Refer to the exhibit. An administrator implements an L2 cluster of Aruba Mobility Controllers (MCs) as shown in the exhibit. An external RADUIS AAA server authenticates clients associated with the Active User Anchor Controller (A-UAC), where the NAS IP address sent from Controller B is 10.254.1.2. By default, what happens to the user's session when it is handed over to the Standby UAC (S-UAC) after a failover?

The user's session remains active, but the AAA server cannot implement RADIUS Change of Authorization (CoA).

The user's session remains active and RADIUS messages can still be processed between the S-UAC and AAA server.

The user's session remains active, but the AAA server cannot implement RADIUS Change of Authorization (CoA).

The user's session is disconnected and has to reconnect, and no record of this process is stored on the AAA server.

The user's session is disconnected and has to reconnect, but the S-UAC automatically updates the NAS-IP address on the AAA server to record the event.

Refer to the exhibit. Two Aruba Mobility Controllers (MC) are managed by a Mobility Master (MM) in a non-cluster deployment as shown in the exhibit.The C1 controller is connected to AP1 and AP2.The C2 controller is connected to AP3 and AP4.VLAN mobility is enabled in the VAPs of both AP Groups.Both C1 and C2 support the same VLANs.User1's wireless device supports BSS Fast Transitioning and is currently connected to AP1.What happens if User1 roams across the network and the user's device associates to AP3?

User1's traffic is tunneled to the C1 controller, where they will not have to re-authenticate and can keep their original IP address.

User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and reobtain a new IP address.

User1's traffic is terminated on the C2 controller, and they will not have to re-authenticate but will need to obtain a new IP address.

User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and can keep their original IP address.

User1's traffic is tunneled to the C1 controller, where they will not have to re-authenticate and can keep their original IP address.

Refer to the exhibit. What can an administrator determine from this Aruba device output?

A switch is connected to a Mobility Controller in a cluster.

A switch is connected to a standalone Mobility Controller.

An AP is connected to a Mobility Controller in a cluster.

An AP is connected to a standalone Mobility Controller.

A switch is connected to a Mobility Controller in a cluster.

Where would an administrator define the split-tunneling mode for a RAP located at a branch office?

the VAP profile on the controller

the AAA policy on the controller

the Firewall policy on the controller

the VAP profile on the controller

Refer to the exhibit. A user uses a wireless client for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user's wireless session?

The user is associated with a failed 802.1X/EAP authentication

The user is configured for PEAP, but the WLAN profile implemented EAP-TLS.

The AP has reached the limit for number of users connected to the radio.

The user misconfigured the Windows Managed Network Settings profile.

The user is associated with a failed 802.1X/EAP authentication

An administrator manages an Aruba wireless solution, deployed in a company with locations across the world. In one country, the local government organization that controls wireless transmissions increases the maximum EIRP allowed for certain channels.Which component does the administrator need to update on the Mobility Master (MM) to accommodate this change?

the Controller port configuration

An administrator wants to deploy Zero Touch Provisioning (ZTP) with Activate. The controllers run ArubaOS.8.x.Which Aruba architecture should the administrator deploy?

Mobility Master-Mobility Controller

An administrator wants to implement the MultiZone feature in a company's network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company's DMZ.Given this scenario, what is true about the implementation of Multizone?

Only the primary zones can reboot, upgrade, or provision MultiZone APs.

A management session is established only with the primary zone, but data sessions are established to all zones.

Only the primary zones can reboot, upgrade, or provision MultiZone APs.

The primary and data zones must be in the same L2 subnet.

A MultiZone AP can initially connect to any zone to obtain its configuration.

An administrator configures Unified Communications and Collaboration (UCC) heuristics mode on an Aruba Mobility Master (MM). What should be modified in order to send items such as VoIP sessions and monitored information about adds, updates, deletions, and periodic snapshots of those VoIP sessions on the MM or the Aruba Mobility Controller (MC)?

Skype ALG Configuration profile

Refer to the exhibits.Exhibit 1: WLAN VAP configuration Exhibit 2: Microsoft NPS server configuration Exhibit 3: Server group configuration for the VAP. An employee authenticates with the username employee and the correct password. However, once the user authenticates, an administrator notices that the employee is assigned the authenticated role and not the desired employee role.What should the administrator do to solve this problem?

