Hpe6-A41 V14.75 Fix

HPE6-A41
Number: HPE6-A41
Passing Score: 685
Time Limit: 115 min
File Version: 1
HPE6-A41
Exam A
QUESTION 1
Refer to the exhibit.
Which links can be combined in the same link aggregation?
A. Links 3 and 4
B. Links 3 and 5
C. Links 3 and 6
D. Links 4 and 6
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
Explanation:
We can also aggregate link 5 and 6
QUESTION 2
What should the network administrator do to permit Switch-1 to route traffic from a client in 10.1.11.0/24 to a
client in 10.1.12.0/24?
A. Enable proxy ARP.

B. Enable IP routing.
C. Configure a static route to 10.1.11.0/24 and a static route to 10.1.12.0/24.
D. Enable OSPF routing on VLAN 11 and on VLAN 12 in the same area.
Correct Answer: B
Section: (none)
Explanation
QUESTION 3
How many operating system image files can a network administrator load on an ArubaOS switch?
A. two
B. three
C. four
D. unlimited
Correct Answer: A
Section: (none)
Explanation
QUESTION 4
Originally, all four switches had the same region configuration. VLAN 14 was added to Switch_D and then
mapped to instance 2.
How does this affect the MSTP topology?
A. Load sharing is lost, one of the uplinks is blocked for all traffic on Switch_C and Switch_D.
B. Load sharing is lost, one of the uplinks is blocked for all traffic on Switch_D
C. All connectivity is lost, both uplinks are blocked on Switch_D.
D. A Layer 2 loop exists and will cause sporadic connectivity issues.
Correct Answer: B
Section: (none)
Explanation
QUESTION 5
The network administrator wants to place contractor clients and employee clients in different broadcast
domains.
How should the administrator achieve this goal?

A. Add a router in between Switch 1 and Switch 2. Configure a different subnet on each router interface.
B. Create two MSTP instances on each switch. Assign ports connected to contractor clients to one instance
and ports connected to employee clients to the other instance.
C. Assign the switch ports connected to contractor clients to one VLAN and ports connected to employee
clients to another VLAN. Extend the VLANs between the switches.
D. Create two device profiles. Apply one profile to ports connected to contractor clients, and apply the other
profile to ports connected to employee clients.
Correct Answer: C
Section: (none)
Explanation
QUESTION 6
All of the switches shown in the exhibit are ArubaOS switches.
Where should the network administrator configure an IP helper address of 10.1.1.10?
A. on VLAN 2 on Switch-1
B. on VLAN 2 on Switch-3
C. on VLAN 1 on Switch-1
D. on VLAN 1 on Switch-2
Correct Answer: A
Section: (none)
Explanation
QUESTION 7
What is the relationship between a wireless client’s data rate and the throughput for the client’s traffic?
A. The throughput is 90 percent of the data rate.

B. The throughput is equal to the data rate multiplied by the connection time, minus the headers’ bytes.
C. The throughput is less than the data rate and also depends on factors such as number of clients in the cell.
D. The data rate and the throughput are equivalent.
Correct Answer: B
Section: (none)
Explanation
QUESTION 8
The network consists of two ArubaOS switches with routing disabled.
How should the network administrator configure the link between Switch A and Switch B to ensure that all hosts
can communicate to all the other hosts within their respective VLANs?
A. tagged for VLAN 20 and tagged for VLAN 30

B. untagged for VLAN 10 and tagged for VLAN 30
C. tagged for VLAN 10 and tagged for VLAN 20
D. untagged for VLAN 10, untagged for VLAN 20, and tagged for VLAN 30
Correct Answer: C
Section: (none)
Explanation
QUESTION 9
A company has ArubaOS switches that are already configured to support the network. The company now wants
to use Aruba AirWave to manage the switches. The network administrator creates a new group on Aruba
AirWave, and then discovers several ArubaOS switches that should belong to this group.
What is the best practice for the initial authorization of the switches in AirWave?
A. Authorize the switches in Monitor + Firmware Updates only mode.

B. Authorize the switches and immediately change the scan set credentials to match the credentials on the
switches.
C. Authorize the switches and immediately change the global communication settings to match the credentials
on the switches.
D. Authorize the switches in Managed Read/Write mode.
Correct Answer: D
Section: (none)
Explanation
QUESTION 10
A network administrator configures MSTP on an ArubaOS switch. The administrator wants to ensure that this
switch is always the root for instance 1.
What should the administrator do to accomplish this?
A. Specify priority 15 for spanning tree instance 1.

B. Specify spanning tree cost 0 on all switch ports that connect to other switches that use instance 1.
C. Specify priority 0 for spanning tree instance 1.
D. Specify spanning tree cost 15 on all switch ports that connect to other switches that use instance 1.
Correct Answer: C
Section: (none)
Explanation
QUESTION 11
Exhibit 1.
Exhibit 2.
The administrator enters the show spanning-tree instance 2 command on Switch-3 and sees the output
shown in Exhibit 2.
What could explain the output results?
A. Switch-1 has a lower MAC address than Switch-2.

B. Switch-1 has a higher MAC address than Switch-2.
C. Switch-3 filters BPDUs on port 26.
D. Switch-3 has incompatible MSTP region settings with other switches.
Correct Answer: D
Section: (none)
Explanation
QUESTION 12
Managers log in to an ArubaOS switch with SSH.
What does SSH require to authenticate the switch to the SSH client and set up a secure session?
A. an SSH authorized user key, managed by the ip ssh public-key commands

B. a username and password set with the password manager command
C. an SSH key, managed by the crypto key ss commands.
D. a self-signed certificate configured with the crypto key commands
Correct Answer: B
Section: (none)
Explanation
Reference: http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=mmr_kc-0134172
QUESTION 13
A network administrator needs to configure a link aggregation on an ArubaOS switch.
For which type of link aggregation is the administrator required to enter the lacp command in the interface
context?
A. a distributed LACP link aggregation

B. a dynamic LACP link aggregation
C. a static LACP link aggregation
D. a manual LACP link aggregation
Correct Answer: B
Section: (none)
Explanation
Reference:http://www.arubanetworks.com/techdocs/ArubaOS_60/UserGuide/LACP.php
QUESTION 14
Spanning tree runs on the switches shown in the exhibit. The network administrator enters these two
commands:
Switch-1(config)# spanning-tree priority 0
Switch-2(config)# spanning-tree priority 1
The other switches use the default spanning tree priorities. The administrator enters the show spanning-
tree command on Switch-2.
If the configuration is correct, which roles will the output show?
A. A1 = Designated A2 = Alternate A3 = Alternate

B. A1 = Root A2 = Designated A3 = Designated
C. A1 = Designated A2 = Designated A3 = Designated
D. A1 = Root A2 = Alternate A3 = Alternate
Correct Answer: B
Section: (none)
Explanation
Reference: http://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_CLI/spanning-tree
(Global).htm
QUESTION 15
The network administrator enters this command:
Switch(config)# ip route 172.16.2.0/30 192.168.1.100 metric 1 distance 1
Why does this route fail to appear in the IP routing table?
A. Its prefix length is invalid.

B. Its next hop is unreachable.
C. Its administrative distance is the same as an existing static route.
D. Its metric is the same as an existing static route.
Correct Answer: B
Section: (none)
Explanation
QUESTION 16
Exhibit 1.
Exhibit 2.
Which devices can communicate with each other at Layer 2?
A. Devices 1 and 2 can communicate at Layer 2; Devices 3 and 4 can communicate at Layer 2.
B. Devices 2 and 3 can communicate at Layer 2.
C. Devices 1 and 4 can communicate at Layer 2.
D. Devices 1 and 4 can communicate at Layer 2; Devices 2 and 3 can communicate at Layer 2.
Correct Answer: D
Section: (none)
Explanation
QUESTION 17
Exhibit 1.
Exhibit 2.
The routing configuration must support this behavior:
Server 1 and Server 2 communicate over Link 1 when Link 1 is up.
If Link 1 fails, Server 1 and Server 2 can continue to communicate over the path through Switch-3.
What must the network administrator change to meet these criteria?
A. On Switch 3, add a route to 192.168.2.0/24 through 192.168.1.9 and a route to 192.168.3.0/24 through
192.168.1.5.
B. On Switch-1, Switch-2, and Switch-3, change the next hop in each static route to specify an IP address that
exists on that switch.
C. On Switch-1, raise the administrative distance for the second route to 192.168.3.0/24; on Switch-2, raise the
administrative distance for the second route to 192.168.2.0/24
D. On Switch-1, add a route to 192.168.1.8/30 through 192.168.0.3; on Switch-2, add a route to 192.168.1.4/30
through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.169.1.4.
E. On Switch-1, add a route to 192.168.1.8/30 through 192.168.1.2; on Switch-2, add a route to 192.168.1.4/30
through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through 192.168.1.4.
Correct Answer: C
Section: (none)
Explanation
QUESTION 18
A network administrator needs to configure a static route.
What should the administrator use as the next hop address?
A. the lowest IP address on the neighboring router in the path towards its destination
B. the IP address on the local interface that is used to egress traffic towards its destination
C. the IP address of the default gateway in the destination subnet
D. the IP address on the connected interface of a neighboring router in the path towards its destination
Correct Answer: D
Section: (none)
Explanation
QUESTION 19
Which type of 802.11 wireless network can be hosted by an endpoint device such as a laptop?
A. a wireless distribution system

B. an ad hoc network
C. a wireless mesh or bridge
D. an infrastructure network
Correct Answer: B
Section: (none)
Explanation
QUESTION 20
What is one benefit that Aruba AirWave can provide to a customer with ArubaOS switches?
A. It can audit switch firmware (software) and automate updates.

