Tested Material Used To HPE6-A79 Test Engine Exam Questions in here [Sep-2021]
Penetration testers simulate HPE6-A79 exam PDF
NEW QUESTION 25
Refer to the exhibit:
A company acquires ten barcode scanners to run inventory tasks. These WiFi devices support WPA2-PSK security only. The network administrator deploys a WLAN named scanners using the configuration shown in the exhibit.
What must the network administrator do next to ensure that the scanner devices successfully connect to their SSID?
- A. Enable L2 Authentication Fail Through.
- B. Add scanner MAC addresses in user derivation rules.
- C. Set internal as the MAC authentication server group.
- D. Add scanner MAC addresses in the internal database.
Answer: D
NEW QUESTION 26
Refer to the exhibit.
A network administrator has recently enabled WMM on the VAP's SSID profile and enabled UCC Skype4B ALG at the Mobility Master level. During testing, some voice and video conference calls were made, and it was concluded that the call quality has dramatically improved. However, end to end information isn't displayed in the call's details. Also, Skype4B app-sharing's performance is poor at times.
What must the administrator do next in order to enable end to end call visibility and QoS correction to app-sharing service?
- A. Increase the app-sharing DSCP value in the Skype4B ALG profile.
- B. Enable the App-sharing ALG profile at both MM and MD hierarchy levels.
- C. Deploy the SDN API Software in the Skype4B Solution and point to the MM.
- D. Enable UCC monitoring on the "default-controller' mgmt.-server profile.
Answer: B
NEW QUESTION 27
Refer to the exhibit.
Based on the output shown in the exhibit, with which Aruba devices has Access-1 established tunnels?
- A. a pair of standalone MCs
- B. a pair of MCs within a L3 cluster
- C. a single standalone MC
- D. a pair of switches running VXLAN
Answer: B
NEW QUESTION 28
A network administrator wants to receive a major alarm every time a controller or an Aruba switch goes down for either a local or an upstream device failure. Which alarm definition must the network administrator create to accomplish this?
Answer:
Explanation:
NEW QUESTION 29
Refer to the exhibits.
Exhibit 1
Exhibit 2
Exhibit 3
Exhibit 4
A captive portal-based solution is deployed in a Mobility Master (MM) - Mobility Controller (MC) network. A wireless station connects to the network and attempts the authentication process. The outputs are shown in the exhibits.
Which names correlate with the authentication and captive portal servers?
- A. ClearPass.23 is the authentication server, and cp.mycompany.com is the captive portal server.
- B. Internal database in MC2 is the authentication server, and cp.mycompany.com is the captive portal server.
- C. cp.mycompany.com is the authentication server, and ClearPass.23 is the captive portal server.
- D. ClearPass.23 is the authentication server, and MC2 is the captive portal server.
Answer: A
NEW QUESTION 30
A network administrator has deployed an Airwave Management Platform (AMP) server and integrated it with a Mobility Master (MM) - Mobility Controller (MC) based WLAN. The AMP server already has all Aruba Mobility devices including Access Points (APs) in the "UP" devices list.
What are two actions the administrator can execute upon the APs under "Airwave>Devices>Monitor"? (Choose two.)
- A. Open the WebUI of the MC where the AP terminates.
- B. Disable and change the mode of the AP's radios.
- C. Re-provision the Access Point.
- D. Run Spectrum Analysis locally.
- E. Invoke MC's show commands for that Access Point.
Answer: D,E
NEW QUESTION 31
A fully functional WLAN is deployed in a campus network using the following script.
Which part of the script can a network administrator re-use to assign a different default role to users when they connect to the same SSID in a second building?
- A. server group, aaa profile, and ssid profile
- B. server group and VAP profile
- C. server group and ssid profile
- D. server group and VAP
Answer: C
NEW QUESTION 32
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator adds a new Mobility Controller (MC) to the production Mobility Master (MM) and deploys APs that start broadcasting the employee SSID in the West wing of the building. Suddenly, the employees report client disconnects. When accessing the MM the network administrator notices that the MC is unreachable, then proceeds to access the MC's console and obtains the outputs shown in the exhibits.
What should the network administrator do next to solve the current problem?
- A. Open a TAC case and send the output of tar crash.
