[2023年10月18日] 有効なHPE6-A85日本語テスト解答HPE6-A85日本語試験PDF問題を試そう
有効なACA Campus Access Associate HPE6-A85日本語問題集はあなたの合格を必ず保証します
質問 # 36
あなたは顧客との会議に出席しており、ネットワーク冗長機能マルチプル スパニング ツリー (MSTP) について説明するよう求められています。この機能についての正しい説明は何ですか?
- A. 現在の MSTP ルート優先順位としてデフォルトで設定されている MSTP 構成 ID リビジョン
- B. デフォルトではスイッチのシリアル番号としての MSTP 構成 ID リビジョン
- C. スイッチ IMC アドレスを使用したデフォルトの MSTP 構成 ID 名
- D. スイッチのシリアル番号を使用したデフォルトの MSTP 構成 ID 名
正解:C
解説:
Explanation
MSTP Multiple Spanning Tree Protocol. MSTP is an IEEE standard protocol for preventing loops in a network with multiple VLANs. MSTP allows multiple VLANs to be mapped to a reduced number of spanning-tree instances. configuration ID consists of two parameters: name and revision. The name is a
32-byte ASCII string that identifies the MSTP region, which is a group of switches that share the same configuration ID and VLAN-to-instance mapping. The revision is a 16-bit number that indicates the version of the configuration ID. By default, the MSTP configuration ID name is set to the switch IMC address, which is a unique identifier derived from the MAC address Media Access Control address. MAC address is a unique identifier assigned to a network interface controller (NIC) for use as a network address in communications within a network segment. of the switch.
References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/mstp/
質問 # 37
病院では、患者データの診断と文書化に多くのモバイル機器を使用しています。単一の VSF スタックに 400 ポートを超える分散ラックを備えたこの大病院にとって、理想的なアクセス スイッチは何ですか?
- A. OCX6100
- B. OCX6200
- C. OCX6400
- D. CX6300
正解:D
解説:
Explanation
The ideal access switch for a large hospital with distribution racks of over 400 ports in a single VSF stack is the CX 6300. This switch provides the following benefits:
The CX 6300 supports up to 48 ports per switch and up to 10 switches per VSF stack, allowing for a total of 480 ports in a single stack. This meets the requirement of having over 400 ports in a single VSF stack.
The CX 6300 supports high-performance switching with up to 960 Gbps of switching capacity and up to
714 Mpps of forwarding rate. This meets therequirement of having high throughput and low latency for mobile equipment and patient data.
The CX 6300 supports advanced features such as dynamic segmentation, policy-based routing, and role-based access control. These features enhance the security and flexibility of the network by applying different policies and roles to different types of devices and users.
The CX 6300 supports Aruba NetEdit, a network configuration and orchestration tool that simplifies the management and automation of the network. This reduces the complexity and human errors involved in network configuration and maintenance.
The other options are not ideal because:
OCX 6400: This switch is designed for data center applications and does not support VSF stacking. It also does not support dynamic segmentation or policy-based routing, which are useful for network security and flexibility.
OCX 6200: This switch is designed for small to medium-sized businesses and does not support VSF stacking. It also has lower switching capacity and forwarding rate than the CX 6300, which may affect the performance of the network.
OCX 6100: This switch is designed for edge applications and does not support VSF stacking. It also has lower switching capacity and forwarding rate than the CX 6300, which may affect the performance of the network.
References: https://www.arubanetworks.com/assets/ds/DS_CX6300Series.pdf
https://www.arubanetworks.com/assets/ds/DS_OC6400Series.pdf
https://www.arubanetworks.com/assets/ds/DS_OC6200Series.pdf
https://www.arubanetworks.com/assets/ds/DS_OC6100Series.pdf
質問 # 38
レイヤ 2 MAC 認証を使用する利点は何ですか?
- A. クライアントでの設定は必要ありません。
- B. MAC 許可リストは長期にわたって簡単に維持されます
- C. MAC 識別子はなりすましが困難です
- D. ユーザー名と MAC アドレスを照合します。
正解:A
解説:
Explanation
Layer 2 MAC authentication is a method of authenticating devices based on their MAC addresses without requiring any client-side configuration or credentials. The switch sends the MAC address of the device to an authentication server such as ClearPass or RADIUS, which checks if the MAC address is authorized to access the network. If yes, the switch grants access to the device based on the assigned role and policies. If no, the switch denies access or redirects the device to a captive portal for further authentication.
References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-ove
質問 # 39
Aruba AP のオレンジ色の無線ステータス LED は何を示していますか?
