI8KHVYWDvEQFggnMAA&url=h
ttp%3A%2F%2Fwww.arubanetworks.com%2Fassets%2Fds%
2FDS_AW.pdf&usg=AFQjCNG2mDuwxsqBI8MHZoKPpteQmEJ71g&sig2=r3FEvyQVngpJKqQVz-
kIOA&cad=rja

QUESTION 21
Refer to the exhibit.
A network administrator views the configuration files on an ArubaOS switch and sees the output in the exhibit.
The administrator enters this command:
Switch# boot system flash primary config config2

After the switch boots, the administrator makes some configuration changes and saves the configuration with
the write memory command. The administrator then enters this command:
Switch# boot

After the switch boots, the configuration changes just made are not present.

How can the administrator restore the configuration with the changes?

A. Use the boot set-default command to configure the switch to use the secondary software. Then reboot the
switch.
B. Reboot the switch and interrupt the boot process. Find the temporary file with the configuration changes and
apply that file to the startup-config.
C. Rename the config2 file to config1. Then reboot the switch.
D. Use the startup-default command to configure the switch to use the config2 file with the primary software.
Then reboot the switch.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 22
A network administrator prepares an ArubaOS switch to be monitored and managed by AirWave.

Which credentials are required for AirWave to change configuration settings on the switch?

A. RADIUS shared secret

B. SNMPv2c community with manager unrestricted privileges
C. Telnet or SSH password
D. SNMPv3c user in the ManagerPriv group

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
QUESTION 23
Two switches are members of a Virtual Switching Framework (VSF) fabric.

Which statement correctly describes how the switches handle routing?

A. Only the commander runs routing protocols and builds the IP routing table, but it programs the standby
member to route traffic.
B. Both members build their own IP routing tables, which they synchronize. Only static IP routing is supported
with VSF.
C. Only the commander runs routing protocols and builds the IP routing table, and all routed traffic must pass
through the commander.
D. Both members run routing protocols and build their own IP routing tables, and they synchronize the tables
over VSF links.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 24
Refer to the exhibit.

Endpoint A sends broadcast ARP requests.

Where are these requests received?

A. at EndpointC
B. at EndpointB
C. at EndpointB, at EndpointC, and at EndpointD
D. at EndpointB and at EndpointC

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 25
A network administrator wants to be able to access an Aruba Instant cluster at the same IP address even if the
current master fails.

How can the administrator achieve this goal?

A. Configure a VC IP address that is a reserved IP address in the AP’s subnet.

B. Configure the AirWave IP address in the instant cluster System > Admin settings.
C. Assign static IP addresses, rather than DHCP ones, to all APs in the instant cluster.
D. Assign a static IP addresses, rather than a DHCP one, to the AP that is elected master.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 26
A network administrator discovers and then authorizes several ArubaOS switches in Aruba AirWave.
Immediately after the administrator authorizes the switches, AirWave cannot communicate with the switches
anymore.

What should the administrator do to restore communication?

A. Change the SNMP and Telnet/SSH credentials in the AirWave global communication settings to match
those on the switches.
B. Change the management level for the switches to Monitoring and Firmware Updates Only.
C. Specify the SNMP and Telnet/SSH credentials on the switches to update the individual communication
settings on the switches.
D. Change the management level for the switches to Manage Read/Write.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 27
A company has a single routing protocol environment.

What is one reason to use OSPF routing instead of static routing?

A. OSPF allows ArubaOS switches to use default routes, while static routes cannot use 0.0.0.0/0 as the
destination network.
B. OSPF has a lower default administrative distance than static routing on ArubaOS switches.
C. OSPF reduces the risk of accidentally introducing routing loops, while static routing does not.
D. OSPF permits load sharing traffic over multiple routes, while static routing does not.
Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 28
Refer to the exhibit.

MSTP is implemented in the topology shown in the exhibit, and all the switches are in the same region. The
network administrator does not want to use the Internal Spanning Tree (IST) or instance 0 for production traffic.

