Exam4Training

HP HPE6-A40 Aruba Certified Mobility Expert 6.4 Online Training

Question #1

Refer to the exhibit.

A network engineer reviews the HA redundancy configuration of the Master and Local controllers shown in the exhibit. The engineer notices HA preemption is not enabled.

Which statement are correct? (Choose two.)

  • A . The RAPs in the ap-group of Cluster-A can failover to 10.10.1.2 and will start to failback to 10.10.1.1 after 10.10.1.1 is up for 30 seconds.
  • B . The CPAs in the ap group of Cluster-A can failover to 10.10.1.2 and will start to failback to 10.10.1.1 after 10.10.1.1 is up for 30 seconds.
  • C . The RAPs in the ap-group of Cluster-A can failover to 10.10.1.3 and will start to failback to 10.10.1.1 after 10.10.1.1 is up for 30 seconds.
  • D . The CPAs in the ap group of Cluster-A can failover to 10.10.1.2 and will not failback the original controller after 10.10.1.1 is up.

Reveal Solution Hide Solution

Correct Answer: AC
Question #2

Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

A network support engineer tests the DHCP scopes design for a wireless network. The engineer finds that clients connected to the Guest SSID do not get the IP address from the local controllers DHCP. As per the company policy, guests cannot get the IP from the corporate DHCP.

Based on the information shown in the exhibit, what does the engineer need to do to connect this?

  • A . Change the VLAN 1000 subnet mask.
  • B . Change port GE0/0/0 to allow VLAN 1000.
  • C . Change the VLAN 1000 IP address.
  • D . Change the VLAN 1000 name and DHCP pool name so they are the same.

Reveal Solution Hide Solution

Correct Answer: C
Question #3

Refer to the exhibit.

In Aruba architect plans to design a network for a school with a single controller. Wired clients and APs on each floor are mapped to different VLANs. The VLAN mapping is shown in the exhibit. Dot1x authentication is enabled for all the wireless clients, except guests, staff, and student users are mapped to VLAN 200 and 201, respectively. Controller up-link and all other inter switch links are trunk links and allow all necessary VLANs. APs and wired clients are able to get the IP address and other necessary IP parameters. The core switch is doing the inter VLAN routing for the network.

Based on the setup shown in the exhibit, which IP configuration does the controller need? (Choose two.)

  • A . RADIUS source interface
  • B . IP helper address only on virtual interfaces of VLAN 200 and VLAN 201
  • C . Virtual interfaces for all VLAN 101.102.103.200 and 201.
  • D . IP helper address on all virtual interfaces of VLAN 101, 102, 103, 200 and 201.
  • E . Static route to reach the Data Center.

Reveal Solution Hide Solution

Correct Answer: AB
Question #4

Refer to the exhibit.

A network is configured with one master controller, one active local controller, and one standby local controller that use VRRP redundancy. All controllers are in the same center. The customer wants to configure AP termination redundancy in the event of controller failure and have the fastest recovery.

How can the network administrator configure the controller for LMS redundancy to meet the customer’s requirements?

  • A . Use 172.16.100.50 as the LMS-IP for AP Group Building2 and 172.16.100.51 as the Backup LMS IP.
  • B . Use 172.16.100.52 as the LMS-IP for AP Group Building2 and 172.16.100.51 as the Backup LMS IP.
  • C . Use 172.16.100.51 as the Backup LMS IP for AP Group Building2.
  • D . Use 172.16.100.51 as the Backup LMS IP for AP Group Building2.

Reveal Solution Hide Solution

Correct Answer: A
Question #5

An Aruba presales engineer works on a proof of concept (PoC) for a customer. As per the customer requirements, RAPs should be deployed at all home offices of employees who work from home. Only traffic from the RAP incorporate subnets 172.16.10.0/24, 172.168.11.0/24, and 10.254.1.0/8 should reach the controller. The rest of the traffic should be processed by the local resources.

What is the recommended deployment design to meet these requirements?

  • A . Deploy the RAP in split-tunnel mode, and use a firewall policy to forward traffic either locally or to the corporate controller.
  • B . Deploy the RAP in CAP mode, and use a route map to forward traffic either locally or to the corporate controller.
  • C . Deploy the RAP in split-tunnel mode, and use a route map to forward traffic either locally or to the corporate controller.
  • D . Deploy the RAP in split-tunnel mode, and use the split tunnel networks to forward traffic either locally or to the corporate controller.

Reveal Solution Hide Solution

Correct Answer: C
Question #6

Refer to the exhibit.

The ap spectrum local-override command is issued at the controller CLI, as shown in the exhibit.

What happens as a result?

  • A . All APs in the ap-group will be in spectrum mode on the 2.4GHZ and 5GHZ radios.
  • B . All APs in the ap-group will be in spectrum mode on the 5GHZ radio.
  • C . The AP225-1 will be in spectrum mode on the 5GHz radio.
  • D . The AP225-1 will be in spectrum mode on the 2.4GHz radio.

Reveal Solution Hide Solution

Correct Answer: A
Question #7

Refer to the exhibit.

A customer configures three different SSIDs with three different forwarding modes on a Remote AP (RAP­B). Client A1 connects to the Family SSID, which is in bridge-mode. Client A2 connects to the Enterprise 801.1X SSID, which is in split-tunnel mode. Client A3 connects to the Voice PSK SSID, which is in tunnel mode.

In which location is the 802.11 encryption terminated and the traffic decrypted for Clients A1, A2, A3?

  • A . Client A1 traffic is at C; Client A2 is at B; Client A3 is at B.
  • B . Client A1 traffic is at B; Client A2 is at B; Client A3 is at D.
  • C . Client A1 traffic is at B; Client A2 is at D; Client A3 is at D.
  • D . Client A1 traffic is at B; Client A2 is at D; Client A3 is at B.

