HPE6-A71 Online Practice Questions and Answers

Refer to the exhibit.

Two Aruba Mobility Controllers (MC) are managed by a Mobility Master (MM) in a non- cluster deployment

as shown in the exhibit.

The C1 controller is connected to AP1 and AP2.

The C2 controller is connected to AP3 and AP4.

VLAN mobility is enabled in the VAPs of both AP Groups.

Both C1 and C2 support the same VLANs.

User1's wireless device supports BSS Fast Transitioning and is currently connected to AP1.

What happens if User1 roams across the network and the user's device associates to AP3?

A. User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and re-obtain a new IP address.

B. User1's traffic is terminated on the C2 controller, and they will not have to re- authenticate but will need to obtain a new IP address.

C. User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and can keep their original IP address.

D. User1's traffic is tunneled to the C1 controller, where they will not have to re- authenticate and can keep their original IP address.

An administrator implements the MultiZone feature and uses two clusters that utilize CPSec. A primary and a data zone are created. MultiZone APs successfully build sessions to the primary cluster but fail to

establish sessions to the data zone cluster. What must the administrator do to solve this problem?

A. Enable CPSec in the MultiZone profile for both the primary and data zone.

B. Enable MultiZone booting in the MultiZone AP apboot configuration mode.

C. Add the MultiZone APs to the data zone's CPSec whitelist.

D. Use different AP Group names for the two zones.

Refer to the exhibit.

An AP is connected to a cluster of controllers. An AAA server provides all authentication and authorization functions for wireless users. A wireless user connects to an AP, and Active User Anchor Controller (AUAC) and Standby UAC (S-UAC) tunnels are built from the AP to the respective controllers in the cluster.

Why would an administrator create four VRRP groups with four Virtual IP (VIP) addresses in the cluster?

A. to allow the AAA Server to enforce RADIUS CoA in case the A-UAC experiences an outage

B. to allow High Availability (HA) Fast Failover to function in case a controller experiences an outage

C. to allow the AP to establish redundant AP Anchor Controller (AAC) connections to the cluster

D. to provide a VRRP group for election of the cluster leader

An administrator sets up a network scan set in AirWave to scan a subnet to identify devices for a firmware upgrade. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access. However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.

What should the administrator have done before running the network scan?

A. Define a scan credentials set for the devices.

B. Monitor the devices for needed firmware upgrades.

C. Change the default credentials of the devices.

D. Manually upgrade the firmware of the devices.

An Administrator supports a group of employees that connect to the corporate office using the VIA client. An Aruba Mobility Controller (MC), behind a corporate firewall, terminates the user's VPN sessions. The VPN sessions fail to establish because of the existing firewall rules.

Which connections must the administrator allow on the firewall? (Choose three.)

A. UDP 8202

B. UDP 4500

C. UDP 8211

D. TCP 4443

E. TCP 443

F. UDP 500

Refer to the exhibit.

An administrator wants to centralize administrative access to the Aruba Mobility Controllers (MC) and Mobility Master (MM). ClearPass is set up and the preferred authentication protocols is TACACS+. Where should the administrator perform this configuration in the MM hierarchy shown in the exhibit?

A. At the Managed Network level

B. At the two campus levels

C. At both the Mobility Master and Managed Network levels

D. At the controller levels

An administrator wants to implement AAA in an Aruba wireless environment that references two ClearPass servers for redundancy. To use these servers, what must the administrator create that will be referenced in the AAA profile?

A. ClearPass Group

B. Server matching rules

C. Server Group

D. Server Load Balancing

Which protocol is used between Aruba Mobility Controllers (MC) and ArubaOS-Switches to negotiate tunneled node?

A. GRE

B. IPSec

C. SNMP

D. PAPI

An administrator deploys a RAP at a branch office. The RAP should send all employee corporate traffic to the Mobility Controller (MC) and Internet traffic should stay local.

Which forwarding mode should the administrator configure for the employee WLAN to allow for this forwarding?

A. Tunnel

B. Decrypt-tunnel

C. Bridge

D. Split-tunnel

An administrator supports a network that contains ArubaOS-Switches and Mobility Controllers (MCs). Restrictive MC firewall policies, control wireless access. The administrator wants to implement a feature to apply the same MC firewall policies to users connected to the Ethernet switch ports.

Which ArubaOS-Switch feature provides this capability?

A. Port Security

B. Tunneled node

C. IPSec site-to-site tunneling

D. VSF