HPE6-A79問題集56問でHP ACMXを確実実践
リアル最新HPE6-A79試験問題HPE6-A79問題集
HP HPE6-A79 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
質問 15
A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.
While all users authenticate with [email protected] type of credentials, radius1 has user accounts with the domain name portion.
Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?
- A. Option D
- B. Option B
- C. Option C
- D. Option A
正解: D
質問 16
A network administrator wants to receive a major alarm every time a controller or an Aruba switch goes down for either a local or an upstream device failure. Which alarm definition must the network administrator create to accomplish this?
正解:
解説:
質問 17
A software development company has 764 employees who work from home. The company also has small offices located in different cities throughout the world. During working hours, they use RAPs to connect to a datacenter to upload software code as well as interact with databases.
In the past two month, cabling issues have occurred connection to the 7240XM Mobility Controller (MC) that runs ArubaOS 8 and terminates the RAPs. These RAPs disconnect, affecting the users connected to the RAPs. This also causes problems with code uploads and database synchronizations. Therefore, the company decides to add a second 7240XM controller for redundancy.
How should the network administrator deploy both controllers in order to provide the redundancy while preventing failover events from disconnecting users?
- A. Connect both controllers with common VLANs. and create an HA fast failover group with public addresses in the internet VLAN.
- B. Connect both controllers with different VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
- C. Connect both controllers with common VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
- D. Connect both controllers with common VLANs. and configure LMS/BLMS values equal to public addresses in the internet VLAN.
正解: A
質問 18
A network administrator has deployed an Airwave Management Platform (AMP) server and integrated it with a Mobility Master (MM) - Mobility Controller (MC) based WLAN. The AMP server already has all Aruba Mobility devices including Access Points (APs) in the "UP" devices list.
What are two actions the administrator can execute upon the APs under "Airwave>Devices>Monitor"? (Choose two.)
- A. Invoke MC's show commands for that Access Point.
- B. Run Spectrum Analysis locally.
- C. Disable and change the mode of the AP's radios.
- D. Re-provision the Access Point.
- E. Open the WebUI of the MC where the AP terminates.
正解: A,B
質問 19
Refer to the exhibits.
A user reports slow response time to a network administrator and suggests that there might be a problem with the WLAN. The user's phone supports 802.11ac in the 5 GHz band. The network administrator finds the user in the Mobility Master (MM) and reviews the output shown in the exhibit.
What can the network administrator conclude after analyzing the data?
- A. Since SNR is good, then the high retransmit rate must be due a hidden node scenario or high interference.
- B. High Successful frame count and high Max Speed is an indication of a healthy client. Connection will improve at anytime.
- C. The low SNR forces the client to back off to low MCs. therefore speed is low and retransmits are high.
- D. Client health is poor, but SNR is fair. TX power must be increased in both the client and the AP.
正解: B
質問 20
A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.
Since not all locations own public IP addresses, the security team is not able to configure strict firewall polices at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.
What should the network administrator do to ensure the solution is functional and secure?
- A. Block all ports to the MMs except UDP 500 and 4500.
- B. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.
- C. Deploy an MC at the datacenter as a VPN concentrator.
- D. Install a PEFV license, and configure firewall policies that protect the MM.
正解: A
質問 21
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator integrates a current Mobility Master (MM) - Mobility Controller (MC) deployment with a RADIUS server to authenticate a wireless user, the network administrator realizes that the client machine is not failing into the it_department role, as shown the exhibits.
Which configuration is required to map the users into the proper role, based on standard attributes returned by the RADIUS server in the Access Accept message?
- A. aaa server-group Corp-Network
set role condition Filter-Id equals it_department set-value it-role - B. aaa server-group Corp-employee
set role condition Filter-Id equals it-role set-value it_department - C. aaa server-group Corp-Network
set role condition Filter-Id equals it-role set-value it_department - D. aaa server-group Corp-employee
set role condition Filter-Id value-of - E. aaa server-group ClearPass
set role condition Filter-Id equals it_department set-value it-role
正解: B
質問 22
An organization owns a fully functional multi-controller Aruba network with a Virtual Mobility Master (VMM) in VLAN20. They have asked a network consultant to deploy a redundant MM on a different server. The solution must offer the lowest convergence time and require no human interaction in case of failure.
