Updated Jun-2024 Premium HPE6-A85 Exam Engine pdf – Download Free Updated 104 Questions [Q13-Q37]

Q13. You are in a meeting with a customer where you are asked to explain how the network redundancy feature VRRP works. What is the correct statement for this feature?

VRRP uses BPDUs for messaging

VRRP uses multicast for messaging

VRRP uses unicast for messaging

VRRP uses broadcast for messaging

Q14. You put in a few show commands on switches EDGE1 and CORE1 to attempt to gather information to troubleshoot the issue Use the show command output images to determine the reason for the EDGE1 uplink being down

The physical interfaces are not members of the correct LAG.

Spanning-Tree block state is preventing the Core uplink from having connectivity to the edge

The Core is connected to the incorrect physical interlaces

LACP is not configured on the Core uplink

Q15. You are working with a pair of 6300M switches in a VSF stack. The switch has 48 SmartRate 5G ports, 2 SFP28 ports, and 2 SFP56 ports. Both SFP56 ports are used for stacking.
You need to provide an LACP connection to another identical stack with the maximum available bandwidth possible. What should you configure?

a 16-member LAG using 2 SFP28 ports and 6 SR5 ports on each switch

an eight-member LAG using 4 SR5 ports on each switch

an eight-member LAG using 2 SFP28 ports and 2 SR5 ports on each switch

a four-member LAG using 2 SFP28 ports on each switch

Q16. After having configured the edge switch uplink as requested your colleague says that they have failed to ping the core You ask your colleague to verify the connection is plugged in and the switch is powered on They confirm that both are correct You attempt to ping the core switch and confirm that the ping is failing.
Knowing the nature of this deployment, what commands might you use to troubleshoot this issued

Show run – to view the running configuration of the switch Show run | begin 20 “vlan 20” – to ensure VLAN 20 was correctly added to the database show run | begin 20 ‘interface vlan 20’ – to view the L3 SVI configuration Show run interface 1/1/51.1/1/52 – to ensure the physical interfaces are no shut and were added as members of LAG 1 Show run int lag 1 – to verify LACP mode active was configured to eliminate LACP blocking states

Ping 10.1.1.1 – ping the core to attempt to verify connectivity show lacp agg – to verify which link aggregations are currently configured using which physical ports show lacp int – to verify the LACP status and whether any links are blocking in your topology show lldp neighors – to verify whether you are able to see the Core as an L2 neighbor to verify if the correct links are plugged in to the correct ports show run interface 1/1/51.1/1/52-to ensure the physical interfaces are no-shut and members of the lag show run interface lag 1 – to ensure the correct vlan trunking configuration is applied to the logical interface show run int vlan 20 – to ensure you have the L3 SVI no shut and configured in the correct subnet

Ping 10.11 1 – ping the core to attempt to verify connectivity Show trunk – to verify if the LAG interface was correctly added to the switch Show spanning tree – to check for spanning-tree blocked states Show port-access clients interface all – to view any port-access blocking states or failed authentication attempts on all interfaces Show run interface vlan20 – to double check the layer 3 svi configuration is correct for l_3 connectivity Show lldp neighors – to verify whether you are able to see the Core as an L2 neighbor to verify if the correct links are plugged in to the correct ports

diagnostic diag cable-diag 1/1/51 diag cable-diag 1/1/52 – to view diagnostic information for the physical link to get a status on any interruptions to Layer 1 connectivity, show ip route – to verify that the default gateway is present in the routing table show ip ospf – to check whether there is a layer 3 routing protocol enabled show ip dns – to view whether there is a valid dns source

Q17. Refer to the exhibit.

In the given topology, a pair of Aruba CX 8325 switches are in a VSX stack using the active gateway What is the nature and behavior of the Virtual IP for the VSX pair if clients are connected to the access switch using VSX as the default gateway?

Virtual IP is active on the primary VSX switch
Virtual floating IP will failover in case of a failure

Virtual IP is active on both CX switches

Virtual IP uses SVI IP address synced with VSX

Q18. Where are wireless client roaming decisions made?

Client device

Virtual Controller

Joint decision made by the origination and destination APs

Aruba Central

Q19. What will perform a hard reset of an Aruba CX switch?

Press the reset button and hold the clear button while releasing the reset button for 5 seconds.

Press and hold the reset button for 5 seconds, then release.

Press the reset button and the clear button simultaneously.

Press the reset button three times.

Q20. The customer has a requirement to create authorization policies for their users with Windows 10 clients, with a requirement Tor authorizing both device and user credentials within one Radius session.
What would be the correct solution for the requirement?

ClearPass 6.9 with EAP-TTLS

ClearPass 6.9 with EAP-TLS

ClearPass 6.9 with PEAP

ClearPass 6.9 with EAP-TEAP

Q21. Which three channels can be used simultaneously in a 2.4GHz WLAN environment while avoiding any co-channel interference?

1,6, 11

1,5, 10

3,6, 9

2,7, 11

Q22. What is the correct order of the TCP 3-Way Handshake sequence?

