Aruba Certified Switching Professional Exam HPE6-A73 Study Guide Updated

Eleanor2022-10-20T03:51:02+00:00

By Eleanor Aruba Certified Switching Professional (ACSP), HPE HPE6-A73, HPE6-A73 exam dumps, HPE6-A73 exam questions, HPE6-A73 study guide 0 Comments

Focus on ITPrepare, the HPE6-A73 study guide updated for the Aruba Certified Switching Professional Exam recently.

Updated HPE6-A73 Study Guide OF ITPrepare

Exam Code: HPE6-A73
Exam Name: Aruba Certified Switching Professional Exam
Exam Version: V13.02
Exam Q&As: 121

For candidates, you can come to ITPrepare to get the latest HPE6-A73 study guide to learn the newest questions and answers. All these ITPrepare HPE6-A73 real exam questions will help you in preparation and ensure your success in the final Aruba Certified Switching Professional (ACSP) certification exam. One should see the HPE6-A73 free questions demo before purchasing the updated HPE6-A73 study guide.

Page 1 of 4

1. A company has a few servers in a secure, remote location storing highly-confidential documents connected to two AOS-CX 6400 switches configured in a VSX pair The AOS-CX switches perform access control with 802 1X and will be implementing user-based tunneling (UBT) so that Aruba gateway application inspection and stateful firewall policies can be applied to the traffic. The gateways are running version 84 and implement the AP, PEF, and RFP licenses

Which licensing is needed for the two AOS-CX switches?

2 AP and 2 PEF licenses only

1 AP license only

2 AP, 2 PEF, and 2 RFP licenses only

1 AP, 1 PEF, and 1 RFP licenses only

2. What must a network administrator implement in order to run an NAE script on an AOS-CX switch?

Deployment

Schedule

Plan

Agent

3. A network engineer is setting up BGP on AOS-CX switches. The engineer is establishing two different eBGP peering’s to two different service providers. The engineer has dozens of contiguous C-class public networks that need to be advertised to the two service providers. The engineer manually defines the networks to be advertised individually with the "network" command.

How can an administrator advertise only a summarized route to the two service providers?

Create a summarized static route and redistribute this into OSPR

Summarize the networks with the "aggregate-address" BGP command

Enable auto-summarization in the IPv4 address family of the BGP configuration

Create a summarized route in OSPF

4. When implementing deficit weighted round robin queuing, what importance does the weight value have?

Prioritizing latency-sensitive traffic

Queue priority in processing traffic

Strict priority queue

Percentage of interface bandwidth

5. A switch will apply a device profile to a port based on which pieces of information? (Select two.)

IP header

MAC address

LLDP

User role

802.1Q

6. In AOS-CX switching, what determines when a frame is forwarded by the switch between the ingress and the egress port?

Egress port

Ingress port

VSX switch tables

Fabric Load Balancer

7. What is the correct way of associating a VRF instance to either a VLAN or an interface?

Switch(config)# interface <interface-ID> Switch(config-if)# vlan access <VLAN-ID> vrf attach <vrf-name>

Switch(config)# vlan <VLAN-ID> vrf attach < vrf-name >

Switch(config)# vlan <VLAN-ID> Switch(config-vlan-<VLAN-ID># vrf attach < vrf-name >

Switch(config)# vlan <VLAN-ID> vrf < vrf-name >

8. What is correct regarding policy-based routing?

Policies can only be applied to routed interfaces.

Policies can be applied inbound and outbound.

Monitoring of policy interfaces occurs every 60 seconds.

Policy actions include routing permitting or dropping traffic.

9. Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:

Switch# show port-access role clearpass

Role information:

Name: icxarubadur_employee-3044-2

Type: clearpass

Status: failed, parsing_failed

Reauthentication Period:

Authentication Mode:

Session Timeout:

The downloadable user roles are not being downloaded to the AOS-CX switch.

Based on the above output, what is the problem?

The certificate that ClearPass uses in invalid

The AOS-CX switch does not have the ClearPass certificate involved

DNS fails to resolve the ClearPass server’s FQDN

There is a date/time issue between the ClearPass server and the switch

10. A network has two AOS-CX switches connected to two different service providers. The administrator is concerned about bandwidth consumption on the service provider links and learned that the service providers were using the company as a transit AS.

Which feature should the administrator implement to prevent this situation?

Configure route maps and apply them to BGP

Configure the two switches as route reflectors

Configure a classifier policy to disable MED

Configure bi-directional forwarding detection on both switches

Page 2 of 4

11. An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

802.1X must be configured to work in fallback mode

Device fingerprinting is required for authentication

The client-limit setting for port access needs to be changed

Device mode should be implemented

12. Examine the attached diagram.

The two PCs are located in VLAN 11 (10.1.11.0/24).