How many non-IST spanning tree instances does this network need in order to have effective load sharing on
the uplinks from the access switches?

A. two
B. three
C. four
D. five

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 29
Refer to the exhibit.

Exhibit 1.
Exhibit 2.
Exhibit 3.
How many MSTP regions exist in the topology shown in the exhibit?

A. one
B. two
C. three
D. four

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 30
Refer to the exhibit.
Device 1 needs to send traffic to Device 2, and it sends an ARP request in preparation.

Which devices process this ARP request?

A. all devices in VLAN 2, 192.168.2.0/24 subnet

B. all devices connected to Switch-2
C. all devices in VLAN 3, 192.168.3.0/24 subnet
D. all devices in this network

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 31
A Virtual Switching Framework (VSF) fabric is configured to use LLDP-MAD.

Which action does the standby member take if it sends a probe but receives no response?

A. It sends a request packet to the commander to determine which ports should remain active.
B. It continues to function and assumes the role of commander.
C. It automatically changes its status to MAD inactive fragment.
D. It requests that the commander change its status to MAD inactive fragment.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 32
A network administrator configures OSPF in a network with ArubaOS switches. The administrator is concerned
that a rogue device might connect to an access layer switch and introduce OSPF routes to the company’s
routing topology. The access VLANs do not contain additional routers.
What should the administrator do so switches do not form an adjacency with rogue devices on the access
VLANs?

A. Implement BPDU filtering on interfaces assigned to these VLANs.

B. Configure the VLANs as passive OSPF interfaces.
C. Configure the interfaces with the highest OSPF DR priority.
D. Apply outbound routing policies to filter routes on the VLANs.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 33
A network administrator has copied new software to an ArubaOS switch and placed this software in the
secondary flash location. The switch is currently booting from the primary location. The administrator wants the
switch to start using the new software.

What should the administrator do to accomplish this?

A. Reboot the switch, which automatically causes the switch to use the newer software.
B. Execute the command to boot the system from the secondary flash.
C. Rename the secondary software as the primary software.
D. Copy the secondary software to the primary software slot.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 34
Which security benefit does SNMPv3 offer that SNMPv2 does not offer?

A. SSL encryption
B. Scopes
C. Data integrity
D. RADIUS groups

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 35
The network administrator wants to know which device, type, and manufacturer is connected to port 10 on an
Aruba 3810 switch.

Which command could provide this information?

A. show interface 10
B. show mac-address 10
C. show lacp peer 10
D. show lldp remote-device 10

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Reference: https://h20565.www2.hpe.com/hpsc/doc/public/display?
sp4ts.oid=1827663&docLocale=en_US&docId=emr_na-c04943204#S_commands

QUESTION 36
Which benefit does Aruba Clarity in Aruba AirWave provide?

A. It provides an easily searchable network topology that includes physical wired, physical wireless, and virtual
network infrastructure devices.
B. It helps managers use the AirWave Management Platform (AMP) with its context-specific help and links to
additional resources.
C. It enables managers to view all configuration templates for APs, and switches from a single dashboard.
D. It provides at-a-glance views of issues such as DHCP request and 802.1X authentication failures to aid in
troubleshooting.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 37
Refer to the exhibit.

Based on the topology shown in the exhibit, which symptom does a network administrator see if the ArubaOS
switches are in their factory default states?
A. Ports places in a blocking state
B. Mislearned MAC addresses
C. TTL expired in transit
D. Layer 3 loop

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 38
Refer to the exhibit.

Switch 1 shown in the exhibit is an ArubaOS switch that has an uplink to the network core on interface 25. The
network administrator wants to add a link on interface 26. The administrator creates a link aggregation with this
command:
Switch1 (config)# trunk 25-26 trk1 lacp

What else must the administrator do to enable the Switch 1 link aggregation to successfully pass all traffic to
the core?

A. Configure VLANs 10 and 20 as tagged VLANs on interface 26.

B. Configure VLANs 10 and 20 as tagged VLANs on trk1.
C. Enable BPDU filtering on interface 26.
D. Enable LACP in active or passive mode on interfaces 25 and 26.

Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:

QUESTION 39
An ArubaOS switch is protected with a manager password. The network administrator wants to back up the
configuration and apply it to other switches. The administrator wants the manager password to be available in
both the saved and running configuration.

To accomplish this goal, what must the administrator do before the configuration is backed up?

A. Enter the password command with the plaintext option.

B. Configure an SSH keypair on the switch.
C. Enter the include-credentials command.
D. Ensure that the server to which the configuration will be backed up uses SCP as opposed to TFTP.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 40
A company has two ArubaOS switches, Switch1 and Switch2. Switch1 will be the commander for a new Virtual
Switching Framework (VSF) fabric. Switch2 is a new switch that will be the standby member. The network
administrator wants to configure the proper settings on the standby member interface before the standby
member joins the fabric.

What should the administrator do before the switches are joined in the VSF fabric?

A. Configure the interface settings on Switch2. Then enable VSF on Switch2.

B. Enable VSF on Switch2. Then configure the interface settings on Switch2.
C. Provision member2 on Switch1. Then configure the member2 interface settings on Switch1.
D. Provision member2 on Switch1 and member1 on Switch2. Then configure the member2 interface settings
on Switch2.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 41
Refer to the exhibit.
The switches in the exhibit are all ArubaOS switches that run MSTP. The network administrator wants all of the
switch-to-switch links shown in the exhibit to be available for forwarding routed traffic.

What should the administrator do to accomplish this?

A. Configure link-keepalive on the switch-to-switch ports.

B. Configure links on a switch as a standard link aggregation.
C. Configure the switch-to-switch ports as MSTP auto-edge ports.
D. Configure BPDU filters on the switch-to-switch ports.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 42
A network administrator wants to deploy Aruba Instant APs (IAPs) at a remote site that does not have Internet
access. The APs should receive their configuration automatically from AirWave by using Zero Touch
Provisioning (ZTP). What does the administrator need to configure?

A. the name and password of a user with full administrative rights to AirWave
B. the name of the AirWave VLAN with the configuration that the APs should use
C. the DHCP server configured with options 43 and 60 for ZTP
D. the IP address for the DNS server with the mapping for the airwave hostname

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 43
Which technology can provide automated network optimization for unified communication applications such as
Skype for Business?

A. Software-defined Networking (SDN)

B. Zero Touch Provisioning (ZTP)
C. Simple Network Management Protocol (SNMP)
D. Virtual Switching Framework (VSF)

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 44
A network administrator needs to set up a static LACP link aggregation. How should the administrator configure
the VLAN settings for the link aggregation?

A. Configure the VLANs on the physical interface with the lowest port ID before link aggregation setup.
B. Configure the VLANs on both physical interfaces after link aggregation setup.
C. Configure the VLANs on the link aggregation interface after the link aggregation setup.
D. Configure the VLANs on both physical interfaces before link aggregation setup.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 45
A network administrator enters this command on an ArubaOS switch with IP routing enabled:

This is the only IP route to 0.0.0.0/0 on the switch.

What is the effect?

A. The switch uses this route to route all traffic from 10.1.1.1.
B. The switch uses this route for all traffic unless the traffic matches a route with a lower cost than 10.
C. The switch uses this route for all traffic unless the traffic matches a route with a lower administrative
distance than 10.
D. The switch uses this route for all traffic that does not match a specific route in its routing table.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 46
Member1 is the commander of a Virtual Switching Framework (VSF) fabric. A power distribution causes
member 1 to go down. Now the network administrator wants to rejoin member1 to the VSF fabric and make
member1 the commander again.

What should the administrator do?

A. Boot member1 and allow it to rejoin to the VSF fabric. Then reboot member2.
B. Boot member1 and allow it to rejoin the VSF fabric.
C. Disconnect member1 from member2 before booting member1.
D. Configure member2 with VSF priority0. Then boot member1 and allow it to rejoin the VSF fabric.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 47
Refer to the exhibit.

