Question 1

DRAG DROP
Match the solution components of HPE Aruba Networking Central NetConductor (Options may be
used more than once or not at all.)

Question 2

A company with 10,281 employees recently deployed new HPE Aruba Networking Access Points at
different branch offices. Wireless 802.IX authentication will be against a RADIUS server in the cloud.
The security team is concerned that the traffic between the AP and the RADIUS server will be
exposed.
What is the appropriate solution for this scenario?

• A. Enable IPSec under Data Handling in HPE Aruba Networking Central
• B. Configure RedSec on the AP and the RADIUS server.
• C. Enable EAP-TLS on all wireless devices. Enable EAP-TTLS on all wireless devices.

Question 3

In an AOS-10 architecture using an AP. a gateway and traffic forwarding mode * mixed, what happens
when a client connects to an open enhanced 5SID where their VLAN assignment will be bridged?

• A. Authenticated Diffie-Hellman is not utilized
• B. RADIUS protocol is utilized.
• C. No encryption is applied.
• D. The gateway will not respond.

Question 4

A customer has several hundred wireless loT devices and is looking for an authentication solution
that meets the following requirements:

Which solutions will address the customer's requirements? (Select two.)

• A. Local User Derivation Rules
• B. MPSK Local with MAC Authentication
• C. MPSK and an internal RADIUS server
• D. MPSK Local with EAP-TLS
• E. HPE Aruba Networking ClearPass Policy Manager

Question 5

Which standard supported by some HPE Aruba Networking APs can enable a customer to accurately
locate wireless client devices within a few meters?

• A. 802.1 Imc
• B. 807.11ah
• C. 802.11be
• D. 802.11v

Question 6

You are proposing new CX 8360 VSX switches to replace a customer's existing core switches. The
customer is concerned about the possibility of a split-brain scenario between the VSX pair.
How is the VSX pair affected when the ISL is down and keepalive is up?

• A. The VSX pair is out-of-sync.
• B. The VSX pair nodes are still forwarding traffic.
• C. The VSX LAGs are in a degraded state.
• D. The VSX pair is not at risk.

Question 7

AppRF 2.0 allows you to:

• A. configure ACL and bandwidth control for applications
• B. classify web content based on reputation
• C. customize application signatures
• D. monitor applications and radio frequencies

Question 8

You are setting up a customer's 150 headless loT devices that do not support 802.1 X. What should
you use?

• A. Multiple Pre-Shared Keys (MPSK) Local
• B. Multiple Pre-Shared Keys (MPSK) with WPA3-AES
• C. HPE Aruba Networking ClearPass profiling with MAC-AUTH
• D. HPE Aruba Networking ClearPass profiling with WPA-PSK

Question 9

Your customer currently has two (2) 5406 modular switches with MSTP configured as their core
switches. You are proposing a new solution. What would you explain regarding the AOS-CX VSX
switch pair when the Spanning-tree needs to be set up?

• A. Use vsx-sync in the MSTP region configuration to get synced.
• B. Enable vsx-sync stp-global in vsx mode to sync the configuration.
• C. Spanning-tree configuration is synced by default with VSX.
• D. Enable vsx-peer stp-global in vsx mode to sync the configuration.

Question 10

With the CX 6000 48G switch with uplinks of 1/1/47 and 1/1/48, what does the switch do when a
client port detects a loop and tx-disable parameter is used?

• A. The ports that confirmed the loop are disabled.
• B. The ports that transmitted and received the loop are disabled.
• C. The port that transmitted the loop is disabled.
• D. The port that received the loop is disabled.

Question 11

Refer to the exhibit.

In the Core-2 configuration of spanning-tree instance 2 priority 0, what needs to be configured to
enable the root for VLAN 20 while VLAN 10 remains root on Core-1?

• A. Spanning-tree instance 2 VLAN 20
• B. Spanning-tree priority 0 VLAN 20
• C. Spanning-tree priority root VLAN 20
• D. Spanning-tree VLAN 20

Question 12

A company is in the planning stages to migrate to all their wireless domain laptops from WPA2 from
WPA2 EAP-PEAP to EAP-TLS with machine Authentication. The administrator is testing a new Group
Policy (GPO) that was pushed to only a few windows domain Laptops. The policy will configure the
wireless profile to perform machine and certificate-based authentication.
To support this new initiative the administrator also configured a new HPE Aruba Networking
ClearPass 802.1X wireless service that only allows devices that successfully perform machine and
certificate-based authentication. After successfully pushing the GPO, the Windows laptops are
unable to join the configured ‘’secure_wireless’’ SSID as shown below.

Which configuration setting would resolve this issue?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Question 13

Which network components communicate using the RADIUS protocol for authentication and
accounting?

• A. an access point and the endpoint device
• B. a Network Access Server and a RADIUS authentication server
• C. an endpoint device and a RADIUS authentication server
• D. a Network Access Server and an endpoint device

Question 14

Which statements are true regarding a VXLAN Implementation on HPE Aruba Networking switches?
(Select two.)

• A. They are only available for datacenter switches (CX 8k, 9k, 10k).
• B. VNIs encapsulate and decapsulate VXLAN traffic.
• C. MTU size must be increased beyond the default.
• D. All AOS-CX switches support VXLAN.
• E. VTEPs encapsulate and decapsulate VXLAN traffic.

Question 15

DRAG DROP
Match the solution component of HPE Aruba network Central NetConductor. (Options may be used
more than once or not at all.)