Great HP Certification HPE6-A73 Exam Guides

dumps2022-01-24T03:33:18+08:00

HP certification HPE6-A73 exam guides are great for you to do the test. There are 60 questions in real HPE6-A73 exam, and HP candidates have 90 minutes to take. The required passing score of Aruba Certified Switching Professional HPE6-A73 exam is 71%. The test languages are Japanese, English and Latin American Spanish. Free HP Certification HPE6-A73 exam guides are available below.

Page 1 of 3

1. When implementing user-based tunneling on an AOS-CX switch, which component defines the primary and backup Aruba gateways?

Transit VLAN

Gateway role

Server group

Zone

2. A network engineer is having a problem adding a custom-written script to an AOS-CX switch’s NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches.

The engineer examines the following items from the CLI of the switch:

What should the engineer perform to fix this issue?

Install the script’s signature before installing the new script

Ensure the engineer’s desktop and the AOS-CX switch are synchronized to the same NTP server

Enable trust settings for the AOS-CX switch’s SSL certificate

Remove a script that is no longer used before installing the new script

3. The AOS-CX mobile app allows a network engineer or technician to perform which tasks? (Choose two.)

Use NetEdit to manage switch configuration.

Create a stack of AOS-CX switches.

Transfer files between the switch and your mobile device.

Securely access the switch using SS

Schedule an operating system upgrade.

4. An administrator wants to track what configuration changes were made on a switch .

What should the administrator implement to see the configuration changes on an AOS-CX switch?

AAA authorization

Network Analysis Engine (NAE)

AAA authentication

VSX synchronization logging

5. An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

802.1X must be configured to work in fallback mode

Device fingerprinting is required for authentication

The client-limit setting for port access needs to be changed

Device mode should be implemented

6. Examine the network exhibit.

A network administrator is implementing OSPF on a VSX pair of aggregation switches: Agg1 and Agg2. VLANs 10 and 20 are connected to layer-2 access switches. Agg-1 and Agg-2 are configured as the default gateway for VLANs 10 and 20, with active gateway enabled.

What is the best practice for configuring OSPF on the aggregation switches and their connection to the Core switch?

Define a layer-2 VSX LAG associated with a layer-3 VLAN interface. Enable active gateway for the Layer-3 VLA

Define separate layer-3 VLAN interfaces between the aggregation and core switches. Enable active forwarding for the Layer-3 VLA

Define separate layer-3 VLAN interfaces between the aggregation and core switches. Enable active gateway for the Layer-3 VLA

Define a layer-2 VSX LAG associated with a layer-3 VLAN interface. Enable active forwarding for the Layer-3 VLA

7. An administrator creates an ACL rule with both the “count” and “log” option enabled .

What is correct about the

action taken by an AOS-CX switch when there is a match on this rule?

By default, a summarized log is created every minute with a count of the number of matches

Logging will not include certificate and TLS events, but counting will

The “count” and “log” options are processed by the AOS-CX switch’s hardware ASIC

The total in the “log” record and the count could contain different rule matching statistics

8. Which protocol should be configured to allow NetEdit to discover third-party devices?

SNMP

SSH

HTTPS

HTTP

9. An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and

secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.

What would cause this problem?

Local optimization was not enabled on the VSX LAG

The VSX LAG hash does not match the remote peer

The VSX LAG interfaces are in layer-3 mode

LACP was enabled in active mode on the VSX LAG

10. What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility

Controllers (MCs)?

Uses IPSec to protect the management and data traffic

Uses IPSec to protect the management traffic

Supports only port-based tunneling

Uses the same management protocol as Aruba APs

Page 2 of 3

11. Examine the commands entered on an AOS-CX switch:

What is true regarding this configuration for traffic received on interface 100?

The default next-hop address supersedes the two preceding next-hop addresses

The traffic is always dropped is the next-hop addresses are unreachable

The traffic will be routed with the IP routing table entries if the next-hop addresses are unreachable

The next-hop address of 1.1.1.1 is overwritten by the next-hop address of 2.2.2.2

12. Which option correctly defines how to identify a VLAN as a voice VLAN on an AOS-CX switch?

Switch(config)# port-access lldp-group <LLDP-group-name> Switch(config-lldp-group)# vlan <VLAN-ID>

Switch(config)# port-access role <role-name> Switch(config-pa-role)# vlan access <VLAN-ID>

Switch(config)# vlan <VLAN-ID> Switch(config-vlan-<VLAN-ID>)# voice

Switch(config)# vlan <VLAN-ID> voice

13. An administrator is looking for a data center switching solution that will greatly reduce the likelihood of dropped frames when uplink congestion is experienced .

Which AOS-CX switch queuing feature meets the administrator’s needs?

FIFO

VOQ

WFQ

DWWR

14. Examine the attached exhibit.

The network administrators is trying to add a remote location as area 3 to the network shown in the diagram.

Based on current connection restrictions, the administrator cannot connect area 3 directly to area 0. The network is using AOS-CX switches.

Which feature should the administrator implement to provide connectivity to the remote location?

Not-so-stubby areas

Bidirectional forward detection (BFD)

OSPFv3

Virtual links

15. In AOS-CX switching, what determines when a frame is forwarded by the switch between the ingress and the egress port?