B. It can enable the switches to provide mobility controller functions for connected Instant APs (IAPs).
C. It can provide centralized authentication and authorization for users who log in to the switch CLI.
D. It can program the switches to dynamically adjust QoS settings to prioritize Skype for Business traffic.
Correct Answer: A
Section: (none)
Explanation
Reference: https://www.google.co.in/url?
sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0ahUKEwjKxOev5JfUAhXGLI8KHVYWDvEQFggnMAA&url=h
ttp%3A%2F%2Fwww.arubanetworks.com%2Fassets%2Fds%
2FDS_AW.pdf&usg=AFQjCNG2mDuwxsqBI8MHZoKPpteQmEJ71g&sig2=r3FEvyQVngpJKqQVz-
kIOA&cad=rja
QUESTION 21
A network administrator views the configuration files on an ArubaOS switch and sees the output in the exhibit.
The administrator enters this command:
Switch# boot system flash primary config config2
After the switch boots, the administrator makes some configuration changes and saves the configuration with
the write memory command. The administrator then enters this command:
Switch# boot
After the switch boots, the configuration changes just made are not present.
How can the administrator restore the configuration with the changes?
A. Use the boot set-default command to configure the switch to use the secondary software. Then reboot the
switch.
B. Reboot the switch and interrupt the boot process. Find the temporary file with the configuration changes and
apply that file to the startup-config.
C. Rename the config2 file to config1. Then reboot the switch.
D. Use the startup-default command to configure the switch to use the config2 file with the primary software.
Then reboot the switch.
Correct Answer: D
Section: (none)
Explanation
QUESTION 22
A network administrator prepares an ArubaOS switch to be monitored and managed by AirWave.
Which credentials are required for AirWave to change configuration settings on the switch?
A. RADIUS shared secret

B. SNMPv2c community with manager unrestricted privileges
C. Telnet or SSH password
D. SNMPv3c user in the ManagerPriv group
Correct Answer: A
Section: (none)
Explanation
QUESTION 23
Two switches are members of a Virtual Switching Framework (VSF) fabric.
Which statement correctly describes how the switches handle routing?
A. Only the commander runs routing protocols and builds the IP routing table, but it programs the standby
member to route traffic.
B. Both members build their own IP routing tables, which they synchronize. Only static IP routing is supported
with VSF.
C. Only the commander runs routing protocols and builds the IP routing table, and all routed traffic must pass
through the commander.
D. Both members run routing protocols and build their own IP routing tables, and they synchronize the tables
over VSF links.
Correct Answer: C
Section: (none)
Explanation
QUESTION 24
Endpoint A sends broadcast ARP requests.
Where are these requests received?
A. at EndpointC
B. at EndpointB
C. at EndpointB, at EndpointC, and at EndpointD
D. at EndpointB and at EndpointC
Correct Answer: A
Section: (none)
Explanation
QUESTION 25
A network administrator wants to be able to access an Aruba Instant cluster at the same IP address even if the
current master fails.
How can the administrator achieve this goal?
A. Configure a VC IP address that is a reserved IP address in the AP’s subnet.

B. Configure the AirWave IP address in the instant cluster System > Admin settings.
C. Assign static IP addresses, rather than DHCP ones, to all APs in the instant cluster.
D. Assign a static IP addresses, rather than a DHCP one, to the AP that is elected master.
Correct Answer: A
Section: (none)
Explanation
QUESTION 26
A network administrator discovers and then authorizes several ArubaOS switches in Aruba AirWave.
Immediately after the administrator authorizes the switches, AirWave cannot communicate with the switches
anymore.
What should the administrator do to restore communication?
A. Change the SNMP and Telnet/SSH credentials in the AirWave global communication settings to match
those on the switches.
B. Change the management level for the switches to Monitoring and Firmware Updates Only.
C. Specify the SNMP and Telnet/SSH credentials on the switches to update the individual communication
settings on the switches.
D. Change the management level for the switches to Manage Read/Write.
Correct Answer: C
Section: (none)
Explanation
QUESTION 27
A company has a single routing protocol environment.
What is one reason to use OSPF routing instead of static routing?
A. OSPF allows ArubaOS switches to use default routes, while static routes cannot use 0.0.0.0/0 as the
destination network.
B. OSPF has a lower default administrative distance than static routing on ArubaOS switches.
C. OSPF reduces the risk of accidentally introducing routing loops, while static routing does not.
D. OSPF permits load sharing traffic over multiple routes, while static routing does not.
Correct Answer: C
Section: (none)
Explanation
QUESTION 28
MSTP is implemented in the topology shown in the exhibit, and all the switches are in the same region. The
network administrator does not want to use the Internal Spanning Tree (IST) or instance 0 for production traffic.
How many non-IST spanning tree instances does this network need in order to have effective load sharing on
the uplinks from the access switches?
A. two
B. three
C. four
D. five
Correct Answer: C
Section: (none)
Explanation
QUESTION 29
Exhibit 1.
Exhibit 2.
Exhibit 3.
How many MSTP regions exist in the topology shown in the exhibit?
A. one
B. two
C. three
D. four
Correct Answer: B
Section: (none)
Explanation
QUESTION 30
Device 1 needs to send traffic to Device 2, and it sends an ARP request in preparation.
Which devices process this ARP request?
A. all devices in VLAN 2, 192.168.2.0/24 subnet

B. all devices connected to Switch-2
C. all devices in VLAN 3, 192.168.3.0/24 subnet
D. all devices in this network
Correct Answer: A
Section: (none)
Explanation
QUESTION 31
A Virtual Switching Framework (VSF) fabric is configured to use LLDP-MAD.
Which action does the standby member take if it sends a probe but receives no response?
A. It sends a request packet to the commander to determine which ports should remain active.
B. It continues to function and assumes the role of commander.
C. It automatically changes its status to MAD inactive fragment.
D. It requests that the commander change its status to MAD inactive fragment.
Correct Answer: A
Section: (none)
Explanation
QUESTION 32
A network administrator configures OSPF in a network with ArubaOS switches. The administrator is concerned
that a rogue device might connect to an access layer switch and introduce OSPF routes to the company’s
routing topology. The access VLANs do not contain additional routers.
What should the administrator do so switches do not form an adjacency with rogue devices on the access
VLANs?
A. Implement BPDU filtering on interfaces assigned to these VLANs.

B. Configure the VLANs as passive OSPF interfaces.
C. Configure the interfaces with the highest OSPF DR priority.
D. Apply outbound routing policies to filter routes on the VLANs.
Correct Answer: B
Section: (none)
Explanation
QUESTION 33
A network administrator has copied new software to an ArubaOS switch and placed this software in the
secondary ﬂash location. The switch is currently booting from the primary location. The administrator wants the
switch to start using the new software.
A. Reboot the switch, which automatically causes the switch to use the newer software.
B. Execute the command to boot the system from the secondary flash.
C. Rename the secondary software as the primary software.
D. Copy the secondary software to the primary software slot.
Correct Answer: B
Section: (none)
Explanation
QUESTION 34
Which security benefit does SNMPv3 offer that SNMPv2 does not offer?
A. SSL encryption
B. Scopes
C. Data integrity
D. RADIUS groups
Correct Answer: C
Section: (none)
Explanation
QUESTION 35
The network administrator wants to know which device, type, and manufacturer is connected to port 10 on an
Aruba 3810 switch.
Which command could provide this information?
A. show interface 10
B. show mac-address 10
C. show lacp peer 10
D. show lldp remote-device 10
Correct Answer: D
Section: (none)
Explanation
Reference: https://h20565.www2.hpe.com/hpsc/doc/public/display?
sp4ts.oid=1827663&docLocale=en_US&docId=emr_na-c04943204#S_commands
QUESTION 36
Which benefit does Aruba Clarity in Aruba AirWave provide?
A. It provides an easily searchable network topology that includes physical wired, physical wireless, and virtual
network infrastructure devices.
B. It helps managers use the AirWave Management Platform (AMP) with its context-specific help and links to
additional resources.
C. It enables managers to view all configuration templates for APs, and switches from a single dashboard.
D. It provides at-a-glance views of issues such as DHCP request and 802.1X authentication failures to aid in
troubleshooting.
Correct Answer: D
Section: (none)
Explanation
Review by randi
https://blogs.arubanetworks.com/industries/get-more-insight-with-aruba-clarity/
QUESTION 37
Based on the topology shown in the exhibit, which symptom does a network administrator see if the ArubaOS
switches are in their factory default states?
A. Ports places in a blocking state

B. Mislearned MAC addresses
C. TTL expired in transit
D. Layer 3 loop
Correct Answer: D
Section: (none)
Explanation
QUESTION 38
Switch 1 shown in the exhibit is an ArubaOS switch that has an uplink to the network core on interface 25. The
network administrator wants to add a link on interface 26. The administrator creates a link aggregation with this
command:
Switch1 (config)# trunk 25-26 trk1 lacp
What else must the administrator do to enable the Switch 1 link aggregation to successfully pass all traffic to
the core?
A. Configure VLANs 10 and 20 as tagged VLANs on interface 26.

