[Aug 07, 2021] HPE6-A79 Dumps Full Questions - Exam Study Guide
HP ACMX Free Certification Exam Material from Lead2Passed with 56 Questions
NEW QUESTION 22
Refer to the exhibit.
A network administrator is evaluating a deployment to validate that a user is assigned the proper role and reviews the output in the exhibit. How is the role assigned to user?
- A. The MC assigned the machine authentication default user role.
- B. The MC assigned the role based on Aruba VSAs.
- C. The MC assigned the role based on server derivation rules.
- D. The MC assigned the default role based on the authentication method.
Answer: D
NEW QUESTION 23
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator adds a new Mobility Controller (MC) to the production Mobility Master (MM) and deploys APs that start broadcasting the employee SSID in the West wing of the building. Suddenly, the employees report client disconnects. When accessing the MM the network administrator notices that the MC is unreachable, then proceeds to access the MC's console and obtains the outputs shown in the exhibits.
What should the network administrator do next to solve the current problem?
- A. Open a TAC case and send the output of tar crash.
- B. Verify the license pools in the MM.
- C. Kill two zombie processes then reboot the MC.
- D. Decommission the MC from the MM, and add it again.
Answer: B
NEW QUESTION 24
Refer to the exhibits.
Exhibit 1
Exhibit 2
Exhibit 3
A network administrator wants to allow contractors to access the corporate WLAN named EmployeesNet with the contractor role in VLAN 40. When users connect, they do not seem to get an IP address. After some verification checks, the network administrator confirms the DHCP server (10.254.1.21) is reachable from the Mobility Controller (MC) and obtains the outputs shown in the exhibits.
What should the network administrator do next to troubleshoot this problem?
- A. Configure the DHCP helper address.
- B. Permit UDP67 to the contractor role.
- C. Remove the IP address in VLAN 40.
- D. Confirm there is an IP pool for VLAN 40.
Answer: B
NEW QUESTION 25
Refer to the exhibit.
A 7008 Branch Office Controller (BOC) is deployed in a remote office behind a core router. This core does not support 802.1q encapsulation. The Mobility Controller (MC) is the gateway for two tunneling mode SSIDs, as shown in the exhibit.
Which two different configuration options ensure that wireless users are able to reach the branch network through the router? (Choose two.)
- A. Configure the uplink of the BOC as an access port on the controller VLAN, and enable NAT for the SSID VLANs.
- B. Configure the uplink of the BOC as a trunk port, tagging the controller and the SSOD VLANs, and enable NAT for the SSID VLANs.
- C. Configure all ports of the BOC as access ports on the controller VLAN, and change the gateway of clients to the core router IP.
- D. Configure the uplink of the BOC as an access port on the controller VLAN, and add static routes in the router for the SSID VLAN subnets.
- E. Configure the uplink of the BOC as a trunk port that permits the controller and the SSID VLANs. The controller VLAN must be native.
Answer: B,D
NEW QUESTION 26
Refer to the exhibit.
A network administrator is validating client connectivity and executes the show command shown in the exhibit. Which authentication method was used by a wireless station?
- A. 802.1X user authentication
- B. MAC authentication
- C. 802.1X machine authentication
- D. EAP authentication
Answer: A
NEW QUESTION 27
A network administrator wants to receive a warning level alarm every time the noise floor rises above -82 dBm on any of the AP radios.
Which alarm definition must the network administrator create to accomplish this?
Answer:
Explanation:
NEW QUESTION 28
Users run Skype for Business on wireless clients with no WMM support over an Aruba Mobility Master (MM) - Mobility Controller (MC) based network. When traffic arrives at the wired network, it does not include either L2 or L3 markings.
Which configuration steps should the network administrator take to classify and mark voice and video traffic with UCC heuristics mode?
- A. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.
- B. Confirm MM is the Openflow controller of MCs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.
- C. Enable WMM in a VAP profile, and explicitly permit voice and video UDP ports in a firewall policy.
- D. Confirm OpenFlow is enabled in the user role and VAP profile. Then enable WMM in a SSID profile, and explicitly permit voice and video UDP ports in a firewall policy.
Answer: C
NEW QUESTION 29
Refer to the exhibit.
A network administrator deploys a new Mobility Master (MM) - Mobility Controller (MC) network. To test the solution, the network administrator accesses the console of a pair of APs and statically provisions them. However, one of the APs does not propagate the configured SSIDs. The network administrator looks at the logs and sees the output shown in the exhibit.