Egress port

Ingress port

VSX switch tables

Fabric Load Balancer

16. How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

Use the web interface of the NetEdit server

Use the web interface of the AOS-CX switch

Use the web interface of Aruba Central

Use the CLI of the AOS-CX switch

17. Which AOS-CX feature is used to prevent head-on-line (HOL) blocking?

VSF

WFQ

VOQ

VSX

18. Examine the following AOS-CX switch configuration:

Which access control entries would allow web traffic to the web servers 10.1.0.100 and 10.1.1.100?

permit tcp servers eq 80

permit tcp any 10.1.0.100 0.0.1.0 eq 80

permit tcp any 10.1.0.100/10.1.1.100 eq 80

permit tcp any 10.1.0.100/255.255.254.255 eq 80

19. A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AAA. Each switch has the two servers defined.

A network engineer notices the following command configured on the AOS-CX switches:

radius-server tracking user-name monitor password plaintext aruba123

What is the purpose of this configuration?

Implement replay protection for AAA messages

Define the account to implement downloadable user roles

Speed up the AAA authentication process

Define the account to implement change of authorization

20. What is correct regarding the configuration of ACLs on AOS-CX switches?

Statements with the log keyword are always processed by the switch CP

Standard ACLs are used to match on routes when performing route distribution.

Wildcard masks are used to match on a range of IP addresses.

Numbers 100 through 199 and 2000 through 2999 are used when creating extended ACLs.

Page 3 of 3

21. A network administrator wants to centralize the management of AOS-CX switches by implementing NetEdit.

How should the administrator purchase and/or install the NetEdit solution?

Install as a hardware appliance

Installed on a supported version of RedHat Enterprise Linux

Installed in a virtualized solution by using the Aruba-supplied OVA file

Installed on a supported version of Debian Linux

22. An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.

What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?

Disable ICMP redirects

Implement graceful restart

Increase the BFD echo timers

Increase the VSX keepalive timer

23. What is correct regarding multicasting and AOS-CX switches?

IGMP snooping is disabled, by default, on Layer-2 VLAN interfaces

IGMP query functions are enabled, by default, on Layer-2 VLAN interfaces

IGMP snooping is enabled, by default, on Layer-3 VLAN interfaces

IGMP-enabled AOS-CX switches flood unknown multicast destinations

24. What must a network administrator implement in order to run an NAE script on an AOS-CX switch?

Deployment

Schedule

Plan

Agent

25. An administrator is managing a network comprised of AOS-CX switches deployed at the aggregation layer. The switches are paired in a VSX stack and run the OSPF routing protocol. The administrator is concerned about how long it takes for OSPF to converge when one of the VSX switches has to reboot.

What should the administrator to do speed up the OSPF convergence of the switch that is rebooting?

Change the VSXISL link from an OSPF broadcast link point-to-point.

Implement graceful restart on the VSX switches and their neighboring OSPF switches.

Decrease the VSX initial synchronization timer on the two VSX switches.

Define non-backbone areas on the VSX switches as totally stubby areas.

26. An administrator implements interim accounting for guest users so that ClearPass can track the amount of bandwidth that guests upload and download. Guests that abuse bandwidth consumption should be disconnected from the network.

The administrator configures the following on the AOS-CX access switches:

After performing this configuration, the administrator notices that guest users that have exceeded the guest bandwidth limit are not being disconnected. Upon further investigation, Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.

What is causing this issue?

RADIUS change of authorization is not enabled on the AOS-CX switch.

Bandwidth consumption of the guests is not being reported by the AOS-CX switch.

NTP is not configured on the AOS-CX switch.

There is a time discrepancy between the AOS-CX switch and ClearPass.

27. A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS-CX switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.

What is correct about how the company should implement a security solution where the wired traffic is processed by the MCs?

Implement downloadable user roles with a gateway role defined on the AOS-CX switches

Implement local user roles with a gateway role defined on the AOS-CX switches

Implement standards-based RADIUS VSAs to pass policy information directly to the AOS-CX switches and MCs

Implement downloadable user roles with a device role defined on the AOS-CX switches and MCs

28. Examine the VSX-related configuration of the core layer AOS-CX switch:

A network administrator is troubleshooting a connectivity issue involving the VSX LAG (link aggregation) between the core and access layer switch, during HW replacement of one of the core switches.

Which configuration should the administrator add to the core switch to fix this issue?

ICX-Tx-Core1(config)# vsx ICX-Tx-Core1(config-vsx)# system-mac 02:01:00:00:01:00

ICX-Tx-Core1(config)# interface lag 1 multi-chassis ICX-Tx-Core1(config-if-lag-if)# mtu 9198

ICX-Tx-Core1(config)# interface 1/1/46-1/1/47 ICX-Tx-Core1(config-if-vlan)# active-gateway ip 10.1.11.1 mac 02:02:00:00:01:00

ICX-Tx-Core1(config)# interface 1/1/45 ICX-Tx-Core1(config-if-vlan)# active-gateway ip 192.168.0.0 mac 02:02:00:00:01:00

29. An administrator wants to implement dynamic segmentation policies. The network consists of AOS-CX and Aruba gateways.

Which type of forwarding should the administrator implement for users that already connect via wireless, but will also be connecting on Ethernet switch ports?

User-based tunneling (UBT)

Port-based tunneling (PBT)

Switch-to-switch tunneling (SST)

Local switching

30. Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

LLDP

ARP

DHCP

ICMP

Great HP Certification HPE6-A73 Exam Guides

Great HP Certification HPE6-A73 Exam Guides

Share this post

Leave a Reply Cancel reply

Related Posts