無料HP HPE6-A85日本語学習ガイド試験問題と解答
HPE6-A85日本語試験問題集、HPE6-A85日本語練習テスト問題
質問 # 17
IP カメラ AP を展開するときに、スイッチ ポートで PoE 優先順位を動的に設定するにはどうすればよいですか。他の PoE デバイスはどうですか?
- A. デバイス プロビジョニングのプロファイリングを有効にする
- B. PoE 電源管理を動的モードに設定します。
- C. PoE 電源管理をクラスベース モードに設定します。
- D. スイッチ モジュールで Quick PoE を有効にする
正解：A
解説：
Profiling is a feature that allows Aruba switches to automatically identify and classify devices connected to them based on various attributes such as MAC address, DHCP options, LLDP information, etc. Profiling can be used to dynamically set the PoE priority on a switch port based on the device type and power requirements. For example, an IP camera may have a higher PoE priority than a printer or a PC. Profiling can also be used to apply other configuration settings such as VLANs, ACLs, QoS, etc. based on the device profile. Reference: https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-overview/profiling.htm
質問 # 18
TCP 3ウェイ ハンドシェイク シーケンスの正しい順序は何ですか?
正解：
解説：
Explanation:
TCP 3-Way Handshake sequence is:
Step 1: The initiating host sends a packet with no data to the target host with a SEQ=1 and sets the SYN flag to 1.
Step 2: The target host responds with a packet with ACK=2, SEQ=8, and the SYN and ACK flags set to
1.
Step 3: The initiating host sends a packet with SEQ=2, ACK=9, and the ACK flag set to 1.
Step 4: A normal-controlled connection is established.
References:
https://en.wikipedia.org/wiki/Transmission_Control_Protocol
https://www.cisco.com/c/en/us/support/docs/ip/routing-information-protocol-rip/13788-3.html
質問 # 19
ユースケースを適切な認証テクノロジーに合わせてください。
正解：
解説：
Explanation:
Based on the information provided, here are the matches for the use case to the appropriate authentication technology:
ClearPass Policy Manager:
Authenticate users on corporate-owned Chromebook devices using 802.1X and context gathered from the network devices that they log into.
Validate devices exist in a Mobile Device Management (MDM) database before authenticating BYOD users with corporate Active Directory using certificates.
Cloud Authentication and Policy:
Add certificates to Android devices with the Aruba Onboard Application in the Google Play store that will be used for wireless authentication.
Leverage unbound Multi Pre-Shared Keys (MPSK) managed by Aruba Central to the end-users and client devices.
The ClearPass Policy Manager is a comprehensive network access control (NAC) and policy management platform that can authenticate devices using 802.1X, as well as integrate with MDM systems for device validation. The Cloud Authentication and Policy is likely referring to cloud-based services such as Aruba Central, which can manage MPSK and distribute certificates for device authentication.
質問 # 20
ドラッグドロップ
オープンシステム相互接続 (OSI) 層とその機能を一致させます。
正解：
解説：
質問 # 21
データの暗号化および/または復号化に WPA キー階層のどの部分が使用されるか
- A. 1回使用される数値(ノンス)
- B. ペアワイズ一時キー (PTK)
- C. キー確認キー（KCK）
- D. ペアワイズ マスター キー (PMK)
正解：B
解説：
The part of WPA Key Hierarchy that is used to encrypt and/or decrypt data is Pairwise Temporal Key (PTK). PTK is a key that is derived from PMK Pairwise Master Key (PMK) is a key that is derived from PSK Pre-shared Key (PSK) is a key that is shared between two parties before communication begins , ANonce Authenticator Nonce (ANonce) is a random number generated by an authenticator (a device that controls access to network resources, such as an AP) , SNonce Supplicant Nonce (SNonce) is a random number generated by supplicant (a device that wants to access network resources, such as an STA) , AA Authenticator Address (AA) is MAC address of authenticator , SA Supplicant Address (SA) is MAC address of supplicant using Pseudo-Random Function (PRF). PTK consists of four subkeys:
KCK Key Confirmation Key (KCK) is used for message integrity check
KEK Key Encryption Key (KEK) is used for encryption key distribution
TK Temporal Key (TK) is used for data encryption
MIC Message Integrity Code (MIC) key
The subkey that is specifically used for data encryption is TK Temporal Key (TK). TK is also known as Pairwise Transient Key (PTK). TK changes periodically during communication based on time or number of packets transmitted.