Which example defines how to implement active gateway on the VSX core for VLAN 11?

interface vlan 11 active-gateway ip 10.1.11.1 active-gateway mac 02:02:00:00:01:00

interface lag 254 active-gateway vlan 11 ip 10.1.11.1 active-gateway vlan 11 mac 02:02:00:00:01:00

interface lag 254 active-gateway ip 10.1.11.1 active-gateway mac 02:02:00:00:01:00

vsx vrrp group 1

13. An administrator of a company has concerns about upgrading the access layer switches. The users rely heavily on wireless and VoIP telephony.

Which is the best recommendation to ensure a short downtime for the users during upgrading the access layer switches?

Install the in-service software upgrade (ISSU) feature with clustering enabled

Install AOS-CX 6300 or 6400 switches with always-on POE

Implement VSF on the AOS-CX access switches

Implement VSX on the AOS-CX access switches

14. An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities. The campus involves a core, as well as multiple access layers.

Which feature should the administrator implement to allow both VSX-capable core switches to process traffic sent to the default gateway in the campus VLANs?

VRF

VRRP

IP helper

Active gateway

15. Which protocols are used by NetEdit to interact with third-party devices? (Choose two.)

telnet

SNMP

SSH

Restful API

CDP

16. What is a best practice concerning voice traffic and dynamic segmentation on AOS-CX switches?

Controller authentication and user-based tunneling of the voice traffic

Switch authentication and user-based tunneling of the voice traffic

Controller authentication and port-based tunneling of the voice traffic

Switch authentication and local forwarding of the voice traffic

17. A network administrator is tasked to set up BGP in the company's network. The administrator is defining an eBGP peering between an AOS-CX switch and a directly-connected service provider.

The administrator has configured the following on the AOS-CX switch:

However, when using the "show bgp all summary" command, the state does not display "Established" for the eBGP peer.

What must the administrator configure to fix this issue?

router bgp 64500 neighbor 192.168.1.1 ebgp-multihop

router bgp 64500 enable

router bgp 64500 address-family ipv4 unicast neighbor 192.168.1.1 activate

router bgp 64500 neighbor 192.168.1.1 update-source loopback0

18. An administrator will be deploying NetEdit to manage an Aruba solution.

What does NetEdit support?

Manages AOS-CX switches and Aruba gateways

Support for Aruba-supplied security updates

Tracks configuration and hardware information

Can be purchased as a VM and/or hardware appliance

19. A customer has twenty AOS-CX switches that will be managed by NetEdit and would like support for NetEdit these switches will exist in the network for at least five years.

Which type of licensing should be used by this customer?

20 Aruba NetEdit permanent licenses

20 Aruba NetEdit single node subscription licenses

25 Aruba NetEdit permanent licenses

1 Aruba NetEdit SMB License

20. An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.

What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?

Disable ICMP redirects

Implement graceful restart

Increase the BFD echo timers

Increase the VSX keepalive timer

Page 3 of 4

21. A company is implementing AOS-CX switches at the access layer. The company wants to implement access control for employees and guests.

Which security features will require a ClearPass server to be installed and used by the company?

Downloadable user roles

Dynamic segmentation

User-based tunneling (UBT)

Change of authorization (CoA)

22. A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches. The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes.

Which solution should the administrator implement?

AOS-CX 8325

AOS-CX 6300

AOS-CX 6400

AOS-CX 8400

23. What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility Controllers (MCs)?

Uses IPSec to protect the management and data traffic

Uses IPSec to protect the management traffic

Supports only port-based tunneling

Uses the same management protocol as Aruba APs

24. Examine the commands entered on an AOS-CX switch:

What is true regarding this configuration for traffic received on interface 100?

The default next-hop address supersedes the two preceding next-hop addresses

The traffic is always dropped is the next-hop addresses are unreachable

The traffic will be routed with the IP routing table entries if the next-hop addresses are unreachable

The next-hop address of 1.1.1.1 is overwritten by the next-hop address of 2.2.2.2

25. When cutting and pasting configurations into NetEdit, which character is used to enter commands within the context of the previous command?

<ESC>

">"

Space

Tab

26. A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code.

The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.

Which solution should the company implement?

RADIUS dynamic authorization

Downloadable user roles

IPSec

User-based tunneling

27. A network administrator is implementing a configuration plan in NetEdit. The administrator used NetEdit to push the configuration plan to the switch.