The servers host other virtual machines and are connected to different switches that implement ACLs to protect them. The organization grants the network consultant access to the servers only, and appoints a network administrator to assist with the deployment.
What must the network administrator do so the network consultant can successfully deploy the solution? (Choose two.)
- A. Configure an ACL entry that permits UDP 500, TCP 4500, and multicast IP 224.0.0.5.
- B. Allocate VLAN20 to the second server, and extend it throughout the switches, then reserve one IP address for the second MM and another for the VIP.
- C. Allocate VLAN20 to the second server, and extend it throughout the switches, then reserve one IP address for the second MM and another IP address for its gateway.
- D. Configure an ACL entry that permits IP protocol 50, UDP port 500, and multicast IP 224.0.0.18.
- E. Allocate VLAN20 to the second server, and permit routing between them, then reserve one IP address for the second MM and another IP address for its gateway.
正解: A,C
質問 23
Refer to the exhibit.
A network administrator has Mobility Master (MM) - Mobility Controller (MC) based network and has fully integrated the MCs with ClearPass for RADIUS-based AAA services. The administrator is testing different ways to run user role derivation.
Based on the show command output, what method has the administrator use for assigning the "corp" role to client with MAC xx:xx:xx:xx:xx:xx?
- A. Dynamic Authorization using IETF attributes.
- B. User Derivation Rules using the client's MAC.
- C. Dynamic Authorization using VSA attributes.
- D. Server Derivation Rules using IETF attributes.
正解: C
質問 24
An organization wants to deploy a WLAN infrastructure that provides connectivity to these client categories:
* Employees
* Contractors
* Guest users
* Corporate IoT legacy devices that support no authentication or encryption Employees and contractors must authenticate with company credentials and get network access based on AD group membership. Guest users are required to authenticate with captive portal using predefined credentials. Only employees will run L2 encryption.
Which implementation plan fulfills the requirements while maximizing the channel usage?
- A. Create VAP1 to run WPA2-AES and 802.1x authentication, and VAP2 to run opensystem encryption with MAC authentication and captive portal.
- B. Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal and L2 fail through.
- C. Create a single VAPto run WPA2-AES and 802.1x authentication. MAC authentication L2 fail through, captive portal, and VIA support.
- D. Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal.
正解: A
質問 25
Refer to the exhibits.
A network administrator deploys User Based Tunneling (UBT) in a corporate network to unify the security policies enforcement. When users authenticate with 802.1X, ClearPass shows Accept results, and sends the Aruba-User-Role attribute as expected. However, the AOS-CX based switch does not seem to build the tunnel to the Mobility Controller (MC) for this user.
Why does the switch fail to run UBT for the user?
- A. The switch is not configured with the port-access role.
- B. The switch has not fully associated to the MC.
- C. ClearPass is sending the wrong VSA type.
- D. The switch is not configured with the gateway-role.
- E. ClearPass is sending the wrong Vendor ID.
正解: E
質問 26
A network administrator is in charge of a Mobility Master (MM) - Mobility Controller (MC) based WLAN. The administrator has deployed an Airwave Management Platform (AMP) server in order to improve the monitoring capabilities and generate reports and alerts.
The administrator has configured SNMPv3 and Admin credentials on both the MMs and MCs and has created Groups and Folders in the AMP server.
What two additional steps must the administrator do in order to let Airwave monitor the network devices? (Choose two.)
- A. Manually add each MM. MC and Access Point in the AMP server.
- B. Move "New" devices into a group and folder in Airwave.
- C. Set the AMP's IP address and Org string as DHCP option 43.
- D. Manually add the Active MM and wait for automatic Discovery.
- E. Map the AMP's IP address with a mgmt-config profile in the MM.
正解: D,E
質問 27
Refer to the exhibit.
An Aruba network is deployed with L2 and L3 Mobility Master (MM) redundancy across two datacenters, as shown in the exhibit. The network administrator confirms that all Mobility Controllers (MC) are currently communicating with MM1, which is the L2 Active and, L3 Primary.
Which MM IP will MCs communicate with if MM1 fails?
