Get Latest [Sep-2022] Conduct effective penetration tests using ActualVCE HPE6-A71
Penetration testers simulate HPE6-A71 exam PDF
NEW QUESTION 78
An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic.
But, when users connect with their wired desktops, they have full access to corporate resources.
What must the administrator do to restrict desktop usage based on the users' role assignment?
- A. Implement ACLs on the RAP port.
- B. Identify the RAP port as untrusted.
- C. Apply a server-derived role privacy to the RAP port.
- D. Implement per-user tunnel node on the RAP.
Answer: B
NEW QUESTION 79
An administrator needs to implement multiple configuration changes on a set of Aruba Mobility Controllers (MCs) that involve both VLAN and interface configurations at the same time. The controllers are deployed in a cluster.
How can the administrator accomplish this task?
- A. Use the Live Update (in-service update) feature for a cluster of controllers.
- B. Use AirWave to deploy the changes to respective controllers in the cluster.
- C. Apply pending changes, and schedule the changes to occur at a similar time.
- D. Create a template and deploy the changes by use of the bulk configuration update feature.
Answer: D
NEW QUESTION 80
An administrator deploys an Aruba wireless solution comprised of:
-a pair of Mobility Masters (MMs)
-multiple Mobility Controllers (MCs) and virtual Mobility Controllers (VMCs)
-an AirWave server
-a ClearPass server
The Aruba Mobility solution runs ArubaOS 8.X.
Which component in this environment globally defines and deploys VLANs for wireless users?
- A. AirWave server
- B. Mobility Controller or Virtual Mobility Controller
- C. ClearPass server
- D. Mobility Master
Answer: D
Explanation:
Explanation
https://www.arubanetworks.com/products/networking/gateways-and-controllers/mobility-master/
NEW QUESTION 81
Refer to theexhibit.
An administrator configures a split-tunnel policy to be used by RAPs at branch offices. Under the Configuration section on the Mobility master (MM) shown in the exhibit, where should the administrator configure the split-tunnel mode sothat it can be deployed to the RAPs?
- A. WLAN
- B. Roles & Policies
- C. Access Points
- D. Services
Answer: A
NEW QUESTION 82
Refer to the exhibits.
Exhibit 1: WLAN VAP configuration
Exhibit 2: Microsoft NPS server configuration
Exhibit 3: Server group configuration for the VAP.
An employee authenticates with the username employee and the correct password. However, once the user authenticates, an administrator notices that the employee is assigned the authenticated role and not the desired employee role.
What should the administrator do to solve this problem?
- A. Associate the user to the employee group in Microsoft NPS.
- B. Reference the employee role in the WLAN VAP on the controller.
- C. Change the server group name on the controller.
- D. Add a new server group rule on the controller.
Answer: D
Explanation:
Explanation
We have to add new rule:
Filter-Id - equals - EMPL - string - set role - employee
NEW QUESTION 83
Once connected to a WLAN, a user cannot reliably access resources in a company's network. Based on the output shown in the exhibit, what can be determined about the users connection?
- A. The user has successfully authenticated through use of PEAP.
- B. The user is connected to a controller through use of the VIA client.
- C. The user is connected to an ArubaOS-Switch.
- D. The user is connected wirelessly to a controller.
Answer: C
NEW QUESTION 84
Refer to the exhibit.
An administrator implements an L2 cluster of Aruba Mobility Controllers (MCs) as shown in the exhibit. An external RADIUS AAA server authentication clients associated with the Active User Anchor Controller (A-UAC), where the NAS IP address sent from Controller B is 10.254.1.2.
By default, what happens to the user's session when it is handed over to the Standby UAC (S-UAC) after a failover?
- A. The user's session remains active and RADIUS messages can still be processed between the S-UAC and AAA server.
- B. The user's session is disconnected and has to reconnect, and no record of this process is stored on the AAA server.
- C. The user's session is disconnected and has to reconnect, but the S-UAC automatically updates the NAS-IP address on the AAA server to record the event.
- D. The user's session remains active, but the AAA server cannot implement RADIUS Change of Authorization (CoA).
Answer: A
NEW QUESTION 85
Refer to the exhibit.
An administrator supports a RAP at a branch office shown in the exhibit. The company has one Mobility Controller (MC) at the Primary DMZ site and one at the Secondary DMZ site. The RAP is configured to connect to only the MC at the Primary DMZ site. A network outage with the ISP at the Primary DMZ site causes the RAP to reboot. Upon reboot, the RAP cannot build a tunnel to the Secondary DMZ site MC because the administrator forgot to addthe Second LMS IP address to the AP Group configuration. Once the RAP can successfully connect, the administrator can add the Secondary DMZ MC as a backup LMS to fix the AP Group.
What should the administrator implement to allow the RAP to connect tothe MC at the Secondary DMZ site while the outage at the primary site persists?
- A. Dynamic discovery through multicast ADP
- B. Dynamic discovery through DHCP Option 43
- C. Static configuration from apboot mode
- D. Dynamic discovery through DHCP Option 60
Answer: B
NEW QUESTION 86
A Microsoft RADIUS server is used to centralize AAA functions by a company. Upon a successful authentication lookup performed by an Aruba Mobility Controller (MC), the administrator wants to have the RADIUS server pass back the correct post-authentication role name that the controller should apply to the user's traffic.
