Examine the following ACL rule policies:Permit traffic from 10.2.2.1 through 10.2.2.30 to anywherePermit traffic from 10.2.2.40 through 10.2.2.55 to anywhereDeny all othersBased on this policy, place the following ACL rule statements in the correct order to accomplish the above filtering policy.

deny ip 10.2.2.31 255.255.255.255 anypermit ip 10.2.2.40 255.255.255.248 anypermit ip 10.2.2.48 255.255.255.248 anydeny ip 10.2.2.32 255.255.255.224 anypermit ip 10.2.2.0 255.255.255.192 any

permit ip 10.2.2.40 255.255.255.248 anypermit ip 10.2.2.48 255.255.255.248 anypermit ip 10.2.2.0 255.255.255.192 anydeny ip 10.2.2.31 255.255.255.255 anydeny ip 10.2.2.32 255.255.255.224 any

deny ip 10.2.2.31 255.255.255.255 anydeny ip 10.2.2.32 255.255.255.224 anypermit ip 10.2.2.40 255.255.255.248 anypermit ip 10.2.2.48 255.255.255.248 anypermit ip 10.2.2.0 255.255.255.192 any

deny ip 10.2.2.31 255.255.255.255 anypermit ip 10.2.2.40 255.255.255.248 anydeny ip 10.2.2.32 255.255.255.224 anypermit ip 10.2.2.48 255.255.255.248 anypermit ip 10.2.2.0 255.255.255.192 any

What are best practices when implementing VSX on AOS-CX switches? (Choose two.)

Timers should be left at their default values.

The keepalive connection should use a direct layer-3 connection.

The ISL lag should use the default MTU size.

Timers should be left at their default values.

The default system MAC addresses should be used.

The keepalive connection should use a direct layer-3 connection.

The ISL lag should use at least 10GbE links or faster.

An administrator wants to implement dynamic segmentation policies. The network consists of AOSCX and Aruba gateways.Which type of forwarding should the administrator implement for users that already connect via wireless, but will also be connecting on Ethernet switch ports?

Switch-to-switch tunneling (SST)

What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Traffic rate limit is configured on queue level

Rate limiting and egress queue shaping can be used to restrict inbound traffic

Limits can be defined only for broadcast and multicast traffic

Rate limiting and egress queue shaping can be applied globally

Traffic rate limit is configured on queue level

What is the correct way of associating a VRF instance to either a VLAN or an interface?

Switch(config)# vlan <VLAN-ID>Switch(config-vlan-<VLAN-ID># vrf attach < vrf-name >

Switch(config)# interface <interface-ID>Switch(config-if)# vlan access <VLAN-ID> vrf attach <vrf-name>

Switch(config)# vlan <VLAN-ID> vrf attach < vrf-name >

Switch(config)# vlan <VLAN-ID>Switch(config-vlan-<VLAN-ID># vrf attach < vrf-name >

Switch(config)# vlan <VLAN-ID> vrf < vrf-name >

A company has a third-party AAA server solution. The campus access layer was just upgraded to AOSCX switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.What is correct about how the company should implement a security solution where the wired traffic is processed by the MCs?D18912E1457D5D1DDCBD40AB3BF70D5D

Implement local user roles with a gateway role defined on the AOS-CX switches

Implement downloadable user roles with a gateway role defined on the AOS-CX switches

Implement local user roles with a gateway role defined on the AOS-CX switches

Implement standards-based RADIUS VSAs to pass policy information directly to the AOS-CX switches and MCs

Implement downloadable user roles with a device role defined on the AOS-CX switches and MCs

An administrator wants to leverage always-on PoE on AOS-CX switches. Which statement is correct regarding this feature?

Provides up to 60W of power per port

Provides surge protection for PoE and non-PoE ports

A network administrator is attempting to troubleshoot a connectivity issue between a group of users and a particular server. The administrator needs to examine the packets over a period of time from their desktop; however, the administrator is not directly connected to the AOS-CX switch involved with the traffic flow.What is correct regarding the ERSPAN session that needs to be established on an AOS-CX switch?(Choose two.)