The other options are not part of WPA Key Hierarchy because:
PMK: PMK is not part of WPA Key Hierarchy, but rather an input for deriving PTK.
KCK: KCK is part of WPA Key Hierarchy, but it is not used for data encryption, but rather for message integrity check.
Nonce: Nonce is not part of WPA Key Hierarchy, but rather an input for deriving PTK.
質問 # 22
スイッチング テクノロジーを適切な使用例に合わせてください。
正解：
解説：
Explanation
USE CASE: a) Controls the dynamic addition and removal of ports to groups Technology: 3) LACP USE CASE: b) Tags Ethernet frames with an additional VLAN header Technology: 1) 802.1Q USE CASE: c) Used to authenticate EAP-Capable client on a switch port Technology: 2) 802.1X USE CASE: d) Used to identify a voice VLAN to an IP phone Technology: 4) LLDP The following table summarizes the switching technologies and their use cases:
Technology
Use case
1) 802.1Q
802.1Q is a standard that defines how to create and manage virtual LANs (VLANs) on a network. VLANs allow network administrators to logically segment a network into different broadcast domains, improving security, performance, and manageability. 802.1Q tags Ethernet frames with an additional VLAN header that contains a VLAN identifier (VID), which indicates which VLAN the frame belongs to1.
2) 802.1X
802.1X is a standard that defines how to provide port-based network access control (PNAC) on a network.
PNAC allows network administrators to authenticate and authorize devices before granting them access to network resources. 802.1X uses the Extensible Authentication Protocol (EAP) to exchange authentication messages between a supplicant (a device that wants to access the network), an authenticator (a device that controls access to the network, such as a switch), and an authentication server (a device that verifies the credentials of the supplicant, such as a RADIUS server)
3) LACP
LACP stands for Link Aggregation Control Protocol, which is part of the IEEE 802.3ad standard that defines how to bundle multiple physical links into a single logical link, also known as a link aggregation group (LAG) or an EtherChannel. LAGs provide increased bandwidth, load balancing, and redundancy for network connections. LACP controls the dynamic addition and removal of ports to groups, ensuring that only ports with compatible configurations can form a LAG3.
4) LLDP
LLDP stands for Link Layer Discovery Protocol, which is part of the IEEE 802.1AB standard that defines how to discover and advertise information about neighboring devices on a network. LLDP operates at Layer 2 of the OSI model and uses TLVs (type-length-value) to exchange information such as device name, port number, VLAN ID, capabilities, and power requirements. LLDP can be used to identify a voice VLAN to an IP phone by sending a TLV that contains the voice VLAN ID and priority.
References: 1 https://en.wikipedia.org/wiki/IEEE_802.1Q 2 https://en.wikipedia.org/wiki/IEEE_802.1X 3
https://en.wikipedia.org/wiki/Link_aggregation
https://en.wikipedia.org/wiki/Link_Layer_Discovery_Protocol
質問 # 23
ドラッグドロップ
各要件に合わせて、最もコスト効率の高いケーブル配線オプションを選択します。(すべての長さは、パッチ ケーブル、サービス ループなど (使用する場合) を含むケーブルの合計長さを示します。)
正解：
解説：
質問 # 24
Aruba スタンドアロン AP を使用する場合、クライアント VLAN 割り当てに「ネイティブ VLAN」を選択します。クライアント IP はどのサブネットに存在しますか?
- A. モビリティ コントローラーと同じサブネット
- B. Aruba ESP ゲートウェイと同じサブネット
- C. アクセスポイントと同じサブネット
- D. モビリティ コンダクターと同じサブネット
正解：C
解説：
When using an Aruba standalone AP, selecting "Native VLAN" for the Client VLAN Assignment means that the clients will get their IP addresses from the same subnet as the access point's IP address. This is because the access point acts as a DHCP server for the clients in this mode.
References: https://www.arubanetworks.com/techdocs/Instant_86_WebHelp/Content/instant-ug/iap- dhcp/iap-dhc
質問 # 25
別紙を参照してください。
どのサーバーが受信するデータの量が最も少ないでしょうか?
