HPE6-A71 Online Practice Questions and Answers

An administrator inherits an Aruba Mobility Controller (MC) that has an unknown username and password. Which credentials should the administrator enter to reset the administrative access?

A. Username: backdoor; Password: @ruba

B. Username: admin; Password: admin

C. Username: password; Password: forgetme!

D. Username: Aruba; Password: Reset!

An administrator wants to implement bandwidth limits for guest users to restrict their Internet usage. On the Mobility Master (MM), where would the administrator define these limits?

A. User role

B. Firewall policy

C. AAA policy

D. 802.1X policy

What are the responsibilities of a cluster leader in a cluster of Aruba Mobility Controllers (MCs)? (Choose two.)

A. To identify primary and secondary Mobility Controllers for APs

B. To create a table to determine how a wireless client maps to a cluster member

C. To identify a backup cluster leader for redundancy

D. To manage the configuration of cluster members

E. To automatically load balance clients if the load across cluster members changes

Refer to the exhibit.

A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user's wireless session?

A. The AP has reached the limit for number of users that are allowed to connect to the radio.

B. The controller cannot reach the AAA server to perform the authentication.

C. The user is configured for PEAP, but the WLAN profile on the controller implemented EAP-TLS.

D. The user misconfigured the Managed Network Settings profile in Windows.

Refer to the exhibit.

Which controller connection with the Aruba as the cluster leader?

A. Controller A

B. Controller B

C. Controller C

D. Controller D

Refer to the exhibit.

An administrator implements an L2 cluster of Aruba Mobility Controllers (MCs) as shown in the exhibit. An

external RADIUS AAA server authentication clients associated with the Active User Anchor Controller (A

UAC), where the NAS IP address sent from Controller B is 10.254.1.2.

By default, what happens to the user's session when it is handed over to the Standby UAC (S-UAC) after a failover?

A. The user's session remains active and RADIUS messages can still be processed between the S-UAC and AAA server.

B. The user's session remains active, but the AAA server cannot implement RADIUS Change of Authorization (CoA).

C. The user's session is disconnected and has to reconnect, but the S-UAC automatically updates the NAS-IP address on the AAA server to record the event.

D. The user's session is disconnected and has to reconnect, and no record of this process is stored on the AAA server.

An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.

Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?

A. Whitelist the RAP's IP address on the MC.

B. Define the RAP's IPSec pre-shared key in Activate.

C. Whitelist the RAP's certificate on the MC.

D. Configure a VPN address pool in Activate.

A VIA client tries to initially connect to corporate office controller through an intermediate firewall. However, the VPN connection fails. The administrator examines the firewall rules and determines that rules for UDP 4500 and UDP 500 are configured.

Which additional protocol must be allowed in the firewall rules to resolve this connection failure?

A. TCP 389

B. UDP 4500

C. UDP 8200

D. TCP 993

An administrator deploys a RAP at a branch office. The RAP should send all employee corporate traffic to the Mobility Controller (MC) and Internet traffic should stay local.

Which forwarding mode should the administrator configure for the employee WLAN to allow for this forwarding?

A. Tunnel

B. Decrypt-tunnel

C. Bridge

D. Split-tunnel

An administrator manages an Aruba wireless network. Users authenticate to the wireless network using PEAP, where their credentials are validated by the controller's local database. The company purchases Android tablets to use with an inventory tracking system. The administrator notices that many of the users of these devices use their normal username and password to authenticate, which allows the tablet to access all resources that the user can access from their wireless computers. This is a security violation.

Which Aruba Mobility Controller (MC) feature should the administrator configure to restrict tablet access to a web portal for authentication, where an appropriate post-authentication policy can be applied to these tablets?

A. AirMatch

B. AP fingerprinting

C. Server-derived roles

D. User-derived rules

What must the administrator configure on AirWare to monitor and run operational commands on the Aruba Mobility Masters (MMs) and Mobility Controllers (MCs)?

A. PAPI and SSH/telnet

B. PAPI and SNMP

C. SNMP and HTTPS

D. SNMP and SSH/telnet

An administrator supports a group of engineers that commonly troubleshoot company problems from any location without wired connectivity. They need secure connectivity to a corporate web-based portal with their Android smartphones. Which solution should the administrator recommend to solve the engineer's connectivity problem?

A. Deploy site-to-site VPN

B. Deploy VIA clients

C. Deploy Mobile Device Management

D. Deploy Campus APs with mesh

Which network components are tracked by Aruba Clarity? (Choose two.)

A. Wireless associations

B. DNS lookups

C. AP and controller health

D. WLAN health

E. Client health

An administrator wants to implement the MultiZone feature in a company's network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company's DMZ.

Given this scenario, what is true about the implementation of Multizone?

A. A management session is established only with the primary zone, but data sessions are established to all zones.

B. Only the primary zones can reboot, upgrade, or provision MultiZone APs.

C. The primary and data zones must be in the same L2 subnet.

D. A MultiZone AP can initially connect to any zone to obtain its configuration.

An administrator deploys Aruba Mobility Controller 7005s to a company's branch offices. The administrator wants to disable the console port to prevent unauthorized access to the controllers.

Which controller command should the administrator use to implement this policy?

A. no console enable

B. no mgmt-user console

C. mgmt-user console-block

D. console disable