HPE6-A70 Online Practice Questions and Answers

Refer to the exhibit.

Network administrators need to set up a WLAN that uses WPA2 encryption and authenticates users with a

preshared key (PSK) that is the same for all users. Administrators do not see where they should specify

the option for the preshared key.

What should the administrators do?

A. Click Personal in the slide bar.

B. Click the + icon in the Authentication server section

C. Return to the first page in the wizard and select the guest option

D. Configure an L3 authentication profile after the WLAN wizard is complete

A company has an Aruba solution. The company wants to host a guest login portal with this solution, and the login portal must gie guests the option to create their own login accounts. How can a network administrator help meet these criteria?

A. Choose the Internal captive portal with email registration option for the guest WLAN.

B. Make sure to create a guest provisioning account for the guest WLAN.

C. Disable authentication in the captive portal profile for the guest WLAN.

D. Choose ClearPass or the other external captive portal option for the guest WLAN.

Assume that administrators accept the default forwarding mode for WLANs. How does wireless user traffic flow in a master-local architecture, and how does it flow in a Mobility Master (MM) architecture?

A. In the master-local architecture, all traffic is tunneled to the master controller to handle. In a MM architecture, all traffic is tunneled to the MM to handle.

B. In both architectures, APs forward corporate user traffic locally and tunnel guest user traffic to a Mobility Controller (MC) to handle.

C. In both architectures, traffic is tunneled to a Mobility Controller (MC) to handle.

D. In the master-local architecture, traffic is tunneled to a local Mobility Controller (MC) to handle. In a MM architecture, all traffic is tunneled to the MM to handle.

A network administrator creates an employee WLAN on an Aruba solution that uses WLAN WPA2Enterprise security and an external RADIUS server. When the administrator tests the WLAN, the test client receives limited connectivity and cannot access any resources, but the RADIUS server shows that the user authenticated successfully. What should the administrator check as a possible source of this issue?

A. the connectivity between the AP that the client is associated to and the MC

B. the firewall role and policy that apply to this user

C. the certificate on the RADIUS server

D. the connectivity between the Master Controller (MC) for the client and the RADIUS server

What is a key difference between an Aruba Air Monitor (AM) and an Aruba Spectrum Analyzer (SA)?

A. An AM detects threats such as rogue APs, while an SA analyzes RF conditions.

B. An AM detects rogue APs and provides data services to clients, while an SA only detects rogue APs.

C. An AM scans on only one 802.11 frequency band, while an SA scans on both 802.11 frequency bands.

D. An AM both detects wireless intrusion attempts and mitigates them, while an SA only detects wireless intrusion attempts.

A company has an Aruba Mobility Master (MM)-based solution with a WLAN that assigns users to VLANs 10-19. The company wants the Aruba solution to act at Layer 3 to route wireless user traffic. What must network administrators configure to permit the solution to forward traffic correctly?

A. VLAN 10-19 interfaces and proper IP settings on the MM nodes

B. trunk ports that support VLANs 10-19 on the managed Mobility Controllers (MCs)

C. VLAN 10-19 interfaces on the Mobility Controllers (MCs) as the default gateway for wireless users

D. trunk ports that support VLANs 10-19 on the MM nodes

What is one reason for a network administrator to visit the Dashboard > Usage window on an Aruba Mobility Master (MM)?

A. to check license usage and determine the need for additional licenses

B. to analyze short terms trends in network usage by client, AP, and application

C. to view system usage statistics for the MM and troubleshoot potential issues

D. to generate reports about traffic patterns and network usage over the past several months

If the decrypt-tunnel forwarding mode is selected in an employee WLAN, where is the user traffic decrypted?

A. at the switch

B. at the AP

C. at the controller

D. at the RADIUS server

A company currently uses Instant APs (IAPs), all managed by a virtual controller. The company expects to double in size without the next 18 months. The network manager wants to purchase additional APs to service the increased traffic load. The network manager also wants to deploy a Mobility Controller (MC) to manage all APs. How should the network administrator adapt the current IAPs to a controlled architecture?

A. Manage both the MCs and IAP clusters with Aruba Central.

B. Configure the IAPs to establish CPSec tunnels to the new MCs.

C. Manage both the MCs and IAP clusters with a Mobility Master (MM).

D. Convert the IAPs to Campus APs controlled by the new MCs.

A network administrator creates a user account on an Aruba Mobility Master (MM) with the guest-provisioning role. Which task does this user have the rights to perform?

A. set up portal pages

B. create guest user accounts

C. monitor guest clients

D. create guest WLANs

Refer to the exhibit.

A network administrator adds a global rule in the area shown in the exhibit. Where does the global rule take effect?

A. It immediately applies only to the guest role, as part of the final policy applied to the role.Administrators cannot apply the rule to other roles.

B. It immediately applies to the guest role and other roles, as part of the first policy applied to the role.

C. It immediately applies to the guest role and other roles, as part of the final policy applied to the role.

D. It immediately applies only to the guest role and other roles, as part of the first policy applied to the role. Administrators can choose to apply the rule to other roles.

A network administrator configures this policy:

Users to which this policy applies are unable to receive IP addresses with DHCP. How should the

administrator fix the issue?

A. Change user to any in the user any svc-dhcp permit rule.

B. Move the user any svc-dhcp permit rule to the bottom of the list.

C. Remove the deny rule from the policy.

D. Use the correct service alias in the user any svc-dhcp permit rule.

Refer to the exhibit.

Which role must AP1 play?

A. Instant AP (IAP)

B. Mesh Point AP

C. Mesh Portal AP

D. Remote AP (RAP)

What is an advantage for a network administrator to use AirWave over a Mobility Master (MM)?

A. ability to gather and analyze historical user data, and monitor client association and network usage trends

B. scans wireless client settings and brings those settings in compliance with corporate security policies.

C. ability to monitor and manage a Mobility Controller (MC) to configure the WLAN

D. provides realtime firewall hits for client network troubleshooting

An Aruba solution has a WLAN that uses WPA2-Personal security. How are encryption keys dynamically managed for the wireless users?

A. The MM generates and distributes keys to clients and access points (APs).

B. Administrators configure identical key strings on the Mobility Controllers (MCs) and wireless client 802.1X settings.

C. Keys are generated and distributed securely during each wireless user authentication process.

D. Keys are derived from the preshared key configured on the WLAN and on each wireless client.