- A. 172.17.17.43
- B. 192.168.0.56
- C. 10.99.26.25
- D. 10.100.100.25
正解：A
解説：
Based on the exhibit showing the logging server configurations, server 172.17.17.43 will receive the smallest quantity of data because it is set to the "Warning" event log level. This means it will only log events that are categorized as warnings or higher severity, which are typically less frequent than lower severity levels such as "Information," "Debug," or "Emergency."
質問 # 26
指定されたトポロジに基づいて、スイッチ 1 ポート 1/1/24 で LLDP メッセージを受信できるようにするための Aruba スイッチの要件は何ですか。
ルータ 1 が LLDP で有効になっているのはいつですか?
- A. グローバル設定 lldp の有効化
- B. LLDPはデフォルトで有効になっています
- C. int 1/1/24、CDPなし
- D. int 1/1/24、lldp 受信
正解：B
解説：
For an Aruba switch to receive LLDP messages on a specific port, LLDP must be enabled on that port.
The default configuration for Aruba switches typically has LLDP enabled on all ports, so in most cases, no additional configuration is required.
This means that if Router 1 is sending LLDP messages, Switch 1 port 1/1/24 should receive them without additional configuration, as long as LLDP has not been disabled on that port. If LLDP were disabled on the switch or on the specific port, you would then need to enable it, which could be similar to option C (with correct Aruba OS syntax), as option B suggests a global configuration command which is not typically how LLDP is enabled on Aruba switches. Option D is related to Cisco Discovery Protocol (CDP), which is not relevant to LLDP operation.
質問 # 27
複数の 20MHz 幅の 802.11 チャネルを結合するのはいつですか?
- A. 高可用性 AP グループをプロビジョニングするため
- B. クライアントと AP 間のスループットを向上させるため
- C. 高利得全方向性アンテナを使用する場合
- D. 信号対雑音比 (SNR) を下げるには
正解：B
解説：
Bonding multiple 20MHz wide 802.11 channels is a technique to create a wider bandwidth channel that supports higher data rate transmissions. It can increase the throughput between the client and AP by using more spectrum resources and reducing interference. Reference: https://ieeexplore.ieee.org/document/9288995 Bonding multiple 20MHz wide 802.11 channels is a technique used to increase the throughput between the client device and the Access Point (AP). By combining two or more 20MHz channels into a wider channel (e.g., 40MHz, 80MHz, or even 160MHz), the data carrying capacity and, consequently, the overall throughput of the wireless connection are increased. This method is particularly useful in high-bandwidth applications or environments where higher data rates are required.
質問 # 28
単一の Aruba CX 6300M スイッチ構成は、L3 接続をどのように使用して、スイッチ仮想インターフェイス 120 と 130 の間のルーティング トラフィックを確立しますか?
- A. SVI インターフェイスから「ルーティングなし」を削除します。
- B. ルート リークはデフォルト VRF で設定する必要があります。
- C. SVI 120 と 130 の間に静的ルートを作成します。
- D. Aruba 6300M では、ルーティングがデフォルトで有効になっています。
正解：A
解説：
On an Aruba CX 6300M switch, routing between Switch Virtual Interfaces (SVIs) is enabled by default.
Therefore, traffic between SVIs, like 120 and 130, can be routed internally without the need for additional configuration such as route leaking or static routes, as long as there is no 'no routing' configuration present on the SVIs.
質問 # 29
ネットワーク技術者は、Aruba Central を使用してネットワークの問題をトラブルシューティングしています。トラブルシューティング プロセスを開始するときに、問題を表示して確認するにはどのダッシュボードを使用できますか?
- A. レポート ダッシュボード
- B. 監査証跡ダッシュボード
- C. ツールダッシュボード
- D. アラートとイベントのダッシュボード
正解：D
解説：
Explanation
The Alerts and Events dashboard displays all types of alerts and events generated for events pertaining to device provisioning, configuration, and user management. You can use the Config icon to configure alerts and notifications for different alert categories and severities . You can also view the alerts and events in the List view and Summary view2. References:
https://www.arubanetworks.com/techdocs/central/latest/content/nms/alerts/configuring-alerts.htm 2
https://www.arubanetworks.com/techdocs/central/latest/content/nms/alerts/viewing-alerts.htm
質問 # 30
ヘッドレスデバイスを WLAN に安全に追加するためのデバイス固有のパスフレーズを可能にする Aruba テクノロジーはどれですか?
