An administrator has an aggregation layer of 8325CX switches configured as a VSX pair. The administrator is concerned that when OSPF network changes occur, the aggregation switches will respond to the changes slowly, and this will affect network connectivity, especially VoIP calls, in the connected access layer switches.What should the administrator do on the aggregation layer switches to alleviate this issue?D18912E1457D5D1DDCBD40AB3BF70D5D

Implement bidirectional forwarding detection (BFD)

Reduce the hello and dead interval timers

How is NetEdit installed at a customer location?

Via an OVA file and a virtualized platform like VMware's ESXi

Via an Aruba NetEdit hardware appliance

Via a DVD using a virtualized platform like Microsoft's Hyper-V

Via the Aruba Central cloud solution

Via an OVA file and a virtualized platform like VMware's ESXi

What is correct regarding multicasting and AOS-CX switches?

IGMP snooping is disabled, by default, on Layer-2 VLAN interfaces

IGMP query functions are enabled, by default, on Layer-2 VLAN interfaces

IGMP snooping is enabled, by default, on Layer-3 VLAN interfaces

IGMP-enabled AOS-CX switches flood unknown multicast destinations

A company has recently upgraded their campus switching infrastructure with AOS-CX switches. They have implemented 802.1X authentication on access ports where laptop and IOT devices typically connect.An administrator has noticed that for POE devices, the AOS-CX switch ports are delivering the maximum wattage to the port instead of what the device actually needs.Concerned about this waste of electricity, what should the administrator implement to solve this problem?

Create device profiles with the correct power definitions

Implement a classifier policy with the correct power definitions

Create device profiles with the correct power definitions

Enable AAA authentication to exempt LLDP and/or CDP information

Globally enable the QoS trust setting for LLDP and/or CDP

A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

802.1X, captive portal, and MAC-Auth

Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:Switch# show port-access role clearpassRole information:Name : icxarubadur_employee-3044-2Type : clearpassStatus: failed, parsing_failedReauthentication Period :Authentication Mode :Session Timeout :The downloadable user roles are not being downloaded to the AOS-CX switch. Based on the above output, what is the problem?

DNS fails to resolve the ClearPass server's FQDN

The certificate that ClearPass uses in invalid

The AOS-CX switch does not have the ClearPass certificate involved

DNS fails to resolve the ClearPass server's FQDN

There is a date/time issue between the ClearPass server and the switch

Examine the attached diagram. The two PCs are located in VLAN 11 (10.1.11.0/24). Which example defines how to implement active gateway on the VSX core for VLAN 11?

interface vlan 11active-gateway ip 10.1.11.1active-gateway mac 02:02:00:00:01:00

interface lag 254active-gateway vlan 11 ip 10.1.11.1active-gateway vlan 11 mac 02:02:00:00:01:00

interface lag 254active-gateway ip 10.1.11.1active-gateway mac 02:02:00:00:01:00

An administrator has configured the following on an AOS-CX switch: What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

access-list ip server 10 permit tcp any web-servers group web-ports

access-list ip server 10 permit tcp any object-group web-servers object-group web-ports

access-list ip server 10 permit tcp any group web-servers group web-ports

access-list ip server 10 permit tcp any web-servers web-ports

A network administrator wants to centralize the management of AOS-CX switches by implementing NetEdit.How should the administrator purchase and/or install the NetEdit solution?

Installed in a virtualized solution by using the Aruba-supplied OVA file

Install as a hardware appliance

Installed on a supported version of RedHat Enterprise Linux

Installed in a virtualized solution by using the Aruba-supplied OVA file

Installed on a supported version of Debian Linux

A network engineer is using NetEdit to manage AOS-CX switches. The engineer notices that a lot of thirdparty VoIP phones are showing up in the NetEdit topology. The engineer deletes these, but they are automatically rediscovered byNetEdit and added back in.What should the administrator do to solve this problem?

Change the VoIP phone SNMP community string to something unknown by NetEdit

Disable LLDP globally on the AOS-CX switches where phones are connected

Disable SSH access on all the VoIP phones

Disable the RESTful API on all the VoIP phones

Examine the following AOS-CX configuration: Based on this configuration, which statement is correct regarding IoT traffic?