Which actions must the network administrator take to solve the problem?
- A. Re-provision one of the APs with a different name or modify the name in the whitelist.
- B. Re-provision the AP with a different group, and modify the name of one AP in the whitelist.
- C. Re-provision one of the APs with a different name, and add new entries with the proper group in the whitelist.
- D. Create another AP group in the MC's configuration, and re-provision one AP with a different group.
Answer: A
NEW QUESTION 30
Refer to the exhibit.
A network administrator wants to configure an 802.1x supplicant for a wireless network that includes the following:
* AES encryption
* EAP-MSCHAP v2-based user and machine authentication
* Validation of server certificate in Microsoft Windows 10
The network administrator creates a WLAN profile and selects the change connection settings option. Then the network administrator changes the security type to Microsoft: Protected EAP (PEAP), and enables user and machine authentication under Additional Settings.
What must the network administrator do next to accomplish the task?
- A. Enable server certificate validation under Settings.
- B. Change default RC4 encryption for AES.
- C. Enable user authentication under Settings
- D. Change the security type to Microsoft: Smart Card or other certificate.
Answer: D
NEW QUESTION 31
A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.
Since not all locations own public IP addresses, the security team is not able to configure strict firewall polices at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.
What should the network administrator do to ensure the solution is functional and secure?
- A. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.
- B. Install a PEFV license, and configure firewall policies that protect the MM.
- C. Block all ports to the MMs except UDP 500 and 4500.
- D. Deploy an MC at the datacenter as a VPN concentrator.
Answer: C
NEW QUESTION 32
A network administrator is in charge of a Mobility Master (MM) - Mobility Controller (MC) based WLAN. The administrator has deployed an Airwave Management Platform (AMP) server in order to improve the monitoring capabilities and generate reports and alerts.
The administrator has configured SNMPv3 and Admin credentials on both the MMs and MCs and has created Groups and Folders in the AMP server.
What two additional steps must the administrator do in order to let Airwave monitor the network devices? (Choose two.)
- A. Move "New" devices into a group and folder in Airwave.
- B. Manually add the Active MM and wait for automatic Discovery.
- C. Map the AMP's IP address with a mgmt-config profile in the MM.
- D. Set the AMP's IP address and Org string as DHCP option 43.
- E. Manually add each MM. MC and Access Point in the AMP server.
Answer: B,C
NEW QUESTION 33
Refer to the exhibit.
A network administrator wants to allow contractors to access the WLAN named EmployeesNet. In order to restrict network access, the network administrator wants to assign this category of users to the contractor user role. To do this, the network administrator configures ClearPass in a way that it returns the Aruba-User-Role with the contractor value.
When testing the solution, the network administrator receives the wrong role.
What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?
- A. Create server deviation rules in the server group.
- B. Create Contractor firewall role in the M.
- C. Set contractor as the default role in the AAA profile.
- D. Check the Download role from the CPPM option in the AAA profile.
Answer: D
NEW QUESTION 34
Refer to the exhibit:
A company acquires ten barcode scanners to run inventory tasks. These WiFi devices support WPA2-PSK security only. The network administrator deploys a WLAN named scanners using the configuration shown in the exhibit.
What must the network administrator do next to ensure that the scanner devices successfully connect to their SSID?
- A. Enable L2 Authentication Fail Through.
- B. Add scanner MAC addresses in user derivation rules.
- C. Set internal as the MAC authentication server group.
- D. Add scanner MAC addresses in the internal database.
Answer: D
NEW QUESTION 35
Refer to the exhibit.
A network administrator completes the initial configuration dialog of the Mobility Controllers (MCs) and they join the Mobility Master (MM) for the first time. After the MM-MC association process, network administrator only creates AP groups, VAPs, and roles. Next, the network administrator proceeds with the configuration of the policies and creates the policy shown in the exhibit.
Which additional steps must be done to make sure this configuration takes effect over the contractor users?
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: B
NEW QUESTION 36
A company with 535 users deploys an Aruba solution with more than 1000 Aruba APs, two 7220 Mobility Controllers, and a single Mobility Master (MM) virtual appliance at the campus server farm. The MCs run a HA Fast failover group in dual mode and operate at 50% AP capacity.
If there is an MM or MC failure, the network administrator must ensure that the network is fully manageable and the MC load does not exceed 80%.
What can the network administrator do to meet these requirements?
- A. Add an MC and an MM in the server farm.
- B. Create a cluster with AP load balancing.
- C. Place the APs in the same hierarchy level.
