HPE6-A40 Online Training Archives

Exam4Training HP HPE6-A40 Aruba Certified Mobility Expert 6.4 Online Training are doubtless the best reference materials compared with other Aruba Certified Mobility Expert (ACMX) HPE6-A40 exam related materials. If you still don’t believe it, come on and experience it and then you will know what I was telling you was true. You can visit Exam4Training HP HPE6-A40 exam to download our free demo. There are two versions of Exam4Training HP HPE6-A40 Aruba Certified Mobility Expert 6.4 Online Training. The one is PDF version and another is SOFT version. You can experience it in advance.

Page 1 of 4

1. Refer to the exhibit.

A network engineer reviews the HA redundancy configuration of the Master and Local controllers shown in the exhibit. The engineer notices HA preemption is not enabled.

Which statement are correct? (Choose two.)

The RAPs in the ap-group of Cluster-A can failover to 10.10.1.2 and will start to failback to 10.10.1.1 after 10.10.1.1 is up for 30 seconds.

The CPAs in the ap group of Cluster-A can failover to 10.10.1.2 and will start to failback to 10.10.1.1 after 10.10.1.1 is up for 30 seconds.

The RAPs in the ap-group of Cluster-A can failover to 10.10.1.3 and will start to failback to 10.10.1.1 after 10.10.1.1 is up for 30 seconds.

The CPAs in the ap group of Cluster-A can failover to 10.10.1.2 and will not failback the original controller after 10.10.1.1 is up.

2. Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

A network support engineer tests the DHCP scopes design for a wireless network. The engineer finds that clients connected to the Guest SSID do not get the IP address from the local controllers DHCP. As per the company policy, guests cannot get the IP from the corporate DHCP.

Based on the information shown in the exhibit, what does the engineer need to do to connect this?

Change the VLAN 1000 subnet mask.

Change port GE0/0/0 to allow VLAN 1000.

Change the VLAN 1000 IP address.

Change the VLAN 1000 name and DHCP pool name so they are the same.

3. Refer to the exhibit.

In Aruba architect plans to design a network for a school with a single controller. Wired clients and APs on each floor are mapped to different VLANs. The VLAN mapping is shown in the exhibit. Dot1x authentication is enabled for all the wireless clients, except guests, staff, and student users are mapped to VLAN 200 and 201, respectively. Controller up-link and all other inter switch links are trunk links and allow all necessary VLANs. APs and wired clients are able to get the IP address and other necessary IP parameters. The core switch is doing the inter VLAN routing for the network.

Based on the setup shown in the exhibit, which IP configuration does the controller need? (Choose two.)

RADIUS source interface

IP helper address only on virtual interfaces of VLAN 200 and VLAN 201

Virtual interfaces for all VLAN 101.102.103.200 and 201.

IP helper address on all virtual interfaces of VLAN 101, 102, 103, 200 and 201.

Static route to reach the Data Center.

4. Refer to the exhibit.

A network is configured with one master controller, one active local controller, and one standby local controller that use VRRP redundancy. All controllers are in the same center. The customer wants to configure AP termination redundancy in the event of controller failure and have the fastest recovery.

How can the network administrator configure the controller for LMS redundancy to meet the customer’s requirements?

Use 172.16.100.50 as the LMS-IP for AP Group Building2 and 172.16.100.51 as the Backup LMS I

Use 172.16.100.52 as the LMS-IP for AP Group Building2 and 172.16.100.51 as the Backup LMS I

Use 172.16.100.51 as the Backup LMS IP for AP Group Building2.

5. An Aruba presales engineer works on a proof of concept (PoC) for a customer. As per the customer requirements, RAPs should be deployed at all home offices of employees who work from home. Only traffic from the RAP incorporate subnets 172.16.10.0/24, 172.168.11.0/24, and 10.254.1.0/8 should reach the controller. The rest of the traffic should be processed by the local resources.

What is the recommended deployment design to meet these requirements?

Deploy the RAP in split-tunnel mode, and use a firewall policy to forward traffic either locally or to the corporate controller.

Deploy the RAP in CAP mode, and use a route map to forward traffic either locally or to the corporate controller.

Deploy the RAP in split-tunnel mode, and use a route map to forward traffic either locally or to the corporate controller.

Deploy the RAP in split-tunnel mode, and use the split tunnel networks to forward traffic either locally or to the corporate controller.

6. Refer to the exhibit.

The ap spectrum local-override command is issued at the controller CLI, as shown in the exhibit.

What happens as a result?

