HPE6-A73 Online Practice Questions and Answers

A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer verifies that the AOS-CX switch is configured for NTP and is successfully synchronized. What should be done to fix this issue?

A. Ensure the engineer's web browser is configured for the same timezone as the AOS-CX switch

B. Ensure the engineer's PC is synchronized to the same NTP server as the AOS-CX switch

C. Ensure NetEdit and the AOS-CX switch are synchronized to the same NTP server

D. Enable trust settings for the AOS-CX switch's SSL certificate

A network has an ABR that connects area 0 and 1. A network engineer configures a summarized route for area 0. The ABR is a designated router (DR) for the segment it uses to connect to area 1.

Which LSA type is assigned to this route when the summarized route is advertised into area 1 by the ABR?

A. LSA1

B. LSA4

C. LSA3

D. LSA2

A company has recently purchased a ClearPass AAA solution. Their network consists of AOS-CX switches at the access layer. The company is implementing a rollout of IoT devices for smart building management to control the lighting and HVAC systems. The network administrator is concerned about allowing secure access to these devices since they only support MAC-Auth.

Which ClearPass feature should the administrator leverage to help determine that MAC address spoofing is not occurring for this group of devices?

A. User-based tunneling

B. Device fingerprinting

C. RADIUS change of authorization

D. Downloadable user roles

An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.

What would cause this problem?

A. Local optimization was not enabled on the VSX LAG

B. The VSX LAG hash does not match the remote peer

C. The VSX LAG interfaces are in layer-3 mode

D. LACP was enabled in active mode on the VSX LAG

Examine the attached diagram Two AOS-CX switches are configured for VSX at the access layer, where servers attached to them. An SVI interface is configured for VLAN 10 and serves as the default gateway for VLAN 10. The ISL link between the switches fails, but the keepalive interface functions. Active gateway has been configured on the switches.

What is correct about access from the servers to the Core?

A. Server 2 can successfully access the core layer via the keepalive link.

B. Server 1 and Server 2 can communicate with each other via the core layer.

C. Server 2 cannot access the core layer.

D. Server 1 can access the core layer via both uplinks.

Examine the network exhibit.

A company has a guest implementation for wireless and wired access. Wireless access is implemented through a third-party vendor. The company is concerned about wired guest traffic traversing the same network as the employee traffic. The network administrator has established a GRE tunnel between AOS-CX switches where guests are connected to a routing switch in the DMZ.

Which feature should the administrator implement to ensure that the guest traffic is tunneled to the DMZ while the employee traffic is forwarded using OSPF?

A. OSPF route maps using the "set metric" command

B. Policy-based routing (PBR)

C. User-based tunneling (UBT)

D. Classifier policies

An administrator creates an ACL rule with both the "count" and "log" option enabled. What is correct about the action taken by an AOS-CX switch when there is a match on this rule?

A. By default, a summarized log is created every minute with a count of the number of matches

B. Logging will not include certificate and TLS events, but counting will

C. The "count" and "log" options are processed by the AOS-CX switch's hardware ASIC

D. The total in the "log" record and the count could contain different rule matching statistics

Examine the following ACL rule policies:

Permit traffic from 10.2.2.1 through 10.2.2.30 to anywhere

Permit traffic from 10.2.2.40 through 10.2.2.55 to anywhere

Deny all others

Based on this policy, place the following ACL rule statements in the correct order to accomplish the above filtering policy.

A. deny ip 10.2.2.31 255.255.255.255 any permit ip 10.2.2.40 255.255.255.248 any permit ip 10.2.2.48 255.255.255.248 any deny ip 10.2.2.32 255.255.255.224 any permit ip 10.2.2.0 255.255.255.192 any

B. permit ip 10.2.2.40 255.255.255.248 any permit ip 10.2.2.48 255.255.255.248 any permit ip 10.2.2.0 255.255.255.192 any deny ip 10.2.2.31 255.255.255.255 any deny ip 10.2.2.32 255.255.255.224 any

C. deny ip 10.2.2.31 255.255.255.255 any deny ip 10.2.2.32 255.255.255.224 any permit ip 10.2.2.40 255.255.255.248 any

permit ip 10.2.2.48 255.255.255.248 any

permit ip 10.2.2.0 255.255.255.192 any

D. deny ip 10.2.2.31 255.255.255.255 any permit ip 10.2.2.40 255.255.255.248 any deny ip 10.2.2.32 255.255.255.224 any permit ip 10.2.2.48 255.255.255.248 any permit ip 10.2.2.0 255.255.255.192 any