B. Configure VLANs 10 and 20 as tagged VLANs on trk1.
C. Enable BPDU filtering on interface 26.
D. Enable LACP in active or passive mode on interfaces 25 and 26.
Correct Answer: A
Section: (none)
Explanation
QUESTION 39
An ArubaOS switch is protected with a manager password. The network administrator wants to back up the
configuration and apply it to other switches. The administrator wants the manager password to be available in
both the saved and running configuration.
To accomplish this goal, what must the administrator do before the configuration is backed up?
A. Enter the password command with the plaintext option.

B. Configure an SSH keypair on the switch.
C. Enter the include-credentials command.
D. Ensure that the server to which the configuration will be backed up uses SCP as opposed to TFTP.
Correct Answer: C
Section: (none)
Explanation
QUESTION 40
A company has two ArubaOS switches, Switch1 and Switch2. Switch1 will be the commander for a new Virtual
Switching Framework (VSF) fabric. Switch2 is a new switch that will be the standby member. The network
administrator wants to configure the proper settings on the standby member interface before the standby
member joins the fabric.
What should the administrator do before the switches are joined in the VSF fabric?
A. Configure the interface settings on Switch2. Then enable VSF on Switch2.

B. Enable VSF on Switch2. Then configure the interface settings on Switch2.
C. Provision member2 on Switch1. Then configure the member2 interface settings on Switch1.
D. Provision member2 on Switch1 and member1 on Switch2. Then configure the member2 interface settings
on Switch2.
Correct Answer: D
Section: (none)
Explanation
QUESTION 41
The switches in the exhibit are all ArubaOS switches that run MSTP. The network administrator wants all of the
switch-to-switch links shown in the exhibit to be available for forwarding routed traffic.
A. Configure link-keepalive on the switch-to-switch ports.

B. Configure links on a switch as a standard link aggregation.
C. Configure the switch-to-switch ports as MSTP auto-edge ports.
D. Configure BPDU filters on the switch-to-switch ports.
Correct Answer: C
Section: (none)
Explanation
QUESTION 42
A network administrator wants to deploy Aruba Instant APs (IAPs) at a remote site that does not have Internet
access. The APs should receive their configuration automatically from AirWave by using Zero Touch
Provisioning (ZTP). What does the administrator need to configure?
A. the name and password of a user with full administrative rights to AirWave
B. the name of the AirWave VLAN with the configuration that the APs should use
C. the DHCP server configured with options 43 and 60 for ZTP
D. the IP address for the DNS server with the mapping for the airwave hostname
Correct Answer: C
Section: (none)
Explanation
QUESTION 43
Which technology can provide automated network optimization for unified communication applications such as
Skype for Business?
A. Software-defined Networking (SDN)

B. Zero Touch Provisioning (ZTP)
C. Simple Network Management Protocol (SNMP)
D. Virtual Switching Framework (VSF)
Correct Answer: A
Section: (none)
Explanation
QUESTION 44
A network administrator needs to set up a static LACP link aggregation. How should the administrator configure
the VLAN settings for the link aggregation?
A. Configure the VLANs on the physical interface with the lowest port ID before link aggregation setup.
B. Configure the VLANs on both physical interfaces after link aggregation setup.
C. Configure the VLANs on the link aggregation interface after the link aggregation setup.
D. Configure the VLANs on both physical interfaces before link aggregation setup.
Correct Answer: A
Section: (none)
Explanation
QUESTION 45
A network administrator enters this command on an ArubaOS switch with IP routing enabled:
This is the only IP route to 0.0.0.0/0 on the switch.
What is the effect?
A. The switch uses this route to route all traffic from 10.1.1.1.
B. The switch uses this route for all traffic unless the traffic matches a route with a lower cost than 10.
C. The switch uses this route for all traffic unless the traffic matches a route with a lower administrative
distance than 10.
D. The switch uses this route for all traffic that does not match a specific route in its routing table.
Correct Answer: D
Section: (none)
Explanation
QUESTION 46
Member1 is the commander of a Virtual Switching Framework (VSF) fabric. A power distribution causes
member 1 to go down. Now the network administrator wants to rejoin member1 to the VSF fabric and make
member1 the commander again.
What should the administrator do?
A. Boot member1 and allow it to rejoin to the VSF fabric. Then reboot member2.
B. Boot member1 and allow it to rejoin the VSF fabric.
C. Disconnect member1 from member2 before booting member1.
D. Configure member2 with VSF priority0. Then boot member1 and allow it to rejoin the VSF fabric.
Correct Answer: D
Section: (none)
Explanation
QUESTION 47
The link between Core-1 and Core-2 shown in the exhibit fails, and some users lose connectivity. What should
the network administrator do to prevent this issue in a situation such as this?
A. Configure BPDU protection on all Core-2 ports.

B. Enable IP routing on Core-2.
C. Create routes to 10.1.10.0/24 and 10.1.11.0/24 through 10.1.1.3 on Core-2.
D. Extend VLANs 10 and 11 on all switch-to-switch links.
Correct Answer: D
Section: (none)
Explanation
QUESTION 48
A network administrator wants to place desktops connected to an ArubaOS switch in VLAN5. The desktops
have no awareness of VLANs. How should the administrator assign desktops to the VLAN?
A. Make switch ports connected to desktops tagged members of VLAN5.
B. Make VLAN5 the Default VLAN on the switch before the desktops connect to the switch ports.
C. Make VLAN5 the Primary VLAN on the switch.
D. Make switch ports connected to desktops untagged members of VLAN5.
Correct Answer: D
Section: (none)
Explanation
QUESTION 49
A network administrator connects an Aruba Instant AP (IAP) to an ArubaOS switch but cannot connect the AP
to the Instant cluster that exists. The administrator wants to check the IAP management IP address and
software version from the ArubaOS switch CLI. To obtain this information, what should the administrator ensure
is enabled on the switch and switch interfaces?
A. SNMP
B. ARP
C. Device profiles
D. LLDP
Correct Answer: D
Section: (none)
Explanation
review by randi
QUESTION 50
A network administrator wants to form a cluster with several Aruba Instant APs. What is required to achieve this
goal?
A. All APs must be pre-configured with WLANs with the same SSID.
B. All APs must be in the same regulatory domain.
C. All APs must operate on the same radio channel.
D. All APs must be the same model.
Correct Answer: B
Section: (none)
Explanation
QUESTION 51
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network uses RSTP, as shown in the exhibits. The network administrator wants switches to use the link that
connects to Core-2 to forward some of the traffic. The administrator enters these commands on every switch
shown in the exhibit:
The administrator then discovers that the links to Core-2 still did not forward any traffic.
What should the administrator do to enable these links to carry traffic?

A. Activate the MSTP region configuration on all switches.
B. Lower the port cost on the links that connect to Core-2 on the access layer switches.
C. Configure Core-2 with spanning tree priority 0 in instance 2.
D. Change the spanning tree mode to MSTP on all switches.
Correct Answer: B
Section: (none)
Explanation
QUESTION 52
An interface on an ArubaOS switch did not receive any BDPUs and has the spanning tree auto-edge setting.
What describes the effect of this setting?
A. The interface has spanning tree disabled on it and ignore BPDUs.

B. The interface remains forwarding during topology changes.
C. The interface root path cost is automatically set to 0.
D. The interface is preferred to be selected as master port.
Correct Answer: B
Section: (none)
Explanation
QUESTION 53
What is a requirement for links to successfully participate in an aggregated link?
A. that links have the spanning tree protocol disabled

B. that links use the same speed and duplex mode
C. that links use the same media type and are untagged
D. that links are untagged and are associated to the same VLAN
Correct Answer: B
Section: (none)
Explanation
QUESTION 54
An ArubaOS switch provides PoE+ to several Aruba APs. Users might also connect PoE devices to this switch.
In a situation where the switch PoE capacity is exceeded, the network administrator wants to ensure that the
switch continues to power the APs in preference to other devices.
What should the administrator do to achieve this goal?
A. Set the PoE priority for the ports connected to APs to critical.
B. Set the PoE class for the ports connected to APs to Class 5.
C. Make sure that LLDP MED is enabled on both the switch ports and the APs.
D. Set the PoE allocation on the ports connected to APs to the maximum value permitted by PoE+.
Correct Answer: A
Section: (none)
Explanation
QUESTION 55
What is a valid setup for a Virtual Switching Framework (VSF) fabric?
A. one 5406R zl2 switch as commander and one 5412R zl2 switch as a standby member
B. one 5412R zl2 switch as commander and two 5406R zl2 switches as standby members
C. one 5406R zl2 switch as commander and two 5412R zl2 switches as standby members
D. one 5412R zl2 switch as commander and one 5412R zl2 switch as a standby member
Correct Answer: D
Section: (none)
Explanation
QUESTION 56
A network administrator wants to download a configuration from an ArubaOS switch. The administrator does
not have local access to the switch and wants to copy the configuration in a secure manner that prevents
eavesdroppers from reading the configuration. Which two options can the administrator use to copy the
configuration?
A. SFTP and HTTPS

B. ZModem and SFTP
C. HTTPS and TFTP
D. HTTPS and ZModem
Correct Answer: A
Section: (none)
Explanation
QUESTION 57
A network administrator needs to complete the initial setup on an ArubaOS switch with the use of remote
access. How can the network administrator do this?
A. Connect the switch’s OOBM port to the same VLAN as the management station, and then establish a
Telnet session to the switch default IP address.
B. Connect the switch’s OOBM port to the same VLAN as Aruba AirWave. Then manually discover the switch
in AirWave using the switch default IP address.
C. Send a Reverse ARP from the management station and assign a temporary IP to the workstation.
D. Set up the network DHCP server to assign the switch a reserved IP address. Connect the switch to a VLAN
with DHCP services and then establish a Telnet session to the reserved IP address.
Correct Answer: B
Section: (none)
Explanation
QUESTION 58
A network administrator enters this command in an ArubaOS switch CLI:
Switch(config)# ip route 0.0.0.0/0
The CLI shows this error:

Incomplete input: 0.0.0.0/0
How can the administrator find a valid way to complete the command?
A. Enter ip ––help route.