The link between Core-1 and Core-2 shown in the exhibit fails, and some users lose connectivity. What should
the network administrator do to prevent this issue in a situation such as this?

A. Configure BPDU protection on all Core-2 ports.

B. Enable IP routing on Core-2.
C. Create routes to 10.1.10.0/24 and 10.1.11.0/24 through 10.1.1.3 on Core-2.
D. Extend VLANs 10 and 11 on all switch-to-switch links.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 48
A network administrator wants to place desktops connected to an ArubaOS switch in VLAN5. The desktops
have no awareness of VLANs. How should the administrator assign desktops to the VLAN?
A. Make switch ports connected to desktops tagged members of VLAN5.
B. Make VLAN5 the Default VLAN on the switch before the desktops connect to the switch ports.
C. Make VLAN5 the Primary VLAN on the switch.
D. Make switch ports connected to desktops untagged members of VLAN5.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 49
A network administrator connects an Aruba Instant AP (IAP) to an ArubaOS switch but cannot connect the AP
to the Instant cluster that exists. The administrator wants to check the IAP management IP address and
software version from the ArubaOS switch CLI. To obtain this information, what should the administrator ensure
is enabled on the switch and switch interfaces?

A. SNMP
B. ARP
C. Device profiles
D. LLDP

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 50
A network administrator wants to form a cluster with several Aruba Instant APs. What is required to achieve this
goal?

A. All APs must be pre-configured with WLANs with the same SSID.
B. All APs must be in the same regulatory domain.
C. All APs must operate on the same radio channel.
D. All APs must be the same model.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 51
Refer to the exhibits.

Exhibit 1
Exhibit 2

A network uses RSTP, as shown in the exhibits. The network administrator wants switches to use the link that
connects to Core-2 to forward some of the traffic. The administrator enters these commands on every switch
shown in the exhibit:

The administrator then discovers that the links to Core-2 still did not forward any traffic.

What should the administrator do to enable these links to carry traffic?

A. Activate the MSTP region configuration on all switches.
B. Lower the port cost on the links that connect to Core-2 on the access layer switches.
C. Configure Core-2 with spanning tree priority 0 in instance 2.
D. Change the spanning tree mode to MSTP on all switches.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 52
An interface on an ArubaOS switch did not receive any BDPUs and has the spanning tree auto-edge setting.
What describes the effect of this setting?

A. The interface has spanning tree disabled on it and ignore BPDUs.

B. The interface remains forwarding during topology changes.
C. The interface root path cost is automatically set to 0.
D. The interface is preferred to be selected as master port.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 53
What is a requirement for links to successfully participate in an aggregated link?

A. that links have the spanning tree protocol disabled

B. that links use the same speed and duplex mode
C. that links use the same media type and are untagged
D. that links are untagged and are associated to the same VLAN

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 54
An ArubaOS switch provides PoE+ to several Aruba APs. Users might also connect PoE devices to this switch.
In a situation where the switch PoE capacity is exceeded, the network administrator wants to ensure that the
switch continues to power the APs in preference to other devices.

What should the administrator do to achieve this goal?

A. Set the PoE priority for the ports connected to APs to critical.
B. Set the PoE class for the ports connected to APs to Class 5.
C. Make sure that LLDP MED is enabled on both the switch ports and the APs.
D. Set the PoE allocation on the ports connected to APs to the maximum value permitted by PoE+.
Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 55
What is a valid setup for a Virtual Switching Framework (VSF) fabric?

A. one 5406R zl2 switch as commander and one 5412R zl2 switch as a standby member
B. one 5412R zl2 switch as commander and two 5406R zl2 switches as standby members
C. one 5406R zl2 switch as commander and two 5412R zl2 switches as standby members
D. one 5412R zl2 switch as commander and one 5412R zl2 switch as a standby member

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 56
A network administrator wants to download a configuration from an ArubaOS switch. The administrator does
not have local access to the switch and wants to copy the configuration in a secure manner that prevents
eavesdroppers from reading the configuration. Which two options can the administrator use to copy the
configuration?

