HPE6-A73 Online Training

1. A network engineer is having a problem adding a custom-written script to an AOS-CX switch’s NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches.

The engineer examines the following items from the CLI of the switch:





What should the engineer perform to fix this issue?

2. A network has two AOS-CX switches connected to two different service providers. The administrator is concerned about bandwidth consumption on the service provider links and learned that the service providers were using the company as a transit AS.

Which feature should the administrator implement to prevent this situation?

3. Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:

Switch# show port-access role clearpass

Role information:

Name: icxarubadur_employee-3044-2

Type: clearpass

Status: failed, parsing_failed

Reauthentication Period:

Authentication Mode:

Session Timeout:

The downloadable user roles are not being downloaded to the AOS-CX switch.

Based on the above output, what is the problem?

4. Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

5. What must a network administrator implement in order to run an NAE script on an AOS-CX switch?

6. A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code.

The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.

Which solution should the company implement?

7. Examine the AOS-CX configuration:





The switches have a default factory password setting NetEdit fails to access the configuration of the AOS-CX switches.

What should the administrator do to solve this problem?

8. What is the correct way of associating a VRF instance to either a VLAN or an interface?

9. A company has a few servers in a secure, remote location storing highly-confidential documents connected to two AOS-CX 6400 switches configured in a VSX pair The AOS-CX switches perform access control with 802 1X and will be implementing user-based tunneling (UBT) so that Aruba gateway application inspection and stateful firewall policies can be applied to the traffic. The gateways are running version 84 and implement the AP, PEF, and RFP licenses

Which licensing is needed for the two AOS-CX switches?

10. When cutting and pasting configurations into NetEdit, which character is used to enter commands within the context of the previous command?

11. An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities. The campus involves a core, as well as multiple access layers.

Which feature should the administrator implement to allow both VSX-capable core switches to process traffic sent to the default gateway in the campus VLANs?

12. What is a best practice concerning voice traffic and dynamic segmentation on AOS-CX switches?

13. What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility Controllers (MCs)?

14. A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches. The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes.

Which solution should the administrator implement?

15. Examine the attached exhibit.





The network administrators is trying to add a remote location as area 3 to the network shown in the diagram.

Based on current connection restrictions, the administrator cannot connect area 3 directly to area 0. The network is using AOS-CX switches.

Which feature should the administrator implement to provide connectivity to the remote location?

16. A network engineer is setting up BGP on AOS-CX switches. The engineer is establishing two different eBGP peering’s to two different service providers. The engineer has dozens of contiguous C-class public networks that need to be advertised to the two service providers. The engineer manually defines the networks to be advertised individually with the "network" command.

How can an administrator advertise only a summarized route to the two service providers?

17. A network administrator is implementing a configuration plan in NetEdit. The administrator used NetEdit to push the configuration plan to the switch.

Which option in the NetEdit planning section should the administrator select to save the configuration running on the switch to the startup-config?

18. When implementing deficit weighted round robin queuing, what importance does the weight value have?

19. Examine the network exhibit.





A network administrator is implementing OSPF on a VSX pair of aggregation switches: Agg1 and Agg2. VLANs 10 and 20 are connected to layer-2 access switches. Agg-1 and Agg-2 are configured as the default gateway for VLANs 10 and 20, with active gateway enabled.

What is the best practice for configuring OSPF on the aggregation switches and their connection to the Core switch?

20. Examine the commands entered on an AOS-CX switch:

What is true regarding this configuration for traffic received on interface 100?

21. Which concept is implemented using Aruba’s dynamic segmentation?

22. What would prevent two OSPF routers from forming an adjacency? (Select two.)

23. Which protocols are used by NetEdit to interact with third-party devices? (Choose two.)

24. A customer has twenty AOS-CX switches that will be managed by NetEdit and would like support for NetEdit these switches will exist in the network for at least five years.

Which type of licensing should be used by this customer?