- A. 無線はモニターまたはスペクトル分析モードで有効です
- B. AP の両方の無線に電力を供給するのに十分な PoE がスイッチから提供されていません
- C. 無線はメッシュ モードで動作しています
- D. 無線は 5 GHz 帯域のみで動作しています。
正解:A
解説:
Explanation
The solid amber radio status LED on an Aruba AP Access Point (AP) Access Point (AP) is a device that connects wireless devices to a wired network using Wi-Fi or other wireless standards . APs act as transmitters and receivers of wireless signals and provide wireless coverage for a specific area . APs can operate in different modes such as root , repeater , bridge , mesh , etc . APs can also support different features such as security , QoS , roaming , load balancing , etc . APs can be standalone devices or managed by controllers or cloud services . APs can be verified by using commands such as show ap active , show ap database , show ap bss-table , etc . indicates that the radio is enabled in monitor or spectrum analysis mode. Monitor mode is a mode that allows the AP to scan all channels and collect information about wireless traffic, interference, rogue devices, etc. Spectrum analysis mode is a mode that allows the AP to scan all channels and collect information about RF Radio Frequency (RF) Radio Frequency (RF) is a term that refers to electromagnetic waves that have frequencies between 3 kHz and 300 GHz . RF waves are used for various purposes such as communication , broadcasting , radar , navigation , remote control , etc . RF waves can be modulated by changing their amplitude , frequency , or phase to encode information . RF waves can also be affected by various factors such as attenuation , reflection , refraction , diffraction , scattering , interference , noise , etc . RF waves can be measured by using devices such as spectrum analyzers , power meters , antennas , etc . environment, noise sources, channel utilization, etc. Both modes are useful for troubleshooting and optimizing wireless performance, but they disable normal data transmission and reception on the radio.
The other options are not indicated by a solid amber radio status LED on an Aruba AP because:
Not enough PoE is provided from the switch to power both radios of the AP: This option is false because not enough PoE Power over Ethernet (PoE) Power over Ethernet (PoE) is a technology that allows network devices to receive power and data over the same Ethernet cable . PoE eliminates the need for separate power sources and cables for devices such as IP phones , cameras , access points , etc .
PoE is defined in IEEE 802.3af and IEEE 802.3at standards and supports different power classes and modes . PoE can be provided by switches or injectors that act as power sourcing equipment (PSE) and received by devices that act as powered devices (PD) . PoE can be verified by using commands suchas show power inline , show power-over-ethernet , debug ip device tracking , etc . is indicated by a blinking amber power status LED on an Aruba AP, not by a solid amber radio status LED. A blinking amber power status LED means that the AP is receiving insufficient power from the switch or injector and cannot operate normally. A solid green power status LED means that the AP is receiving sufficient power from the switch or injector and can operate normally.
The radio is working in mesh mode: This option is false because the radio working in mesh mode is indicated by a solid green radio status LED on an Aruba AP, not by a solid amber radio status LED. A solid green radio status LED means that the radio is working in normal mode or mesh mode and can transmit or receive data on the assigned channel. Mesh mode is a mode that allows the AP to connect wirelessly to other APs and form a mesh network without requiring wired connections.
The radio is working the 5 GHz band only: This option is false because the radio working in the 5 GHz band only is indicated by a solid blue radio status LED on an Aruba AP, not by a solid amber radio status LED. A solid blue radio status LED means that the radio is working in dual-band mode and can transmit or receive data on both 2.4 GHz and 5 GHz bands.
References:
https://www.arubanetworks.com/techdocs/Instant_86_WebHelp/Content/instant-ug/ap-led-behavior.htm
https://www.arubanetworks.com/techdocs/Instant_86_WebHelp/Content/instant-ug/troubleshooting/ap-monitor-m
https://www.arubanetworks.com/techdocs/Instant_86_WebHelp/Content/instant-ug/troubleshooting/ap-spectrum
質問 # 40 
指定されたトポロジに基づいて、スイッチ 1 のポート 1/1/24 で LLDP メッセージを受信できるようにするための Aruba スイッチの要件は何ですか。Router 1 で LLDP が有効になっている場合?
- A. グローバル設定 lldp 有効化
- B. LLDP はデフォルトで有効になっています
- C. int 1/1/24、lldp 受信
- D. int 1/1/24、cdp なし
正解:C
解説:
Explanation
LLDP Link Layer Discovery Protocol. LLDP is a vendor-neutral link layer protocol used by network devices for advertising their identity, capabilities, and neighbors on a local area network. is enabled by default on Aruba switches, but it can be disabled on a per-port basis using the no lldp command. To enable LLDP messages to be received by Switch 1 port 1/1/24, you need to enter the interface configuration mode for that port and use the lldp receive command.
