Replace HPE6-A45 Software 2021

NEW QUESTION 1
What is a reason to implement PIM-DM as opposed to PIM-SM?

• A. to control exactly which multicast groups are routed through the network
• B. to permit a higher density of RP routers in the network core
• C. to conserve bandwidth over WAN links
• D. to use on high-bandwidth routed connections

Answer: D

NEW QUESTION 2
An administrator wants to ensure that an AOS-Switch forwards all traffic that it receives on interface 1 with high priority.
- Switches should also communicate the high priority to other switches across the traffic path.
- The switch has type of service disabled.
- The administrator plans to apply 802.1p priority 5 to interface 1.
What should the administrator check to ensure that the configuration will work properly?

• A. Interface 1 receives traffic with a tag.
• B. The AOS-Switch is configured to use eight queues.
• C. The forwarding path for the traffic uses VLAN tags.
• D. An 802.1p-to-DSCP map exists for priority 5.

Answer: A

NEW QUESTION 3
Refer to the exhibit.

The exhibit shows configurations for interface 5 and VLAN 20. Note that DHCP snooping and ARP protection are also enabled.
A network administrator finds that interface 5 on an AOS-Switch is disabled. The administrator re-enables the interface, but it shuts down again. What should the administrator investigate?

• A. a device that sends too much unicast traffic
• B. rogue DHCP server
• C. a loop on the interface
• D. a device that sends unauthorized ARP messages

Answer: C

NEW QUESTION 4
A network administrator configures DHCP snooping on VLAN 2. How does the switch handle DHCP traffic that arrives in this VLAN on an untrusted interface?

• A. It accepts packets from a DHCP server, but drops client packets.
• B. It drops all DHCP traffic and logs a security event.
• C. It accepts both client and server packets as long as they match the DHCP binding table.
• D. It accepts client packets, but drops packets from a DHCP serve

Answer: A

NEW QUESTION 5
Refer to the exhibit.

A network administrator needs to deploy AOS-Switches that implement port-based tunneled node. Their Aruba controller has IP address 10.1.10.5/24. The architect has assigned tunneled-node endpoints to VLAN 20.
What is one issue with the current configuration planned for VLAN 20 on the switch?

• A. VLAN 20 must have GRE enabled on it.
• B. VLAN 20 cannot have an IP address.
• C. VLAN 20 must have an IP address in the same subnet as the controller.
• D. VLAN 20 must not enable jumbo frame

Answer: D

NEW QUESTION 6
Refer to the exhibit.

AOS-Switches will enforce 802.1X authentication on edge ports. The company has two RADIUS servers, which are meant to provide redundancy and load sharing of requests. The exhibit shows the planned RADIUS setting to deploy to the switches.
Which adjustment to the plan should administrators make in order to meet the customers’ requirements?

• A. Remove the dynamic authorization setting for both RADIUS servers.
• B. Specify a different RADIUS dynamic authorization port for each of the RADIUS servers.
• C. Specify one server on half of the switches and the other server on the other half of the switches.
• D. Change the order in which the RADIUS servers are specified on half of the switche

Answer: D

NEW QUESTION 7
A network administrator needs to configure an AOS-Switch to classify traffic. Comparing QoS policy and global policy, what is one function that only a class-based QoS policy can fulfill?

• A. Apply a DSCP to HTTP traffic from some sources but not other sources.
• B. Apply a DSCP rather than an 802.1p value to classified traffic.
• C. Override the incoming DSCP in the received traffic.
• D. Override the DSCP or priority applied directly to an interfac

Answer: B

NEW QUESTION 8
What is a reason to create a virtual link between two OSPF routers?

• A. to permit OSPF to operate between two routers that also run VRRP
• B. to create a connection between two areas that are not directly connected to Area 0
• C. to permit an OSPF adjacency between two VSF fabrics
• D. to monitor connectivity with the neighbor, but not exchange the routing table

Answer: B

NEW QUESTION 9
Refer to the exhibits.

Exhibit 2

The network administrator configures the commands shown in Exhibit 2. Which mismatch will cause an issue?