If a specific route is not available in the routing table, the traffic will be routed to 10.100.1.2

If 10.100.1.2 is not reachable, the IoT traffic will be automatically dropped by the switch

If a specific route is not available in the routing table, the traffic will be routed to 10.100.1.2

The next hop of 10.100.1.2 can be one or more hops away from the AOS-CX switch

All routes are ignored in the routing table for IoT traffic, which is routed to 10.100.1.2

Examine the following AOS-CX switch configuration: Which statement correctly describes what is allowed for traffic entering interface 1/1/3?

IP traffic from 10.0.11.0/24 is allowed to access 10.1.12.0/24

IP traffic from 10.1.11.0/24 is allowed to access 10.1.110.0/24

IP traffic from 10.0.11.0/24 is allowed to access 10.1.12.0/24

Traffic from 10.0.12.0/24 will generate a log record when accessing 10.0.11.0/24

IP traffic from 10.1.12.0/24 is allowed to access 172.0.1.0/23

An administrator creates an ACL rule with both the "count" and "log" option enabled. What is correct about the action taken by an AOS-CX switch when there is a match on this rule?

The total in the "log" record and the count could contain different rule matching statistics

By default, a summarized log is created every minute with a count of the number of matches

Logging will not include certificate and TLS events, but counting will

The "count" and "log" options are processed by the AOS-CX switch's hardware ASIC

The total in the "log" record and the count could contain different rule matching statistics

An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.What would cause this problem?

The VSX LAG hash does not match the remote peer

Local optimization was not enabled on the VSX LAG

The VSX LAG hash does not match the remote peer

The VSX LAG interfaces are in layer-3 mode

LACP was enabled in active mode on the VSX LAG

Examine the configuration performed on newly deployed AOS-CX switches: After performing this configuration, the administrator notices that the switch ports always remain in the EAP start state. What should the administrator do to fix this problem?

Create and assign a local user role to the ports

Enable change of authorization (CoA)

A network has two AOS-CX switches connected to two different service providers. The administrator is concerned about bandwidth consumption on the service provider links and learned that the service providers were using the company as a transit AS.Which feature should the administrator implement to prevent this situation?

Configure route maps and apply them to BGP

Configure the two switches as route reflectors

Configure a classifier policy to disable MED

Configure bi-directional forwarding detection on both switches

Examine the VSX-related configuration of the core layer AOS-CX switch: A network administrator is troubleshooting a connectivity issue involving the VSX LAG (link aggregation) between the core and access layer switch, during HW replacement of one of the core switches.Which configuration should the administrator add to the core switch to fix this issue?

ICX-Tx-Core1(config)# interface 1/1/45ICX-Tx-Core1(config-if-vlan)# active-gateway ip 192.168.0.0 mac 02:02:00:00:01:00

ICX-Tx-Core1(config)# vsxICX-Tx-Core1(config-vsx)# system-mac 02:01:00:00:01:00

ICX-Tx-Core1(config)# interface lag 1 multi-chassisICX-Tx-Core1(config-if-lag-if)# mtu 9198

ICX-Tx-Core1(config)# interface 1/1/46-1/1/47ICX-Tx-Core1(config-if-vlan)# active-gateway ip 10.1.11.1 mac 02:02:00:00:01:00

ICX-Tx-Core1(config)# interface 1/1/45ICX-Tx-Core1(config-if-vlan)# active-gateway ip 192.168.0.0 mac 02:02:00:00:01:00

The company has just upgraded their access layer switches with AOS-CX switches and implemented an AAA solution with ClearPass. The company has become concerned about what actually connects to the user ports on the access layer switch, Therefore, the company is implementing 802.1X authentication on the AOS-CX switches. An administrator has globally enabled 802.1X, and has enabled it on all the access ports connected to user devices, including VoIP phones, security cameras, and wireless Aruba IAPs. Wireless users are complaining that they successfully authenticate to the IAPs; however, they do not have access to network resources. Previously, this worked before 802.1X was implemented on the AOS-CX switches.What should the company do to solve this problem?