- D. Add an MM and enable DC redundancy.
- E. Place the APs in two different AP-Groups.
- F. Enable oversubscription in the HA group.
Answer: D
NEW QUESTION 37
Refer to the exhibit.
A network administrator adds a Mobility Controller (MC) in the /mm level and notices that the device does not show up in the managed networks hierarchy. The network administrator accesses the CLI. executes the show switches command, and obtains the output shown in the exhibit.
What is the reason that the MC does not appear as a managed device in the hierarchy?
- A. The network administrator has not moved the device into a group yet.
- B. The digital certificate of the MC is not trusted by the MM.
- C. The IP address of the MC does not match the one that was defined in the MM.
- D. The network administrator added the device using the wrong Pre-Shared Key (PSK).
Answer: C
NEW QUESTION 38
A network administrator wants to permit explicit SSH, FTP and HHTP(s) access to servers in the 10.100.20.5 to 10.100.20.31 range, all devices in 10.100.21.0/24 network, and a host with IP address 10.100.22.70. The services must work properly at all times.
Which configuration scripts accomplish this task with the fewer number of lines, while avoiding access to other devices not included in these ranges? (Choose two.)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
- E. Option E
Answer: A,C
NEW QUESTION 39
A software development company has 764 employees who work from home. The company also has small offices located in different cities throughout the world. During working hours, they use RAPs to connect to a datacenter to upload software code as well as interact with databases.
In the past two month, cabling issues have occurred connection to the 7240XM Mobility Controller (MC) that runs ArubaOS 8 and terminates the RAPs. These RAPs disconnect, affecting the users connected to the RAPs. This also causes problems with code uploads and database synchronizations. Therefore, the company decides to add a second 7240XM controller for redundancy.
How should the network administrator deploy both controllers in order to provide the redundancy while preventing failover events from disconnecting users?
- A. Connect both controllers with common VLANs. and create an HA fast failover group with public addresses in the internet VLAN.
- B. Connect both controllers with common VLANs. and configure LMS/BLMS values equal to public addresses in the internet VLAN.
- C. Connect both controllers with different VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
- D. Connect both controllers with common VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
Answer: A
NEW QUESTION 40
Refer to the exhibits.
A user reports slow connectivity to a network administrator when connecting to AP-Garden and suggests that there might be a problem with the WLAN. The user's device supports 802.11n in the 2.4 GHz band. The network administrator finds the user in the Mobility Master (MM) and reviews the output shown in the exhibit.
What can the network administrator conclude after analyzing the data?
- A. 2.4Ghz band is currently congested, therefore a NIC upgrade to 802.11ac or higher is recommended so the user can move to 5Ghz.
- B. 365s are low cost outdoor APs recommended for coverage design only. AP-Garden currently has more clients than recommended and is getting congested.
- C. Channel usage is high and though this device has high speed the overall client rate is low on AP-Garden. there could be a few clients monopolizing the airtime on both bands at low speeds.
- D. User's SNR value over time is lower than recommended, therefore he should either get closer to the Access Point or increase the transmit power.
Answer: B
NEW QUESTION 41
A customer wants a WLAN solution that permits Aps to terminate WPA-2 encrypted traffic from different SSIDs to different geographic locations where non-related IT departments will take care of enforcing security policies. A key requirement is to minimize network congestion, overhead, and delay while providing data privacy from the client to the security policy enforcement point. Therefore, the solution must use the shortest path from source to destination.
Which Aruba feature best accommodates this scenario?
- A. Inter MC S2S IPsec tunnels
- B. RAPs
- C. Inter MC GRE tunnels
- D. Multizone Aps
- E. VIA
Answer: B
NEW QUESTION 42
Refer to the exhibits.
A network administrator has fully deployed a WPA3 based WLAN with 802.1X authentication. Later he defined corp-employee as the default user-role for the 802.1X authentication method in the aaa profile. When testing the setup he realizes the client gets the "guest" role.
What is the reason "corp-employee" user role was not assigned?
- A. The Mobility Master lacks MM-VA licenses; therefore, it shares partial configuration only.
- B. The administrator forgot to enable PEFNG feature set on the Mobility Master.
- C. The administrator forgot to map a dotlx profile to the corp-employee aaa profile.
- D. MC 1 has not received the configuration from the mobility master yet.
Answer: D
NEW QUESTION 43
......
Dumps Brief Outline Of The HPE6-A79 Exam: https://www.lead2passed.com/HP/HPE6-A79-practice-exam-dumps.html