• A. the mismatch between the key IDs specified in chain10 and chain11 on Switch-1
• B. the mismatch between the key-strings in the chains for VLAN 10 and VLAN 11 on Switch-1
• C. the mismatch between the chain names associated with VLAN 11 on Switch-1 and on Switch-3
• D. the mismatch between the key-strings associated with VLAN 10 on Switch-1 and on Switch-2

Answer: D

NEW QUESTION 10
A customer wants access layer switches that support routing, ACLs, backplane stacking, and Smart rate ports. The customer asks about Aruba 5400R z 12 switches.
Which Aruba Switch model would better meet the customer’s requirements?

• A. 2530
• B. 2930F
• C. 3810
• D. 8400

Answer: C

NEW QUESTION 11
Refer to the exhibit.

Switch-1 is routing traffic to 192.0.2.0/24 over a less-than-optimal path. Which issue could prevent Switch-1 from selecting the first route listed in the table as a best BGP route?

• A. It does not have AS 46501 configured on it.
• B. It has no route to 192.168.2.1 in its IP routing table.
• C. It has no network statement for 192.168.2.0/24 in its BGP configuration.
• D. It has learned the same route using OSP

Answer: B

NEW QUESTION 12
Refer to the exhibit.

A company wants to change Area 1 shown in the exhibit from a stub area to a totally stub area. What will be one effect of this planned change?

• A. Routing devices within Area 0 will temporarily lose adjacency with each other.
• B. Switch-1 and Switch-2 will adjust the cost with which they advertise area 1 traffic in the backbone.
• C. Some traffic from Area 1 to other areas will no longer follow the lowest cost path.
• D. Endpoints within Area 1 will no longer be able to reach endpoints in other area

Answer: C

NEW QUESTION 13
Network administrators need to configure a BGP neighbor on an AOS-Switch. What defines the neighbor as an iBGP neighbor?

• A. It has BGP synchronization enabled.
• B. It has an AS number in the range 12 to 64535.
• C. Its update source is set to a private company IP address.
• D. Its remote-AS is the same as the AOS-Switch BGP A

Answer: D

NEW QUESTION 14
What is a reason to implement port security on an AOS-Switch?

• A. to simplify provisioning for devices such as IP phones or printers
• B. to enhance the security of an 802.1X solution
• C. to filter traffic at the edge, based on multiple criteria in the MAC header
• D. to control management access to the switch CLI based on device, as well as user credentials

Answer: B

NEW QUESTION 15
Two 5400R AOS-Switches are OSPF neighbors. The network administrator wants routing to update as quickly as possible in the event of a failure on a neighboring switch.
Which technology should the administrator implement on the connected switch interfaces?

• A. MAC Lockdown
• B. Unidirectional Link Detection (UDLD)
• C. Bidirectional Forwarding Detection (BFD)
• D. Spanning Tree Root Guard

Answer: C

NEW QUESTION 16
Refer to the exhibits. Exhibit 1

Exhibit 2

The network administrator needs to set up BGP between the two company switches, Switch-1 and Switch-2. The BGP connection does not establish. Based on the exhibits, what does the administrator need to do to fix the issue?

• A. Set the update source for the neighbor to the local loopback interface on each switch.
• B. Enter the network command for 10.0.0.0/24 in the router BGP mode on each switch.
• C. Enable the multihop option for the neighbor on each of the switches.
• D. Enable BGP on the interfaces that the switches use to reach each othe

Answer: A

NEW QUESTION 17
Refer to the exhibits. Exhibit 1

Exhibit 2

Network administrators are alerted to high interface utilization on a switch by a management solution. They examine the utilization on the uplink interfaces several times an hour during problem times. The exhibit shows output typical of times of congestion. The administrators want to allocate bandwidth fairly and reduce congestion on the uplinks.
What could help meet these requirements?