References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/lldp/l
質問 # 41
Aruba Central を使用する場合、ネットワークの健全性の問題を解決するための推奨手順を特定し、サポート担当者と詳細情報を共有できるものは何ですか?
- A. OAlOps
- B. 監査証跡
- C. アラートとイベント
- D. 概要ダッシュボード
正解:A
解説:
Explanation
OAlOps is a feature of Aruba Central that uses artificial intelligence and machine learning to identify recommended steps to resolve network health issues and allows you to share detailed information with support personnel. OAlOps provides insights into network performance, root cause analysis, anomaly detection, proactive alerts, and automated remediation actions.OAlOps also integrates with Aruba User Experience Insight (UXI) sensors to measure and improve user experience across wired and wireless networks.
References:https://www.arubanetworks.com/assets/ds/DS_ArubaCentral.pdf
質問 # 42
Aruba スタンドアロン AP を使用する場合、クライアント VLAN 割り当てに「ネイティブ VLAN」を選択します。クライアント IP はどのサブネットに存在しますか?
- A. モビリティ コントローラーと同じサブネット
- B. アクセスポイントと同じサブネット
- C. モビリティ コンダクターと同じサブネット
- D. Aruba ESP ゲートウェイと同じサブネット
正解:B
解説:
Explanation
When using an Aruba standalone AP, selecting "Native VLAN" for the Client VLAN Assignment means that the clients will get their IP addresses from the same subnet as the access point's IP address. This is because the access point acts as a DHCP server for the clients in this mode.
References:https://www.arubanetworks.com/techdocs/Instant_86_WebHelp/Content/instant-ug/iap-dhcp/iap-dhc
質問 # 43
SVI を使用した ln バンド管理が使用されている場合、Aruba CX スイッチでデフォルト ルートを 10.4.5.1 に設定するにはどのコマンドが使用されますか?
- A. ip ルート 0 0 0.070 10.4 5.1 vrf 管理
- B. ip ルート 0.0 0 0/0 10.4.5.1
- C. iP デフォルトゲートウェイ 10.4.5.1
- D. デフォルトゲートウェイ 10.4.5.1
正解:B
解説:
Explanation
The command that is used to set a default route to 10.4.5.1 on an Aruba CX switch when in-band management using an SVI is being used is ip route 0.0 0 0/0 10.4.5.1 . This command specifies the destination network address (0.0 0 0) and prefix length (/0) and the next-hop address (10.4.5.1) for reaching any network that is not directly connected to the switch. The default route applies to the default VRF Virtual Routing and Forwarding.
VRF is a technology that allows multiple instances of a routing table to co-exist within the same router at the same time. VRFs are typically used to segment network traffic for security, privacy, or administrative purposes. , which is used for in-band management traffic that goes through an SVI Switch Virtual Interface.
SVI is a virtual interface on a switch that allows the switch to route packets between different VLANs on the same switch or different switches that are connected by a trunk link. An SVI is associated with a VLAN and has an IP address and subnet mask assigned to it
https://www.arubanetworks.com/techdocs/AOS-CX/10_08/HTML/ip_route_4100i-6000-6100-6200/Content/Ch
2
https://www.arubanetworks.com/techdocs/AOS-CX/10_08/HTML/ip_route_4100i-6000-6100-6200/Content/Ch
質問 # 44
ワイヤレス クライアントのローミングはどこで決定されますか?
- A. 仮想コントローラー
- B. アルバセントラル
- C. クライアントデバイス
- D. 発信元 AP と宛先 AP による共同決定
正解:C
解説:
Explanation
Wireless client roaming decisions are made by the client device based on its own criteria, such as signal strength, noise level, data rate, etc. The network can influence the client's roaming decision by providing information such as neighbor reports, load balancing, band steering, etc., but the final decision is up to the client.
References:https://www.arubanetworks.com/techdocs/Instant_86_WebHelp/Content/instant-ug/wlan-roaming/cli
質問 # 45
「show lacp Interfaces」で LACP を確認するときの「ALFOE」のステータスは何を意味しますか?
- A. LACP は同期プロセス中です
- B. ローカル スイッチ上のインターフェイスはstatic LAG として構成されています
- C. LACP は問題なく正常に動作しています。
- D. LACP がピア側で設定されていません
正解:C
解説:
Explanation
The status of "ALFOE" means that LACP Link Aggregation Control Protocol (LACP) is a network protocol that provides dynamic negotiation of link aggregation between two devices. LACP allows multiple physical links to be combined into a single logical link for increased bandwidth, redundancy, and load balancing. LACP is defined in IEEE 802.3ad standard. is working fine with no problems when checking LACP with "show lacp interfaces". The status of "ALFOE" is an acronym that stands for:
A: Active - The interface is actively sending LACP packets to negotiate link aggregation with the peer device.