B. Enter ip route 0.0.0.0/0 ? with a space before the ?.
C. Enter help ip route.
D. Enter ip route 0.0.0.0/0? With no space before the ?.
Correct Answer: B
Section: (none)
Explanation
QUESTION 59
Prior to implementing OSPF on the network, an ArubaOS switch had the IP routing table shown in the exhibit.
The network administrator then sets up OSPF in the network. The switch calculates these OSPF routes to
10.1.20.0/24:
Through 10.1.0.1 with cost 3 and administrative distance 110

Through 10.1.0.2 with cost 3 and administrative distance 110
How does the way the switch handles traffic destined to 10.1.20.0/24 change with the introduction of OSPF?
A. The switch stops sending the traffic to 10.1.0.3 and instead load balances it to 10.1.0.1 and 10.1.0.2.
B. The switch no longer drops this traffic and instead load balances it to 10.1.0.1 and 10.1.0.2.
C. The switch continues to send the traffic to 10.1.0.3, but it now has backup routes for the traffic in case the
connection to 10.1.0.3 fails.
D. The switch no longer drops this traffic and instead sends it to 10.1.0.1.
Correct Answer: A
Section: (none)
Explanation
QUESTION 60
Which configuration settings for an ArubaOS switch must be deleted from a physical interface before it can be
associated with a Virtual Switching Framework (VSF) link?
A. Distributed trunking
B. Virtual Router Redundancy Protocol (VRRP)
C. Multi-Active Detection (MAD)
D. Graceful OSPF (non-stop forwarding)
Correct Answer: A
Section: (none)
Explanation
QUESTION 61
Based on the output shown in this exhibit, which statement is true about the 10.0.0.2 neighbor?
A. The neighbor rejects communications because it already has its maximum number of neighbors.
B. The neighbor has mismatched settings and cannot exchange information with this switch.
C. The neighbor communicates with this switch, but it cannot hold any more routes in its database.
D. The neighbor communicates with this switch, and they have exchanged all topology information.
Correct Answer: D
Section: (none)
Explanation
QUESTION 62
A company wants a modular switch for the core layer of its mid-sized campus. The switch requires 32 10 G
ports in a single switch with the ability to scale in the future. Which ArubaOS switches series is best suited for
this role?
A. Aruba 2930F
B. Aruba 3800
C. Aruba 3810
D. Aruba 5400R
Correct Answer: D
Section: (none)
Explanation
QUESTION 63
A network administrator implements a wireless network that uses three wireless APs. The administrator wants
to ensure that users can roam seamlessly from one AP to another. Which type of wireless network should the
administrator implement?
A. an ad hoc network that does not use channel bonding

B. an infrastructure network with a different Service Set Identifier (SSID) on each AP
C. an ad hoc network that uses channel bonding
D. an infrastructure network with the same Service Set Identifier (SSID) on each AP
Correct Answer: D
Section: (none)
Explanation
QUESTION 64
A network administrator logs in to the CLI of a Virtual Switching Framework (VSF) fabric and enters the
command shown in the exhibit.
What does the output reveal?
A. MAD assistant at 10.1.0.2 failed to respond to probe requests.

B. The VSF link failed, and MAD shut down the links on the other member.
C. MAD is configured incorrectly and causes a split brain situation to occur.
D. The VSF link failed, and MAD shut down the links on this switch.
Correct Answer: B
Section: (none)
Explanation
QUESTION 65
Which standard for wireless connectivity supports the fastest data rates and Multi-User Multiple Input/Multiple
Output (MU MIMO)?
A. 802.11a
B. 802.11ac
C. 802.11g
D. 802.11n
Correct Answer: B
Section: (none)
Explanation
QUESTION 66
This switch currently assigns all VLANs to MSTP instance 0 or the Internal Spanning Tree (IST).
Which statement correctly describes interface 21?
A. The interface is down at Layer 2; it is not available for sending or receiving any traffic.
B. The interface does not forward or accept data traffic, but it is ready to start forwarding if interface 19 fails.
C. The interface is an edge port but has received Bridge Protocol Data Units (BPDUs), so it is disabled.
D. The interface does not support spanning tree; it is possible that it will introduce a loop in the network.
Correct Answer: B
Section: (none)
Explanation
QUESTION 67
What is true about the community string used for SNMPv1 and SNMPv2c?
A. The community string hashes the SNMP message, but does not encrypt it, which provides for data integrity.
B. The community string is like a password transmitted in cleartext, which provides no data integrity or privacy.
C. The community string encrypts the SNMP message, but does not hash it, which provides for data privacy.
D. The community string encrypts and hashes the SNMP message, which provides for data integrity and
privacy.
Correct Answer: B
Section: (none)
Explanation
QUESTION 68
A company requires switches to use MSTP instead of RSTP, so that the switches can forward traffic on more
than one switch-to-switch link. How does the administrator set up the solution to meet this requirement?
A. Set the same spanning tree cost on all redundant links on a switch.
B. Ensure that switches use the 802.3t standard costs instead of the legacy costs.
C. Map different VLANs to different instances, and make a different switch root bridge in each instance.
D. Configure every switch with a unique bridge propriety in the IST, which is also called spanning tree instance
0.
Correct Answer: C
Section: (none)
Explanation
QUESTION 69
Which security benefit does SNMPv3 offer that SNMPv2 does not offer?
A. SSL encryption
B. Scopes
C. Data confidentially
D. RADIUS groups
Correct Answer: C
Section: (none)
Explanation
QUESTION 70
Which security option for a WLAN provides the best access control security?
A. MAC authentication with WPA-PSK

B. WPA2 Enterprise (802.1X)
C. WPA2 Personal (preshared key)
D. MAC authentication with WPA2 Enterprise (802.1X) fail-thru
Correct Answer: B
Section: (none)
Explanation
QUESTION 71
A network administrator wants to see how much power an Aruba AP has dynamically requested from an
ArubaOS switch port. Which information should the administrator look at?
A. LLDP with the use of the show lldp info remote-device command
B. interface with the use of the show interface command
C. device class with the use of show system power-supply command
D. device profile with the use of the show device-profile status command
Correct Answer: A
Section: (none)
Explanation
Reference: https://support.hpe.com/hpsc/doc/public/display?docId=c04943217 (80)
QUESTION 72
A company needs a switch that supports 10GbE and 40GbE for its mid-sized campus. The company prefers
stackable, or fixed port, switches over modular switches. Which ArubaOS switch series best meet these
needs?
A. Aruba 2530
B. Aruba 2930F
C. Aruba 3810
D. Aruba 5400R
Correct Answer: C
Section: (none)
Explanation
QUESTION 73
Which standard for wireless connectivity supports both 2.4GHz and 5GHz?
A. 802.11a
B. 802.11ac
C. 802.11g
D. 802.11n
Correct Answer: D
Section: (none)
Explanation
Review by randi
QUESTION 74
A company has these requirements to manage its ArubaOS switches:
Management and data traffic cannot share links.

Managers must be able to reach switches remotely over IP connections.
How should the administrator set up switches to meet these requirements?
A. Assign at least one port on each switch to a Virtual Switching Framework (VSF) link and connect those
ports in a dedicated network.
B. Create a management VLAN and tag the VLAN on all switch-to-switch links.
C. Enable IP authorized managers for the administrator subnet.
D. Configure IP addressing on OOBM ports and connect them in a dedicated network.
Correct Answer: A
Section: (none)
Explanation
QUESTION 75
Which feature should the network administrator configure on the Virtual Switching Framework (VSF) fabric to
prevent issues if Links 1 and 2 fail?
A. Graceful OSPF (non-stop forwarding)