25. In AOS-CX switching, what determines when a frame is forwarded by the switch between the ingress and the egress port?

26. How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

27. Examine the attached diagram.





The two PCs are located in VLAN 11 (10.1.11.0/24).

Which example defines how to implement active gateway on the VSX core for VLAN 11?

28. A network administrator is implementing OSPF, where there are two exit points. Each exit point has a stateful, application inspection firewall to implement company policies.

What would the best practice be to ensure that one firewall will see both directions of the traffic, preventing asynchronous connections in the network?

29. When an AOS-CX switch uses a temporary copy of the Configuration State database, what kind of analysis does NetEdit perform to ensure that the configuration is correct?

30. An administrator will be deploying NetEdit to manage an Aruba solution.

What does NetEdit support?

31. An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

32. A network administrator is tasked to set up BGP in the company's network. The administrator is defining an eBGP peering between an AOS-CX switch and a directly-connected service provider.

The administrator has configured the following on the AOS-CX switch:





However, when using the "show bgp all summary" command, the state does not display "Established" for the eBGP peer.

What must the administrator configure to fix this issue?

33. An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.

What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?

34. Examine the AOS-CS switch output:





Based on this output, what is correct?

35. A switch will apply a device profile to a port based on which pieces of information? (Select two.)

36. A company is implementing AOS-CX switches at the access layer. The company wants to implement access control for employees and guests.

Which security features will require a ClearPass server to be installed and used by the company?

37. What is correct regarding policy-based routing?

38. An administrator is managing a network comprised of AOS-CX switches deployed at the aggregation layer. The switches are paired in a VSX stack and run the OSPF routing protocol. The administrator is concerned about how long it takes for OSPF to converge when one of the VSX switches has to reboot.

What should the administrator to do speed up the OSPF convergence of the switch that is rebooting?

39. An administrator of a company has concerns about upgrading the access layer switches. The users rely heavily on wireless and VoIP telephony.

Which is the best recommendation to ensure a short downtime for the users during upgrading the access layer switches?

40. An administrator wants to implement a virtual switching technology that implements a single control-plane solution.

Which S-CX switches would meet these criteria?

41. Which statement is correct regarding ACLs and TCAM usage?

42. What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

43. A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches. The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes.

Which solution should the administrator implement?

44. A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass

servers are used to implement AAA. Each switch has the two servers defined. A network engineer notices the following command configured on the AOS-CX switches:

radius-server tracking user-name monitor password plaintext aruba123

What is the purpose of this configuration?

45. A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code.

The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.

Which solution should the company implement?

46. A network engineer is having a problem adding a custom-written script to an AOS-CX switch’s NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches.

The engineer examines the following items from the CLI of the switch:





What should the engineer perform to fix this issue?

47. Which option correctly defines how to identify a VLAN as a voice VLAN on an AOS-CX switch?

48. An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities. The campus involves a core, as well as multiple access layers.

Which feature should the administrator implement to allow both VSX-capable core switches to process traffic sent to the default gateway in the campus VLANs?

49. What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility

Controllers (MCs)?

50. An administrator is implementing a multicast solution in a multi-VLAN network.

Which statement is true about the configuration of the switches in the network?

51. How is voice traffic prioritized correctly on AOS-CX switches?

52. An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

53. Examine the network exhibit.





A company has a guest implementation for wireless and wired access. Wireless access is implemented

through a third-party vendor. The company is concerned about wired guest traffic traversing the same network as the employee traffic. The network administrator has established a GRE tunnel between AOS-CX switches where guests are connected to a routing switch in the DMZ.

Which feature should the administrator implement to ensure that the guest traffic is tunneled to the DMZ while the employee traffic is forwarded using OSPF?

54. An administrator has an AOS-CX switch configured with:

router ospf 1

area 0

area 1 stub no-summary

It is the only ABR for area 1. The switch has the appropriate adjacencies to routing switches in areas 0 and 1.