Which additional task must the administrator perform for the controller's configuration to implement this process?
- A. Configure the server-derived rules on the controller.
- B. Install ClearPass's VSA file on the controller.
- C. Install Microsoft's VSA file on the controller.
- D. Enable AAA on the controller.
Answer: A
NEW QUESTION 87
In a cluster-controllerenvironment, which Aruba component in a network builds a cache table of mDNS records that can be used to help user devices access Apple Bonjour services?
- A. any Aruba Mobility Controller
- B. the Mobility Controllers that arecluster members
- C. the Mobility Master and cluster members
- D. the Mobility Master
Answer: B
NEW QUESTION 88
An administrator supports a cluster of four Aruba Mobility Controllers (MCs) with management addresses of
10.1.100.101, 10.1.100.102, 10.1.100.103, and 10.1.202.181. The administrator accesses an AP associated with thiscluster, reboots it and accesses apboot mode. The administrator executes the printenv command.
Which AP parameter contains the IP addresses of the cluster members that the AP should use to connect to the cluster?
- A. Nodelist
- B. Cfg_lms
- C. Master_ip
- D. Servername
Answer: A
NEW QUESTION 89
A cluster has two Aruba 7240 Mobility Controllers (MCs) and two Aruba 7220Mobility Controllers (MCs).
How is the cluster leader elected if all controllers have the default priority?
- A. The 7240 controller with the lowest IP address is elected.
- B. The 7240 controller with the highest MAC address is elected.
- C. The controller with the highest IP address is elected.
- D. The controller with the highest MAC address is elected.
Answer: B
NEW QUESTION 90
An administrator configures an ArubaOS-Switch for per-user tunneled node. Which protocols does the switch use to establish and maintain a connection with the Aruba Mobility Controller (MC)? (Choose two.)
- A. IPSec
- B. GRE
- C. PAPI
- D. SSL
Answer: B,C
Explanation:
Explanation/Reference:
NEW QUESTION 91
An administrator implements a per-port tunneled node configuration for an Aruba Mobility Controller (MC) thatruns ArubaOS 8.x. The controller performs both MAC and 802.1X authentication.
What must the administrator specify on the controller to allow for 802.1X authentication to succeed?
- A. Enable server roles in the AAA profile.
- B. Enable L2 Authentication Fail Through in the AAA profile.
- C. Define MAC addresses in the local database for the 802.1X users.
- D. Define External RADIUS servers in the AAA profile.
Answer: A
NEW QUESTION 92
A group of users on the same floor of a campus residence experience connectivity problems continuously throughout the morning. The administrator suspects that it is a L1 problem with physical interference.
What can the administrator do to find the cause of this problem?
- A. Access a controller's spectrum analysis data directly from AirWave with Quick Links.
- B. Access RAPIDS data from AirWave's RAPIDS section.
- C. Access a controller's spectrum analysis data from AirWave's dashboards, under Home.
- D. Access RAPIDS data from AirWave's dashboards, under Home.
Answer: A
NEW QUESTION 93
What is true about Aruba controllers under normal operations in a Mobility Master (MM)-Mobility Controller (MC) architecture?
- A. ARM must be used to optimize wireless performance.
- B. The Mobility Master can push a full configuration to a Mobility Controller.
- C. Any controller can perform local configurations.
- D. The APs can terminate on both Mobility Masters and Mobility Controllers.
Answer: D
NEW QUESTION 94
An administrator moves an AP from Campus 1 to Campus 2. At the Campus 2, the moved AP does not connect to a controller and download an AP Group configuration.
Which process should the administrator perform to reset the AP back to its initial default state?
- A. From the AP's ArubaOS CLI, execute write erase all.
- B. From apboot mode, execute purgeenv.
- C. From the controller's ArubaOS, execute write erase all.
- D. From apboot mode, execute factory_reset.
Answer: D
NEW QUESTION 95
Refer to the exhibit.
The branch office RAP shown inthe exhibit provides secure wireless employee access. Because of security concerns, the company's security policy does not allow wireless guest access. Some customers that visit the Branch office need Internet access. A RAP's Ethernet Port 3 is used for wired guest access and Port2 is used for wired employee access. When employees connect to Port2, they are authenticated successfully and split-tunnel policy allows them access to both corporate and Internet resources from the Branch office. Guest users, however, cannot access Internet resources on Port 3.
How can the administrator provide guest users Internet access?
- A. Create a guest VAP that allows wired RAP port access.
- B. Implement the MultiZone feature on the RAP.
- C. Implement ClientMatch to handle the employee and guest user traffic correctly.
- D. Configurea bridge role for the wired RAP port.
Answer: A
NEW QUESTION 96
An administrator sets up a cluster of Aruba Mobility Controllers (MCs). What can the administrator determine about the cluster from the command output shown below?
- A. This is an L3-connected cluster.
- B. AP load balancing is enabled.
- C. User load balancing is enabled.
- D. This is an L2-connected cluster.
Answer: B
NEW QUESTION 97
......
Tested Material Used To HPE6-A71 Test Engine: https://dumps4download.actualvce.com/HP/HPE6-A71-valid-vce-dumps.html