All APs in the ap-group will be in spectrum mode on the 2.4GHZ and 5GHZ radios.

All APs in the ap-group will be in spectrum mode on the 5GHZ radio.

The AP225-1 will be in spectrum mode on the 5GHz radio.

The AP225-1 will be in spectrum mode on the 2.4GHz radio.

7. Refer to the exhibit.

A customer configures three different SSIDs with three different forwarding modes on a Remote AP (RAPB). Client A1 connects to the Family SSID, which is in bridge-mode. Client A2 connects to the Enterprise 801.1X SSID, which is in split-tunnel mode. Client A3 connects to the Voice PSK SSID, which is in tunnel mode.

In which location is the 802.11 encryption terminated and the traffic decrypted for Clients A1, A2, A3?

Client A1 traffic is at C; Client A2 is at B; Client A3 is at

Client A1 traffic is at B; Client A2 is at B; Client A3 is at

Client A1 traffic is at B; Client A2 is at D; Client A3 is at

8. A network engineer deploys LMS IP and Backup LMS IP technology in a master-local cluster.

Which processes can occur with this configuration? (Choose two.)

AP bootstraps to connect to the backup LMS when the primary LMS becomes unavailable.

AP switches to the backup LMS controller, which does not need to be in same subnet with the primary LM

If the LMS preemption function is not set, the AP fails back to the primary LMS in one minute once the primary LMS becomes available.

AP reboots to connect to the backup LMS when the primary LMS becomes unavailable.

AP established two GRE tunnels with the primary LMS and the backup LMS controller at the same time.

9. How is AP redirected to a local controller after the DNS resolution returns the master controller IP address?

The AP provides the AP name to the controller from the environment variables, and the master controller returns the AP Group. The AP uses the controller-ip attribute that is set in AP Provisioning.

The master controller provides the AP Group based upon the AP name, and the AP uses the AP Group controller-ip attribute.

The master controller provides the AP Group to the AP, and the AP uses the LMS-IP from the AP-System profile configured for the AP Group.

The master controller provides the LMS-IP from the AP Group, and the AP uses the LMS-IP that is set in the AP Provisioning based upon the AP Group.

10. Review to the exhibits on the tabs.

Exhibit 1

Exhibit 2

The exhibit shows truncated output from an Aruba controller. An unauthenticated user assigned to the logon role attempts to start n HTTP session to IP address 172.16.43.170.

What happens?

The user’s traffic is passed to the IP address 172.16.43.170 because of the policy statement user any svc-httpsp dst-nat 8081.

The user’s traffic is passed to the IP address 172.16.43.170 because of the policy statement: user any svc-http dst-nat 8080.

The user’s traffic is passed to the IP address 172.16.43.170 because of the policy statement: user any svc-http proxy1 dst-nat 8080.

The user will not reach the IP address 172.16.43.170 because of the policy statement: user any svchttp dst-nat 8080.

Page 2 of 4

11. Refer to the exhibit.

The network shown in the exhibits is configured with an active and standby controller that uses Layer 3 redundancy for AP termination. There are 100 APs provisioned into the AP Group NY1. The active local controller fails and the APs terminate on the standby local controller. Centralized licensing is enabled on the controller cluster with capacity for 100 APs. The WLAN clients are not able to SSID.

What could be the source of the problem?

The VLAN mapping is not configured on the standby local controller.

There are not enough licenses on the standby local controller to support the APs

The IP helper address on the interface VLAN is not configured on the standby local controller.

The uplink trunk of the standby controller does not permit the user VLANs for the SSID Layer 3 deployment.

12. Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

A network engineer needs to deploy a Spectrum Analyzer (SA) and then monitor the 2.4Ghz and 5Ghz spectrum. As per the requirement, the engineer is able to convent some APs into SA temporarily, but when the engineer monitors the spectrum through the controller there are issues.

Based on the information shown in the exhibits, what is the issue?

The engineer needs to disconnect the g radio in the current configuration and then connect the a radio.

The engineer needs to put the a radio also in spectrum mode before it can be added.

The engineer cannot add the a radio in spectrum mode because this mode only supports the g radio.

The engineer cannot add the a radio due to improper licensing.

13. Refer to the exhibit.

Based on the configuration shown in the exhibit, what will happen with the AP?

AP will terminate on the Backup LM

AP will initially terminate on the Master controller and move to the Backup LMS after 60 seconds.

AP will terminate on the first controller it discovers.

AP will not terminate on any controller because LMS IP is not configured.