The current routes in each area are:

Area 0: 5 routes (LSA Type 1 and 2)

Area 1: 10 routes (LSA Type 1 and 2)

External routes: 2 (LSA Type 5)

Based on the above configuration, how many OSPF routes will routing switches see in Area 1?

55. A network administrator is managing a network that deploys a multicast service. The administrator has

multiple streams successfully being routed by PIM-DM in the network. The administrator then adds a new stream with a destination address of 239.0.0.1. However, clients who have not joined the stream are receiving it.

What should the administrator do to fix this problem?

56. Which protocols are used by NetEdit to interact with third-party devices? (Choose two.)

57. An administrator is implementing a downloadable user role solution involving AOS-CX switches. The AAA solution and the AOS-CX switches can successfully authenticate users; however, the role information fails to download to the switches.

What policy should be added to an intermediate firewall to allow the downloadable role function to succeed?

58. A network administrator is attempting to troubleshoot a connectivity issue between a group of users and a particular server. The administrator needs to examine the packets over a period of time from their desktop; however, the administrator is not directly connected to the AOS-CX switch involved with the traffic flow.

What is correct regarding the ERSPAN session that needs to be established on an AOS-CX switch? (Choose two.)

59. What is correct regarding the operation of VSX and multicasting with PIM-SM routing configured?

60. An administrator wants to track what configuration changes were made on a switch.

What should the administrator implement to see the configuration changes on an AOS-CX switch?

61. Examine the AOS-CS switch output:





Based on this output, what is correct?

62. An administrator in a company of 349 users has a pair of AOS-CX switches with connections to external networks. Both switches are configured for OSPF. The administrator wants to import external routes on both switches, but assigns different seed metrics to the routes, as well as imports them as external type-1 routes.

What is the best way for the administrator to accomplish this?

63. An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling.

How should the administrator protect this traffic?

64. A network administrator is implementing a configuration plan in NetEdit. The administrator used NetEdit to push the configuration plan to the switch.

Which option in the NetEdit planning section should the administrator select to save the configuration running on the switch to the startup-config?

65. Examine the network exhibit:





The ACL configuration defined on Core-1 is as follows:

If telnet was being used, which device connection would be permitted and functional in both directions?

(Choose two.)

66. An administrator has an aggregation layer of 8325CX switches configured as a VSX pair. The administrator is concerned that when OSPF network changes occur, the aggregation switches will respond to the changes slowly, and this will affect network connectivity, especially VoIP calls, in the connected access layer switches.

What should the administrator do on the aggregation layer switches to alleviate this issue?

67. How is NetEdit installed at a customer location?

68. What is correct regarding multicasting and AOS-CX switches?

69. A company has recently upgraded their campus switching infrastructure with AOS-CX switches. They have implemented 802.1X authentication on access ports where laptop and IOT devices typically connect. An administrator has noticed that for POE devices, the AOS-CX switch ports are delivering the maximum wattage to the port instead of what the device actually needs.

Concerned about this waste of electricity, what should the administrator implement to solve this problem?

70. A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal.

Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

71. Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving

downloadable user roles:

Switch# show port-access role clearpass

Role information:

Name: icxarubadur_employee-3044-2

Type: clearpass

Status: failed, parsing_failed

Reauthentication Period:

Authentication Mode:

Session Timeout:

The downloadable user roles are not being downloaded to the AOS-CX switch.

Based on the above output, what is the problem?

72. Examine the attached diagram.





The two PCs are located in VLAN 11 (10.1.11.0/24).

Which example defines how to implement active gateway on the VSX core for VLAN 11?

73. An administrator has configured the following on an AOS-CX switch:





What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

74. A network administrator wants to centralize the management of AOS-CX switches by implementing NetEdit.

How should the administrator purchase and/or install the NetEdit solution?

75. A network engineer is using NetEdit to manage AOS-CX switches. The engineer notices that a lot of thirdparty VoIP phones are showing up in the NetEdit topology. The engineer deletes these, but they are

automatically rediscovered by NetEdit and added back in.

