HPE6-A49 Online Practice Questions and Answers

Refer to the exhibits.

Exhibit 1. Existing wiring plan:

Exhibit 2. Current proposal:

A customer has a building that needs a switch upgrade. The customer would like at least 20Gbps for the

uplink bandwidth out of each closet. The building writing plan is shown in Exhibit 1. The customer will not

consider any cable upgrades at this point. The current proposal is shown in Exhibit 2.

Which correction must architect make to the proposal to meet the customer requirements?

A. Change the SR transceivers for each link between the writing closet switches and the network core to LRM transceivers.

B. Add an aggregation layer, and connect writing closet switches to the aggregation layer on Smart Rate ports.

C. Add an aggregation layer, and connect writing closet switches to the aggregation layer with SFP+ SR transceivers.

D. Add a mode conditioning cable for each link between the writing closet switches and the network core.

What is one customer requirement that can drive the need for a relatively dense AP deployment, in which the coverage areas of at least three AP radios overlap?

A. support for beacon management

B. AP operation as hybrid AMs for IDS/WIPS

C. the deployment of dual 5GHz radio APs

D. location tracking of wireless IoT devices

Refer to the exhibit.

A customer needs a wired upgrade for a building on its main campus. The exhibit shows the switches that

architect has selected for each closet and the existing cabling. The customer is not open to changing the cabling. The customer requires link redundancy for the uplinks from each closet and for the links from the building to the core. In non link failure situations, the uplinks from each closet must support at least 20 Gbps, and the building as a whole must have at least 20 Gbps to the core in non link failure situations.

Which options for connecting the closets to the network core are valid? (Select two.)

A. Connect the switch stack on each floor directly to the network core on two fiber connections per floor. Achieve this by patching the inter-floor fiber through the inter-building fiber.

B. Add two aggregation switches in the Floor 1 closet. Connect the switch stack for each closet to the aggregation switches on two fiber links each and the aggregation switches to the core on two fiber links.

C. Combine the nine switches on all three floors into a single switch stack with stacking cables in a ring topology. Connect two Floor 1 members to the network core with one fiber connection each.

D. Combine the nine switches on all three floors into a single switch stack with the MM OM3 fiber cables in a ring topology. Connect two Floor 1 members to the network core with one fiber connection each.

E. Connect the Floor 2 switch stack to Floor 1 with two fiber connections. Do the same for Floor 3. Connect the Floor 1 switch stack to the network core with two fiber connections.

What is one reason to deploy an Aruba 8320 switch when compared to an Aruba 5400R switch?

A. to support cloud-based management and guest services through Aruba Central integration

B. to obtain a great number of options for types of ports, including PoE and non-PoE

C. to enhance network monitoring and analytics

D. to support Zero Touch Provisioning (ZTP)

Refer to the exhibit.

A museum wants to add full 802.11ac wireless coverage across the building, which is about 210 feet (64 m) by 330 feet (100m). The museum has 15-foot (4,6 m) ceilings and stone interior walls. The network needs to support up to 600 wireless guest devices. The exhibit also shows a preliminary plan for AP locations. The museum has eight Ethernet drops in the lobby and gift shop, but has otherwise not been wired.

What is one recommendation that the architect should make to ensure a successful deployment?

A. use of directional antennas to avoid lost signal

B. addition of a writing closet closer to the north side

C. use of at least CAT5 cable to connect to the APs

D. addition of about 10 APs to achieve adequate density

A network architect plans to propose a virtual Mobility Master (VMM) for a new solution. The solution will support up to 4,800 wireless client devices and include: two Virtual Mobility Controllers (VMCs) in a cluster 180 APs

Which licenses should the architect propose?

A. 1 MM-VA-500; 2 MC-VA-250; 540 Enterprise licenses

B. 1 MM-VA-500; 1 MC-VA-250; 180 Enterprise licenses

C. 1 MM-VA-1K; 2 MC-VA-250; one Enterprise license

D. 1 MM-VA-1K; 1 MC-VA-250; 180 Enterprise licenses

A school district has instant APs (IAPs) at multiple locations. The school district wants a simpler way to manage the IAPs from a single location. However, it does not have the IT staff to handle the installation

and management of a management solution on site. What should the architect recommend?

