HPE2-W09 Online Practice Questions and Answers

Correct Answer: A

A data center network is a network that connects servers, storage devices, and other devices within a data center. A campus network is a network that connects buildings and users within a campus area, such as a university or an enterprise. Data center network traffic flows are typically east-west, which means they are between servers or devices within the data center. This is because data center applications often require high-speed communication and data exchange between servers for processing, analysis, or backup. Campus network traffic flows are typically north-south, which means they are between users or devices and external networks, such as the Internet or a wide area network (WAN). This is because campus users often access online services or resources that are hosted outside the campus network12. Therefore, this is a valid difference between a typical data center network's requirements and a typical campus network's requirements.

Correct Answer: A

Agents write data to the switch's current state database is a correct description of how Network Analytics Engine (NAE) agents work. NAE agents are scripts that run on ArubaOS-CX switches and collect data from various sources such as CLI commands, REST APIs, SNMP queries, etc. The agents write the collected data to the switch's current state database (CSDB), which stores information about the switch's configuration, status, and performance1.

Correct Answer: B

The exhibit shows a network topology where Switch-1 and Switch-2 are ArubaOS-CX switches that implement VXLAN without Ethernet VPN (EVPN). Switch-2 uses the same VNI-to-VLAN mappings as Switch-1. The question asks how the specified servers communicate, which means Server 1 and Server 4. Server 1 and Server 4 are in different VLANs and different VNIs, which means they are in different layer 2 segments. To communicate with each other, they require routing services between the VXLANs. However, using Virtual Routing and Forwarding (VRF) to tunnel iSCSI traffic through the network spine on the same links that data traffic uses is not the correct way to provide routing services. VRF is a technology that creates multiple isolated Layer 3 domains on a physical network, each with its own routing table. VRF does not provide any benefits for iSCSI traffic, as it does not guarantee bandwidth, priority, or quality of service. VRF also adds overhead and complexity to the network configuration1. To provide routing services between the VXLANs, the correct way is to use VXLAN routing with EVPN or distributed anycast gateway (DAG). VXLAN routing with EVPN allows the switches to exchange MAC and IP information using BGP EVPN control plane, and to perform routing between different VNIs using a centralized or distributed model2. DAG allows the switches to act as anycast gateways for their local hosts, and to route traffic between different VNIs using a symmetric or asymmetric model3. Therefore, this does not correctly describe how the specified servers communicate.

Correct Answer: B

Creating two configuration plans, one with the standard config and one with the device-specific settings, is not what you should do. NetEdit is a tool that allows you to manage and monitor multiple switches from a single interface1. It also provides a plan feature that lets you create containers to group devices and execute operations on them, such as deploying, committing, or rolling back device configuration or firmware1. However, you do not need to create two configuration plans for your scenario. You can create one configuration plan with the standard config and use variables to define the device-specific settings1. Variables are placeholders that can be replaced with different values for different devices1. This way, you can deploy a standard config with device-specific settings using one configuration plan1.

Correct Answer: A

Inside a configuration plan, right-click any device-specific parameters and modify the parameter per-device is what you should do if you want to use NetEdit to manage ArubaOS-CX switches and deploy a standard config to the switches, but need the config to include a few device-specific settings such as hostname and IP address. This approach allows you to edit any parameter value for individual devices within a configuration plan without affecting other devices or creating separate plans1.

Correct Answer: A

A broadcast arrives in VLAN 10 on Switch-1. Switch 1 forwards the frame on all interfaces assigned to VLAN10, except the incoming interface. It replicates the broadcast, encapsulates each broadcast with VXLAN, and sends the VXLAN traffic to 192.168.1.2 and 192.168.1.3 is a correct explanation of how the switch handles the traffic. Switch-1, Switch-2, and Switch-3 are ArubaOS-CX switches that use VXLAN and EVPN to provide Layer 2 extension over Layer 3 networks. VXLAN is a feature that uses UDP encapsulation to tunnel Layer 2 frames over Layer 3 networks using VNIs. EVPN is a feature that uses BGP to advertise multicast information for VXLAN networks using IMET routes. Switch-1 receives a broadcast in VLAN 10, which belongs to VNI 5010. Switch-1 forwards the frame on all interfaces assigned to VLAN 10, except the incoming interface, as per normal Layer 2 switching behavior. Switch-1 replicates the broadcast, encapsulates each broadcast with VXLAN, and sends the VXLAN traffic to both 192.168.1.2 and 192.168.1.3, which are Switch-3's and Switch-2's loopback interfaces respectively.

Correct Answer: A

ARP and ND Suppression are features of ArubaOS-CX that reduce the broadcast traffic on EVPN VXLAN networks1. ARP and ND Suppression enable the switch to reply to ARP and ND requests with information present in the local ARP and neighbor cache, instead of flooding them to all VTEPs1. This reduces the bandwidth consumption and improves the network performance1. When ARP-Suppression is enabled, the switch replies to ARP requests with information present in the local ARP Table2. Therefore, this statement about ARP and ND Suppression is true, and the correct answer is yes. For more information on ARP and ND Suppression, refer to the Aruba Data Center Network Specialist (ADCNS) certification datasheet3 and the EVPN VXLAN Guide for your switch model1.

Correct Answer: B

Asymmetric IRB routes packets in the ingress VTEP and then bridges packets in the egress VTEP1. This means that the ingress VTEP performs both Layer 2 and Layer 3 lookups, while the egress VTEP performs only Layer 2 lookup1. The statement is false because it confuses routing with bridging in the egress VTEP.

Correct Answer: A

The ISL and keepalive goes down, and after a few seconds, the keepalive link restores. Switch-1 and Switch-2 remains up. The Split-recovery mode is enabled. In this case the secondary switch shutdowns SVIs when keepalive is restored is a correct description of how the Virtual Switching Extension (VSX) fabric reacts to various component failure scenarios. VSX is a feature that provides active-active forwarding and redundancy for ArubaOS-CX switches. The ISL is the inter-switch link that connects two VSX nodes and carries data traffic. The keepalive link is a separate link that carries control traffic between two VSX nodes. The split-recovery mode is a feature that prevents split- brain scenarios when both VSX nodes lose connectivity with each other but remain up. When the ISL and keepalive goes down, both VSX nodes continue to forward traffic independently. When the keepalive link restores, the secondary switch detects that it has lost synchronization with the primary switch and shuts down its SVIs to prevent traffic loops 1.

Correct Answer: B

The Virtual Switching Extension (VSX) fabric is a high availability solution that provides industry-leading performance and simplicity for campus and data center networks1. When the ISL goes down, and after a few seconds, the keepalive link goes down too, the VSX fabric reacts differently depending on the split-recovery mode setting. If the split-recovery mode is enabled, the secondary switch shuts down all its SVIs and waits for the ISL to come back up2. If the split-recovery mode is disabled, both switches keep their SVIs up and continue to forward traffic2. Therefore, this does not correctly describe how the VSX fabric reacts to various component failure scenarios. Reference:https://www.arubanetworks.com/assets/tg/TB_VSX.pdf