- B. Verify the license pools in the MM.
- C. Kill two zombie processes then reboot the MC.
- D. Decommission the MC from the MM, and add it again.
Answer: B
NEW QUESTION 33
Refer to the exhibit
A network administrator deploys a standalone Mobility Controller (MC) and configures some VAPs within the CAMPUS AP group. The network administrator realizes that none of the VAPs are being broadcasted.
Based on the output shown in the exhibit, what should the network administrator do to solve this problem?
- A. Install MM licenses and install MC-VA licenses, then install RFP licenses.
- B. Install MM licenses, then install PEF licenses and enable the PEF feature.
- C. Install MC-VA licenses, then reprovision the APs.
- D. Install MC-VA licenses, then install PEF licenses and enabled the PEF feature.
Answer: A
NEW QUESTION 34
Users run encrypted Skype for Business traffic with no WMM support over an Aruba Mobility Master (MM) - Mobility Controller (MC) based network. When voice, video, and application sharing traffic arrive at the wired side of the network, all the flows look alike due to the lack of L2 and L3 markings How can the network administrator identify these flows and mark QoS accordingly?
- A. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable the Skype4Business ALG in the UCC profiles.
- B. Confirm the MM is the Openflow controller of the MCs and Openflow is enabled in VAP and the firewall roles. Then integrate the MM with the Skype4Business SDN API. and enable the Skype4Business ALG in the UCC profiles.
- C. Use a media firewall policy that match these three flows, and use permit and TOS actions with 56, 40, and 34 values for voice, video, and application sharing, respectively Then enable the Skype4Business ALG in the UCC profiles.
- D. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable WMM in a VAP profile.
Answer: B
NEW QUESTION 35
Refer to the exhibit.
A network administrator has Mobility Master (MM) - Mobility Controller (MC) based network and has fully integrated the MCs with ClearPass for RADIUS-based AAA services. The administrator is testing different ways to run user role derivation.
Based on the show command output, what method has the administrator use for assigning the "corp" role to client with MAC xx:xx:xx:xx:xx:xx?
- A. Dynamic Authorization using IETF attributes.
- B. Server Derivation Rules using IETF attributes.
- C. User Derivation Rules using the client's MAC.
- D. Dynamic Authorization using VSA attributes.
Answer: D
NEW QUESTION 36
An organization has several RAPs at different locations that broadcast two SSIDs. The internet-only SSID is in bridge/always mode, and the corporate SSID is in split-tunneling/standard mode. The network administrator deploys 10 more RAPs in different locations.
Users can successfully connect to the corporate SSID that is propagated by a RAP at a remote location. However, they report that it takes too long to access public internet web sites.
What is one part of the configuration that should be checked by the network administrator to verify this RAP deployment?
- A. User roles policies
- B. IP pool
- C. Operating mode
- D. Assigned VLAN
Answer: A
NEW QUESTION 37
An organization wants to deploy a WLAN infrastructure that provides connectivity to these client categories:
* Employees
* Contractors
* Guest users
* Corporate IoT legacy devices that support no authentication or encryption Employees and contractors must authenticate with company credentials and get network access based on AD group membership. Guest users are required to authenticate with captive portal using predefined credentials. Only employees will run L2 encryption.
Which implementation plan fulfills the requirements while maximizing the channel usage?
- A. Create VAP1 to run WPA2-AES and 802.1x authentication, and VAP2 to run opensystem encryption with MAC authentication and captive portal.
- B. Create a single VAPto run WPA2-AES and 802.1x authentication. MAC authentication L2 fail through, captive portal, and VIA support.
- C. Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal and L2 fail through.
- D. Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal.
Answer: A
NEW QUESTION 38
Refer to the exhibit.
A network administrator has a Mobility Master (MM) Mobility Controller (MC) architecture along with the MC in the DMZ for terminating RAPs. The network firewall has been provisioned to allow access to the MC in the DMZ for both UDP 500 and 4500. Then he proceeds to provision an AP as shown in the exhibit.
Which additional configuration steps must the administrator to assure RAPs successfully contact the MC? (Choose two.)
- A. Create the RAP1 account in the InternalDB of the MM.
- B. Create an IP local pool and PSK at the device node level.
