HPE6-A79 Online Practice Questions and Answers

A customer wants a WLAN solution that permits Aps to terminate WPA-2 encrypted traffic from different SSIDs to different geographic locations where non-related IT departments will take care of enforcing security policies. A key requirement is to minimize network congestion, overhead, and delay while providing data privacy from the client to the security policy enforcement point. Therefore, the solution must use the shortest path from source to destination.

Which Aruba feature best accommodates this scenario?

A. Inter MC S2S IPsec tunnels

B. RAPs

C. Multizone Aps

D. VIA

E. Inter MC GRE tunnels

A company plans to build a resort that includes a hotel with 1610 rooms, a casino, and a convention center. The company is interested in a mobility solution that provides scalability and a service-based approach, where they can rent the

WLAN infrastructure at the convention center to any customer (tenant) that hosts events at the resort.

The solution should provide:

Seamless roaming when users move from the hotel to the casino or the convention center

Simultaneous propagation of the resort and customer-owned SSIDs at the convention center

Null management access upon resort network infrastructure to the customers (tenants)

Configuration and monitor rights of rented SSIDs to the customers (tenants)

Which deployment meets the requirements?

A. Deploy an MM-MC infrastructure with multizone AP's, with one zone for tenant SSIDs.

B. Deploy IAPs along with AirWave, and deploy role-based management access control.

C. Deploy IAPs with zone based SSIDs and manage them with different central accounts.

D. Deploy an MM-MC infrastructure, and create different hierarchy groups for MCs and APs.

E. Deploy IAPs, and manage them with different central accounts.

Refer to the exhibit.

A network administrator deploys a Mobility Master (MM) - Mobility Controller (MC) network with Aps in different locations. Users in one of the locations report that the WiFi network works fine for several hours, and then they are suddenly

disconnected. This symptom may happen at any time, up to three times every day, and lasts no more than two minutes.

After some research, the network administrator logs into the MM and reviews the output shown in the exhibit.

Based on this information, what is the most likely reason users get disconnected?

A. Adaptive Radio Management is reacting to RF events.

B. AirMatch is applying a scheduled optimization solution.

C. Users in the 2.4 GHz band are being affected by high interference.

D. AirMatch is reacting to non-scheduled RF events.

Refer to the exhibit.

A network engineer deploys two different DHCP pools in an Instant AP (IAP) cluster for WLANs that will have connectivity to a remote site using Aruba IPSec. Based on the output shown in the exhibit, which IAP-VPN DHCP modes are being used?

A. distributed L3 and centralized L2

B. local L3 and centralized L2

C. local L3 and distributed L2

D. centralized L3 and distributed L2

A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.

While all users authenticate with username@domainname.com type of credentials, radius1 has user accounts with the domain name portion. Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?

A. Option A

B. Option B

C. Option C

D. Option D

An organization wants to deploy a WLAN infrastructure that provides connectivity to these client categories:

Employees Contractors Guest users Corporate IoT legacy devices that support no authentication or encryption Employees and contractors must authenticate with company credentials and get network access based on AD group membership. Guest users are required to authenticate with captive portal using predefined credentials. Only employees will run L2 encryption.

Which implementation plan fulfills the requirements while maximizing the channel usage?

A. Create VAP1 to run WPA2-AES and 802.1x authentication, VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal and L2 fail through.

B. Create a single VAP to run WPA2-AES and 802.1x authentication, MAC authentication L2 fail through, captive portal, and VIA support.

C. Create VAP1 to run WPA2-AES and 802.1x authentication, VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal.

D. Create VAP1 to run WPA2-AES and 802.1x authentication, and VAP2 to run opensystem encryption with MAC authentication and captive portal.

A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.

Since not all locations own public IP addresses, the security team is not able to configure strict firewall polices at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.

What should the network administrator do to ensure the solution is functional and secure?

A. Deploy an MC at the datacenter as a VPN concentrator.

B. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.

C. Block all ports to the MMs except UDP 500 and 4500.

D. Install a PEFV license, and configure firewall policies that protect the MM.

Refer to the exhibit.

Based on the output shown in the exhibit, with which Aruba devices has Access-1 established tunnels?

A. a pair of standalone MCs

B. a pair of switches running VXLAN

C. a pair of MCs within a L3 cluster

D. a single standalone MC

Refer to the exhibit.

A network administrator has a Mobility Master (MM) Mobility Controller (MC) architecture along with the MC in the DMZ for terminating RAPs. The network firewall has been provisioned to allow access to the MC in the DMZ for both UDP 500 and 4500. Then he proceeds to provision an AP as shown in the exhibit.

Which additional configuration steps must the administrator to assure RAPs successfully contact the MC? (Choose two.)

A. Create the RAP1 account in the InternalDB of the MC.

B. Create an IP local pool and PSK at the device node level.

C. Create the RAP1 account in the InternalDB of the MM.

D. Add the RAP1 entry in the CPsec whitelist at the MM level.

E. Create an IP local pool and PSK at the /mm/mynode level.

Refer to the exhibit.

The network administrator must ensure that the configuration will force users to authenticate periodically every eight hours. Which configuration is required to effect this change?

A. Set the reauth-period to 28800 enable reauthentication in the dot1x profile.

B. Set the reauth-period to 28800 enable reauthentication in the AAA profile.

C. Set the reauth-period to 28800 enable reauthentication in both dot1x and AAA profile.

D. Set the reauth-period to 28800 in the dot1x profile and enable reauthentication in the AAA profile.