What should the administrator do to solve this problem?

76. Examine the following AOS-CX configuration:





Based on this configuration, which statement is correct regarding IoT traffic?

77. Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

78. Examine the following AOS-CX switch configuration:





Which statement correctly describes what is allowed for traffic entering interface 1/1/3?

79. An administrator creates an ACL rule with both the “count” and “log” option enabled.

What is correct about the

action taken by an AOS-CX switch when there is a match on this rule?

80. An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and

secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.

What would cause this problem?

81. When implementing user-based tunneling on an AOS-CX switch, which component defines the primary and backup Aruba gateways?

82. A network engineer is having a problem adding a custom-written script to an AOS-CX switch’s NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches.

The engineer examines the following items from the CLI of the switch:





What should the engineer perform to fix this issue?

83. The AOS-CX mobile app allows a network engineer or technician to perform which tasks? (Choose two.)

84. An administrator wants to track what configuration changes were made on a switch .

What should the administrator implement to see the configuration changes on an AOS-CX switch?

85. An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

86. Examine the network exhibit.





A network administrator is implementing OSPF on a VSX pair of aggregation switches: Agg1 and Agg2. VLANs 10 and 20 are connected to layer-2 access switches. Agg-1 and Agg-2 are configured as the default gateway for VLANs 10 and 20, with active gateway enabled.

What is the best practice for configuring OSPF on the aggregation switches and their connection to the Core switch?

87. An administrator creates an ACL rule with both the “count” and “log” option enabled .

What is correct about the

action taken by an AOS-CX switch when there is a match on this rule?

88. Which protocol should be configured to allow NetEdit to discover third-party devices?

89. An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and

secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.

What would cause this problem?

90. What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility

Controllers (MCs)?

91. Examine the commands entered on an AOS-CX switch:

What is true regarding this configuration for traffic received on interface 100?

92. Which option correctly defines how to identify a VLAN as a voice VLAN on an AOS-CX switch?

93. An administrator is looking for a data center switching solution that will greatly reduce the likelihood of dropped frames when uplink congestion is experienced .

Which AOS-CX switch queuing feature meets the administrator’s needs?

94. Examine the attached exhibit.





The network administrators is trying to add a remote location as area 3 to the network shown in the diagram.

Based on current connection restrictions, the administrator cannot connect area 3 directly to area 0. The network is using AOS-CX switches.

Which feature should the administrator implement to provide connectivity to the remote location?

95. In AOS-CX switching, what determines when a frame is forwarded by the switch between the ingress and the egress port?

96. How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

97. Which AOS-CX feature is used to prevent head-on-line (HOL) blocking?

98. Examine the following AOS-CX switch configuration:





Which access control entries would allow web traffic to the web servers 10.1.0.100 and 10.1.1.100?

99. A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AAA. Each switch has the two servers defined.

A network engineer notices the following command configured on the AOS-CX switches:

radius-server tracking user-name monitor password plaintext aruba123

What is the purpose of this configuration?

100. What is correct regarding the configuration of ACLs on AOS-CX switches?

101. A network administrator wants to centralize the management of AOS-CX switches by implementing NetEdit.

How should the administrator purchase and/or install the NetEdit solution?

102. An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.

What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?

103. What is correct regarding multicasting and AOS-CX switches?

104. What must a network administrator implement in order to run an NAE script on an AOS-CX switch?

105. An administrator is managing a network comprised of AOS-CX switches deployed at the aggregation layer. The switches are paired in a VSX stack and run the OSPF routing protocol. The administrator is concerned about how long it takes for OSPF to converge when one of the VSX switches has to reboot.

What should the administrator to do speed up the OSPF convergence of the switch that is rebooting?

106. An administrator implements interim accounting for guest users so that ClearPass can track the amount of bandwidth that guests upload and download. Guests that abuse bandwidth consumption should be disconnected from the network.