- C. Create the RAP1 account in the InternalDB of the MC.
- D. Create an IP local pool and PSK at the /mm/mynode level.
- E. Add the RAP1 entry in the CPsec whitelist at the MM level.
Answer: D,E
NEW QUESTION 39
Refer to the exhibit.
An Aruba network is deployed with L2 and L3 Mobility Master (MM) redundancy across two datacenters, as shown in the exhibit. The network administrator confirms that all Mobility Controllers (MC) are currently communicating with MM1, which is the L2 Active and, L3 Primary.
Which MM IP will MCs communicate with if MM1 fails?
- A. 10.1.1.12
- B. 10.2.1.21
- C. 10.1.1.10
- D. 10.2.1.10
Answer: D
NEW QUESTION 40
A software development company has 764 employees who work from home. The company also has small offices located in different cities throughout the world. During working hours, they use RAPs to connect to a datacenter to upload software code as well as interact with databases.
In the past two month, cabling issues have occurred connection to the 7240XM Mobility Controller (MC) that runs ArubaOS 8 and terminates the RAPs. These RAPs disconnect, affecting the users connected to the RAPs. This also causes problems with code uploads and database synchronizations. Therefore, the company decides to add a second 7240XM controller for redundancy.
How should the network administrator deploy both controllers in order to provide the redundancy while preventing failover events from disconnecting users?
- A. Connect both controllers with common VLANs. and create an HA fast failover group with public addresses in the internet VLAN.
- B. Connect both controllers with common VLANs. and configure LMS/BLMS values equal to public addresses in the internet VLAN.
- C. Connect both controllers with different VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
- D. Connect both controllers with common VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
Answer: A
NEW QUESTION 41
An organization owns a fully functional multi-controller Aruba network with a Virtual Mobility Master (VMM) in VLAN20. They have asked a network consultant to deploy a redundant MM on a different server. The solution must offer the lowest convergence time and require no human interaction in case of failure.
The servers host other virtual machines and are connected to different switches that implement ACLs to protect them. The organization grants the network consultant access to the servers only, and appoints a network administrator to assist with the deployment.
What must the network administrator do so the network consultant can successfully deploy the solution? (Choose two.)
- A. Allocate VLAN20 to the second server, and extend it throughout the switches, then reserve one IP address for the second MM and another IP address for its gateway.
- B. Allocate VLAN20 to the second server, and extend it throughout the switches, then reserve one IP address for the second MM and another for the VIP.
- C. Allocate VLAN20 to the second server, and permit routing between them, then reserve one IP address for the second MM and another IP address for its gateway.
- D. Configure an ACL entry that permits UDP 500, TCP 4500, and multicast IP 224.0.0.5.
- E. Configure an ACL entry that permits IP protocol 50, UDP port 500, and multicast IP 224.0.0.18.
Answer: A,D
NEW QUESTION 42
Refer to the exhibit.
A network administrator deploys a new Mobility Master (MM) - Mobility Controller (MC) network. To test the solution, the network administrator accesses the console of a pair of APs and statically provisions them. However, one of the APs does not propagate the configured SSIDs. The network administrator looks at the logs and sees the output shown in the exhibit.
Which actions must the network administrator take to solve the problem?
- A. Re-provision one of the APs with a different name or modify the name in the whitelist.
- B. Re-provision the AP with a different group, and modify the name of one AP in the whitelist.
- C. Re-provision one of the APs with a different name, and add new entries with the proper group in the whitelist.
- D. Create another AP group in the MC's configuration, and re-provision one AP with a different group.
Answer: A
NEW QUESTION 43
A network administrator is in charge of a Mobility Master (MM) - Mobility Controller (MC) based network security. Recently the Air Monitors detected a Rogue AP in the network and the administrator wants to enable "Tarpit" based wireless containment.
What profile must the administrator enable "tarpit" wireless containment on?
- A. IDS General profile
- B. IDS Unauthorized device profile
- C. IDS DOS profile
- D. IDS profile
Answer: B
NEW QUESTION 44
......
Authentic Best resources for HPE6-A79 Online Practice Exam: https://www.dumpstillvalid.com/HPE6-A79-prep4sure-review.html