Which option in the NetEdit planning section should the administrator select to save the configuration running on the switch to the startup-config?

EDIT

VALIDATE

COMMIT

DEPLOY

28. How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

Use the web interface of the NetEdit server

Use the web interface of the AOS-CX switch

Use the web interface of Aruba Central

Use the CLI of the AOS-CX switch

29. What would prevent two OSPF routers from forming an adjacency? (Select two.)

Different priorities

Different area types

Different MTU sizes

Different IP addresses

Different router IDs

30. An administrator wants to implement a virtual switching technology that implements a single control-plane solution.

Which S-CX switches would meet these criteria?

All AOS-CX switching platforms

AOS-CX 6300 and 6400 switches

AOS-CX 6300, 6400, and 83xx switches

AOS-CX 6300 switches

Page 4 of 4

31. Which concept is implemented using Aruba’s dynamic segmentation?

Root of trust

Device fingerprinting

Zero Touch Provisioning

Colorless port

32. Examine the network exhibit.

A network administrator is implementing OSPF on a VSX pair of aggregation switches: Agg1 and Agg2. VLANs 10 and 20 are connected to layer-2 access switches. Agg-1 and Agg-2 are configured as the default gateway for VLANs 10 and 20, with active gateway enabled.

What is the best practice for configuring OSPF on the aggregation switches and their connection to the Core switch?

Define a layer-2 VSX LAG associated with a layer-3 VLAN interface. Enable active gateway for the Layer-3 VLA

Define separate layer-3 VLAN interfaces between the aggregation and core switches. Enable active forwarding for the Layer-3 VLA

Define separate layer-3 VLAN interfaces between the aggregation and core switches. Enable active gateway for the Layer-3 VLA

Define a layer-2 VSX LAG associated with a layer-3 VLAN interface. Enable active forwarding for the Layer-3 VLA

33. Examine the AOS-CX configuration:

The switches have a default factory password setting NetEdit fails to access the configuration of the AOS-CX switches.

What should the administrator do to solve this problem?

Set a password for the default admin user account.

Disable telnet globally.

Use the default VRF instead of the mgmt VRF

Enable IP routing globally

34. When an AOS-CX switch uses a temporary copy of the Configuration State database, what kind of analysis does NetEdit perform to ensure that the configuration is correct?

Syntax validation

Semantic validation

Conformance validation

Change validation

35. Examine the attached exhibit.

The network administrators is trying to add a remote location as area 3 to the network shown in the diagram.

Based on current connection restrictions, the administrator cannot connect area 3 directly to area 0. The network is using AOS-CX switches.

Which feature should the administrator implement to provide connectivity to the remote location?

Not-so-stubby areas

Bidirectional forward detection (BFD)

OSPFv3

Virtual links

36. 1.A network engineer is having a problem adding a custom-written script to an AOS-CX switch’s NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches.

The engineer examines the following items from the CLI of the switch:

What should the engineer perform to fix this issue?

Install the script’s signature before installing the new script

Ensure the engineer’s desktop and the AOS-CX switch are synchronized to the same NTP server

Enable trust settings for the AOS-CX switch’s SSL certificate

Remove a script that is no longer used before installing the new script

37. A network administrator is implementing OSPF, where there are two exit points. Each exit point has a stateful, application inspection firewall to implement company policies.

What would the best practice be to ensure that one firewall will see both directions of the traffic, preventing asynchronous connections in the network?

Both ASBRs should define External Type 1 routes for the

Both ASBRs should define External Type 2 routes for the

38. An administrator is managing a network comprised of AOS-CX switches deployed at the aggregation layer. The switches are paired in a VSX stack and run the OSPF routing protocol. The administrator is concerned about how long it takes for OSPF to converge when one of the VSX switches has to reboot.

What should the administrator to do speed up the OSPF convergence of the switch that is rebooting?

Change the VSXISL link from an OSPF broadcast link point-to-point.

Implement graceful restart on the VSX switches and their neighboring OSPF switches.

Decrease the VSX initial synchronization timer on the two VSX switches.

Define non-backbone areas on the VSX switches as totally stubby areas.

39. Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

LLDP

ARP

DHCP

ICMP

40. Examine the AOS-CS switch output:

Based on this output, what is correct?

802.1X authentication was successful, but MAC authentication is yet to start

802.1X authentication occurred and downloadable user roles are deployed

A local user role was deployed using a ClearPass solution

Only 802.1X authentication is configured on the port

Aruba Certified Switching Professional Exam HPE6-A73 Study Guide Updated