B. Multi-Active Detection (MAD)
C. Distributed trunking
D. Virtual Router Redundancy Protocol (VRRP)
Correct Answer: B
Section: (none)
Explanation
QUESTION 76
Which ArubaOS switch feature treats multiple ports as one logical port?
A. OSPF
B. STP
C. VSF
D. Link aggregation
Correct Answer: D
Section: (none)
Explanation
QUESTION 77
How can a network administrator configure an ArubaOS switch to automatically assign the correct tagged
VLANs to a port when an Aruba AP connects to that port?
A. Configure the tagged VLANs in the device profile and apply that profile to the port
B. configure a MAC-to-VLANs mapping policy and enable MAC-based VLANs on the port
C. Enable Zerp Touch Provisioning (ZTP) on the switch
D. Enable LLDP MED Globally and on the switch port
Correct Answer: A
Section: (none)
Explanation
QUESTION 78
A Network administrator wants to see how much power an Aruba AP has dynamically requested from an
ArubaOS switch port. Which information should the administrator look at?
A. LLDP with the use of the show lldp info remote-device command
B. Interface with the use of the show interface command
C. Device class with the use of show system power-supply command
D. Device profile with the use of the show device-profile status command
Correct Answer: A
Section: (none)
Explanation
QUESTION 79
Refer to the exhibit
MSTP is enabled on the switch shown in the exhibit.
Which additional step should the network administrator take to support load sharing of traffic on
different switch-to-switch link?
A. Configure different spanning tree port priorities for different instances on each access layer
switch.
B. Assign different spanning tree port costs to different instances on each access layer switch.
C. Ensure that half of the switches use config revision 1 and half of the switches use config revision 2.
D. Create an identical VLAN-to-instance mapping on each switch, in which some VLANs are in each instance.
Correct Answer: A
Section: (none)
Explanation
QUESTION 80
How does a switch treat a link aggregation?
A. The switch treats the link aggregation as one logical link for spanning tree, but it learns MAC addresses
separately on each individual interface within the aggregation.
B. The switch treats the link aggregation as one logical link. It assigns one spanning tree port role to the link
aggregation and it learns MAC addresses on the aggregation.
C. The switch treats the link aggregation as one logical link for MAC learning, but it assigns an individual
spanning tree port role to each interface within the aggregation.
D. The switch treats each interface within the interface as a separate entity for MAC address learning; it also
assigns an individual spanning tree port role to each interface.
Correct Answer: B
Section: (none)
Explanation
QUESTION 81
For which task does a network administrator need to access the enable context on an ArubaOS switch?
A. to view interface statistics
B. to view CPU statistics
C. to ping an IP address
D. to view configuration files
Correct Answer: D
Section: (none)
Explanation
QUESTION 82
An ArubaOS switch operates at factory default settings. A network administrator enters this
command:
Switch (config)# password operator plaintext mysecret
How does the switch now control access to the CLI through the console port?
A. It forces users to enter no username and password operator to gain access to basic mode. Users must then
enter password mysecret to reach enable mode.
B. It forces users to enter username operator and password mysecret to gain access to basic mode. Users
can then reach enable mode without authenticating.
C. It allows users to access basic mode without logging in, but forces them to enter password mysecret to
reach enable mode.
D. It forces users to enter no username and password mysecret to gain access to basic mode. Users can then
reach enable mode without authenticating.
Correct Answer: C
Section: (none)
Explanation
QUESTION 83
What often happens when a Layer2 broadcast domain has a loop?
A. Some switch-to-switch ports take the MSTP alternative role and stay in that role.
B. In the switch MAC tables, the MAC addresses frequently move from one port to another.
C. Switches automatically raise their MSTP configuration revision level by one.
D. In the switch routing tables, some routes converge with new metrics.
Correct Answer: B
Section: (none)
Explanation
QUESTION 84
A network administrator installs a new aggregation and access layer in a campus network. All users in this area
belong to the same VLAN. The administrator plugs the switches into the network with the factory default
configurations. Which protocol must the administrator configure to prevent broadcast storms?
A. MSTP
B. LLDP
C. OSPF
D. LACP
Correct Answer: A
Section: (none)
Explanation
QUESTION 85
A network administrator plans to set up a WLAN on an Aruba Instant cluster. The WLAN uses WPA/WPA2
Enterprise security. The administrator wants no authenticate users locally on the cluster.
How should the administrator configure me credentials?
A. Add a user account for each employee to the cluster internal server database.
B. Import authorized device MAC addresses to the cluster.
C. Implement a shared secret or password in the cluster WLAN settings.
D. Set up an external RADIUS server for authorization.
Correct Answer: D
Section: (none)
Explanation
QUESTION 86
A network administrator plans two interfaces for a Virtual Switching Framework (VSF) link.
Which best practice should the administrator follow?
A. Configure a low spanning tree cost on the interfaces.

B. Configure the interfaces as a distributed trunk.
C. Use interfaces on different modules.
D. Use copper connections.
Correct Answer: C
Section: (none)
Explanation
QUESTION 87
Refer to exhibit
Assume that Student A's ARP table is empty. Student A prepares to send an FTP packet to FTP Server B and
needs to discover the proper destination MAC address.
For which IP address does Student A send an ARP request?
A. 10.1.2.2
B. 10.1.10.1
C. 10.1.10.87
D. 10.1.20.1
Correct Answer: D
Section: (none)
Explanation
QUESTION 88
Which technology enables a network administrator to group users by logical function instead of physical
location, reduce bandwidth waste by limiting broadcast traffic, and improve security by isolating users at
Layer2?
A. 802.1X
B. SNMPv3
C. VLANs
D. Virtual Switching Framework (VSF)
Correct Answer: C
Section: (none)
Explanation
QUESTION 89
How does a wireless network differ from a wired network?
A. A wireless network is a shared medium, while a modern wired network typically works in fullduplex
mode.
B. A wireless network is inherently more secure than a wired network.
C. A wireless network does not use source and destination MAC addresses, but a wired network
does.
D. A wireless network does not support encryption, unlike a wired network, which can support
encryption.
Correct Answer: A
Section: (none)
Explanation
QUESTION 90
A server connects to a port on an ArubaOS switch. The network administrator wants to
ensure that the port remains forwarding during MSTP topology changes, and changes in the port
status do not cause MSTP topology changes.
Which statement describes how the administrator can accomplish this?
A. The administrator can accept the default behavior of auto-edge.

B. The administrator can lower the port's root path cost to zero.
C. The administrator can manually disable STP on the edge port.
D. The administrator can configure the port as an MSTP master port.
Correct Answer: D
Section: (none)
Explanation
QUESTION 91
Refer the exhibit
A network administrator needs to set up DHCP relay in a switched network comprised of ArubaOS
switches.
Switch A and Switch B have the IP settings in Exhibit 2, and no static or dynamic routes. Switch B is
the DCHP server's default gateway. The administrator correctly configures the IP helper address on
Switch A.
However, when the DHCP client attempts to acquire an IP address in VLAN 10, the process fails.
What does the administrator need to do to solve this problem?
A. Configure a static route on Switch A, and enable IP Helper on Switch B.

B. Configure a static route on Switch A.
C. Configure a static route on Switch A and Switch B, and enable IP Helper on Switch B.
D. Configure a static route on Switch A and Switch B.
Correct Answer: D
Section: (none)
Explanation
QUESTION 92
A manager password is configured on an ArubaOS switch. The network administrator wants
to ensure managers only use SSH to connect to the ArubaOS switch for CLI access. Which step should
the administrator complete to accomplish this?
A. Enter the command no telnet-server.

B. Enter the commend include-credentials.
C. Enter the command ip ssh.
D. Enter the command secure-vty.
Correct Answer: A
Section: (none)
Explanation
QUESTION 93
What does the traceroute command that is entered on an ArubaOS switch identify?
A. each physical device between the switch and a destination

B. the path to each router connected to the switch
C. each Layer 3 device between the switch and a destination
D. debug output tracing entries to the routing table
Correct Answer: C
Section: (none)
Explanation
QUESTION 94
An ArubaOS switch operates at its factory default settings. A network administrator connects
the switch to a VLAN with a DHCP server. The switch-to-switch connection carries untagged traffic.
The administrator wants to use Telnet log in to the switch CLI.
How should the administrator contact the switch and log in?
A. Contact the switch at its default IP address 172.16.0.254/24 and log in without entering a
password.
B. Contact the switch at its default IP address 192.168.1.1/24 and log in with the default password
admin.
C. Contact the switch at its DHCP-assigned IP address and log in without entering a password.
D. Contact the switch at its DHCP-assigned IP address and log in with the default password aruba.
Correct Answer: C
Section: (none)
Explanation
QUESTION 95
Refer the exhibit
A network administrator executes this command on an ArubaOS switch, Switch-2:
Switch-2(config)# ip route 10.1.100.0/24 10.1.1.1
The administrator successfully pings Device 1 at 10.1.100.42 from Switch-2. However, Device 2
cannot ping Device 1.
The administrator confirms that Device 1 is correctly set up.
What should the administrator check on Switch-2 to resolve this issue?
A. that ARP proxy is enabled

B. that IP routing is enabled
C. that spanning tree is disabled
D. that ICMP is enabled
Correct Answer: B
Section: (none)
Explanation
QUESTION 96
Refer the exhibit
Prior to implementing OSPF on the network, an ArubaOS switch had the IP routing table shown in the
exhibit.
The network administrator then sets up OSPF in the network. The switch calculates these OSPF
routes to
10.1.20.0/24:
* Through 10.1.0.1 with cost2 and administrative distance 110
How does the switch now handle traffic that is destined to the 10.1.20.0/24 network?
A. It sends all of the traffic to 10.1.0.3.