L: Link Up - The interface has physical connectivity with the peer device.
F: Aggregatable - The interface can be aggregated with other interfaces into a single logical link.
D: Synchronized - The interface has successfully negotiated link aggregation parameters with the peer device and can transmit or receive traffic on the logical link.
E: Collecting/Distributing - The interface is collecting incoming traffic from the peer device and distributing outgoing traffic to the peer device on the logical link.
The other options are not correct because:
The interface on the local switch is configured as static-LAG: This option is false because static-LAG does not use LACP to negotiate link aggregation. Static-LAG requires manual configuration of link aggregation parameters on both devices and does not have any status indicators.
LACP is not configured on the peer side: This option is false because if LACP is not configured on the peer side, the status of the interface would be "ALF-" instead of "ALFOE". This means that the interface would not be synchronized or collecting/distributing with the peer device.
LACP is in a synchronizing process: This option is false because if LACP is in a synchronizing process, the status of the interface would be "ALF-O" instead of "ALFOE". This means that the interface would not be collecting/distributing with the peer device.
References:
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/lag/lag-overview.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/lag/lag-lacp.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/lag/lag-lacp-status.htm
質問 # 46
配信およびレイヤー 3 サービスに使用される 6300M スイッチのスタック ペアを使用してネットワークを構成しています。ディストリビューション スタックの下流に接続された CX6200 スイッチの複数のアクセス スタックで使用されるユーザー用の新しい VLAN を作成します。これと同様の複数の VLAN/サブネットを作成します。これらは複数のアクセス スタックで利用されます。正しい設定方法は何ですか?この VLAN に関連付けられるサブネットのルーティング可能なインターフェイスは?
- A. 各ダウンストリーム スイッチの 6300M スタック上のサブネットに物理的にルーティングされたインターフェイスを作成します。
- B. 6300M スタック上のサブネットに SVl を作成し、各ダウンストリーム スイッチ スタックの管理アドレスを同じサブネット内の異なる IP アドレスに割り当てます。
- C. 各ダウンストリーム スイッチのサブネットに SVl を作成します。
- D. 6300M スタック上のサブネットに SVl を作成します。
正解:D
解説:
Explanation
The correct way to configure the routable interface for the subnet to be associated with this VLAN is to create an SVI Switched Virtual Interface (SVI) Switched Virtual Interface (SVI) is a virtual interface on a switch that represents a VLAN and provides Layer 3 routing functions for that VLAN . SVIs are used to enable inter-VLAN routing , provide gateway addresses for hosts in VLANs , apply ACLs or QoS policies to VLANs
, etc . SVIs have some advantages over physical routed interfaces such as saving interface ports , reducing cable costs , simplifying network design , etc . SVIs are usually numbered according to their VLAN IDs (e.g., vlan 10) and assigned IP addresses within the subnet of their VLANs . SVIs can be created and configured by using commands such as interface vlan , ip address , no shutdown , etc . SVIs can be verified by using commands such as show ip interface brief , show vlan , show ip route , etc . in the subnet on the 6300M stack.
An SVI is a virtual interface on a switch that represents a VLAN and provides Layer 3 routing functions for that VLAN. Creating an SVI in the subnet on the 6300M stack allows the switch to act as a gateway for the users in that VLAN and enable inter-VLAN routing between different subnets. Creating an SVI in the subnet on the 6300M stack also simplifies network design and management by reducing the number of physical interfaces and cables required for routing.
The other options are not correct ways to configure the routable interface for the subnet to be associated with this VLAN because:
Create a physically routed interface in the subnet on the 6300M stack for each downstream switch: This option is incorrect because creating a physically routedinterface in the subnet on the 6300M stack for each downstream switch would require using one physical port and cable per downstream switch, which would consume interface resources and increase cable costs. Creating a physically routed interface in the subnet on the 6300M stack for each downstream switch would also complicate network design and management by requiring separate routing configurations and policies for each interface.
Create an SVl in the subnet on each downstream switch: This option is incorrect because creating an SVI in the subnet on each downstream switch would not enable inter-VLAN routing between different subnets, as each downstream switch would act as a gateway for its own VLAN only. Creating an SVI in the subnet on each downstream switch would also create duplicate IP addresses in the same subnet, which would cause IP conflicts and routing errors.
Create an SVl in the subnet on the 6300M stack, and assign the management address of each downstream switch stack to a different IP address in the same subnet: This option is incorrect because creating an SVI in the subnet on the 6300M stack, and assigning the management address of each downstream switch stack to a different IP address in the same subnet would not enable inter-VLAN routing between different subnets, as each downstream switch would still act as a gateway for its own VLAN only. Creating an SVI in the subnet on the 6300M stack, and assigning the management address of each downstream switch stack to a different IP address in the same subnet would also create unnecessary IP addresses in the same subnet, which would waste IP space and complicate network management.