Q23. Which commands are used to set a default route to 10.4.5.1 on an Aruba CX switch when ln-band management using an SVl is being used?

iP default-gateway 10.4.5.1

ip route 0 0 0.070 10.4 5.1 vrf mgmt

ip route 0.0 0 0/0 10.4.5.1

default-gateway 10.4.5.1

Q24. When measuring signal strength, dBm is commonly used and 0 dBm corresponds to 1 mW power.
What does -20 dBm correspond to?

.-1 mW

.01 mw

10 mW

1mW

Q25. Match the Open Systems Interconnection (OSI) layer with its comparable member of the TCP/IP stack. (Options may be used more than once.)

Q26. When using an Aruba standalone AP you select “Native VLAN” for the Client VLAN Assignment In which subnet will the client IPs reside?

The same subnet as the mobility controller

The same subnet as the Aruba ESP gateway

The same subnet as the mobility conductor

The same subnet as the access point

Q27. Which flew in a Layer 3 IPv4 packet header is used to mitigate Layer 3 route loops?

Checksum

Time To Live

Protocol

Destination IP

The field in a Layer 3 IPv4 packet header that is used to mitigate Layer 3 route loops is Time To Live (TTL). TTL is an 8-bit field that indicates the maximum number of hops that a packet can traverse before being discarded. TTL is set by the source device and decremented by one by each router that forwards the packet. If TTL reaches zero, the packet is dropped and an ICMP Internet Control Message Protocol (ICMP) Internet Control Message Protocol (ICMP) is a network protocol that provides error reporting and diagnostic functions for IP networks. ICMP is used to send messages such as echo requests and replies (ping), destination unreachable, time exceeded, parameter problem, source quench, redirect, etc. ICMP messages are encapsulated in IP datagrams and have a specific format that contains fields such as type, code, checksum, identifier, sequence number, data, etc. ICMP messages can be verified by using commands such as ping , traceroute , debug ip icmp , etc . message is sent back to the source device. TTL is used to mitigate Layer 3 route loops because it prevents packets from circulating indefinitely in a looped network topology. TTL also helps to conserve network resources and avoid congestion caused by looped packets.
The other options are not fields in a Layer 3 IPv4 packet header because:
Checksum: Checksum is a 16-bit field that is used to verify the integrity of the IP header. Checksum is calculated by the source device and verified by the destination device based on the values of all fields in the IP header. Checksum does not mitigate Layer 3 route loops because it does not limit the number of hops that a packet can traverse.
Protocol: Protocol is an 8-bit field that indicates the type of payload carried by the IP datagram. Protocol identifies the upper-layer protocol that uses IP for data transmission, such as TCP Transmission Control Protocol (TCP) Transmission Control Protocol (TCP) is a connection-oriented transport layer protocol that provides reliable, ordered, and error-checked delivery of data between applications on different devices . TCP uses a three-way handshake to establish a connection between two endpoints , and uses sequence numbers , acknowledgments , and windowing to ensure data delivery and flow control . TCP also uses mechanisms such as retransmission , congestion avoidance , and fast recovery to handle packet loss and congestion . TCP segments data into smaller units called segments , which are encapsulated in IP datagrams and have a specific format that contains fields such as source port , destination port , sequence number , acknowledgment number , header length , flags , window size , checksum , urgent pointer , options , data , etc . TCP segments can be verified by using commands such as telnet , ftp , ssh , debug ip tcp transactions , etc . , UDP User Datagram Protocol (UDP) User Datagram Protocol (UDP) is a connectionless transport layer protocol that provides

Q28. You have been asked to onboard a new Aruba 6300M in a customer deployment You are working remotely rather than on-site You have a colleague installing the switch The colleague has provided you with a remote console session to configure the edge switch You have been asked to configure a link aggregation going back to the cores using interfaces 1/1/51 and 1/1/52 The Senior Engineer of the project has asked you to configure the switch and 1Q uplink with these guidelines
1. Add VLAN 20 to the local VLAN database with name Mgmt
2. Add L3 SVl on VLAN 20 for Management using address 10 in the 10.1.1 0/24 subnet 3. Add LAG 1 using LACP mode active for the uplink
4 use vlan 20 as the native vlan on the LAG 5. Make sure the interfaces are all ON.
Which configuration script will achieve the task?

Edge1# conf t vlan 20 name Mgmt interface vlan 20 ip address 10.1.1.10/24 no shut interface lag 1 shut vlan access 20 lacp mode active Int 1/1/51.1/1/52 shut no routing lag 1 interface lag 1 no shut

Edgel# conf t vlan 20 name Mgmt interface vlan 20 ip address 10 1.1 10/24 no shut interface
1/1/51.1/1/52 shut vlan trunk native 20 vlan trunk allowed all lag 1 lacp mode active interface 1/1/51.1/1/52 no shut

Edgel# conf t vlan 20 name Mgmt interface vlan 20 ip address 10 1 1 10/24 no shut interface lag 1 shut vlan trunk native 20 vlan trunk allowed all lacp mode active Int 1/1/51.1/1/52 shut no routing lag 1 interface lag 1 no shut interface 1/1/51.1/1/52 no shut

conf t vlan 20 name Mgmt ip address 10 1 1.10/24 no shut interface lag 1 shut vlan trunk native 1 vlan trunk allowed all lacp mode active int 1/1/51.1/1/52 shut no routing interface lag 1 no shut interface
1/1/51.1/1/52 no shut

Q29. You put in a few show commands on switches EDGE1 and CORE1 to attempt to gather information to troubleshoot the issue Use the show command output images to determine the reason for the EDGE1 uplink being down

The physical interfaces are not members of the correct LAG.