B. It load balances the traffic: sends some to 10.1.0.1 and some to 10.1.0.3.
C. It load balances the traffic: sends some to 10.1.0.2 and some to 10.1.0.3.
D. It sends all of the traffic to 10.1.0.1.
Correct Answer: A
Section: (none)
Explanation
QUESTION 97
A network administrator is in the context in an ArubaOS switch CLI:
Switch (vlan10)#
The administrator wants to leave the configuration context with a single command.
Which command should the administrator enter?
A. logout
B. quit
C. exit
D. end
Correct Answer: D
Section: (none)
Explanation
QUESTION 98
A network administrator wants to set up a link aggregation between two switches, as shown in the
exhibit. The link aggregation must meet these requirements:
* Protects against misconfiguration
* Can be configured with VLANs and other settings
Which type of link aggregation should the administrator create?
A. dynamic LACP
B. static LACP
C. manual (trunk)
D. distributed (trunk)
Correct Answer: B
Section: (none)
Explanation
QUESTION 99
A company has an Aruba 5400R switch, switch 1, at the network core of its campus. This
switch routes all traffic for the campus and is the RSTP root. The company now wants to add another
Aruba 5400R switch to the core in order to enhance resiliency. The company wants to use the option
that provides the best Layer 2 and Layer 3 resiliency and also the simplest setup.
What should the administrator do to add the new 5400R switch?
A. Add the new switch and migrate to MSTP with two instances.
B. Add the new switch and set up OSPF on all switches.
C. Add the new switch as a secondary root bridge in RSTP.
D. Add the new switch as a standby member in a VSF fabric with switch 1.
Correct Answer: C
Section: (none)
Explanation
QUESTION 100
Why would a network administrator use strict provisioning to configure the standby member
in a Virtual Switching Framework (VSF) fabric?
A. The network administrator wants to control which device can join the VSF fabric.
B. The network administrator needs to configure the correct domain ID on the standby member
before this member joins the VSF fabric.
C. The network administrator wants to ensure the standby member is configured with the same
settings as the commander.
D. The network administrator does not know the MAC address of the standby member.
Correct Answer: A
Section: (none)
Explanation
QUESTION 101
Several servers are connected to an ArubaOS switch. The servers send traffic with 802.1Q
VLAN ID 5. How should the network administrator configure the ArubaOS switch to receive this
traffic?
A. Make VLAN 5 the Default VLAN on the switch before the servers connect to their switch ports.
B. Make switch ports connected to servers untagged members of VLAN 5.
C. Make switch ports connected to servers tagged members of VLAN 5.
D. Make VLAN 5 the Primary VLAN on the switch.
Correct Answer: C
Section: (none)
Explanation
QUESTION 102
Exhibit 1
Exhibit 2
PC1 cannot reach PC2.

Based on the exhibits, what could be the cause of this issue?
A. PC1 has the wrong IP address for its default gateway setting.
B. Router A has a direct route, instead of a static route, to 10.1.10.0/24.
C. The next hop address for the 10.1.20.0/24 route is incorrect.
D. Router A has an invalid subnet mask for the VLAN 1 subnet.
Correct Answer: A
Section: (none)
Explanation
Seharusnya IP Gateway PC1 = 10.1.10.254
QUESTION 103
Exhibit 1
Exhibit 2
Assume that Switch-2 is correctly configured for OSPF.
Which additional step must the administrator take to enable Switch-1 to advertise 192.168.2.0/24 to
Switch-2?
A. Set a router ID on Switch-1.

B. Configure a route to advertise 192.168.2.0/24 on Switch-1.
C. Add Switch-2's router ID to Switch-1's OSPF neighbor list.
D. Enable OSPF on VLAN 2.
Correct Answer: D
Section: (none)
Explanation
QUESTION 104
A network administrator creates a local user account and assigns that account to the Level-9
authorization group. The administrator tests the group assignment and is able to successfully log in
with the local user credentials. However, the administrator is able to enter all the commands rather
than only the commands permitted by the Level-9 group.
How can the administrator resolve this issue?
A. Set an operator password.
B. Set the command access level to enable.
C. Set the command access level to all.
D. Set command authorization to local.
Correct Answer: D
Section: (none)
Explanation
QUESTION 105
A network administrator wants to pre-configure new MSTP region settings on ArubaOS
switches, and then apply the new settings at a later time. How can the administrator pre-configure
the settings?
A. Change the MSTP region name after the new settings are configured.
B. Create a second spanning tree region on the switch and apply the settings to this region.
C. Use the pending option in the spanning-tree commands.
D. Change the MSTP region revision number after the new settings are configured.
Correct Answer: C
Section: (none)
Explanation
QUESTION 106
Refer to the exhibits
exhibit 1
Exhibit 2
A network administrator wants to create a backup IP route to 10.1.20.0/24 on Switch-1. The backup
route should use Link2, and it should only be used if Link1 is down.
What is the correct setup to accomplish this?
A. an IP route through 10.1.20.1 with administrative distance 10

B. an IP route through 10.0.2.2 with administrative distance 10
C. an IP route through 10.0.2.2 with administrative distance 1
D. an IP route through 10.1.20.1 with administrative distance 1
Correct Answer: B
Section: (none)
Explanation
QUESTION 107
The student A client needs to connect to FTP Server B.
Student A sends the necessary ARP request and receives a reply.
Which destination MAC address does the Student A client use in the FTP packet to FTP Server B?
A. 00-1D-B3-F1-EF-40
B. 00-E0-52-F0-44-87
C. 00-1D-B3-F1-EF-31
D. 00-E0-52-F0-41-B2
Correct Answer: A
Section: (none)
Explanation
QUESTION 108
A Virtual Switching Framework (VSF) fabric currently has two members and two physical
10GbE links in its VSF link.
Which administrative task can a network administrator perform on this VSF fabric when both
members are online?
A. Remove a VSF member.

B. Add a new 40GbE link to the VSF link.
C. Remove one of the physical links in the VSF link.
D. Change the VSF link to use 40GbE links instead of 10GbE links.
Correct Answer: A
Section: (none)
Explanation
reviewed by randi
QUESTION 109
A network administrator uses the console to access an ArubaOS core switch and wants to find
the management IP address of another ArubaOS switch that is currently connected to port B1. Which
information should the administrator review?
A. interface with the use of the show interface command

B. LLDP with the use of the show lldp info remote-device command
C. ARP with the use of the show arp command
D. device profile with the use of the show device-profile status command
Correct Answer: B
Section: (none)
Explanation
reviewed by randi
QUESTION 110
Member 1 is the commander of a Virtual Switching Framework (VSF) fabric. A power
disruption causes member1 to go down. What happens when power is restored and member 1
boots?
A. Member 1 fails to rejoin the VSF fabric, and the error disrupts member 2.
B. Member 1 rejoins the VSF fabric and becomes the commander.
C. Member 1 rejoins the VSF fabric, and member 2 continues to act as commander.
D. Member 1 fails to rejoin the VSF fabric, and member 2 continues to act as commander.
Correct Answer: B
Section: (none)
Explanation
QUESTION 111
Which security options for a WLAN can authenticate either the computer or the user?
A. Open with MAC authentication

B. MAC authentication with WPA2 Enterprise (802.1X) fail-thru
C. Personal (preshared key) authentication with WEP
D. Personal (preshared key) authentication with WPA2
Correct Answer: B
Section: (none)
Explanation
QUESTION 112
A network administrator wants to form a cluster with several Aruba Instant APs (IAPs). What
must the administrator verify?
A. that all APs are the same model

B. that all APs are operating on the same radio channel
C. that all APs are connected in the same subnet
D. that all APs are pre-configured with WLANs with the same SSID
Correct Answer: D
Section: (none)
Explanation
QUESTION 113
A network administrator just received two switches and wants to use the plug-and-play
method to establish a Virtual Switching Framework (VSF) fabric with the fewest steps possible.
What must the administrator do to establish the fabric in this way?
A. Configure a VSF link on the commander, and enable VSF on the standby member.
B. Configure a VSF link on the commander, and enable VSF on me commander.
C. Enable VSF on both the commander and the standby member.
D. Configure a VSF link on both the commander and the standby member.
Correct Answer: B
Section: (none)
Explanation
QUESTION 114
The routing configuration must support this behavior:
What must the network administrator change to meet these criteria?
A. On Switch 3, add a route to 192.168.2.0/24 through 192.168.1.9 and a route to 192.168.3.0/24
through 192.168.1.5.
B. On Switch-1, Switch-2, and Switch-3, change the next hop in each static route to specify an IP
address that exists on that switch.
C. On Switch-1, raise the administrative distance for the second route to 192.168.3.0/24; on Switch-
2, raise the administrative distance for the second route to 192.168.2.0/24
D. On Switch-1, add a route to 192.168.1.8/30 through 192.168.0.3; on Switch-2, add a route to
192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through
192.169.1.4.
E. On Switch-1, add a route to 192.168.1.8/30 through 192.168.1.2; on Switch-2, add a route to
192.168.1.4/30 through 192.168.1.1; on Switch-3, add a route to 192.168.1.0/30 through
192.168.1.4.
Correct Answer: C
Section: (none)
Explanation
QUESTION 115
A retail company needs a quick way to deploy network infrastructure to new sites.
Which Aruba solutions provide Zero Touch Provisioning (ZTP) for Aruba Instant APs (IAPs) and
ArubaOS switches?
A. Aruba AirWave and Aruba Activate

B. Aruba Meridian and Aruba ALE
C. Aruba AirWave and Aruba Central
D. Aruba Activate and Aruba Meridian
Correct Answer: A
Section: (none)
Explanation
QUESTION 116
A network administrator wants to use Aruba AirWave to manage Aruba 3810 Series
switches deployed at the campus access layer. How does AirWave determine which configuration
template to apply to these switches?
A. based on their group

B. based on their lowest level subfolder
C. based on their top level folder
D. based on the global group associated with their group
Correct Answer: D
Section: (none)
Explanation
QUESTION 117
A network administrator wants to disable physical interfaces 13-24 on an ArubaOS switch.
How can the administrator do this?
A. Assign the range of interfaces to a VLAN. Then, disable the VLAN.