Implement downloadable user roles and user-based tunneling (UBT) on the AOS-CX switches.

Implement device-based mode on the lAP-connected AOS-CX switch ports.

Implement local user roles and local forwarding on the AOS-CX switches.

Implement downloadable user roles and user-based tunneling (UBT) on the AOS-CX switches.

Implement AAA RADIUS change of authorization on the AOS-CX switches.

An administrator wants to implement a virtual switching technology that implements a single control-plane solution. Which S-CX switches would meet these criteria?

AOS-CX 6300, 6400, and 83xx switches

The network is configured for OSPF with the following attributes:Core1 and Core2 and ABRsArea 1 has 20 networks in the 10.1.0.0/16 rangeArea 0 has 10 networks in the 10.0.0.0/16 rangeArea 2 has 50 networks in the 10.2.0.0/16 rangeThe ASBR is importing a static route into Area 1Core2 has a summary for Area 2: area 0.0.0.2 range 10.2.0.0/16 type inter-areaHere is the OSPF configuration performed on Core1: Based on the above information, what is correct?

Core1 has received one LSA Type 5 from the ASBR

A network administrator is implementing NAE on AOS-CX switches. When attempting to create an agent on a particular switch, the agent appears in the NAE Agents panel with a red triangle error symbol and a status of "Unknown".What is the cause of this issue?

The number of scripts or agents has exceeded the hardware's capabilities

The administrator does not have the appropriate credentials to interact with NAE

The number of scripts or agents has exceeded the hardware's capabilities

A connectivity issue exists between NAE and the AOS-CX switch

The RESTful API has not been enabled on the AOS-CX switch

Examine the attached exhibit. The network administrators is trying to add a remote location as area 3 to the network shown in the diagram.Based on current connection restrictions, the administrator cannot connect area 3 directly to area 0.The network is using AOS-CX switches.Which feature should the administrator implement to provide connectivity to the remote location?

Bidirectional forward detection (BFD)

Examine the attached diagram Two AOS-CX switches are configured for VSX at the access layer, where servers attached to them. An SVI interface is configured for VLAN 10 and serves as the default gateway for VLAN 10. The ISL link between the switches fails, but the keepalive interface functions. Active gateway has been configured on the switches.What is correct about access from the servers to the Core?

Server 1 can access the core layer via both uplinks.

Server 2 can successfully access the core layer via the keepalive link.

Server 1 and Server 2 can communicate with each other via the core layer.

Server 2 cannot access the core layer.

Server 1 can access the core layer via both uplinks.

An administrator is managing a network comprised of AOS-CX switches deployed at the aggregation layer. The switches are paired in a VSX stack and run the OSPF routing protocol. The administrator is concerned about how long it takes for OSPF to converge when one of the VSX switches has to reboot.What should the administrator to do speed up the OSPF convergence of the switch that is rebooting?

Implement graceful restart on the VSX switches and their neighboring OSPF switches.

Change the VSXISL link from an OSPF broadcast link point-to-point.

Implement graceful restart on the VSX switches and their neighboring OSPF switches.

Decrease the VSX initial synchronization timer on the two VSX switches.

Define non-backbone areas on the VSX switches as totally stubby areas.

A network administrator is installing NetEdit. In order for NetEdit to manage the AOS-CX switches in the network, what must be defined on the AOS-CX switches? (Choose two.)

Defining an admin user password

Enabling the RESTful API for read and write access

Defining an admin user password

Enabling the RESTful API for read and write access

What is correct regarding policy-based routing?

Policies can only be applied to routed interfaces.

Policies can be applied inbound and outbound.

Monitoring of policy interfaces occurs every 60 seconds.

Policy actions include routing permitting or dropping traffic.

HP HPE6-A73 Practice Test 2 - Free Online Exam Prep & Questions

Which protocols are used by NetEdit to interact with third-party devices? (Choose two.)

A.

telnet

B.

SNMP

C.

SSH

D.

Restful API

E.

CDP

HP HPE6-A73 Practice Test 2

Question

HP HPE6-A73 Practice Tests

Practice Tests