14. Refer to the exhibit.

A network engineer needs a solution that allows employees at the remote office to access the Internet and other local resources, such as printers and storage. Employees should be able to access these resources even if the VPN connectivity between HQ and the Remote Office fails. As per the requirement, RAP should broadcast two SSIDs, CORP and LOCAL. The LOCAL SSID should not be visible to the employees as long as the VPN connectivity between Corporate HQ and the Remote Office is up.

What is the recommended solution to meet the requirements?

RAP Operation mode of the CORP SSID should be Backup mode.

RAP Operation mode of the LOCAL SSID should be Always mode.

RAP Operation mode of the CORP SSID should be Always mode.

RAP Operation mode of the LOCAL SSID should be Backup mode.

15. Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

The exhibits display the output of “show” commands on the Master, local-1, and Local-2 controllers.

Based on the output, what is true about client roaming?

The client did not roam because the client IP address is not changed.

Mobile IP is enabled and the client roamed from the Local-1 controller to Local-2 controller.

Mobile IP is enabled and the client roamed from AP-2 to AP-1.

Mobile Ip is enabled the client roamed from the Local-2 controller to local-1 controller.

16. Refer to the exhibit.

A network engineer adds two new AP 115s to an existing network. The status of the APs is denied in the controllers AP database.

Based on the controller command output shown in the exhibit, what is the cause of the problem?

The APs are unable to reach the primary controller address 10.1.10.101.

The controller does not have enough licenses for the additional two APs.

A standby controller is not configured for the APs.

The subnet 10.1.20.0 needs to be added to the auto cert allowed addresses.

17. Refer to the exhibit.

Which VLAN will be mapped to the user connected to Employee SSID?

VLAN 21 will be mapped due to Hash assignment type.

VLAN assignment will be dynamic due to Hash assignment type.

VLAN 20 will be mapped due to Hash assignment type.

VLAN 30 will be mapped due to Hash assignment type.

18. Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

Exhibit 3

A network engineer configures AP termination with redundancy. The engineer executes the show ap database command on a master controller. The output is shown in the exhibit.

What can the engineer determine from this output?

AP-Groups Local-1 and Local-2 are configured with High Availability: Fast Failover but not LMS and Backup LMS IP, AP-Group ACMX is not configured with HA, LMS, or Backup LMS I

AP-Groups Local-1 and Local-2 are configured with High Availability: Fast Failover, LMS, and Backup LMS IP, AP-Group ACMX is configured with LMS but not Backup LM

AP-Groups Local-1, Local-2, and ACMX are configured with High Availability: Fast Failover, LMS, and Backup LMS IP, Backup LMS of the ACMX group is down.

AP-Groups Local-1 and local-2 are configured with High Availability: Fast Failover, LMS, and Backup LMS IP, AP-group ACMX is configured with only HA not LMS or Backup LMS I

19. Refer to the exhibit.

A network has one master and two local controllers with 200 APs that provide an employee WLAN. The Master controller is configured with two AP groups, North and South. The Local 1 and Local 2 controllers are located in the data center and are configured with VRRP instances. The customer would like to utilize both controllers for active-active local controller redundancy.

How should the network administrator configure the controller VRRP instances in the AP groups for active-active controller redundancy?

200 APs in the North AP group and 100 APs in the South AP group VRRP1 address as LMS-IP for the North AP group VRRP2 address as Backup LMS-IP for the South AP Group

100 APs in the North AP Group and 100 APs in the South AP Group VRRP1 address as LMS-IP for both North and South AP Groups VRRP2 as Backup LMS-IP for both North and South AP Groups

200 APs in the North AP group VRRP1 address as LMS-IP for the North AP Group and Backup LMS-IP for the South AP Group

100 APs in the North Ap group and 100 APs in the South AP Group VRRP1 address as LMS-IP and VRRP2 as Backup-LMS IP for North AP Group VRRP2 address as LMS-IP and VRRP1 as Backup LMS-IP for the South AP group

20. A network engineer plans to deploy RAP. The company requires RAP to have redundancy so that it can failover to another controller if the primary controller fails.

Which RAP configuration should the engineer implement to meet these requirements?

Master Standby

LMS and backup LMS

Master and Local

High availability: Fast Failover

Page 3 of 4

21. Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

A company wants to deploy an Aruba solution with a master controller and a local controller along with 120 APs. The wireless clients in VLANs 55 and 20 are deployed in Layer 2 mode.

The company has these requirements:

- The wireless clients should use the existing wired backbone to access DHCP, DNS, and authentication

servers.

