Pass HP HPE6-A73 Exam Quickly With DumpsMaterials [Q19-Q35] : Free Exams Dumps Materials : http://exams.dumpsmaterials.com

NEW QUESTION 19
Examine the following AOS-CX switch configuration:

Which access control entries would allow web traffic to the web servers 10.1.0.100 and 10.1.1.100?

permit tcp servers eq 80

permit tcp any 10.1.0.100 0.0.1.0 eq 80

permit tcp any 10.1.0.100/10.1.1.100 eq 80

permit tcp any 10.1.0.100/255.255.254.255 eq 80

NEW QUESTION 20
An AOS-CX switch is configured to implement downloadable user roles. Examine the AOS-CX switch output:

Based on this output, what is the state of the user’s access?

No downloadable user role exists

MAC authentication has passed, but 802.1X authentication is in progress

The RADIUS request timed out to the AAA server

The port should be configured for 802.1X

NEW QUESTION 21
Examine the network exhibit.

A company has a guest implementation for wireless and wired access. Wireless access is implemented through a third-party vendor. The company is concerned about wired guest traffic traversing the same network as the employee traffic. The network administrator has established a GRE tunnel between AOS-CX switches where guests are connected to a routing switch in the DMZ.
Which feature should the administrator implement to ensure that the guest traffic is tunneled to the DMZ while the employee traffic is forwarded using OSPF?

OSPF route maps using the “set metric” command

Policy-based routing (PBR)

User-based tunneling (UBT)

Classifier policies

NEW QUESTION 22
What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Rate limiting and egress queue shaping can be used to restrict inbound traffic

Limits can be defined only for broadcast and multicast traffic

Rate limiting and egress queue shaping can be applied globally

Traffic rate limit is configured on queue level

NEW QUESTION 23
Examine the following AOS-CX configuration:

Based on this configuration, which statement is correct regarding IoT traffic?

If 10.100.1.2 is not reachable, the IoT traffic will be automatically dropped by the switch

If a specific route is not available in the routing table, the traffic will be routed to 10.100.1.2

The next hop of 10.100.1.2 can be one or more hops away from the AOS-CX switch

All routes are ignored in the routing table for IoT traffic, which is routed to 10.100.1.2

NEW QUESTION 24
When cutting and pasting configurations into NetEdit, which character is used to enter commands within the context of the previous command?

<ESC>

“>”

Space

Tab

NEW QUESTION 25
Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:

The downloadable user roles are not being downloaded to the AOS-CX switch Based on the above output , what is the problem?

There is a date/time issue between the ClearPass server and the switch.

The certificate that ClearPass uses is invalid

DNS fails to resolve the ClearPass servers FQDN.

The AOS-CX swicth does not have the ClearPass certificate involved.

NEW QUESTION 26
A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AAA.
Each switch has the two servers defined. A network engineer notices the following command configured on the AOS-CX switches:
radius-server tracking user-name monitor password plaintext aruba123
What is the purpose of this configuration?

Implement replay protection for AAA messages

Define the account to implement downloadable user roles

Speed up the AAA authentication process

Define the account to implement change of authorization

NEW QUESTION 27
A network engineer is using NetEdit to manage AOS-CX switches. The engineer notices that a lot of thirdparty VoIP phones are showing up in the NetEdit topology. The engineer deletes these, but they are automatically rediscovered by NetEdit and added back in.
What should the administrator do to solve this problem?

Change the VoIP phone SNMP community string to something unknown by NetEdit

Disable LLDP globally on the AOS-CX switches where phones are connected

Disable SSH access on all the VoIP phones

Disable the RESTful API on all the VoIP phones

NEW QUESTION 28
An administrator has an aggregation layer of 8325CX switches configured as a VSX pair. The administrator is concerned that when OSPF network changes occur, the aggregation switches will respond to the changes slowly, and this will affect network connectivity, especially VoIP calls, in the connected access layer switches.
What should the administrator do on the aggregation layer switches to alleviate this issue?D18912E1457D5D1DDCBD40AB3BF70D5D

Implement route aggregation

Implement bidirectional forwarding detection (BFD)

Reduce the hello and dead interval timers

Implement graceful restart

NEW QUESTION 29
Examine the AOS-CX configuration:

The switches have a default factory password setting NetEdit fails to access the configuration of the AOS-CX switches. What should the administrator do to solve this problem?

Set a password for the default admin user account.

Disable telnet globally.

Use the default VRF instead of the mgmt VRF

Enable IP routing globally

NEW QUESTION 30
Examine the network exhibit:

The ACL configuration defined on Core-1 is as follows:
If telnet was being used, which device connection would be permitted and functional in both directions?
(Choose two.)

Client 3 to Client 2

Client 1 to Client 2

Server 2 to Client 2

Server 1 to Client 1

Client 1 to Client 3

NEW QUESTION 31
What is a best practice concerning voice traffic and dynamic segmentation on AOS-CX switches?

Controller authentication and user-based tunneling of the voice traffic

Switch authentication and user-based tunneling of the voice traffic

Controller authentication and port-based tunneling of the voice traffic

Switch authentication and local forwarding of the voice traffic

NEW QUESTION 32
Examine the attached diagram

Two AOS-CX switches are configured for VSX at the access layer, where servers attached to them. An SVI interface is configured for VLAN 10 and serves as the default gateway for VLAN 10. The ISL link between the switches fails, but the keepalive interface functions. Active gateway has been configured on the switches.
What is correct about access from the servers to the Core?

Server 2 can successfully access the core layer via the keepalive link.

Server 1 and Server 2 can communicate with each other via the core layer.

Server 2 cannot access the core layer.

Server 1 can access the core layer via both uplinks.

NEW QUESTION 33
An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

access-list ip server 10 permit tcp any web-servers group web-ports

access-list ip server 10 permit tcp any object-group web-servers object-group web-ports

access-list ip server 10 permit tcp any group web-servers group web-ports

access-list ip server 10 permit tcp any web-servers web-ports

NEW QUESTION 34
A network administrator wants to replace older access layer switches with AOS-CX 6300 switches.
Which virtual switching technology can the administrator implement with this solution?

Both VSF and VSX

Only Backplane stacking

Only VSF

Only VSX

NEW QUESTION 35
Which concept is implemented using Aruba’s dynamic segmentation?

Root of trust

Device fingerprinting

Zero Touch Provisioning

Colorless port