HPE6-A73 Online Practice Questions and Answers

When an AOS-CX switch uses a temporary copy of the Configuration State database, what kind of analysis does NetEdit perform to ensure that the configuration is correct?

A. Syntax validation

B. Semantic validation

C. Conformance validation

D. Change validation

Which statement is correct regarding ACLs and TCAM usage?

A. Applying an ACL to a group of ports consumes the same resources as specific ACE entries

B. Using object groups consumes the same resources as specific ACE entries

C. Compression is automatically enabled for ASIC TCAMs on AOS-CX switches

D. Applying an ACL to a group of VLANs consumes the same resources as specific ACE entries

The company has just upgraded their access layer switches with AOS-CX switches and implemented an AAA solution with ClearPass. The company has become concerned about what actually connects to the user ports on the access layer switch, Therefore, the company is implementing 802.1X authentication on the AOS-CX switches. An administrator has globally enabled 802.1X, and has enabled it on all the access ports connected to user devices, including VoIP phones, security cameras, and wireless Aruba IAPs. Wireless users are complaining that they successfully authenticate to the IAPs; however, they do not have access to network resources. Previously, this worked before 802.1X was implemented on the AOS-CX switches.

What should the company do to solve this problem?

A. Implement device-based mode on the lAP-connected AOS-CX switch ports.

B. Implement local user roles and local forwarding on the AOS-CX switches.

C. Implement downloadable user roles and user-based tunneling (UBT) on the AOS-CX switches.

D. Implement AAA RADIUS change of authorization on the AOS-CX switches.

An administrator is configuring BGP and has two connections to a service provider to two different local routers.

Which BGP metric should the administrator configure to influence which local router the service provider will use to reach certain routes?

A. Weight

B. Multiple exit discriminator

C. Local preference

D. Origin

An administrator is designing an access layer solution in a data center. A key requirement is to dual-home mission-critical server connections to two different switches, ensuring that the servers always have network access, even during switch software upgrades. This feature should support strictly-controlled provisioning.

What would best meet the administrator's needs when deploying AOS-CX switches?

A. VSF

B. Dynamic segmentation

C. VSX

D. NAE

An administrator wants to implement dynamic segmentation policies. The network consists of AOS-CX and Aruba gateways.

Which type of forwarding should the administrator implement for users that already connect via wireless, but will also be connecting on Ethernet switch ports?

A. User-based tunneling (UBT)

B. Port-based tunneling (PBT)

C. Switch-to-switch tunneling (SST)

D. Local switching

A network administrator is installing NetEdit. In order for NetEdit to manage the AOS-CX switches in the network, what must be defined on the AOS-CX switches? (Choose two.)

A. Enabling telnet

B. Defining an admin user password

C. Defining the https user-group

D. Enabling the RESTful API for read and write access

E. Enabling SFTP

An administrator wants to track what configuration changes were made on a switch. What should the administrator implement to see the configuration changes on an AOS-CX switch?

A. AAA authorization

B. Network Analysis Engine (NAE)

C. AAA authentication

D. VSX synchronization logging

What is correct regarding the configuration of ACLs on AOS-CX switches?

A. Statements with the log keyword are always processed by the switch CPU.

B. Standard ACLs are used to match on routes when performing route distribution.

C. Wildcard masks are used to match on a range of IP addresses.

D. Numbers 100 through 199 and 2000 through 2999 are used when creating extended ACLs.

An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

A. access-list ip server 10 permit tcp any web-servers group web-ports

B. access-list ip server 10 permit tcp any object-group web-servers object-group web-ports

C. access-list ip server 10 permit tcp any group web-servers group web-ports

D. access-list ip server 10 permit tcp any web-servers web-ports