- Controllers should be connected in a backbone switch that is configured to allow all VLANs.

A network engineer designs and deploys the solution to meet the company requirements. During the testing phase, the engineer determines that wireless clients are not able to get the IP address from the DHCP server on the network backbone.

Based on the output shown in the exhibit, what should the engineer do to solve the issue?

Change the management VLAN to VLAN 11.

Allow VLANs 55, 20, and 11 on the trunk link.

Set the native VLAN to VLAN 1.

Allow VLAN 11 on the trunk link.

22. A client device associates to an SSID provisioned with 802.1X authentication. The client is configured for PEAP-MSCHAPv2 authentication. EAP termination (AAA-Fastconnect) is disabled on the controller, but the client continuously cycles through the authentication process.

What could cause this? (Choose two.)

The VLAN is not provisioned for the SSI

The DHCP server is not enabled.

The controller does not support PEAP in this mode.

The client receives an expired or revoked server certificate.

The wrong EAP type is configured on the client.

23. A network has one master controller and two local controllers. The local controllers are located in remote branch offices with a WAN link to the HQ site. The master controller is located at the HQ site. There are 802.1X employee and captive portal guest SSIDs supported on APs in both the branch offices and HQ site.

What must be allowed through a firewall located at the HQ site to ensure master and local controller communication?

PPTP

CPSec

IPSec

GRE

24. An Aruba 7210 Controller AP-125s are added to AirWave. The controller is added in managed mode to the AirWave group named Aruba. After the controller is added, users start to experience problems and cannot connect to the WLAN.

What could be the case of the problem?

The APs lose connectivity to the controller because they are not added to the same AWMS group.

The configuration changes because the controller is not audited before it is placed in the Aruba group.

The APs synchronize with another controller because they are in different groups.

The AirWave server changed the controller configuration based on the group settings.

25. An Aruba 7205 controller functions as a standby master.

How many Campus APs can it control while in standby mode?

128

256

512

26. Refer to the exhibit.

A network engineer configures a guest WLAN for username and password authentication. As per the company requirements, guests should be authenticated through the captive portal and should accept the terms and conditions. The engineer configures the guest WLAN for authentication, but the guest does not see the terms and conditions page.

What is the issue?

The welcome page should be User_policy.html

The Guest Login should be enabled

The Use HTTP for authentication option should be enabled.

The Snow the Acceptable User Policy Page should be enabled.

27. Refer to the exhibit.

Review the command outputs on the Master Controller6 shown in the Exhibits. All controllers in the cluster are Aruba 7220 controllers.

What is the maximum number of APs that can terminate on Controller6?

2 APs

1024 Aps

64 APs

2112 APs

28. A network engineer plans to work on a guest provisioning account. The engineer wants to add the guest email and phone number fields in the account creation form.

How can the engineer add these fields?

Edit the local user database, and add two new fields with the names Email and Mobile.

Edit Guest Provisioning, and add two new fields with the names Email and Mobile fields.

Edit the local user database, and enable the Email and Mobile fields.

29. A network engineer configures guest authentication for a WLAN. The company requires guests to get authenticated through the captive portal. The company’s policy allows guests access to the Internet, but not to video streaming sites such as YouTube.

What else should the engineer do to meet requirements?

Configure the HTTP and HTTPS traffic for NAT in the Authenticated Guest role.

Add*.youtube.com and *.yimg.com to the Walled garden for the Authenticated Guest role.

Deny Web content type video streaming in the network.

Utilize AppRF for the Authenticated Guest role to block video streaming.

30. Refer to the exhibit.

A network administrator troubleshoots a problem with VLAN 63 on a controller. The controller’s output is shown in the exhibit.

What should the network administrator do to bring VLAN 63 up on the controller?

Create VLAN 63 on the controller.

Create Interface VLAN 63 on the controller.

Execute the operate up command under the VLAN 63 Interface to start up the VLAN 63 protocol.

Execute the no shutdown command under the interface VLAN 63.

Page 4 of 4

31. A network engineer issues the aaa test-server pap RADIUS01 test aruba1command on the Aruba controller CLI.

This output displays:

(Controller) #aaa test-server pap RADIUS01 test aruba1

Authentication timeout

What are possible reasons for this output? (Choose three.)

The source IP address for the RADIUS requesting packet does not match the RADIUS client IP configured on the RADIUS server.

The RADIUS client is disabled on the RADIUS server.

The firewall restrict the RADIUS authentication traffic between the controller and the RADIUS server.