A. Purchase a subscription for Aruba Central device management.

B. Deploy Aruba AirWave in central location.

C. Purchase licenses for a Virtual Mobility Controller (VMC).

D. Deploy an Aruba MC in a central location, and convert IAPs to CAPs.

A customer has an existing Aruba wireless solution to provide wireless access for employees. The solution includes APs, mobility controllers (MCs) at the network core, and a Mobility Master (MM). A customer would like to set up a separately managed guest network and have the traffic go directly to the DMZ.

What should the architect suggest as the simplest solution that meets the requirements?

A. Add APs in a dedicated AP group to support only the guest network SSID.

B. Have a dedicated mobility controller in the DMZ managed by the same MM.

C. Double the number of APs and controllers

D. Use MultiZone, and put a mobility controller in the DMZ.

What is one reason that an architect might choose to use pico-cell coverage rather than overhead in a stadium?

A. to avoid major rewiring and construction concerns

B. to save money by using less powerful and less expensive APs in the deployment

C. to support a higher device density with a higher level of channel reuse

D. to maximize coverage per-AP through the use of calculated directional antennas

In which of these scenarios do the customer requirements point towards tunneled node, or dynamic segmentation, on AOS-Switches?

A. A customer has wired IoT devices and wants to be able to control their access. The architect recommends sending all of their traffic through the MC role-based firewall.

B. A customer wants to manage their AOS-Switches in a more centralized manner. They would like to connect AOS-Switches to AirWave over secure IPsec tunnels and control all configuration from there.

C. A customer has a branch office with an AOS-Switch and an Internet connection. The customer would like to give branch office users secure access to the corporate LAN over an IPsec tunnel.

D. A customer lacks physical security and wants to impose 802.1X authentication on wired ports. After employees complete 802.1X authentication, they should receive full access to the network.

Case study

A retailer needs a wireless and wired network upgrade, as well as an authentication and access control solution for a network that includes a main office with a three-floor building and six branch sites. The branch users all use resources at the main corporate office. Branch office employees will use wireless connections. At the main office, employees use wired and wireless connections. The customer wants the strongest authentication for employee wireless connections. It is also important that the MC role-based firewall can implement consistent access controls on employee connections no matter where the employees connect and no matter how they connect (wirelessly or, at the main site, wired). The customer also needs to provide complimentary wireless access for guests. Guest should be redirected to a portal, through which they can register and login. The customer would like two SSIDs, CompanyXEmployee and CompanyXGuest. The company wants to divide employees in two groups, managers and staff. In the corporate network, managers should only have access to Server Group Managers and staff should only have access to Server Group Staff. Each server group includes necessary services such as domain and DHCP, as well as servers that the employees access to do their jobs. All employees should also have access to the Internet. Guests should only have HTTP and HTTPS access, and only to the Internet.

The customer has: a maximum of 1000 employee devices a maximum of 100 guest devices at the same time

500 devices on wired ports at the main site, which will be supported by 12 new AOS-Switches (mostly employee laptops, as well as a few non-802.1X capable printers, which should just communicate with print servers) The devices used by employees include 450 company-issued laptops, which the company wants to screen for security issues and violations of security policies. All authentications are assumed to be concurrent.

To fulfill the requirements for the wireless network upgrade, the architect plans to propose: 5 RAPs at each of 6 branch sites 60 APs at the main site

The architect will also propose an MM and ClearPass. The architect still needs to plan the Mobility Controllers (MCs). The customer requires high availability for wireless services and redundancy for the MCs. If a single MC fails, the network must continue to function without impact. If an MC fails, the customer must also receive a replacement component for the failed component by the next business day so that their IT staff can install it and get the network back to normal operation as soon as possible. Software upgrades must also be seamless, without the introduction of any downtime for wireless services, and the customer needs to be able to obtain the latest software over the lifetime of the solution for the next several years.