Add a new server group rule on the controller.

Associate the user to the employee group in Microsoft NPS.

Change the server group name on the controller.

Reference the employee role in the WLAN VAP on the controller.

An administrator implements machine authentication in an 802.1X profile. Which user role will be assigned to the user's session if machine authentication fails, but the 802.1X user authentication passes for a user who connects?

Machine authentication default user role

Machine authentication initial user role

Machine authentication default user role

In a cluster-controller environment, which Aruba component in a network builds a cache table of mDNS records that can be used to help user devices access Apple Bonjour services?

the Mobility Controllers that are cluster members

the Mobility Master and cluster members

On the Aruba Mobility Master (MM), when is an AP configured to act as Mesh Portal or Mesh Point?

when the mesh cluster profile is created

at the time of the AP's apboot mode CLI

when the mesh radio profile is created

An administrator stages an AP and re-provisions it as a RAP from the Mobility Master (MM). When re-provisioning the RAP, the administrator must enter a user's credentials. What is the purpose of these credentials?

to authenticate users on wired and wireless ports

to authenticate users on wireless ports

to authenticate users on wired ports

Refer to the exhibit. An administrator examines the configuration of an AP from apboot mode shown in the exhibit.What can the administrator determine from the configuration?

AP terminated on a Mobility Controller in a cluster.

RAP terminated on a stand-alone controller.

AP terminated on a non-cluster Mobility Controller.

RAP terminated on a Mobility Master.

AP terminated on a Mobility Controller in a cluster.

An administrator deploys an AP at a branch office. The branch office has a private WAN circuit that provides connectivity to a corporate office controller. An Ethernet port on the AP is connected to a network storage device that contains sensitive information. The administrator is concerned about sending this traffic in clear-text across the private WAN circuit.What can the administrator do to prevent this problem?

Convert the campus AP into a RAP.

Redirect the wired port traffic to an AP-to-controller GRE tunnel.

Convert the campus AP into a RAP.

Enable AP encryption for wired ports.

Enable IPSec encryption on the AP's wired ports.

Refer to the exhibit. Once connected to a WLAN, a user cannot reliably access resources in a company's network. Based on the output shown in the exhibit, what can be determined about the user's connection?

The user is connected to an ArubaOS-Switch.

The user has successfully authenticated through use of PEAP.

The user is connected to a controller through use of the VIA client.

The user is connected wirelessly to a controller.

The user is connected to an ArubaOS-Switch.

What is true about clustering and AP connections to cluster members?

AP load balancing is disabled by default.

The AP will always stay connected to the LMS IP address configured in the AP profile.

During rebalancing, the active load is redistributed first.

The default thresholds are 75% for the Rebalanced Threshold and 25% for the Unbalanced Threshold.

AP load balancing is disabled by default.

Which methods can be used to configure RAP redundancy when connected to two redundant Aruba Mobility Controllers (MCs) in the DMZ? (Select two.)

AirWave direction to RAPs redundant Mobility Controllers.

Virtual IP address of the two controllers.

Primary and backup LMS IP addresses.

IPSec High Availability (HA) between two cluster members.

AirWave direction to RAPs redundant Mobility Controllers.

An administrator wants to implement 802.1X authentication on Ethernet ports on branch office controllers. What must the administrator do to implement this policy?

Define the port an untrusted, and assign an AAA policy to the port.

Define the port as trusted, and assign an AAA policy to the port.

Define the port as untrusted, and assign an AAA policy to the VLAN.

Define the port as trusted, and assign an AAA policy to the VLAN.

HP HPE6-A71 Practice Test 3 - Free Online Exam Questions 81-120

An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached.

The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic. But, when users connect with their wired desktops, they have full access to corporate resources.

What must the administrator do to restrict desktop usage based on the users' role assignment?

Become a Premium Member for full access

Unlock Premium Member

HP HPE6-A71 Practice Test 3

Question

HP HPE6-A71 Practice Tests

Practice Tests