The authentication method PAP is not enabled on the RADIUS server.

The authentication method PAP is not enabled in the AAA authentication profile of the Aruba Controller.

32. A user successfully connects to a captive portal enabled WLAN. When the user opens a browser and tries to access a webpage, the user gets redirected as expected to another URL on the Aruba controller.

However, the user sees an error message that web authentication is disabled.

What is a possible cause for this error?

The captive portal profile is not assigned to the AAA profile.

The captive portal is not assigned to the initial role.

A server group is not assigned to the captive portal profile.

An initial role is not assigned to the AAA profile.

33. Refer to the exhibits on the tabs.

Exhibit 1

Exhibit 2

A network engineer troubleshoots an issue related to the network access policy. Employees are able to access the DBMS Server, which is not in compliance with the company policy. The employees should have access only the FTP and TFTP servers.

These are the details for the servers.

FTP server: 10.1.1.100/24

TFTP Server: 10.1.2.100/24

DBMS Server: 10.1.0.3/16

Controllers: 172.16.99.0/24

Controllers: 172.16.100.0/24

The engineer analyzes the employee role.

Based on the exhibit output, what should the network engineer do to solve this issue?

Replace 10.1.0.0 / 16 with host 10.1.0.3 in the netdestinations(Alias) list

Replace 10.1.0.0 / 16 with 10.1.0.0 / 8 in the netdestinations(Alias) list.

Replace 10.1.0.0 / 16 with 10.1.2.100 in the netdestinations(Alias) list.

Delete 10.1.0.0 / 16 from the netdestinations(Alias) list.

34. A controller is provisioned as a Layer 3 device for wireless clients. Wireless clients are not able to receive an IP address when they connect to the WLAN.

What must be configured to enable DHCP requests to an external DHCP server?

IP helper on the controller management VLAN

IP helper address on the user VLAN interface

IP helper address on the controller uplink interface

IP helper address on the upstream switch

35. A network engineer configures for split tunnel mode on an RAP. Where is the routing function for the split tunnel defined?

in the firewall policy

on the RAP’s routing table

in the split tunnel networks configuration

on the IP routing tab in the configuration

36. What are valid Aruba VSAs that can be returned to a controller? (Choose two.)

Aruba-Admin-Policies

Aruba-Roaming-Category

Aruba-User-Vlan

Aruba-User-Role

Aruba-SSID

37. Refer to the exhibit.

A network engineer configures AP termination redundancy as shown in the exhibit.

Which type of redundancy is configured for the AP Groups on the controllers?

High Availability: Fast Failover is enabled for local-1 AP-Group, and LMS-IP and backup LMS-IP is configured for Local-2 AP-Group.

LMS-IP and Backup LMS-IP is configured for Local-1 AP-Group, and High Availability: Fast Failover is enabled Local-2 AP-Group.

LMS-IP and Backup LMS-IP is configured for Local-1 and Local-2 AP-Groups.

High Availability: Fast Failover is enabled for Local-1 and Local-2 AP-Groups.

38. Refer to the exhibit.

The exhibit displays the rule configuration.

A company uses an Aruba wireless network and decides to deploy AirWave to monitor and manage the network. A NOC engineer creates Rogue classification rules. All the APs are classified as Rogues.

Based on the rule configuration shown in the exhibit, which classifying rule causes this unexpected behavior?

The Rogues classifying rule should be valid.

The Rogues classifying rule should have a threat level of 5 or less.

The Signal Strength classifying rule should have a threat level less than 5.

The Default RAPIDS classifying rile should be unclassified.

39. A network engineer troubleshoots a provisioned RAP backup SSID issue that occurs when a user tries to connect to the Internet from a hotel. The engineer lists the connection and sees backup SSID from an AP broadcast. The engineer can connect to it receives an IP address from the RAP’s DHCP pool, but the captive portal of the hotel will not come up. The backup SSID is always there, and the enterprise SSID does not appear.

What is a cause of this?

The RAP does not Source NATs user traffic.

The hotel blocks IKE protocol on the hotel edge firewall.

The hotel blocks UDP port 4500 on the hotel edge firewall.

The RAP is added into the RAP whitelist of the controller.

40. Refer to the exhibit.

To support Guest SSID with tunnel-mode/Layer 3 deployment and Staff SSID with tunnel model/Layer 2 deployment, what must be configured on the trunk link between the router and the Aruba controller to meet the requirements?

VLAN 101

VLANs 101,102, and 103

VLAN 102

VLANs 101 and 102