Which plan for authentication meets the customer needs?

A. Employee SSID = WPA2-802.1X, Guest SSID = WPA2-PSK, Wired edge ports = No authentication

B. Employee SSID = WPA2-802.1X, Guest SSID = Captive portal, Wired edge ports = No authentication

C. Employee SSID = WPA2-802.1X, Guest SSID = Captive portal, Wired edge ports = 802.1X + MAC-Auth

D. Employee SSID = WPA2-PSK, Guest SSID = MAC-Auth, Wired edge ports = MAC-Auth

Case study

A customer needs a wireless network upgrade for 802.11ac and possibly an upgrade to the wired network.

The customer requires dual-radio 802.11ac APs, each radio of which can support 4x4 MIMO at full feature

set.

The customer has given architects this information about their wireless devices:

2700 IoT devices which will have only wireless connections; they support WPA2 with 802.1X

300 on each floor in 3 buildings with 3 floors each

5,400 users, who use devices such as laptops and smartphones

600 users on each floor in 3 buildings with 3 floors each

24 security cameras which will have only wireless connections; they support WPA2 with 802.1X and have

a local power source

4 on floor 1 of each of the 3 buildings

2 on the other 6 floors

The architect also has collected information about the existing wired network.

The existing access layer switches support these features:

10/100/1000 edge ports

PoE (802.3af)

1GbE fiber uplinks

The existing aggregation switches support these features:

1/10GbE fiber ports

ARP tables up to 62,000

The customer has provided this figure that shows the existing cabling between floors and between

buildings:

Each floor is about 100 feet (30 m) by 140 feet (43 m) with a 10 foot (3 m) ceiling. Interior walls are drywall. The layout for each floor is similar to that shown below. CAT5e cable is extended to all areas.

What is one piece of additional information architects should obtain from the customer before they design the wireless solution?

A. whether the users sometimes connect their laptops with Ethernet

B. whether the IoT devices support MAC-Auth

C. the number of concurrently used wireless devices per user

D. the power requirements for the security cameras

What is one requirement for ensuring that MCs can update their software without the need for a maintenance window?

A. MCs must be managed by an MM and connected to the same switch.

B. MCs must be in a cluster and connected in the same VLANs.

C. MCs must be directly connected on at least one port.

D. MCs must have AP licenses assigned to them in a dedicated local pool.

A retailer has many small outlets. Each outlet has: a local Internet connection, but no local services. The outlets have no local IT staff. All traffic must go through the main office. Devices at the site are primarily POS systems.

The retailer currently has a complex VPN solution, but would like to: Shift entirely to wireless devices with a new 802.11ac network Simplify network setup for existing and new outlets

The architect has examined the sites and determined that each will require about 1 to 3 APs. The customer wants the most cost-effective solution that meets the requirements.

Which solution should the architect recommend for each remote site?

A. Instant APs (IAPs) with CPSec control channels to Aruba Central

B. Campus APs (CAPs) with CPSec control channels to a main office MC

C. Remote APs (RAPs) with IPsec tunnels to a main office MC

D. Campus APs (CAPs) with a local MC that has an SD-WAN license

The airport needs to support several different SSIDs, including:

four for individual airlines

one for the airport as a whole

one for airport security

The airport security traffic must terminate on different mobility controllers (MCs) from the rest of the airport

traffic and be managed entirely separately. Airlines also want to terminate traffic at their MCs.

The airport MCs and airport security MCs require redundancy while airlines do not.

Which plan for MCs and Mobility Master (MM) meets the needs of this scenario?

A. one MCs for the airport, one MC for airport security, and one MC for each of the four airlines with its own SSID, all controlled by the same MM

B. one MCs for the airport, a cluster of MCs for airport security controlled by a pair of MMs, and one MC for each of the four airlines

C. a cluster of MCs for the airport, a cluster of MCs for airport security, and one MC for each of four airlines, all controlled by the same MM pair

D. a cluster of MCs for the airport controlled by an MM pair, a cluster of MCs for airport security controlled by a different MM pair, and one standalone MC for each of the four airlines.