A. SFTP and HTTPS

B. ZModem and SFTP
C. HTTPS and TFTP
D. HTTPS and ZModem

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 57
A network administrator needs to complete the initial setup on an ArubaOS switch with the use of remote
access. How can the network administrator do this?

A. Connect the switch’s OOBM port to the same VLAN as the management station, and then establish a
Telnet session to the switch default IP address.
B. Connect the switch’s OOBM port to the same VLAN as Aruba AirWave. Then manually discover the switch
in AirWave using the switch default IP address.
C. Send a Reverse ARP from the management station and assign a temporary IP to the workstation.
D. Set up the network DHCP server to assign the switch a reserved IP address. Connect the switch to a VLAN
with DHCP services and then establish a Telnet session to the reserved IP address.

Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:

QUESTION 58
A network administrator enters this command in an ArubaOS switch CLI:
Switch(config)# ip route 0.0.0.0/0

The CLI shows this error:

Incomplete input: 0.0.0.0/0

How can the administrator find a valid way to complete the command?

A. Enter ip ––help route.

B. Enter ip route 0.0.0.0/0 ? with a space before the ?.
C. Enter help ip route.
D. Enter ip route 0.0.0.0/0? With no space before the ?.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 59
Refer to the exhibit.

Prior to implementing OSPF on the network, an ArubaOS switch had the IP routing table shown in the exhibit.
The network administrator then sets up OSPF in the network. The switch calculates these OSPF routes to
10.1.20.0/24:

Through 10.1.0.1 with cost 3 and administrative distance 110

Through 10.1.0.2 with cost 3 and administrative distance 110

How does the way the switch handles traffic destined to 10.1.20.0/24 change with the introduction of OSPF?

A. The switch stops sending the traffic to 10.1.0.3 and instead load balances it to 10.1.0.1 and 10.1.0.2.
B. The switch no longer drops this traffic and instead load balances it to 10.1.0.1 and 10.1.0.2.
C. The switch continues to send the traffic to 10.1.0.3, but it now has backup routes for the traffic in case the
connection to 10.1.0.3 fails.
D. The switch no longer drops this traffic and instead sends it to 10.1.0.1.

Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:

QUESTION 60
Which configuration settings for an ArubaOS switch must be deleted from a physical interface before it can be
associated with a Virtual Switching Framework (VSF) link?

A. Distributed trunking
B. Virtual Router Redundancy Protocol (VRRP)
C. Multi-Active Detection (MAD)
D. Graceful OSPF (non-stop forwarding)

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 61
Refer to the exhibit.

Based on the output shown in this exhibit, which statement is true about the 10.0.0.2 neighbor?

A. The neighbor rejects communications because it already has its maximum number of neighbors.
B. The neighbor has mismatched settings and cannot exchange information with this switch.
C. The neighbor communicates with this switch, but it cannot hold any more routes in its database.
D. The neighbor communicates with this switch, and they have exchanged all topology information.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 62
A company wants a modular switch for the core layer of its mid-sized campus. The switch requires 32 10 G
ports in a single switch with the ability to scale in the future. Which ArubaOS switches series is best suited for
this role?

A. Aruba 2930F
B. Aruba 3800
C. Aruba 3810
D. Aruba 5400R
Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 63
A network administrator implements a wireless network that uses three wireless APs. The administrator wants
to ensure that users can roam seamlessly from one AP to another. Which type of wireless network should the
administrator implement?

A. an ad hoc network that does not use channel bonding

B. an infrastructure network with a different Service Set Identifier (SSID) on each AP
C. an ad hoc network that uses channel bonding
D. an infrastructure network with the same Service Set Identifier (SSID) on each AP

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 64
Refer to the exhibit.

A network administrator logs in to the CLI of a Virtual Switching Framework (VSF) fabric and enters the
command shown in the exhibit.

What does the output reveal?