- A. 複数の事前共有キー (MPSK)
- B. 日和見無線暗号化 (OWE)
- C. 有線同等プライバシー (WEP)
- D. テンポラル キー完全性プロトコル (TKIP)
正解：A
解説：
Multiple Pre-Shared Key (MPSK) is a feature that allows device-specific or group-specific passphrases to securely add headless devices to the WLAN Wireless Local Area Network. WLAN is a wireless computer network that links two or more devices using wireless communication to form a local area network (LAN) within a limited area such as a home, school, computer laboratory, campus, or office building.. MPSK enhances the WPA2 PSK Wi-Fi Protected Access 2 Pre-Shared Key. WPA2 PSK is a method of securing your network using WPA2 with the use of the optional Pre-Shared Key (PSK) authentication, which was designed for home users without an enterprise authentication server. mode by allowing different PSKs for different devices on the same SSID Service Set Identifier. SSID is a case-sensitive, 32 alphanumeric character unique identifier attached to the header of packets sent over a wireless local-area network (WLAN). The SSID acts as a password when a mobile device tries to connect to the basic service set (BSS) - a component of the IEEE 802.11 WLAN architecture.. MPSK passwords can be generated or user-created and are managed by ClearPass Policy Manager12.
References:
1 https://blogs.arubanetworks.com/solutions/simplify-iot-authentication-with-multiple-pre-shared-keys/
2
https://www.arubanetworks.com/techdocs/ClearPass/6.8/Guest/Content/AdministrationTasks1/Configurin g-MP
質問 # 31
お客様には、Windows 10 クライアントを使用するユーザーの承認ポリシーを作成するという要件があり、Tor が 1 つの Radius セッション内でデバイスとユーザーの資格情報の両方を承認するという要件があります。
要件に対する正しい解決策は何でしょうか?
- A. ClearPass 6.9 (EAP-TTLS あり)
- B. ClearPass 6.9 (EAP-TLS あり)
- C. ClearPass 6.9 と PEAP
- D. ClearPass 6.9 (EAP-TEAP あり)
正解：D
解説：
Explanation
EAP-TEAP is a tunnel-based authentication method that supports both device and user authentication within a single RADIUS session. ClearPass 6.9 supports EAP-TEAP as anauthentication method for Windows 10 clients. References:
https://www.arubanetworks.com/techdocs/ClearPass/6.9/Guest/Content/CPPM_UserGuide/EAP-TEAP/EAP-TE
質問 # 32
Aruba Central を使用する場合、ネットワークの健全性の問題を解決するための推奨手順を特定し、サポート担当者と詳細情報を共有できるものは何ですか?
- A. 概要ダッシュボード
- B. 監査証跡
- C. OAlOps
- D. アラートとイベント
正解：C
解説：
Explanation
OAlOps is a feature of Aruba Central that uses artificial intelligence and machine learning to identify recommended steps to resolve network health issues and allows you to share detailed information with support personnel. OAlOps provides insights into network performance, root cause analysis, anomaly detection, proactive alerts, and automated remediation actions.OAlOps also integrates with Aruba User Experience Insight (UXI) sensors to measure and improve user experience across wired and wireless networks.
References:https://www.arubanetworks.com/assets/ds/DS_ArubaCentral.pdf
質問 # 33
Aruba ネットワーク機器の仮想スイッチング フレームワーク (VSF) の機能は何ですか?
- A. スイッチをスタックして冗長性を実現できます。
- B. 物理スイッチを 1 つの論理スイッチに仮想化するために使用されます。
- C. 物理スイッチ上に仮想ネットワークを作成できるようになります。
- D. 複数のスイッチにわたって仮想 LAN を構成します。
正解：B
質問 # 34
いくつかのクラスの LOT デバイスに対してワイヤレス アクセスを設定する必要があります。そのうちのいくつかは 802 でのみ動作します。
11b. 各クラスには一意の PSK が必要で、役割として異なるセキュリティ ポリシーが適用される必要があります。デバイスには 15 ～ 20 の異なるクラスがあり、パフォーマンスを最適化する必要があります。どのオプションがこれらの要件を満たすかです。」
- A. 2.4 GHz および 5 GHz 帯域を使用する各 LoT クラスの MPSK を備えた単一 SSID
- B. 5 GHz および 6 GHz 帯域を使用する、loT クラスごとに固有の PSK を持つ個別の SSID
- C. 2.4 GHz および 5 GHz 帯域を使用した、loT クラスごとに固有の PSK を持つ個別の SSID
- D. 5 GHz および 6 GHz 帯域を使用する各 LoT クラスの MPSK を備えた単一 SSID
正解：C
解説：
Explanation
The option that fulfills the requirements is to create individual SSIDs with unique PSK for each loT class, using 2.4 GHz and 5 GHz band. This option provides the following benefits:
Each loT class has a unique PSK that can be used to apply a different security policy as a role. This enhances the security and flexibility of the WLAN network.