B. Create a named range for interfaces 13-24. Then, disable the named range.
C. Create a named port group for interfaces 13-24. Then, disable the named port group.
D. Use the interface disable command. Specify 13-24 for the ID.
Correct Answer: D
Section: (none)
Explanation
QUESTION 118
Based on the exhibit, what is the problem?
A. An issue causes the spanning tree to converge and re-converge again and again.
B. Interface 25 on Switch-1 is incorrectly configured as an STP edge port and causes a loop to occur.
C. Interface 25 on Switch-1 does not support the correct VLANs and prevents the interface from
receiving the correct STP role.
D. Switch-1 and another switch are configured with the same spanning tree priority and cause the
root election to occur again and again.
Correct Answer: A
Section: (none)
Explanation
QUESTION 119
Which issue could cause the Blocked status on A2?
A. A1 and A2 are connected to different switches.

B. A1 and A2 use different trunk load balancing modes.
C. A1 and A2 support different VLANs.
D. A1 and A2 have spanning tree enabled on the link aggregation.
Correct Answer: D
Section: (none)
Explanation
QUESTION 120
Refer to exhbit
A company has an existing Aruba Instant cluster with several Instant APs (IAPs), as shown in the
exhibit. The network administrator orders a new IAP and boots it for the first time by connecting it to
the PoE switch port shown in the exhibit.
What happens after the IAP boots?
A. The IAP attempts to contact AirWave. If it is able to reach AirWave and obtain the current VC
(master) IP address, it joins the cluster.
B. The IAP fails to join the cluster because the administrator has not yet connected to its Instant SSID
and provisioned it.
C. The IAP undergoes an election process with the current VC (master). It takes the VC role if it has a
higher MAC address unless the current VC is configured as the preferred VC.
D. The IAP hears the messages from the current VC (master), and it joins the cluster without the
occurrence of a new election.
Correct Answer: A
Section: (none)
Explanation
QUESTION 121
Which characterizes out-of-band management?
A. Uses the same Ethernet link that the management station uses to transmit traffic onto the network
B. Is the only secure method to manage switches
C. Limits the network administrator’s ability to configure switch features and functions
D. Separates management traffic from data traffic
Correct Answer: D
Section: (none)
Explanation
Out-of-band management completely isolates management traffic from data traffic. Administrators can obtain
out-of band
management through a switch’s console port, using the serial cable that ships with the switch, or through the
OOBM port, using an Ethernet cable.
QUESTION 122
Which interface identifier correctly specifies the second port on the second module of an Aruba 5400R
zl2 switch?
A. 2/2
B. A2/2
C. B2
D. 2/0/2
Correct Answer: C
Section: (none)
Explanation
The Aruba modular switches identify modules with letters and starting number ports at 1, so the correct answer
is B2.
QUESTION 123
If a network manager enters the include-credentials command on an
Aruba switch, what happens?
A. Login credentials for switch access are stored in internal flash and are part of the configuration file.
B. The switch sends login credentials to a network RADIUS server and grants access only to network
administrators that the server approves.
C. The local manager and operator usernames and passwords are stored in internal flash but are not part of
the configuration file.
D. The switch enforces 802.1X authentication for specified ports using the manager credentials configured on
the switch.
Correct Answer: A
Section: (none)
Explanation
On Aruba switches, login credentials are not stored in flash by default. If you want to store the credentials in the
internal flash
and view them in the config, you should enter the include-credentials command.
QUESTION 124
Refer to this command output:
A network administrator changes several settings on this Aruba switch. The administrator then enters
write memory. To which configuration or configurations does the switch save the new settings?
A. config1 only
B. config1 and config3
C. config3 only
D. config1, config2, and config3
Correct Answer: C
Section: (none)
Explanation
The write memory command saves configuration changes to the active configuration
file.The command output indicates that config3 is the active file.
QUESTION 125
Switch A is an Aruba switch without IP routing enabled, and Switch B is an Aruba switch with IP routing
enabled. Based on this topology, what is the correct configuration for port B1 to ensure connectivity within
VLAN 10 and inter-VLAN connectivity between all three VLANs?
A. vlan 10 tagged B1
vlan 20 tagged B1
B. vlan 30 tagged B1
vlan 10 tagged B1
C. vlan 20 tagged B1
vlan 10 tagged B1
vlan 30 tagged B1
D. vlan 10 untagged B1
vlan 20 untagged B1
Correct Answer: B
Section: (none)
Explanation
B is correct. Because VLAN 10 extends between the two switches, it
must be carried on the switch-toswitch link. Switch A supports devices in VLAN 20, and Switch B
is the default router for this VLAN. Therefore, the switch-to-switch link must also support this traffic.
QUESTION 126
Refer to the Exhibit
Users in VLAN 20 need to acquire addressing information from the DHCP server in VLAN 30. Where
should the network administrator configure the IP helper address?
A. on VLAN 30 on Switch A
B. on VLAN 20 on Switch A
C. on VLAN 30 on Switch B
D. on VLAN 20 on Switch B
Correct Answer: B
Section: (none)
Explanation
B is correct. You should specify the ip helper-address command for the VLAN where the clients reside on
a
switch that has an IP address in that VLAN. The switch must also have IP connectivity to the DHCP server.
Switch A meets both of those criteria.
QUESTION 127
Refer to the Exhibit
Switch-A, Switch-B, and Switch-C are Aruba switches. All switches are at their factory default configurations
with the exception of spanning tree being enabled on all three switches. Based on this information, which
statements about this topology are correct? (Select two.)
A. Switch-A is the root switch.

B. Switch-B is the root switch.
C. Switch-C is the root switch.
D. Port A1 is a designated port.
E. Port A2 is a designated port.
F. Port B2 is a root port.
Correct Answer: BE
Section: (none)
Explanation
B and E are correct. Switch-B has the lowest switch ID (lowest MAC address) and, therefore, is the root
switch. (The default priority on all Aruba switches is 32,768.) The link with A2 is blocked because it
doesn’t offer the lowest cost path to the root. One side is an alternate port, and the other side is a designated
port.
A2 is the designated port since both Switch-A and Switch-B advertise the same root path cost, but Switch-A has
a lower
bridge priority (which is the tie breaker).
QUESTION 128
These commands were executed on all three switches, which were at
their factory default configuration:
spanning-tree
spanning-tree config-name exam
spanning-tree config-revision 1
spanning-tree instance 1 vlan 2
spanning-tree instance 2 vlan 3
These commands were then executed

on Switch-A:
Switch-A(config)# spanning-tree priority 0

Switch-A(config)# spanning-tree instance 1 priority 0
Switch-A(config)# spanning-tree instance 2 priority 1
These commands were then executed

on Switch-B:
Switch-B(config)# spanning-tree priority 1

Switch-B(config)# spanning-tree instance 1 priority 1
Switch-B(config)# spanning-tree instance 2 priority 0
This command was then executed on

Switch-C:
Switch-C(config)# spanning-tree pending instance 2 vlan 3-4
Which statement is true?
A. A Layer 2 loop occurs exists.

B. Switch-C is the root switch for all three instances.
C. Switch-C carries traffic in all VLANs on the link to Switch-A.
D. Switch-C load balances traffic on both links on a per-VLAN basis.
Correct Answer: D
Section: (none)
Explanation
D is correct. The first commands configured the switches with
identical MSTP region settings. Then Switch-A and Switch-B were
configured with priorities that resulted in Switch-A being elected
root in instance 0 and 1 and Switch- B being elected root in instance 2.
This means that Switch-C has a different active link in each instance.
A change to Switch-C’s VLAN-to instance mappings would place
Switch-C in a different region. However, the command was entered
with the pending keyword, and the pending changes have not yet been applied.
QUESTION 129
An Aruba switch connects to a server on port 1 and port 2, which are configured as a link aggregation.
Examine the output for this switch:
Based on this configuration and output, which statement is true.

concerning the link aggregation configuration and load-sharing operation?
A. The switch and server have failed to form an aggregated link.

B. The server is not using LACP, so the aggregated link has formed but is not load balancing.
C. The link aggregation is not carrying enough conversations for effective load balancing, and Layer 4
balancing might work better.
D. The link aggregation should use dynamic LACP, rather than static LACP, so that it can provide better load
balancing.
Correct Answer: B
Section: (none)
Explanation
B is correct. Based on the show lacp command, both sides have successfully negotiated link
aggregation. If only one link is carrying most traffic most of the time, the link probably carries just a
few conversations, which happen to be assigned mostly to one link. Aruba switches use Layer 3 load
balancing for IP traffic, by default. This server seems to most communicate with a couple IP addresses, and
Layer 4 load
balancing might work better.
QUESTION 130
A network administrator is setting up an LACP aggregated link between two Aruba switches. What must the
administrator match so the switches set up the link successfully? (Select two.)
A. Media type
B. MSTP setting
C. VLAN setting
D. Duplex mode
E. Qos setting
Correct Answer: AD
Section: (none)
Explanation
A and D are correct. When using LACP to establish an aggregated link, Aruba switches check media speed
and duplex mode.
QUESTION 131
Refer to the exibit
Also examine this command output:
Based on this information, for which networks will Switch-C receive an OSPF route?
A. 10.1.0.0/30 and 10.1.1.0/24

B. 10.1.0.0/30 and 10.1.2.0/24
C. 10.1.1.0/24 and 10.1.2.0/24
D. 10.1.0.0/30, 10.1.1.0/24, and 10.1.2.0/24
Correct Answer: A
Section: (none)
Explanation
A is correct. The command output shows that Switch-B has become
fully adjacent neighbors with both Switch-A and Switch-C, which means that all three switches will
have identical databases. Switch-C learns OSPF routes to all the networks on which Switch-A and
Switch-B enable OSPF. Based on the show ip ospf interface command,
these are 10.1.0.0/30 and 10.1.1.0/24. (Switch-C is directly connected to 10.1.0.4/30.)
QUESTION 132
An Aruba switch knows two routes to 10.1.2.0/24 with the same administrative distance. How does
the Aruba switch determine which routes to add to its IP routing table?
A. It always adds both routes.