• A. a per-queue rate limit on interfaces 1 and 2
• B. an outbound rate limit on each edge port
• C. a broadcast rate limit on each edge port
• D. an outbound rate limit on interfaces 1 and 2

Answer: C

NEW QUESTION 18
Refer to the exhibits.
Exhibit 1

Exhibit 2

The IP phone in the exhibit is set up to complete 802.1x authentication to the network. How can the netwotk administrator prevent a user on the computer from receiving network access without authentication?

• A. Set an 802.1X client limit on interface 1.
• B. Set up the MAC filter on interface 1.
• C. Enable static mode port security on interface 1.
• D. Enable MAC-based VLANs on interface 1.

Answer: A

NEW QUESTION 19
Refer to the exhibit.

Network administrators want the network to use PIM-DM to route multicasts from Server 1 to receivers in VLAN 24. Which protocols should the administrators enable on which VLANs on Switch-1?

• A. PIM-DM on VLAN 24; IGMP and PIM-DM on VLAN 10
• B. IGMP on VLAN 24; IGMP on VLAN 10
• C. IGMP on VLAN 24; PIM-DM on VLAN 10
• D. IGMP and PIM-DM on VLAN 24; PIM-DM on VLAN 10
• E. IGMP and PIM-DM on VLAN 24; PIM-DM on VLAN 10

Answer: C

NEW QUESTION 20
OSPF Area 1 has two ABRs. One ABR is configured with this range for Area 1: 10.10.0.0/16. The other ABR is not configured with a range for Area 1.
Which type of issue occurs due to this mismatch?

• A. The ABRs create a discontinuous area and disrupt intra-area routing between devices within Area 1.
• B. The ABR core would send Area 1 traffic destined to the other switch through an access switch.
• C. The ABRs lose adjacency entirely and cannot route traffic between each other at all.
• D. The ABRs lose adjacency in Area 1 and must route all traffic to each other through Area 0.

Answer: A

NEW QUESTION 21
An AOS-Switch needs to use captive portal to integrate with an Aruba ClearPass Guest solution. The solution should allow guests to connect their own devices to the network, be redirected to a portal, log in, and be granted access transparently.
What is one setting administrators should configure for this solution?

• A. ClearPass should be defined as the enhanced Web Auth (EWA) server.
• B. RADIUS MAC-Auth should be enabled on the guest ports.
• C. Web-Auth should be enabled on the guest ports.
• D. BYOD redirect should be enabled globall

Answer: B

NEW QUESTION 22
What must an OSPF router do to ensure nonstop routing should a standby member take over as commander when the original VSF commander fails?

• A. It must run the shortest path first algorithm.
• B. It must participate in a new election for the Designated Router.
• C. It must initiate a graceful restart.
• D. It must re-establish adjacency with its Designated Route

Answer: C

NEW QUESTION 23
A company has a Unified Communications and Collaboration (UCC) solution. Users run softphones on their desktops and laptops.
The UCC solution is configured to use a certain range of Layer 4 ports for VoIP traffic. The user devices connect to AOS-Switches.
A network administrator needs to configure the AOS-Switches to prioritize only the VoIP traffic. Where can the administrator configure a DSCP value to meet this goal?

• A. in a global UDP port-based QoS policy
• B. on the interfaces through which the VoIP traffic is forwarded
• C. on the interfaces that connect to the user devices
• D. on the VLAN to which the user devices are assigned

Answer: B

NEW QUESTION 24
Refer to the exhibit.
A network administrator configures connection rate filtering on interface 1 with the throttle action. Device 1 crosses the threshold and triggers the action.
What does the switch do?

• A. It temporarily drops all IP traffic from Device 1 only.
• B. It temporarily drops all IP traffic on interface 1.
• C. It drops all IP traffic from Device 1 until the host is manually unblocked.
• D. It drops all IP traffic on interface 1 until the interface is manually unblocke

Answer: A

NEW QUESTION 25
Refer to the exhibit.

A network administrator wants to add the protections of root guard to the network. Based on the spanning tree topology, on which ports should the network administrator implement root guard?

• A. 3-24
• B. 1 and 2
• C. A1 and A2
• D. 2 and A3

Answer: C

NEW QUESTION 26
......