Individual SSIDs allow for better isolation and management of different loT classes. This improves the performance and scalability of the WLAN network.
Using both 2.4 GHz and 5 GHz bands allows for backward compatibility with loT devices that operate only with 802.11b, which uses the 2.4 GHz band . It also allows for higher throughput and less interference for loT devices that support 802.11a, 802.11g, 802.11n, or 802.11ac, which use the 5 GHz band2.
The other options do not fulfill the requirements because:
Single SSID with MPSK for each loT class using 5 GHz and 6 GHz bands: This option does not support loT devices that operate only with 802.11b, which uses the 2.4 GHz band . It also does not optimize the performance of the WLAN network, as a single SSID may cause co-channel interference and congestion among different loT classes.
Single SSID with MPSK for each loT class using 2.4 GHz and 5 GHz bands: This option does not optimize the performance of the WLAN network, as a single SSID may cause co-channel interference and congestion among different loT classes.
Individual SSIDs with unique PSK for each loT class, using 5 GHz and 6 GHz bands: This option does not support loT devices that operate only with 802.11b, which uses the 2.4 GHz band1.
References: 1 https://en.wikipedia.org/wiki/IEEE_802.11b-1999 2
https://www.lifewire.com/wireless-standards-802-11a-802-11b-g-n-and-802-11ac-816553
質問 # 35
ArubaOS-CX スイッチへの入力で過剰なブロードキャスト トラフィックをドロップする必要があります。このタスクに使用する最適なテクノロジは何ですか?
- A. QoS シェーピング
- B. DWRR キューイング
- C. 厳密なキューイング
- D. レート制限
正解：D
解説：
The best technology to use for dropping excessive broadcast traffic on ingress to an ArubaOS-CX switch is rate limiting. Rate limiting is a feature that allows network administrators to control the amount of traffic that enters or leaves a port or a VLAN on a switch by setting bandwidth thresholds or limits. Rate limiting can be used to prevent network congestion, improve network performance, enforce service level agreements(SLAs), or mitigate denial-of-service (DoS) attacks. Rate limiting can be applied to broadcast traffic on ingress to an ArubaOS-CX switch by using the storm-control command in interface configuration mode. This command allows network administrators to specify the percentage of bandwidth or packets per second that can be used by broadcast traffic on an ingress port. If the broadcast traffic exceeds the specified threshold, the switch will drop the excess packets.
The other options are not technologies for dropping excessive broadcast traffic on ingress because:
- DWRR queuing: DWRR stands for Deficit Weighted Round Robin, which is a queuing algorithm that assigns different weights or priorities to different traffic classes or queues on an egress port. DWRR ensures that each queue gets its fair share of bandwidth based on its weight while avoiding starvation of lower priority queues. DWRR does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.
- QoS shaping: QoS stands for Quality of Service, which is a set of techniques that manage network resources and provide different levels of service to different types of traffic based on their requirements.
QoS shaping is a technique that delays or buffers outgoing traffic on an egress port to match the available bandwidth or rate limit. QoS shaping does not drop excessive broadcast traffic on ingress, but rather smooths outgoing traffic on egress.
- Strict queuing: Strict queuing is another queuing algorithm that assigns different priorities to different traffic classes or queues on an egress port. Strict queuing ensures that higher priority queues are always served before lower priority queues regardless of their bandwidth requirements or weights. Strict queuing does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.
References:
https://en.wikipedia.org/wiki/Rate_limiting
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/storm- control.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/dwrr.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/shaping.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/strict.htm
質問 # 36
......
最新のHPE6-A85日本語実際の無料試験問題は更新された115問があります：https://jp.fast2test.com/HPE6-A85J-premium-file.html