References: https://www.arubanetworks.com/techdocs/AOS-CX/10.05/HTML/5200-7295/index.html
https://www.arubanetworks.com/techdocs/AOS-CX/10.05/HTML/5200-7295/cx-noscg/l3-routing/l3-routing-ove
https://www.arubanetworks.com/techdocs/AOS-CX/10.05/HTML/5200-7295/cx-noscg/l3-routing/l3-routing-con
質問 # 47
データリンク層 PDU を表すプロトコル データ ユニット (PDU) はどれですか?
- A. PDU2 - フレーム
- B. PDU3 - パケット
- C. PDU1 - 信号
- D. PDU4 - セグメント
正解:A
解説:
Explanation
A frame is the data link layer PDU that encapsulates the network layer PDU (packet) with a header and a trailer that contain information such as source and destination MAC addresses, frame type, error detection, etc.
A frame is transmitted over a physical medium such asEthernet, Wi-Fi, etc.
References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-ove
質問 # 48
TCP 3ウェイ ハンドシェイク シーケンスの正しい順序は何ですか?
正解:
解説:
Explanation
TCP 3-Way Handshake sequence is:
Step 1: The initiating host sends a packet with no data to the target host with a SEQ=1 and sets the SYN flag to 1.
Step 2: The target host responds with a packet with ACK=2, SEQ=8, and the SYN and ACK flags set to
1.
Step 3: The initiating host sends a packet with SEQ=2, ACK=9, and the ACK flag set to 1.
Step 4: A normal-controlled connection is established.
References: https://en.wikipedia.org/wiki/Transmission_Control_Protocol
https://www.cisco.com/c/en/us/support/docs/ip/routing-information-protocol-rip/13788-3.html
質問 # 49
UXl の 2 つの利点は何ですか? (2つ選択してください。)
- A. UXl はインターネット接続なしで使用できます
- B. UXl は、離れた場所で最適な WiFi チャネルを計算するのに役立ちます。
- C. UX1 はクライアント/ユーザーのように動作します。
- D. UX1 は、HTTP VOIP や Office 365 などのさまざまなアプリケーションをチェックできます。
- E. UX1 は、指定された場所にあるすべての AP の Wi-Fi カバレッジを測定します。
正解:C、D
解説:
Explanation
A UXI (User Experience Insight) is a device that simulates user behavior and tests network performance from the user perspective. It can check different applications, such as HTTP, VOIP, or Office 365, and measure metrics such as latency, jitter, packet loss, and throughput.
References:https://www.arubanetworks.com/products/networking/user-experience-insight/
質問 # 50
ユースケースを適切な認証テクノロジーに合わせてください。
正解:
解説:
Explanation
Add certificates to Android devices with the Aruba Onboard Application in the Google Play store that will be used for wireless authentication A) ClearPass Policy Manager Authenticate users on corporate-owned Chromebook devices using 802.1X and context gathered from the network devices that they log into B) Cloud Authentication and Policy Leverage unbound Mum Pre-Shared Keys (MPSK) managed by Aruoa Central to the end-users and client devices B) Cloud Authentication and Policy Validate devices exist in a Mobile Device Management (MDM) database before authenticating BYOD users with corporate Active Directory using certificates A) ClearPass Policy Manager
https://www.arubanetworks.com/techdocs/ClearPass/6.11/PolicyManager/Content/CPPM_UserGuide/About%20
https://www.arubanetworks.com/products/security/network-access-control/
質問 # 51
ユーザーがグループの作成中に Aruba Central で定義できるデバイス設定グループのタイプはどれですか? (2つ選択してください。)
- A. ESPグループ
- B. セキュリティグループ
- C. テンプレートグループ
- D. デフォルトグループ
- E. ウルグループ
正解:C、D
解説:
Explanation
Aruba Central allows you to create device configuration groups that define common settings for devices within each group. You can create different types of groupsdepending on your network requirements and management preferences. Two types of groups that you can define in Aruba Central during group creation are:
Template group: A template group allows you to create configuration templates using variables and expressions that can be applied to multiple devices or device groups. Template groups provide flexibility and scalability for managing large-scale deployments with similar configurations.
Default group: A default group is automatically created when you add devices to Aruba Central for the first time. The default group contains basic configuration settings that are applied to all devices that are not assigned to any other group. You can modify or delete the default group as needed.