- A. 10.1.1.12
- B. 10.2.1.21
- C. 10.1.1.10
- D. 10.2.1.10
正解: D
質問 28
Refer to the exhibit.
A network administrator is evaluating a deployment to validate that a user is assigned the proper role and reviews the output in the exhibit. How is the role assigned to user?
- A. The MC assigned the default role based on the authentication method.
- B. The MC assigned the machine authentication default user role.
- C. The MC assigned the role based on Aruba VSAs.
- D. The MC assigned the role based on server derivation rules.
正解: A
質問 29
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator adds a new Mobility Controller (MC) to the production Mobility Master (MM) and deploys APs that start broadcasting the employee SSID in the West wing of the building. Suddenly, the employees report client disconnects. When accessing the MM the network administrator notices that the MC is unreachable, then proceeds to access the MC's console and obtains the outputs shown in the exhibits.
What should the network administrator do next to solve the current problem?
- A. Open a TAC case and send the output of tar crash.
- B. Verify the license pools in the MM.
- C. Decommission the MC from the MM, and add it again.
- D. Kill two zombie processes then reboot the MC.
正解: B
質問 30
Refer to the exhibit.
A network administrator is validating client connectivity and executes the show command shown in the exhibit. Which authentication method was used by a wireless station?
- A. EAP authentication
- B. MAC authentication
- C. 802.1X user authentication
- D. 802.1X machine authentication
正解: C
質問 31
An Aruba WiFi solution for a football stadium includes 2500 APs, two Mobility Masters (MM), and eight Mobility Controllers (MCs). Key requirements are seamless roaming and even distribution of APs and clients, even during a MC failure.
Which MC's deployment option offers seamless roaming, and even AP client distribution among all MCs before and after a MC failure?
- A. an eight-member L2-connected cluster
- B. an eight-member HA group in dual mode
- C. two four-member L2-connected clusters
- D. a two-member HA group in dual mode
正解: C
質問 32
Refer to the exhibit.
A 7008 Branch Office Controller (BOC) is deployed in a remote office behind a core router. This core does not support 802.1q encapsulation. The Mobility Controller (MC) is the gateway for two tunneling mode SSIDs, as shown in the exhibit.
Which two different configuration options ensure that wireless users are able to reach the branch network through the router? (Choose two.)
- A. Configure the uplink of the BOC as a trunk port, tagging the controller and the SSOD VLANs, and enable NAT for the SSID VLANs.
- B. Configure all ports of the BOC as access ports on the controller VLAN, and change the gateway of clients to the core router IP.
- C. Configure the uplink of the BOC as a trunk port that permits the controller and the SSID VLANs. The controller VLAN must be native.
- D. Configure the uplink of the BOC as an access port on the controller VLAN, and enable NAT for the SSID VLANs.
- E. Configure the uplink of the BOC as an access port on the controller VLAN, and add static routes in the router for the SSID VLAN subnets.
正解: A,E
質問 33
A network administrator is in charge of a Mobility Master (MM) - Mobility Controller (MC) based network security. Recently the Air Monitors detected a Rogue AP in the network and the administrator wants to enable "Tarpit" based wireless containment.
What profile must the administrator enable "tarpit" wireless containment on?
- A. IDS Unauthorized device profile
- B. IDS profile
- C. IDS DOS profile
- D. IDS General profile
正解: A
質問 34
A customer wants a WLAN solution that permits Aps to terminate WPA-2 encrypted traffic from different SSIDs to different geographic locations where non-related IT departments will take care of enforcing security policies. A key requirement is to minimize network congestion, overhead, and delay while providing data privacy from the client to the security policy enforcement point. Therefore, the solution must use the shortest path from source to destination.
Which Aruba feature best accommodates this scenario?
- A. Inter MC GRE tunnels
- B. Inter MC S2S IPsec tunnels
- C. VIA
- D. Multizone Aps
- E. RAPs
正解: E
質問 35
......
HPE6-A79別格な問題集で最上級の成績にさせるHPE6-A79問題：https://jp.fast2test.com/HPE6-A79-premium-file.html
手に入れよう！最新HPE6-A79認定の有効な試験問題集解答：https://drive.google.com/open?id=1xDEYkmPhKeejU9at5UFMqJZVG7n0K--K