On the source AOS-CX switch, the destination specified is the switch to which the administrator's desktop is connected

The encapsulation protocol used is GRE

On the source AOS-CX switch, the destination specified is the switch to which the administrator's desktop is connected

On the source AOS-CX switch, the destination specified is the administrator's desktop

The encapsulation protocol used is GRE

The encapsulation protocol used is VXLAN

The encapsulation protocol is UDP

What is correct regarding the operation of VSX and multicasting with PIM-SM routing configured?

Each VSX peers runs PIM and builds its own group database. One of the VSX peers is elected as the designated router (DR) to forward multicast streams to a receiver VLAN

Each VSX peers runs PIM and creates a shared group database. Both VSX peers can forward multicast streams to receivers in a VLAN, achieving load sharing

Each VSX peers runs PIM and builds its own group database. Both VSX peers can forward multicast streams to receivers in a VLAN, achieving load sharing

Each VSX peers runs PIM and creates a shared group database. One of the VSX peers is elected as the designated router (DR) to forward multicast streams to a receiver VLAN

Examine the AOS-CS switch output: Based on this output, what is correct?

802.1X authentication occurred and downloadable user roles are deployed

802.1X authentication was successful, but MAC authentication is yet to start

802.1X authentication occurred and downloadable user roles are deployed

A local user role was deployed using a ClearPass solution

Only 802.1X authentication is configured on the port

An administrator in a company of 349 users has a pair of AOS-CX switches with connections to external networks. Both switches are configured for OSPF. The administrator wants to import external routes on both switches, but assigns different seed metrics to the routes, as well as imports them as external type-1 routes.What is the best way for the administrator to accomplish this?

Create a route map with the correct route type and metrics

Define the route type and metrics in the OSPF process

Create a classifier policy with the correct route type and metrics

Define a class and policy map with the correct route type and metrics

An administrator is concerned about the security of the control plane connection between an AOSCX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling. How should the administrator protect this traffic?

PAPI with an MD5 pre-shared key

IPSec with a digital certificate

PAPI with an MD5 pre-shared key

Which statement is correct regarding ACLs and TCAM usage?

Using object groups consumes the same resources as specific ACE entries

Applying an ACL to a group of ports consumes the same resources as specific ACE entries

Using object groups consumes the same resources as specific ACE entries

Compression is automatically enabled for ASIC TCAMs on AOS-CX switches

Applying an ACL to a group of VLANs consumes the same resources as specific ACE entries

What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Only a traffic rate and burst size can be defined for a queue

Limits can be defined only for broadcast and multicast traffic

Rate limiting and egress queue shaping can be used to restrict inbound traffic

Rate limiting and egress queue shaping can be applied globally

A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AA

Define the account to implement downloadable user roles

Each switch has the two servers defined. A network engineer notices the following command configured on the AOS-CX switches: radius-server tracking user-name monitor password plaintext aruba123 What is the purpose of this configuration?

Implement replay protection for AAA messages

Define the account to implement downloadable user roles

Speed up the AAA authentication process

Define the account to implement change of authorization

A network engineer is having a problem adding a custom-written script to an AOS-CX switch's NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches. The engineer examines the following items from the CLI of the switch: What should the engineer perform to fix this issue?

Remove a script that is no longer used before installing the new script

Install the script's signature before installing the new script

Ensure the engineer's desktop and the AOS-CX switch are synchronized to the same NTP server

Enable trust settings for the AOS-CX switch's SSL certificate

Remove a script that is no longer used before installing the new script

Which option correctly defines how to identify a VLAN as a voice VLAN on an AOS-CX switch?

Switch(config)# vlan <VLAN-ID>Switch(config-vlan-<VLAN-ID>)# voice

Switch(config)# port-access lldp-group <LLDP-group-name>Switch(config-lldp-group)# vlan <VLAN-ID>

Switch(config)# port-access role <role-name>Switch(config-pa-role)# vlan access <VLAN-ID>

Switch(config)# vlan <VLAN-ID>Switch(config-vlan-<VLAN-ID>)# voice

Switch(config)# vlan <VLAN-ID> voice

What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility Controllers (MCs)?

Uses the same management protocol as Aruba APs

Uses IPSec to protect the management and data traffic

Uses IPSec to protect the management traffic

Supports only port-based tunneling

Uses the same management protocol as Aruba APs

An administrator is implementing a multicast solution in a multi-VLAN network. Which statement is true about the configuration of the switches in the network?