References: https://www.arubanetworks.com/techdocs/Central/latest/content/nms/device-groups.htm
https://www.arubanetworks.com/techdocs/Central/latest/content/nms/template-groups.htm
https://www.arubanetworks.com/techdocs/Central/latest/content/nms/default-group.htm
質問 # 52
ゲートウェイ 172.16.1.1 経由でクラス C ネットワーク 10.2.10.0 にスタティック ルートを追加するための正しいコマンドは何ですか?
- A. ip ルート 10.2.10.0/24.172.16.11
- B. ip ルート 10.2.10.0.255.255.255.0 172.16.1.1 説明アルバ
- C. ip-route 10.2.10.0/24 172.16.1.1
- D. ip ルートstatic 10.2 10.0.255.255.255.0 172.16.1.1
正解:C
解説:
Explanation
The correct command to add a static route to a class-c-network 10.2.10.0 via a gateway of 172.16.1.1 is ip-route 10.2.10.0/24 172.16.1.1 . This command specifies the destination network address (10.2.10.0) and prefix length (/24) and the next-hop address (172.16.1 .1) for reaching that network from the switch. The other commands are either incorrect syntax or incorrect parameters for adding a static route.
References:https://www.arubanetworks.com/techdocs/AOS-CX_10_04/NOSCG/Content/cx-noscg/ip-routing/sta
質問 # 53
ArubaOS-CX スイッチへの入力で過剰なブロードキャスト トラフィックをドロップする必要があります。このタスクに使用する最適なテクノロジは何ですか?
- A. レート制限
- B. QoS シェーピング
- C. 厳密なキューイング
- D. DWRR キューイング
正解:A
解説:
Explanation
The best technology to use for dropping excessive broadcast traffic on ingress to an ArubaOS-CX switch is rate limiting. Rate limiting is a feature that allows network administrators to control the amount of traffic that enters or leaves a port or a VLAN on a switch by setting bandwidth thresholds or limits. Rate limiting can be used to prevent network congestion, improve network performance, enforce service level agreements(SLAs), or mitigate denial-of-service (DoS) attacks. Rate limiting can be applied to broadcast traffic on ingress to an ArubaOS-CX switch by using the storm-control command in interface configuration mode. This command allows network administrators to specify the percentage of bandwidth or packets per second that can be used by broadcast traffic on an ingress port. If the broadcast traffic exceeds the specified threshold, the switch will drop the excess packets.
The other options are not technologies for dropping excessive broadcast traffic on ingress because:
DWRR queuing: DWRR stands for Deficit Weighted Round Robin, which is a queuing algorithm that assigns different weights or priorities to different traffic classes or queues on an egress port. DWRR ensures that each queue gets its fair share of bandwidth based on its weight while avoiding starvation of lower priority queues. DWRR does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.
QoS shaping: QoS stands for Quality of Service, which is a set of techniques that manage network resources and provide different levels of service to different types of traffic based on their requirements.
QoS shaping is a technique that delays or buffers outgoing traffic on an egress port to match the available bandwidth or rate limit. QoS shaping does not drop excessive broadcast traffic on ingress, but rather smooths outgoing traffic on egress.
Strict queuing: Strict queuing is another queuing algorithm that assigns different priorities to different traffic classes or queues on an egress port. Strict queuing ensures that higher priority queues are always served before lower priority queues regardless of their bandwidth requirements or weights. Strict queuing does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.
References: https://en.wikipedia.org/wiki/Rate_limiting
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/storm-control.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/dwrr.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/shaping.htm
https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx-noscg/qos/strict.htm
質問 # 54
レイヤ 3 ルート ループを軽減するためにレイヤ 3 IPv4 パケット ヘッダーで送信されるのはどれですか?
- A. Time To Live
- B. Protocol
- C. チェックサム
- D. 宛先IP
正解:A
解説:
Explanation
The field in a Layer 3 IPv4 packet header that is used to mitigate Layer 3 route loops is Time To Live (TTL).
TTL is an 8-bit field that indicates the maximum number of hops that a packet can traverse before being discarded. TTL is set by the source device and decremented by one by each router that forwards the packet. If TTL reaches zero, the packet is dropped and an ICMP Internet Control Message Protocol (ICMP) Internet Control Message Protocol (ICMP) is a network protocol that provides error reporting and diagnostic functions for IP networks. ICMP is used to send messages such as echo requests and replies (ping), destination unreachable, time exceeded, parameter problem, source quench, redirect, etc. ICMP messages are encapsulated in IP datagrams and have a specific format that contains fields such as type, code, checksum, identifier, sequence number, data, etc. ICMP messages can be verified by using commands such as ping , traceroute , debug ip icmp , etc . message is sent back to the source device. TTL is used to mitigate Layer 3 route loops because it prevents packets from circulating indefinitely in a looped network topology. TTL also helps to conserve network resources and avoid congestion caused by looped packets.