Spanning-Tree block state is preventing the Core uplink from having connectivity to the edge

The Core is connected to the incorrect physical interlaces

LACP is not configured on the Core uplink

Q30. What is the ideal Aruba access switch for a cost-effective connection to 200-380 clients, printers and APs per distribution rack?

Aruba CX 6400

Aruba CX 6200

Aruba CX 6300

Aruba CX 6000

Q31. List the WPA 4-Way Handshake functions in the correct order.

Q32. Based on the “show ip route” output on an Aruba CX 8325, what type of route is “10.20.0.0/22, vrf default via 10.1.1.1, [110/200]”?

connected

local

OSPF

static

Q33. A network technician is troubleshooting one new AP at a branch office that will not receive Its configuration from Aruba Central The other APs at the branch are working as expected The output of the ‘show ap debug cloud-server command’ shows that the “cloud conflg received” Is FALSE.
After confirming the new AP has internet access, what would you check next?

Disable and enable activate to trigger provisioning refresh

Verify the AP can ping the device on arubanetworks.com

Verify the AP has a license assigned

Disable and enable Aruba Central to trigger configuration refresh

Q34. What does WPA3-Personal use as the source to generate a different Pairwise Master Key (PMK) each time a station connects to the wireless network?

Session-specific information (MACs and nonces)

Opportunistic Wireless Encryption (OWE)

Simultaneous Authentication of Equals (SAE)

Key Encryption Key (KEK)

Q35. What are two characteristics of ClientMatch? (Select two.)

It helps to move sticky clients to another AP.

It optimizes channels of an AP.

It is an Aruba patented technology.

An algorithm to adjust RF patterns.

It is used to locate a client.

Q36. A network technician is testing a new SSID for a branch office. They are able to connect, get an IP address, and resolve DNS names. However, they are not able to browse the internet.
On the existing SSID at the branch, connectivity to the internet works as expected on the same VLAN as the new SSID. The wireless client should have received a new role to allow internet access.
What should the network technician verify to ensure both SSIDs function in a similar way?

Verify each SSID’s authentication and encryption parameters are enabled and the same.

Verify that the implicit ‘deny all’ is the last entry in the firewall policies.

Verify the new SSID is broadcasting on all the APs at the branch office.

Verify the firewall policies assigned, making sure the rules are correct and ordered properly.

Q37. You need to drop excessive broadcast traffic on ingress to an ArubaOS-CX switch What is the best technology to use for this task?

Rate limiting

DWRR queuing

QoS shaping

Strict queuing

Explanation
The best technology to use for dropping excessive broadcast traffic on ingress to an ArubaOS-CX switch is rate limiting. Rate limiting is a feature that allows network administrators to control the amount of traffic that enters or leaves a port or a VLAN on a switch by setting bandwidth thresholds or limits. Rate limiting can be used to prevent network congestion, improve network performance, enforce service level agreements(SLAs), or mitigate denial-of-service (DoS) attacks. Rate limiting can be applied to broadcast traffic on ingress to an ArubaOS-CX switch by using the storm-control command in interface configuration mode. This command allows network administrators to specify the percentage of bandwidth or packets per second that can be used by broadcast traffic on an ingress port. If the broadcast traffic exceeds the specified threshold, the switch will drop the excess packets.
The other options are not technologies for dropping excessive broadcast traffic on ingress because:
DWRR queuing: DWRR stands for Deficit Weighted Round Robin, which is a queuing algorithm that assigns different weights or priorities to different traffic classes or queues on an egress port. DWRR ensures that each queue gets its fair share of bandwidth based on its weight while avoiding starvation of lower priority queues. DWRR does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.
QoS shaping: QoS stands for Quality of Service, which is a set of techniques that manage network resources and provide different levels of service to different types of traffic based on their requirements.
QoS shaping is a technique that delays or buffers outgoing traffic on an egress port to match the available bandwidth or rate limit. QoS shaping does not drop excessive broadcast traffic on ingress, but rather smooths outgoing traffic on egress.
Strict queuing: Strict queuing is another queuing algorithm that assigns different priorities to different traffic classes or queues on an egress port. Strict queuing ensures that higher priority queues are always served before lower priority queues regardless of their bandwidth requirements or weights. Strict queuing does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.
References: https://en.wikipedia.org/wiki/Rate_limiting
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/storm-control.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/dwrr.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/shaping.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/strict.htm

Updated Jun-2024 Premium HPE6-A85 Exam Engine pdf – Download Free Updated 104 Questions [Q13-Q37]

Leave a Reply Cancel reply