Reveal Solution Hide Solution

Correct Answer: C
Question #8

A network engineer deploys LMS IP and Backup LMS IP technology in a master-local cluster.

Which processes can occur with this configuration? (Choose two.)

  • A . AP bootstraps to connect to the backup LMS when the primary LMS becomes unavailable.
  • B . AP switches to the backup LMS controller, which does not need to be in same subnet with the primary LMS.
  • C . If the LMS preemption function is not set, the AP fails back to the primary LMS in one minute once the primary LMS becomes available.
  • D . AP reboots to connect to the backup LMS when the primary LMS becomes unavailable.
  • E . AP established two GRE tunnels with the primary LMS and the backup LMS controller at the same time.

Reveal Solution Hide Solution

Correct Answer: AC
Question #9

How is AP redirected to a local controller after the DNS resolution returns the master controller IP address?

  • A . The AP provides the AP name to the controller from the environment variables, and the master controller returns the AP Group. The AP uses the controller-ip attribute that is set in AP Provisioning.
  • B . The master controller provides the AP Group based upon the AP name, and the AP uses the AP Group controller-ip attribute.
  • C . The master controller provides the AP Group to the AP, and the AP uses the LMS-IP from the AP-System profile configured for the AP Group.
  • D . The master controller provides the LMS-IP from the AP Group, and the AP uses the LMS-IP that is set in the AP Provisioning based upon the AP Group.

Reveal Solution Hide Solution

Correct Answer: A
Question #10

Review to the exhibits on the tabs.

Exhibit 1

Exhibit 2

The exhibit shows truncated output from an Aruba controller. An unauthenticated user assigned to the logon role attempts to start n HTTP session to IP address 172.16.43.170.

What happens?

  • A . The user’s traffic is passed to the IP address 172.16.43.170 because of the policy statement user any svc-httpsp dst-nat 8081.
  • B . The user’s traffic is passed to the IP address 172.16.43.170 because of the policy statement: user any svc-http dst-nat 8080.
  • C . The user’s traffic is passed to the IP address 172.16.43.170 because of the policy statement: user any svc-http proxy1 dst-nat 8080.
  • D . The user will not reach the IP address 172.16.43.170 because of the policy statement: user any svc­http dst-nat 8080.

Reveal Solution Hide Solution

Correct Answer: D

Question #11

Refer to the exhibit.

The network shown in the exhibits is configured with an active and standby controller that uses Layer 3 redundancy for AP termination. There are 100 APs provisioned into the AP Group NY1. The active local controller fails and the APs terminate on the standby local controller. Centralized licensing is enabled on the controller cluster with capacity for 100 APs. The WLAN clients are not able to SSID.

What could be the source of the problem?

  • A . The VLAN mapping is not configured on the standby local controller.
  • B . There are not enough licenses on the standby local controller to support the APs
  • C . The IP helper address on the interface VLAN is not configured on the standby local controller.
  • D . The uplink trunk of the standby controller does not permit the user VLANs for the SSID Layer 3 deployment.

Reveal Solution Hide Solution

Correct Answer: A
Question #12

Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

A network engineer needs to deploy a Spectrum Analyzer (SA) and then monitor the 2.4Ghz and 5Ghz spectrum. As per the requirement, the engineer is able to convent some APs into SA temporarily, but when the engineer monitors the spectrum through the controller there are issues.

Based on the information shown in the exhibits, what is the issue?

  • A . The engineer needs to disconnect the g radio in the current configuration and then connect the a radio.
  • B . The engineer needs to put the a radio also in spectrum mode before it can be added.
  • C . The engineer cannot add the a radio in spectrum mode because this mode only supports the g radio.
  • D . The engineer cannot add the a radio due to improper licensing.

Reveal Solution Hide Solution

Correct Answer: D
Question #13

Refer to the exhibit.

Based on the configuration shown in the exhibit, what will happen with the AP?

  • A . AP will terminate on the Backup LMS.
  • B . AP will initially terminate on the Master controller and move to the Backup LMS after 60 seconds.
  • C . AP will terminate on the first controller it discovers.
  • D . AP will not terminate on any controller because LMS IP is not configured.

Reveal Solution Hide Solution

Correct Answer: B
Question #14

Refer to the exhibit.

A network engineer needs a solution that allows employees at the remote office to access the Internet and other local resources, such as printers and storage. Employees should be able to access these resources even if the VPN connectivity between HQ and the Remote Office fails. As per the requirement, RAP should broadcast two SSIDs, CORP and LOCAL. The LOCAL SSID should not be visible to the employees as long as the VPN connectivity between Corporate HQ and the Remote Office is up.

What is the recommended solution to meet the requirements?

  • A . RAP Operation mode of the CORP SSID should be Backup mode.
  • B . RAP Operation mode of the LOCAL SSID should be Always mode.
  • C . RAP Operation mode of the CORP SSID should be Always mode.
  • D . RAP Operation mode of the LOCAL SSID should be Backup mode.

Reveal Solution Hide Solution

Correct Answer: D
Question #15

Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

The exhibits display the output of “show” commands on the Master, local-1, and Local-2 controllers.

Based on the output, what is true about client roaming?

  • A . The client did not roam because the client IP address is not changed.
  • B . Mobile IP is enabled and the client roamed from the Local-1 controller to Local-2 controller.
  • C . Mobile IP is enabled and the client roamed from AP-2 to AP-1.
  • D . Mobile Ip is enabled the client roamed from the Local-2 controller to local-1 controller.

Reveal Solution Hide Solution

Correct Answer: A
Exit mobile version