The other options are not fields in a Layer 3 IPv4 packet header because:
Checksum: Checksum is a 16-bit field that is used to verify the integrity of the IP header. Checksum is calculated by the source device and verified by the destination device based on the values of all fields in the IP header. Checksum does not mitigate Layer 3 route loops because it does not limit the number of hops that a packet can traverse.
Protocol: Protocol is an 8-bit field that indicates the type of payload carried by the IP datagram. Protocol identifies the upper-layer protocol that uses IP for data transmission, such as TCP Transmission Control Protocol (TCP) Transmission Control Protocol (TCP) is a connection-oriented transport layer protocol that provides reliable, ordered, and error-checked delivery of data between applications on different devices . TCP uses a three-way handshake to establish a connection between two endpoints , and uses sequence numbers , acknowledgments , and windowing to ensure data delivery and flow control . TCP also uses mechanisms such as retransmission , congestion avoidance , and fast recovery to handle packet loss and congestion . TCP segments data into smaller units called segments , which are encapsulated in IP datagrams and have a specific format that contains fields such as source port , destination port , sequence number , acknowledgment number , header length , flags , window size , checksum , urgent pointer , options , data , etc . TCP segments can be verified by using commands such as telnet , ftp , ssh , debug ip tcp transactions , etc . , UDP User Datagram Protocol (UDP) User Datagram Protocol (UDP) is a connectionless transport layer protocol that provides
質問 # 55
既存の IAP-315 アクセス ポイントを持つネットワーク管理者は Aruba Central に興味があり、特定の機能にどのライセンスが必要かを知る必要があります。機能ごとに必要なライセンスを一致させてください (一致は複数回使用される可能性があります)。
正解:
解説:
Explanation
a) Alerts on config changes via email - Foundation b) Group-based firmware compliance - Foundation c) Heat maps of deployed APs - Advanced d) Live upgrades of an AOS10 cluster - Advanced According to the Aruba Central Licensing Guide1, the Foundation License provides basic device management features such as configuration, monitoring, alerts, reports, firmware management, etc. The Advanced License provides additional features such as AI insights, WLAN services, NetConductor Fabric, heat maps, live upgrades, etc.
https://www.arubanetworks.com/techdocs/central/2.5.3/content/pdfs/licensing-guide.pdf
質問 # 56
ヘッドレスデバイスを WLAN に安全に追加するためのデバイス固有のパスフレーズを可能にする Aruba テクノロジーはどれですか?
- A. テンポラル キー完全性プロトコル (TKIP)
- B. 有線同等プライバシー (WEP)
- C. 複数の事前共有キー (MPSK)
- D. 日和見無線暗号化 (OWE)
正解:C
解説:
Explanation
Multiple Pre-Shared Key (MPSK) is a feature that allows device-specific or group-specific passphrases to securely add headless devices to the WLAN Wireless Local Area Network. WLAN is a wireless computer network that links two or more devices using wireless communication to form a local area network (LAN) within a limited area such as a home, school, computer laboratory, campus, or office building. . MPSK enhances the WPA2 PSK Wi-Fi Protected Access 2 Pre-Shared Key. WPA2 PSK is a method of securing your network using WPA2 with the use of the optional Pre-Shared Key (PSK) authentication, which was designed for home users without an enterprise authentication server. mode by allowing different PSKs for different devices on the same SSID Service Set Identifier. SSID is a case-sensitive, 32 alphanumeric character unique identifier attached to the header of packets sent over a wireless local-area network (WLAN). The SSID acts as a password when a mobile device tries to connect to the basic service set (BSS) - a component of the IEEE
802.11 WLAN architecture. . MPSK passwords can be generated or user-created and are managed by ClearPass Policy Manager12. References:
https://blogs.arubanetworks.com/solutions/simplify-iot-authentication-with-multiple-pre-shared-keys/ 2
https://www.arubanetworks.com/techdocs/ClearPass/6.8/Guest/Content/AdministrationTasks1/Configuring-MPS
質問 # 57
IP カメラ AP を展開するときに、スイッチ ポートで PoE 優先順位を動的に設定するにはどうすればよいですか。他の PoE デバイスはどうですか?
- A. デバイス プロビジョニングのプロファイリングを有効にする
- B. スイッチ モジュールで Quick PoE を有効にする
- C. PoE 電源管理をクラスベース モードに設定します。
- D. PoE 電源管理を動的モードに設定します。
正解:A
解説:
Explanation
Profiling is a feature that allows Aruba switches to automatically identify and classify devices connected to them based on various attributes such as MAC address, DHCP options, LLDP information, etc. Profiling can be used to dynamically set the PoE priority on a switch port based on the device type and power requirements.
For example, an IP camera may have a higher PoE priority than a printer or a PC. Profiling can also be used to apply other configuration settings such as VLANs, ACLs, QoS, etc. based on the device profile.
References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-ove
質問 # 58
要求どおりにエッジ スイッチのアップリンクを設定した後、同僚がコアへの ping に失敗したと言います。 あなたは同僚に、接続が差し込まれており、スイッチの電源が入っていることを確認するように依頼します。同僚は両方が正しいことを確認します。 あなたはコア スイッチに ping を試みます。 ping が失敗していることを確認します。
この展開の性質を理解した上で、この問題のトラブルシューティングにどのようなコマンドを使用できるか
- A. Ping 10.11 1 - コアに ping して、接続性を確認します。 トランクを表示 - LAG インターフェイスがスイッチに正しく追加されたかどうかを確認します。 スパニング ツリーを表示します。 - スパニング ツリーのブロック状態を確認します。 ポート アクセス クライアント インターフェイスをすべて表示します。 - すべてのインターフェイスでポート アクセスのブロック状態または失敗した認証試行を表示します。 show runinterface vlan20 - l_3 接続に対してレイヤ 3 SVI 設定が正しいことを再確認します。 Show lldp neighors - コアをL2 ネイバーは、正しいリンクが正しいポートに接続されているかどうかを確認します。
- B. 10.1.1.1 に ping - コアに ping を実行して、接続を確認します。 show lacp agg - どのリンク アグリゲーションが現在どの物理ポートを使用して設定されているかを確認します。 show lacp int - LACP ステータスと、リンクがブロックされているかどうかを確認します。トポロジ show lldp neighors - コアを L2 ネイバーとして認識できるかどうかを確認し、正しいリンクが正しいポートに接続されているかどうかを確認します。 show runinterface 1/1/51.1/1/52 - 物理インターフェイスを確認します。 no-shut であり、ラグのメンバーである show runinterface lag 1 - 正しい VLAN トランキング設定が論理インターフェイスに適用されていることを確認するため show run int vlan 20 - L3 SVI が no shut であり、正しいサブネットに設定されていることを確認するため
- C. Diag diag Cable-diag 1/1/51 diag Cable-diag 1/1/52 - 物理リンクの診断情報を表示して、レイヤー 1 接続の中断に関するステータスを取得するには、show ip Route - 確認します。デフォルト ゲートウェイがルーティング テーブルに存在すること show ip ospf - レイヤ 3 ルーティング プロトコルが有効になっているかどうかを確認する show ip dns - 有効な DNS ソースがあるかどうかを表示する
- D. Show run - スイッチの実行構成を表示します。 Show run | begin 20 "vlan 20" - VLAN 20 がデータベースに正しく追加されたことを確認するには、show run | begin 20 'interface vlan 20' - L3 SVI 設定を表示します Show runinterface 1/1/51.1/1/52 - 物理インターフェイスがシャットされておらず、LAG 1 のメンバーとして追加されていることを確認します Show run int lag 1 - LACP ブロック状態を解消するために LACP モードがアクティブに設定されていることを確認します
正解:B
解説:
Explanation
These commands might help troubleshoot this issue as they check various aspects of the connectivity between the edge switch and the core switch, such as Layer 3 reachability, Layer 2 adjacency, LACP configuration and status, VLAN trunking configuration, and interface status.
References:https://www.arubanetworks.com/techdocs/AOS-CX_10_04/CLI/GUID-8F0E7E8B-0F4B-4A3C-AE7
質問 # 59
Aruba CX スイッチで OSPF ダイナミック ルーティング プロトコルを使用する場合、ルートを交換するには隣接デバイスで何が一致する必要がありますか?
- A. こんにちはタイマー
- B. ECMP方式
- C. BDR 構成
- D. DR構成
正解:A
解説:
Explanation
OSPF Open Shortest Path First. OSPF is a link-state routing protocol that uses a hierarchical structure to create a routing topology for IP networks. OSPF routers exchange routing information with their neighbors using Hello packets, which are sent periodically on each interface. To establish an adjacency Adjacency is a relationship formed between selected neighboring routers for the purpose of exchanging routing information., OSPF routers must agree on several parameters, including Hello timers, which specify how often Hello packets are sent on an interface. If the Hello timers do not match between neighboring routers, they will not form an adjacency and will not exchange routes.
References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/osfp/o
質問 # 60
......
HPE6-A85日本語問題集でリアル試験問題でテストエンジン問題集でトレーニング:https://jp.fast2test.com/HPE6-A85J-premium-file.html