A. MAD assistant at 10.1.0.2 failed to respond to probe requests.

B. The VSF link failed, and MAD shut down the links on the other member.
C. MAD is configured incorrectly and causes a split brain situation to occur.
D. The VSF link failed, and MAD shut down the links on this switch.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 65
Which standard for wireless connectivity supports the fastest data rates and Multi-User Multiple Input/Multiple
Output (MU MIMO)?

A. 802.11a
B. 802.11ac
C. 802.11g
D. 802.11n

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 66
Refer to the exhibit.

This switch currently assigns all VLANs to MSTP instance 0 or the Internal Spanning Tree (IST).

Which statement correctly describes interface 21?

A. The interface is down at Layer 2; it is not available for sending or receiving any traffic.
B. The interface does not forward or accept data traffic, but it is ready to start forwarding if interface 19 fails.
C. The interface is an edge port but has received Bridge Protocol Data Units (BPDUs), so it is disabled.
D. The interface does not support spanning tree; it is possible that it will introduce a loop in the network.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 67
What is true about the community string used for SNMPv1 and SNMPv2c?

A. The community string hashes the SNMP message, but does not encrypt it, which provides for data integrity.
B. The community string is like a password transmitted in cleartext, which provides no data integrity or privacy.
C. The community string encrypts the SNMP message, but does not hash it, which provides for data privacy.
D. The community string encrypts and hashes the SNMP message, which provides for data integrity and
privacy.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
QUESTION 68
A company requires switches to use MSTP instead of RSTP, so that the switches can forward traffic on more
than one switch-to-switch link. How does the administrator set up the solution to meet this requirement?

A. Set the same spanning tree cost on all redundant links on a switch.
B. Ensure that switches use the 802.3t standard costs instead of the legacy costs.
C. Map different VLANs to different instances, and make a different switch root bridge in each instance.
D. Configure every switch with a unique bridge propriety in the IST, which is also called spanning tree instance
0.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 69
Which security benefit does SNMPv3 offer that SNMPv2 does not offer?

A. SSL encryption
B. Scopes
C. Data confidentially
D. RADIUS groups

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 70
Which security option for a WLAN provides the best access control security?

A. MAC authentication with WPA-PSK

B. WPA2 Enterprise (802.1X)
C. WPA2 Personal (preshared key)
D. MAC authentication with WPA2 Enterprise (802.1X) fail-thru

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 71
A network administrator wants to see how much power an Aruba AP has dynamically requested from an
ArubaOS switch port. Which information should the administrator look at?

A. LLDP with the use of the show lldp info remote-device command
B. interface with the use of the show interface command
C. device class with the use of show system power-supply command
D. device profile with the use of the show device-profile status command

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://support.hpe.com/hpsc/doc/public/display?docId=c04943217 (80)

QUESTION 72
A company needs a switch that supports 10GbE and 40GbE for its mid-sized campus. The company prefers
stackable, or fixed port, switches over modular switches. Which ArubaOS switch series best meet these
needs?

A. Aruba 2530
B. Aruba 2930F
C. Aruba 3810
D. Aruba 5400R

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 73
Which standard for wireless connectivity supports both 2.4GHz and 5GHz?

A. 802.11a
B. 802.11ac
C. 802.11g
D. 802.11n

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 74
A company has these requirements to manage its ArubaOS switches:

Management and data traffic cannot share links.

Managers must be able to reach switches remotely over IP connections.

How should the administrator set up switches to meet these requirements?

A. Assign at least one port on each switch to a Virtual Switching Framework (VSF) link and connect those
ports in a dedicated network.
B. Create a management VLAN and tag the VLAN on all switch-to-switch links.
C. Enable IP authorized managers for the administrator subnet.
D. Configure IP addressing on OOBM ports and connect them in a dedicated network.
Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 75
Refer to the exhibit.

Which feature should the network administrator configure on the Virtual Switching Framework (VSF) fabric to
prevent issues if Links 1 and 2 fail?

