HPE6-A48 Online Practice Questions and Answers

Refer to the exhibit.

A network engineer deploys two different DHCP pools in an Instant AP (IAP) cluster for WLANs that will have connectivity to a remote site using Aruba IPSec.

Based on the output shown in the exhibit, which IAP-VPN DHCP modes are being used?

A. distributed L3 and centralized L3

B. distributed L3 and local L3

C. distributed L3 and centralized L2

D. local L3 and centralized L2

A network administrator deploys AirWave over a Mobility Master (MM)-Mobility Controller (MC) network to monitor, audit, and report activities. The main areas of concern are with high user density, not enough APs, or not enough channel bandwidth.

Which two report options can the network administrator user to create a weekly report that shows networking equipment with more users and high-demand applications used by top talkers? (Select two.)

A. Most Utilized Folders by Maximum Concurrent Clients

B. Most Utilized by Usage

C. Top Applications Summary

D. Most Utilized by Maximum Concurrent Clients

E. Top 3 Applications For Top 10 Users

A company has headquarters based in the US and rents internation office space in Mexico City so that 10 employees can work remotely. The company must implement a remote access technology so branch office employees can access all servers at the headquareters.

The office has both wired and wireless internet connectivity, with no restrictions on what device connects to the network. However, ports UDP 4500, 5060, and 5061 are blocked by the primeter firewall.

Which remote access technology is required to allow employees to access the servers at the headquarters?

A. BOC with CAPs

B. IAP VPN

C. RAP

D. VIA

Refer to the exhibit.

A network administrator is in charge of a wired and wireless Aruba network where access control is needed for both connection methods. For the wired solution, the network administrator wants the users authentication to be performed at the switches, while tunneling their traffic to MC1 whenever possible for firewall policy enforcement. The network administrator configures and tests ClearPass as the RADIUS server in the switches.

Which switch configuration scripts should the network administrator use next to achieve this goal?

A. tunneled-node-server controller-ip 10.19.10.100 backup-controller-ip 10.20.10.100 mode role-based aaa authentication port-access eap-radius aaa port-access authenticator 1-22 aaa port-access authenticator active

B. tunneled-node-server controller-ip 10.20.10.100 backup-controller-ip 10.19.10.100 mode port-based aaa authentication port-access eap-radius aaa port-access authenticator 1-22 aaa port-access authenticator active

C. tunneled-node-server controller-ip 10.20.10.100 backup-controller-ip 10.19.10.100 aaa authentication port-access eap-radius aaa port-access authenticator 1-22 aaa port-access authenticator active

D. tunneled-node-server controller-ip 10.19.10.100 backup-controller-ip 10.20.10.100 aaa authentication port-access eap-radius aaa port-access authenticator 1-22 aaa port-access authenticator active

Refer to the exhibits.

Exhibit 1

Exhibit 2

Exhibit 3

A network engineer deploys a Master Controller (MC) cluster at Headquarter to offer high levels of redundancy, and prepares the wired side of the network. This preparation includes the VLAN, DHCP Settings, and unicast routing services that APs require to reach the cluster.

The network engineer waits for 20 minutes after connecting the APs and sees that no SSIDs are advertised. The network engineer logs into one of the MCs and one of the AP's consoles to obtain the outputs shown in the exhibits.

What can the network engineer do to fix the APs discovery process, to ensure the best scalability even if one MC fails?

A. Reprovision the APs with a different Master IP.

B. Modify the IP address in one of the MCs.

C. Modify option 43 in the DHCP pool.

D. Create a VRRP instance in the MCs.

Refer to the exhibit.

Based on the output shown in the exhibit, which channel offers the highest quality?

A. Channel 1

B. Channel 6

C. Channel 11

D. Channel 14

Users run encrypted Skype for Business traffic with no WMM support over an Aruba Mobility Master (MM)Mobility Controller (MC) based network. When voice, video, and application sharing traffic arrive at the wired side of the network, all the flows look alike due the lack of L2 or L3 markings.

How can the network administrator identify these flows and mark QoS accordingly?

A. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable WMM in a VAP profile.

B. Confirm the MM is the Openflow controller of the MCs and Openflow is enabled in VAP and the firewall roles. Then integrate the MM with the Skype4Business SDN API, and enable the Skype4Business ALG

in the UCC Profiles.

C. Confirm the MC is the OpenFlow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable the Skype4Business ALG in the UCC profiles.

D. Use a media firewall policy that match these three flows, and use permit and TOS actions with 56, 40, and 34 values for voice, video, and application sharing, respectively. Then enable the Skype4Business ALG in the UCC profiles.

Refer to the exhibits. Exhibit 1

Exhibit 2

A network administrator deploys role-based tunneled node in a corporate network to unify the security policies enforcement. When users authenticate with 802.1X, ClearPass shows Accept results, and sends the HPE-User-Role attribute as expected. However, the switch always applies the denyall role.

Why does the switch fail to allocate the tunnel-employee role?

A. Denyall is a secondary role contained within tunnel-employee.

B. The switch is not configured with primary tunneled-node user role.

C. The switch is not configured with secondary tunneled-node user role.

D. RADIUS Access Accept messages time out in the switch.

A company currently offers guest access with an open SSID and no authentication. A network administrator needs to integrate a web login page for visitors.

To accomplish this integration, the network administrator fully deploys a guest solution with self-registration in ClearPass, and defines the Mobility Controller (MC) as a RADIUS client. Then, the network administrator defines ClearPass as a RADIUS server and adds it into a server group in the MC.

Which two actions must the network administrator do next on the MC side to complete the deployment? (Select two.)

A. Associate the captive portal profile to the initial role

B. Define the web login URL and server group in a captive portal profile

C. Associate the captive portal profile to the VAP profile

D. Associate the captive portal to an AAA profile.

E. Define the web login URL in a captive portal profile and the server group in an AAA profile.

Refer to the exhibit.

A network administrator configures an Instant AP (IAP) to establish an Aruba IPSec tunnel across the Internet, and configures two DHCP pools for wireless users.

Based on the output shown in the exhibit, which device behaves as a DHCP server for the users?

A. Mobility Master

B. Mobility Controller

C. External server

D. DSL modem

E. Virtual Controller