HPE6-A73 Online Practice Questions and Answers

A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code.

The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless

traffic.

Which solution should the company implement?

A. RADIUS dynamic authorization

B. Downloadable user roles

C. IPSec

D. User-based tunneling

What is correct regarding policy-based routing?

A. Policies can only be applied to routed interfaces.

B. Policies can be applied inbound and outbound.

C. Monitoring of policy interfaces occurs every 60 seconds.

D. Policy actions include routing permitting or dropping traffic.

A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer verifies that the AOS-CX switch is configured for NTP and is successfully synchronized. What should be done to fix this issue?

A. Ensure the engineer's web browser is configured for the same timezone as the AOS-CX switch

B. Ensure the engineer's PC is synchronized to the same NTP server as the AOS-CX switch

C. Ensure NetEdit and the AOS-CX switch are synchronized to the same NTP server

D. Enable trust settings for the AOS-CX switch's SSL certificate

An administrator wants to leverage always-on PoE on AOS-CX switches. Which statement is correct regarding this feature?

A. Provides up to 60W of power per port

B. Supports all AOS-CX switches

C. Provides surge protection for PoE and non-PoE ports

D. Requires NetEdit to implement

An administrator is implementing a downloadable user role solution involving AOS-CX switches. The AAA solution and the AOS-CX switches can successfully authenticate users; however, the role information fails to download to the switches. What policy should be added to an intermediate firewall to allow the downloadable role function to succeed?

A. Allow TCP 443

B. Allow UDP 1811

C. Allow UDP 8211

D. Allow TCP 22

Examine the attached diagram Two AOS-CX switches are configured for VSX at the access layer, where servers attached to them. An SVI interface is configured for VLAN 10 and serves as the default gateway for VLAN 10. The ISL link between the switches fails, but the keepalive interface functions. Active gateway has been configured on the switches.

What is correct about access from the servers to the Core?

A. Server 2 can successfully access the core layer via the keepalive link.

B. Server 1 and Server 2 can communicate with each other via the core layer.

C. Server 2 cannot access the core layer.

D. Server 1 can access the core layer via both uplinks.

Examine the network exhibit.

A company has a guest implementation for wireless and wired access. Wireless access is implemented through a third-party vendor. The company is concerned about wired guest traffic traversing the same network as the employee traffic. The network administrator has established a GRE tunnel between AOS-CX switches where guests are connected to a routing switch in the DMZ.

Which feature should the administrator implement to ensure that the guest traffic is tunneled to the DMZ while the employee traffic is forwarded using OSPF?

A. OSPF route maps using the "set metric" command

B. Policy-based routing (PBR)

C. User-based tunneling (UBT)

D. Classifier policies

An administrator is supporting a network with the access layer consisting of AOS-CX 6300 and 6400 switches. The administrator needs to quickly deploy Aruba IAPs and security cameras in the network, ensuring that the correct QoS and VLAN settings are dynamically applied to the switch ports. Currently, switches are not configured to do device authentication, and no authentication server exists in the network.

Which AOS-CX feature should the administrator use to dynamically assign the policy settings to the correct switch ports?

A. Device profiles

B. Change of authorization

C. Dynamic segmentation

D. Voice VLANs

How does PIM build the IP multicast routing table to route traffic between a multicast source and one or more receivers?

A. It uses the unicast routing table and reverse path forwarding (RPF)

B. It uses IGMP and calculates a shortest path tree (SPT)

C. It uses the shortest path first (SPF) algorithm derived from link state protocols

D. It uses the Bellman-Ford algorithm derived from distance vector protocols

An administrator creates an ACL rule with both the "count" and "log" option enabled. What is correct about the action taken by an AOS-CX switch when there is a match on this rule?

A. By default, a summarized log is created every minute with a count of the number of matches

B. Logging will not include certificate and TLS events, but counting will

C. The "count" and "log" options are processed by the AOS-CX switch's hardware ASIC

D. The total in the "log" record and the count could contain different rule matching statistics