The administrator configures the following on the AOS-CX access switches:





After performing this configuration, the administrator notices that guest users that have exceeded the guest bandwidth limit are not being disconnected. Upon further investigation, Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.

What is causing this issue?

107. A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS-CX switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.

What is correct about how the company should implement a security solution where the wired traffic is processed by the MCs?

108. Examine the VSX-related configuration of the core layer AOS-CX switch:





A network administrator is troubleshooting a connectivity issue involving the VSX LAG (link aggregation) between the core and access layer switch, during HW replacement of one of the core switches.

Which configuration should the administrator add to the core switch to fix this issue?

109. An administrator wants to implement dynamic segmentation policies. The network consists of AOS-CX and Aruba gateways.

Which type of forwarding should the administrator implement for users that already connect via wireless, but will also be connecting on Ethernet switch ports?

110. Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

111. How js voice traffic prioritized correctly on AOS-CX switches'?

112. Examine the configuration performed on newly deployed AOS-CX switches;





After performing this configuration the administrator notices that the switch ports always remain in the EAP-start state.

What should the administrator do to fix this problem?

113. A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer verifies that the AOS-CX switch is configured for NTP and is successfully synchronized.

What should be done to fix this issue?

114. Examine the following AOS-CX switch configuration:





Which statement correctly describes what is allowed for traffic entering interface 1/1/3?

115. An administrator in a company of 348 users has a pair of AOS-CX switches with connections to external networks Both switches are configured for OSPF. The administrator wants to import external routes on both switches, but assigns different seed metrics to the routes, as well as imports them as external type-1 routes.

What is the best way for the administrator to accomplish this?

116. An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities

The campus involves a core as well as multiple access layers.

Which feature should the administrator implement to allow

both VSX’Capable core switches to process traffic sent to the default gateway in the campus VLANs?

117. An administrator has configured the following on an AOS-CX switch:





What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

118. An administrator wants to track what configuration changes were made on a switch What should the administrator implement to see the configuration changes on an AOS-CX switch?

119. How does PIM build the IP multicast routing table to route traffic between a multicast source and one or more receivers9

120. What is correct regarding rate limiting and egress queue shaping on AOS-CX switches'?

121. Refer to the exhibit.





The ACL configuration defined on Core-1 is as follows:





if telnet was being used which device connection would he permitted and functional in both directions? (Select two }

122. How is NetEdit installed at a customer location?

123. A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches. The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes

Which solution should the administrator implement?

124. An administrator has an aggregation layer of 8325CX switches configured as a VSX pair. The administrator is concernedthat when OSPF network changes occur, the aggregation switches will respond to the changes slowly, and this will affectnetwork connectivity especially VoIP calls, in the connected access layer switches.

What should the administrator do on the aggregation layer switches to alleviate this issue?

125. An AOS-CX switch is configured to implement downloadable user roles Examine the AOS-CX switch output:

Access11config i$ show aaa authentication port-access interface ail client-status

Port Access Client Status Details





Based on this output what is the state of the users access'?

126. An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as pnmary and secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.

What would cause this problem?

127. A network administrator is managing a network that deploys a multicast service. The administrator has multiple streamssuccessfully being routed by PIM-DM in the network. The administrator then adds a new stream with a destination addressof 239.0.0 1. However clients who have not joined the stream are receiving it.

What should the administrator do to fix this problem?

128. A network administrator is attempting to troubleshoot a connectivity issue between a group of users and a particular server. The administrator needs to examine the packets over a period of time from their desktop, however, the administrator is not directly connected to the AOS-CX switchinvolved with the traffic flow.

What is correct regarding the ERSPAN session that needs to be established on an AOS-CX switch? (Select two)

129. Which statement is correct regarding ACLs and TCAM usage?

130. A company has implemented 802 1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AAA Each switch has the two servers defined A network engineer notices the following command configured on the AOS'CX switches:

radius-server tracking user-name monitor password plaintext arubal23

What is the purpose of this configuration?