B. It adds the route with the lowermetric, and adds both routes, if the metric is same.
C. It adds the route with the higher metric, and then the higher next
hop IP address, if the metric is the same.
D. It adds the route with the lower next hop IP address.
Correct Answer: B
Section: (none)
Explanation
B is correct. A routing switch uses metrics to distinguish between routes
that are learned in the same way such as two routes learned through OSPF.
These routes have the same administrative distance, so the switch selects the route that has the
lower metric. If the metric is the same, the switch adds both routes.
QUESTION 133
Switch-A is currently routing traffic to 10.1.4.0/24 over Link 1 using a static route entered with the default
administrative distance and metric. A network administrator wants to create a redundant IP route to
10.1.4.0/24 on Switch-A. The redundant route should use Link 2, and the switch should load balance
traffic over both routes. What is the correct setup?
A. An IP route through next hop 10.1.4.1 with distance 1 and metric 1

B. An IP route through next hop 10.1.4.1 with distance 60 and metric 1
C. An IP route through next hop 10.1.20.1 with distance 1 and metric 1
D. An IP route through next hop 10.1.20.1 with distance 60 and metric 1
Correct Answer: C
Section: (none)
Explanation
C is correct. To use Link 2, the route must use 10.1.20.1, an IP address on
a neighboring router interface, as the next hop. To ensure that the switch
will load share across the redundant routes, the second route must use the
same administrative distance and metric as the first route: 1.
QUESTION 134
Examine the command output on a VSF fabric:
Member 1 is currently commander, and member 2 has the standby role.

The VSF link fails. What occurs next?
A. Both member 1 and member 2 take the commander role, but member 2 uses 10.1.1.3 as its IP address.
B. Both member 1 and member 2 take the standby role.
C. Member 2 sends a probe to 10.1.1.3.
D. Member 1 sends a keepalive to member 2’s VLAN 101 IP address.
Correct Answer: C
Section: (none)
Explanation
C is correct. The failure of the port causes the VSF link to fail. The command output shows that LLDP15.
MAD is active, so member 2, the standby member, sends a probe to 10.1.1.3 to determine whether member 1
is still up.
QUESTION 135
What advantages does VSF provide over multiple spanning tree protocol (MSTP)? (Select two.)
A. Faster failover
B. The ability to provide link redundancy
C. Device redundancy for Layer 3 functions
D. Support for multiple VLANs
E. Deployment at both access and core layers
Correct Answer: AC
Section: (none)
Explanation
A and C are correct. VSF fabrics have a much faster failover than
MSTP, which was designed for legacy networks and can take as long
as one second to reconverge. A VSF fabric also provides device
redundancy for Layer 3 functions, which MSTP does not offer.
QUESTION 136
Which are the responsibilities of only the commander in a VSF fabric? (Select two.)
A. Run IP routing protocols

B. Forward traffic
C. Build MAC addressing table
D. Support ports that learn MAC addresses
E. Build new Layer 2 headers for forwarding routed traffic
Correct Answer: AC
Section: (none)
Explanation
A and C are correct. In a VSF fabric, the commander’s responsibilities include running the IP routing
protocols and building the MAC addressing tables. The commander forwards the MAC addressing tables to the
other member of the VSF fabric.
QUESTION 137
A network administrator connects a new Aruba Instant AP (IAPs) to a PoE switch in a network that has no
other IAPs. What happens when the IAP boots up?
A. It searches for a mobility controller to take control of it.

B. It connects to Aruba ClearPass and downloads a configuration from ClearPass.
C. It elects itself virtual controller (VC) and starts advertising the default SSID.
D. It enters an error state and must be provisioned through its console port.
Correct Answer: C
Section: (none)
Explanation
C is correct. If an IAP does not receive any beacons from a VC in an
active cluster, the IAP elects itself as the VC. Because this is a new IAP, it
advertises the default Instant SSID, which allows administrators to
connect to the SSID and provision the IAP.
QUESTION 138
Match the wireless security setting with the appropriate description.
A. WEP with 802.1X

B. WPA2-PSK
C. WPA2 with 802.1X
D. MAC-Auth alone
_______i. Often used by small companies that want a simple solution

_______ii. Not recommended for secure authentication because it can be easily spoofed
_______iii. Not supported with 802.11n or ac
_______iv. Recommend for enterprises that want the most secure option
A. bdac
B. abcd
C. dacb
D. adcb
Correct Answer: A
Section: (none)
Explanation
b i. Often used by small companies that want a simple solution
d ii. Not recommended for secure authentication because it can be easily spoofed
a iii. Not supported with 802.11n or ac
c iv. Recommend for enterprises that want the most secure option
QUESTION 139
Which credentials does Aruba AirWave use to discover and configure Aruba switches?
A. SNMP to discover and Telnet/SSH login to configure

B. Telnet/SSH login to discover and SNMP to configure
C. SNMP to discover and configure
D. Telnet/SSH login to discover and configure
Correct Answer: A
Section: (none)
Explanation
A is correct. AirWave uses SNMP to discover Aruba switches and Telnet/SSH login to configure them.
QUESTION 140
Aruba AirWave has discovered several Aruba Instant clusters. What is one step that administrators must
complete to enable configuration of the clusters from the Instant GUI in AirWave?
A. Generating certificates on AirWave and deploying the certificates to the Instant devices
B. Ensuring that AirWave has the correct Telnet/SSH credentials to log into the Instant devices
C. Ensuring that AirWave has the correct SNMP read-write credentials for the Instant devices
D. Placing the Instant devices to Manage Read/Write mode
Correct Answer: D
Section: (none)
Explanation
D is correct. Configuration in the Instant GUI applies to Instant devices at the Manage Read/Write level.

Hpe6-A41 V14.75 Fix

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Hpe6-A41 V14.75 Fix

Încărcat de

Drepturi de autor:

Formate disponibile

HPE6-A41

Which links can be combined in the same link aggregation?

A. Enable proxy ARP.

How does this affect the MSTP topology?

How should the administrator achieve this goal?

All of the switches shown in the exhibit are ArubaOS switches.

Where should the network administrator configure an IP helper address of 10.1.1.10?

A. The throughput is 90 percent of the data rate.

The network consists of two ArubaOS switches with routing disabled.

A. tagged for VLAN 20 and tagged for VLAN 30

A. Authorize the switches in Monitor + Firmware Updates only mode.

What should the administrator do to accomplish this?

A. Specify priority 15 for spanning tree instance 1.

What could explain the output results?

A. Switch-1 has a lower MAC address than Switch-2.

A. an SSH authorized user key, managed by the ip ssh public-key commands

A. a distributed LACP link aggregation

If the configuration is correct, which roles will the output show?

A. A1 = Designated A2 = Alternate A3 = Alternate

Why does this route fail to appear in the IP routing table?

A. Its prefix length is invalid.

What must the network administrator change to meet these criteria?

What should the administrator use as the next hop address?

A. a wireless distribution system

A. It can audit switch firmware (software) and automate updates.

A. RADIUS shared secret

Which statement correctly describes how the switches handle routing?

Endpoint A sends broadcast ARP requests.

Where are these requests received?

How can the administrator achieve this goal?

A. Configure a VC IP address that is a reserved IP address in the AP’s subnet.

What should the administrator do to restore communication?

What is one reason to use OSPF routing instead of static routing?

Which devices process this ARP request?

A. all devices in VLAN 2, 192.168.2.0/24 subnet

A. Implement BPDU filtering on interfaces assigned to these VLANs.

What should the administrator do to accomplish this?

Which command could provide this information?

A. Ports places in a blocking state

A. Configure VLANs 10 and 20 as tagged VLANs on interface 26.

A. Enter the password command with the plaintext option.

A. Configure the interface settings on Switch2. Then enable VSF on Switch2.

What should the administrator do to accomplish this?

A. Configure link-keepalive on the switch-to-switch ports.

A. Software-defined Networking (SDN)

This is the only IP route to 0.0.0.0/0 on the switch.

What is the effect?

What should the administrator do?

A. Configure BPDU protection on all Core-2 ports.

What should the administrator do to enable these links to carry traffic?

A. The interface has spanning tree disabled on it and ignore BPDUs.

A. that links have the spanning tree protocol disabled

What should the administrator do to achieve this goal?

A. SFTP and HTTPS

The CLI shows this error:

A. Enter ip ––help route.

Through 10.1.0.1 with cost 3 and administrative distance 110

A. an ad hoc network that does not use channel bonding

What does the output reveal?

A. MAD assistant at 10.1.0.2 failed to respond to probe requests.

Which statement correctly describes interface 21?

A. MAC authentication with WPA-PSK

Management and data traffic cannot share links.