A. Graceful OSPF (non-stop forwarding)

B. Multi-Active Detection (MAD)
C. Distributed trunking
D. Virtual Router Redundancy Protocol (VRRP)

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 76
Which ArubaOS switch feature treats multiple ports as one logical port?

A. OSPF
B. STP
C. VSF
D. Link aggregation

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 77
How can a network administrator configure an ArubaOS switch to automatically assign the correct tagged
VLANs to a port when an Aruba AP connects to that port?

A. Configure the tagged VLANs in the device profile and apply that profile to the port
B. configure a MAC-to-VLANs mapping policy and enable MAC-based VLANs on the port
C. Enable Zerp Touch Provisioning (ZTP) on the switch
D. Enable LLDP MED Globally and on the switch port

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 78
A Network administrator wants to see how much power an Aruba AP has dynamically requested from an
ArubaOS switch port. Which information should the administrator look at?

A. LLDP with the use of the show lldp info remote-device command
B. Interface with the use of the show interface command
C. Device class with the use of show system power-supply command
D. Device profile with the use of the show device-profile status command

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
QUESTION 79
Refer to the exhibit
MSTP is enabled on the switch shown in the exhibit.
Which additional step should the network administrator take to support load sharing of traffic on
different switch-to-switch link?

A. Configure different spanning tree port priorities for different instances on each access layer
switch.
B. Assign different spanning tree port costs to different instances on each access layer switch.
C. Ensure that half of the switches use config revision 1 and half of the switches use config revision 2.
D. Create an identical VLAN-to-instance mapping on each switch, in which some VLANs are in each instance.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 80
How does a switch treat a link aggregation?

A. The switch treats the link aggregation as one logical link for spanning tree, but it learns MAC addresses
separately on each individual interface within the aggregation.
B. The switch treats the link aggregation as one logical link. It assigns one spanning tree port role to the link
aggregation and it learns MAC addresses on the aggregation.
C. The switch treats the link aggregation as one logical link for MAC learning, but it assigns an individual
spanning tree port role to each interface within the aggregation.
D. The switch treats each interface within the interface as a separate entity for MAC address learning; it also
assigns an individual spanning tree port role to each interface.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 81
For which task does a network administrator need to access the enable context on an ArubaOS switch?
A. to view interface statistics
B. to view CPU statistics
C. to ping an IP address
D. to view configuration files

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 82
An ArubaOS switch operates at factory default settings. A network administrator enters this
command:
Switch (config)# password operator plaintext mysecret
How does the switch now control access to the CLI through the console port?

A. It forces users to enter no username and password operator to gain access to basic mode. Users must then
enter password mysecret to reach enable mode.
B. It forces users to enter username operator and password mysecret to gain access to basic mode. Users
can then reach enable mode without authenticating.
C. It allows users to access basic mode without logging in, but forces them to enter password mysecret to
reach enable mode.
D. It forces users to enter no username and password mysecret to gain access to basic mode. Users can then
reach enable mode without authenticating.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 83
What often happens when a Layer2 broadcast domain has a loop?

A. Some switch-to-switch ports take the MSTP alternative role and stay in that role.
B. In the switch MAC tables, the MAC addresses frequently move from one port to another.
C. Switches automatically raise their MSTP configuration revision level by one.
D. In the switch routing tables, some routes converge with new metrics.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 84
Refer to the exhibit
A network administrator installs a new aggregation and access layer in a campus network. All users in this area
belong to the same VLAN. The administrator plugs the switches into the network with the factory default
configurations. Which protocol must the administrator configure to prevent broadcast storms?

A. MSTP
B. LLDP
C. OSPF
D. LACP

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 85
A network administrator plans to set up a WLAN on an Aruba Instant cluster. The WLAN uses WPA/WPA2
Enterprise security. The administrator wants no authenticate users locally on the cluster.
How should the administrator configure me credentials?
A. Add a user account for each employee to the cluster internal server database.
B. Import authorized device MAC addresses to the cluster.
C. Implement a shared secret or password in the cluster WLAN settings.
D. Set up an external RADIUS server for authorization.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference: