56試験解答はHPE6-A79最新版テストエンジン [Q24-Q47]

56試験解答はHPE6-A79最新版テストエンジン

合格確定HPE6-A79試験問最新のHPE6-A79試験問題集PDF2022年更新

HP HPE6-A79 認定試験の出題範囲：

トピック	出題範囲
トピック 1	ゲストWLANを構成し、クライアント接続を検証しますマルチゾーンソリューションを構成して検証します AirWaveでトリガーとカスタムレポートを作成します
トピック 2	WLANインフラストラクチャ全体を分析してライセンス要件を決定します顧客の要件を分析してQoSの必要性を判断します
トピック 3	役割の導出のためにWPA2 PSKMac認証を使用してWLANを構成します複雑なマルチサイト高可用性モビリティ環境を構成および検証します
トピック 4	高度なサービスとセキュリティソリューションを実装するシナリオを分析してリモートアクセス要件を決定する
トピック 5	顧客の要件を分析してマルチゾーン展開の必要性を判断する顧客の要件を分析して役割、ファイアウォールポリシー、およびルールの要件を判断する
トピック 6	音声とビデオの最適化をサポートするようにWLANを構成および検証します WLANインフラストラクチャ全体を分析してアーキテクチャ要件を決定します
トピック 7	デバイスをAirWaveと統合および監視し、RF環境を監視および最適化します
トピック 8	AirWaveとモビリティマスターを使用して、クライアントの状態に関する情報を収集します役割の派生を構成し、既存のAAAサーバーと統合します
トピック 9	モビリティコントローラでスペクトラムアナライザダッシュボードを監視する安全なWLANを設定し、既存のインフラストラクチャと統合する
トピック 10	クライアント接続とネットワークアクセスのトラブルシューティング安全なWLANへのクライアント接続を検証する
トピック 11	リモートアクセス用のコントローラーへのIAP-VPNを構成および検証しますシナリオを分析してAirWaveのスケーラビリティ要件を決定します

質問 24
Refer to the exhibit.

A network administrator is validating client connectivity and executes the show command shown in the exhibit. Which authentication method was used by a wireless station?

A. 802.1X machine authentication
B. 802.1X user authentication
C. EAP authentication
D. MAC authentication

正解: B

質問 25
An Aruba WiFi solution for a football stadium includes 2500 APs, two Mobility Masters (MM), and eight Mobility Controllers (MCs). Key requirements are seamless roaming and even distribution of APs and clients, even during a MC failure.
Which MC's deployment option offers seamless roaming, and even AP client distribution among all MCs before and after a MC failure?

A. an eight-member HA group in dual mode
B. an eight-member L2-connected cluster
C. two four-member L2-connected clusters
D. a two-member HA group in dual mode

正解: C

質問 26
A network administrator wants to receive a warning level alarm every time the noise floor rises above -82 dBm on any of the AP radios.
Which alarm definition must the network administrator create to accomplish this?

正解:

解説:

質問 27
A company with 50 small coffee shops in a single country requires a single mobility solution that solves connectivity needs at both the main office and branch locations. Coffee shops must be provisioned with local WiFi internet access for customers.
The shops must also have a private WLAN that offers communication to resources at the main office to upload sales, request supplies through a computer system, and make phone calls if needed. In order to simplify network operations, network devices at the coffee shops should be cloud managed.
Which technologies best meet the company needs at the lowest cost?

A. BOC with CAPs
B. IAPVPN
C. SD-Branch
D. Activate with RAPs

正解: C

質問 28
A network administrator wants to receive a major alarm every time a controller or an Aruba switch goes down for either a local or an upstream device failure. Which alarm definition must the network administrator create to accomplish this?

正解:

解説:

質問 29
Refer to the exhibits.

A network administrator deploys User Based Tunneling (UBT) in a corporate network to unify the security policies enforcement. When users authenticate with 802.1X, ClearPass shows Accept results, and sends the Aruba-User-Role attribute as expected. However, the AOS-CX based switch does not seem to build the tunnel to the Mobility Controller (MC) for this user.
Why does the switch fail to run UBT for the user?

A. ClearPass is sending the wrong VSA type.
B. ClearPass is sending the wrong Vendor ID.
C. The switch is not configured with the gateway-role.
D. The switch has not fully associated to the MC.
E. The switch is not configured with the port-access role.

正解: B

質問 30
Users run encrypted Skype for Business traffic with no WMM support over an Aruba Mobility Master (MM) - Mobility Controller (MC) based network. When voice, video, and application sharing traffic arrive at the wired side of the network, all the flows look alike due to the lack of L2 and L3 markings How can the network administrator identify these flows and mark QoS accordingly?

A. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable WMM in a VAP profile.
B. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and the firewall roles. Then enable the Skype4Business ALG in the UCC profiles.
C. Confirm the MM is the Openflow controller of the MCs and Openflow is enabled in VAP and the firewall roles. Then integrate the MM with the Skype4Business SDN API. and enable the Skype4Business ALG in the UCC profiles.
D. Use a media firewall policy that match these three flows, and use permit and TOS actions with 56, 40, and 34 values for voice, video, and application sharing, respectively Then enable the Skype4Business ALG in the UCC profiles.

正解: C

質問 31
Refer to the exhibit.

After deploying several cluster pairs, the network administrator notices that all APs assigned to Cluster1 communicate with MC1 instead of being distributed between members of the cluster. Also, no IP addresses are shown under the Standby IP column.
What should the network administrator do to fix this situation?

A. Enable Cluster AP load balancing.
B. Apply the same cluster profile to both members.
C. Place MCs at the same hierarchical group level.
D. Rename the cluster profile as "CLUSTER1".

正解: D

質問 32
A network administrator is in charge of a Mobility Master (MM) - Mobility Controller (MC) based network security. Recently the Air Monitors detected a Rogue AP in the network and the administrator wants to enable "Tarpit" based wireless containment.
What profile must the administrator enable "tarpit" wireless containment on?

A. IDS General profile
B. IDS DOS profile
C. IDS profile
D. IDS Unauthorized device profile

正解: D

質問 33
Refer to the exhibit.

A network engineer deploys two different DHCP pools in an Instant AP (IAP) cluster for WLANs that will have connectivity to a remote site using Aruba IPSec.
Based on the output shown in the exhibit, which IAP-VPN DHCP modes are being used?

A. local L3 and centralized L2
B. centralized L3 and distributed L2
C. distributed L3 and centralized L2
D. local L3 and distributed L2

正解: B

質問 34
A network administrator has deployed an Airwave Management Platform (AMP) server and integrated it with a Mobility Master (MM) - Mobility Controller (MC) based WLAN. The AMP server already has all Aruba Mobility devices including Access Points (APs) in the "UP" devices list.
What are two actions the administrator can execute upon the APs under "Airwave>Devices>Monitor"? (Choose two.)

A. Open the WebUI of the MC where the AP terminates.
B. Re-provision the Access Point.
C. Invoke MC's show commands for that Access Point.
D. Disable and change the mode of the AP's radios.
E. Run Spectrum Analysis locally.

正解: C,E

質問 35
Users run Skype for Business on wireless clients with no WMM support over an Aruba Mobility Master (MM) - Mobility Controller (MC) based network. When traffic arrives at the wired network, it does not include either L2 or L3 markings.
Which configuration steps should the network administrator take to classify and mark voice and video traffic with UCC heuristics mode?

A. Enable WMM in a VAP profile, and explicitly permit voice and video UDP ports in a firewall policy.
B. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.
C. Confirm OpenFlow is enabled in the user role and VAP profile. Then enable WMM in a SSID profile, and explicitly permit voice and video UDP ports in a firewall policy.
D. Confirm MM is the Openflow controller of MCs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.

正解: A

質問 36
An organization wants to deploy a WLAN infrastructure that provides connectivity to these client categories:
* Employees
* Contractors
* Guest users
* Corporate IoT legacy devices that support no authentication or encryption Employees and contractors must authenticate with company credentials and get network access based on AD group membership. Guest users are required to authenticate with captive portal using predefined credentials. Only employees will run L2 encryption.
Which implementation plan fulfills the requirements while maximizing the channel usage?

A. Create a single VAPto run WPA2-AES and 802.1x authentication. MAC authentication L2 fail through, captive portal, and VIA support.
B. Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal and L2 fail through.
C. Create VAP1 to run WPA2-AES and 802.1x authentication, and VAP2 to run opensystem encryption with MAC authentication and captive portal.
D. Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal.

正解: C

質問 37
Refer to the exhibit.

A network administrator has a Mobility Master (MM) Mobility Controller (MC) architecture along with the MC in the DMZ for terminating RAPs. The network firewall has been provisioned to allow access to the MC in the DMZ for both UDP 500 and 4500. Then he proceeds to provision an AP as shown in the exhibit.
Which additional configuration steps must the administrator to assure RAPs successfully contact the MC? (Choose two.)

A. Add the RAP1 entry in the CPsec whitelist at the MM level.
B. Create the RAP1 account in the InternalDB of the MM.
C. Create an IP local pool and PSK at the device node level.
D. Create the RAP1 account in the InternalDB of the MC.
E. Create an IP local pool and PSK at the /mm/mynode level.

正解: A,E

質問 38
A network administrator is in charge of a Mobility Master (MM) - Mobility Controller (MC) based WLAN. The administrator has deployed an Airwave Management Platform (AMP) server in order to improve the monitoring capabilities and generate reports and alerts.
The administrator has configured SNMPv3 and Admin credentials on both the MMs and MCs and has created Groups and Folders in the AMP server.
What two additional steps must the administrator do in order to let Airwave monitor the network devices? (Choose two.)

A. Set the AMP's IP address and Org string as DHCP option 43.
B. Move "New" devices into a group and folder in Airwave.
C. Map the AMP's IP address with a mgmt-config profile in the MM.
D. Manually add each MM. MC and Access Point in the AMP server.
E. Manually add the Active MM and wait for automatic Discovery.

正解: C,E

質問 39
A company plans to build a resort that includes a hotel with 1610 rooms, a casino, and a convention center. The company is interested in a mobility solution that provides scalability and a service-based approach, where they can rent the WLAN infrastructure at the convention center to any customer (tenant) that hosts events at the resort.
The solution should provide:
* Seamless roaming when users move from the hotel to the casino or the convention center
* Simultaneous propagation of the resort and customer-owned SSIDs at the convention center
* Null management access upon resort network infrastructure to the customers (tenants)
* Configuration and monitor rights of rented SSIDs to the customers (tenants) Which deployment meets the requirements?

A. Deploy lAPs along with AirWave. and deploy role-based management access control.
B. Deploy lAPs. and manage them with different central accounts.
C. Deploy lAPs with zone based SSIDs and manage them with different central accounts.
D. Deploy an MM-MC infrastructure with multizone AP's, with one zone for tenant SSIDs.
E. Deploy an MM-MC infrastructure, and create different hierarchy groups for MCs and APs

正解: B

質問 40
An Aruba Mobility Master (MM) - Mobility Controller (MC) solution is connected to a wired network that is ready to prioritize DSCP marked traffic. A group of WMM-enabled clients sends traffic marked at L2 only.
What must the network administrator do to map those markings to DSCP equivalent values when traffic is received by the APs?

A. Enable Skype4Business ALG Support.
B. Enable WMM in the SSID profile.
C. Enable traffic to be marked with session ACLs.
D. Enable WMM in the VAP profile.

正解: D

質問 41
Refer to the exhibit.

A network administrator deploys DSCP based prioritization in the entire wired network to improve voice quality for a SIP-based IP telephony system used by the company. However, users report that calls they make from WLAN have poor audio quality, while desktop phones do not experience the same problem. The network administrator makes a test call and looks in the datapath session table.
Based on the output shown in the exhibit, what is one area that the network administrator should focus on?

A. wired network congestion
B. UCC based DSCP correction
C. Dynamic Multicast Rate Optimization
D. WMM support on the WLAN

正解: A

質問 42
A network administrator wants to permit explicit SSH, FTP and HHTP(s) access to servers in the 10.100.20.5 to 10.100.20.31 range, all devices in 10.100.21.0/24 network, and a host with IP address 10.100.22.70. The services must work properly at all times.
Which configuration scripts accomplish this task with the fewer number of lines, while avoiding access to other devices not included in these ranges? (Choose two.)

A. Option D
B. Option E
C. Option B
D. Option A
E. Option C

正解: C,D

質問 43
Refer to the exhibit.

A network administrator adds a Mobility Controller (MC) in the /mm level and notices that the device does not show up in the managed networks hierarchy. The network administrator accesses the CLI. executes the show switches command, and obtains the output shown in the exhibit.
What is the reason that the MC does not appear as a managed device in the hierarchy?

A. The IP address of the MC does not match the one that was defined in the MM.
B. The network administrator added the device using the wrong Pre-Shared Key (PSK).
C. The digital certificate of the MC is not trusted by the MM.
D. The network administrator has not moved the device into a group yet.

正解: A

質問 44
Refer to the exhibit.

An organization provides WiFi access through a corporate SSID with an Aruba Mobility Master (MM) - Mobility Controller (MC) network that includes PEF functions. The organization wants to have a single firewall policy configured and applied to the employee role.
This policy must allow users to reach Web, FTP, and DNS services, as shown in the exhibit. Other services should be exclusive to other roles. The client NICs should receive IP settings dynamically.
Which policy design meets the organization's requirements while minimizing the number of policy rules?