IGMP must be enabled on all routed interfaces where multicast traffic will traverse

IGMP snooping must be enabled on all interfaces on a switch to intelligently forward traffic

IGMP requires join and leave messages to graft and prune multicast streams between switches

IGMP must be enabled on all routed interfaces where multicast traffic will traverse

IGMP must be enabled on all interfaces where multicast sources and receivers are connected

How is voice traffic prioritized correctly on AOS-CX switches?

By placing it in the strict priority queue

By defining device profiles with QOS settings

By placing it in the strict priority queue

By implementing weighted fair queueing (WFQ)

An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone's LAN port is connected to the switch.Which statement is correct about this situation?

The client-limit setting for port access needs to be changed

802.1X must be configured to work in fallback mode

Device fingerprinting is required for authentication

The client-limit setting for port access needs to be changed

Device mode should be implemented

How does PIM build the IP multicast routing table to route traffic between a multicast source and one or more receivers?

It uses the unicast routing table and reverse path forwarding (RPF)

It uses IGMP and calculates a shortest path tree (SPT)

It uses the shortest path first (SPF) algorithm derived from link state protocols

It uses the Bellman-Ford algorithm derived from distance vector protocols

An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?

Increase the VSX keepalive timer

A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer verifies that the AOS-CX switch is configured for NTP and is successfully synchronized. What should be done to fix this issue?

Ensure the engineer's PC is synchronized to the same NTP server as the AOS-CX switch

Ensure the engineer's web browser is configured for the same timezone as the AOS-CX switch

Ensure the engineer's PC is synchronized to the same NTP server as the AOS-CX switch

Ensure NetEdit and the AOS-CX switch are synchronized to the same NTP server

Enable trust settings for the AOS-CX switch's SSL certificate

An AOS-CX switch is configured to implement downloadable user roles. Examine the AOS-CX switch output: Based on this output, what is the state of the user's access?

No downloadable user role exists

MAC authentication has passed, but 802.1X authentication is in progress

The RADIUS request timed out to the AAA server

The port should be configured for 802.1X

An administrator of a company has concerns about upgrading the access layer switches. The users rely heavily on wireless and VoIP telephony. Which is the best recommendation to ensure a short downtime for the users during upgrading the access layer switches?

Install AOS-CX 6300 or 6400 switches with always-on POE

Install the in-service software upgrade (ISSU) feature with clustering enabled

Install AOS-CX 6300 or 6400 switches with always-on POE

Implement VSF on the AOS-CX access switches

Implement VSX on the AOS-CX access switches

How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

Use the web interface of the AOS-CX switch

Use the web interface of the NetEdit server

Use the web interface of the AOS-CX switch

Use the web interface of Aruba Central

Use the CLI of the AOS-CX switch

Examine the network exhibit. A company has a guest implementation for wireless and wired access. Wireless access is implemented through a third-party vendor. The company is concerned about wired guest traffic traversing the same network as the employee traffic.The network administrator has established a GRE tunnel between AOS-CX switches where guests are connected to a routing switch in the DMZ.Which feature should the administrator implement to ensure that the guest traffic is tunneled to the DMZ while the employee traffic is forwarded using OSPF?

OSPF route maps using the "set metric" command

A network administrator is managing a network that deploys a multicast service. The administrator has multiple streams successfully being routed by PIM-DM in the network. The administrator then adds a new stream with a destination address of 239.0.0.1. However, clients who have not joined the stream are receiving it.What should the administrator do to fix this problem?

Change the destination multicast address to 239.1.1.1

Verify that IGMP is enabled between the switches connecting the multicast source and receivers

Change the destination multicast address to 239.1.1.1

Define the 239.0.0.1 stream on the rendezvous point (RP)

Define the 239.0.0.1 stream on the PIM candidate bootstrap router

HP HPE6-A73 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

Examine the commands entered on an AOS-CX switch:

What is true regarding this configuration for traffic received on interface 100?

The default next-hop address supersedes the two preceding next-hop addresses

The traffic is always dropped is the next-hop addresses are unreachable

The traffic will be routed with the IP routing table entries if the next-hop addresses are unreachable

The next-hop address of 1.1.1.1 is overwritten by the next-hop address of 2.2.2.2

Comment (0)

HP HPE6-A73 Practice Test 1

Question

HP HPE6-A73 Practice Tests

Practice Tests