Updated Dec 21, 2021 Verified Pass HPE6-A79 Exam in First Attempt Guaranteed
Free HPE6-A79 Sample Questions and 100% Cover Real Exam Questions (Updated 56 Questions)
NEW QUESTION 28
Refer to the exhibits.
Exhibit 1
Exhibit 2
Exhibit 3
Exhibit 4
A captive portal-based solution is deployed in a Mobility Master (MM) - Mobility Controller (MC) network. A wireless station connects to the network and attempts the authentication process. The outputs are shown in the exhibits.
Which names correlate with the authentication and captive portal servers?
- A. ClearPass.23 is the authentication server, and cp.mycompany.com is the captive portal server.
- B. cp.mycompany.com is the authentication server, and ClearPass.23 is the captive portal server.
- C. ClearPass.23 is the authentication server, and MC2 is the captive portal server.
- D. Internal database in MC2 is the authentication server, and cp.mycompany.com is the captive portal server.
Answer: A
NEW QUESTION 29
Refer to the exhibit.
A network administrator has Mobility Master (MM) - Mobility Controller (MC) based network and has fully integrated the MCs with ClearPass for RADIUS-based AAA services. The administrator is testing different ways to run user role derivation.
Based on the show command output, what method has the administrator use for assigning the "corp" role to client with MAC xx:xx:xx:xx:xx:xx?
- A. Server Derivation Rules using IETF attributes.
- B. User Derivation Rules using the client's MAC.
- C. Dynamic Authorization using VSA attributes.
- D. Dynamic Authorization using IETF attributes.
Answer: C
NEW QUESTION 30
Refer to the exhibit.
Based on the output shown in the exhibit, with which Aruba devices has Access-1 established tunnels?
- A. a single standalone MC
- B. a pair of switches running VXLAN
- C. a pair of MCs within a L3 cluster
- D. a pair of standalone MCs
Answer: C
NEW QUESTION 31
Refer to the exhibit:
A company acquires ten barcode scanners to run inventory tasks. These WiFi devices support WPA2-PSK security only. The network administrator deploys a WLAN named scanners using the configuration shown in the exhibit.
What must the network administrator do next to ensure that the scanner devices successfully connect to their SSID?
- A. Set internal as the MAC authentication server group.
- B. Enable L2 Authentication Fail Through.
- C. Add scanner MAC addresses in the internal database.
- D. Add scanner MAC addresses in user derivation rules.
Answer: C
NEW QUESTION 32
Refer to the exhibit.
A network administrator has created AAA profile for the corporate VAP. In addition to the regular Radius based authentication, the administrator needs to be able to disconnect the users from either of the two servers that are part of the "Radius" server group.
What must the administrator do next in order to achieve this goal?
- A. Use the "Radius' server group as both the Accounting Server Group and the RFC 3576 server in the AAA profile.
- B. Use the "Radius" server group as the RADIUS Accounting Server Group in the AAA profile.
- C. Create two new RFC 3576 servers and assign them as the RFC 3576 servers in the AAA profile.
- D. Use the "Radius' server group as the RFC 3576 server in the AAA profile.
Answer: A
NEW QUESTION 33
Refer to the exhibit.
A network administrator deploys a new Mobility Master (MM) - Mobility Controller (MC) network. To test the solution, the network administrator accesses the console of a pair of APs and statically provisions them. However, one of the APs does not propagate the configured SSIDs. The network administrator looks at the logs and sees the output shown in the exhibit.
Which actions must the network administrator take to solve the problem?
- A. Create another AP group in the MC's configuration, and re-provision one AP with a different group.
- B. Re-provision one of the APs with a different name, and add new entries with the proper group in the whitelist.
- C. Re-provision one of the APs with a different name or modify the name in the whitelist.
- D. Re-provision the AP with a different group, and modify the name of one AP in the whitelist.
Answer: C
NEW QUESTION 34
Refer to the exhibit.
A network administrator is validating client connectivity and executes the show command shown in the exhibit. Which authentication method was used by a wireless station?
- A. 802.1X user authentication
- B. 802.1X machine authentication
- C. EAP authentication
- D. MAC authentication
Answer: A
NEW QUESTION 35
Refer to the exhibit.
An Aruba network is deployed with L2 and L3 Mobility Master (MM) redundancy across two datacenters, as shown in the exhibit. The network administrator confirms that all Mobility Controllers (MC) are currently communicating with MM1, which is the L2 Active and, L3 Primary.
Which MM IP will MCs communicate with if MM1 fails?
- A. 10.2.1.21
- B. 10.1.1.12
- C. 10.1.1.10
- D. 10.2.1.10
Answer: D
NEW QUESTION 36
Users run Skype for Business on wireless clients with no WMM support over an Aruba Mobility Master (MM) - Mobility Controller (MC) based network. When traffic arrives at the wired network, it does not include either L2 or L3 markings.
Which configuration steps should the network administrator take to classify and mark voice and video traffic with UCC heuristics mode?
- A. Enable WMM in a VAP profile, and explicitly permit voice and video UDP ports in a firewall policy.
- B. Confirm OpenFlow is enabled in the user role and VAP profile. Then enable WMM in a SSID profile, and explicitly permit voice and video UDP ports in a firewall policy.
- C. Confirm MM is the Openflow controller of MCs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.
- D. Confirm the MC is the Openflow controller of the MMs and Openflow is enabled in VAP and firewall roles. Enable Skype4Business ALG in UCC profiles.
Answer: A
NEW QUESTION 37
Refer to the exhibit.
A network administrator is evaluating a deployment to validate that a user is assigned the proper role and reviews the output in the exhibit. How is the role assigned to user?
- A. The MC assigned the role based on Aruba VSAs.
- B. The MC assigned the default role based on the authentication method.
- C. The MC assigned the role based on server derivation rules.
- D. The MC assigned the machine authentication default user role.
Answer: B
NEW QUESTION 38
Refer to the exhibit.
A network administrator completes the initial configuration dialog of the Mobility Controllers (MCs) and they join the Mobility Master (MM) for the first time. After the MM-MC association process, network administrator only creates AP groups, VAPs, and roles. Next, the network administrator proceeds with the configuration of the policies and creates the policy shown in the exhibit.
Which additional steps must be done to make sure this configuration takes effect over the contractor users?
- A. Option C
- B. Option B
- C. Option D
- D. Option A
Answer: A
NEW QUESTION 39
A customer wants a WLAN solution that permits Aps to terminate WPA-2 encrypted traffic from different SSIDs to different geographic locations where non-related IT departments will take care of enforcing security policies. A key requirement is to minimize network congestion, overhead, and delay while providing data privacy from the client to the security policy enforcement point. Therefore, the solution must use the shortest path from source to destination.
Which Aruba feature best accommodates this scenario?
- A. Inter MC S2S IPsec tunnels
- B. Inter MC GRE tunnels
- C. Multizone Aps
- D. RAPs
- E. VIA
Answer: D
NEW QUESTION 40
Refer to the exhibits.
Exhibit 1
Exhibit 2
Exhibit 3
A network administrator wants to allow contractors to access the corporate WLAN named EmployeesNet with the contractor role in VLAN 40. When users connect, they do not seem to get an IP address. After some verification checks, the network administrator confirms the DHCP server (10.254.1.21) is reachable from the Mobility Controller (MC) and obtains the outputs shown in the exhibits.
What should the network administrator do next to troubleshoot this problem?
- A. Permit UDP67 to the contractor role.
- B. Confirm there is an IP pool for VLAN 40.
- C. Configure the DHCP helper address.
- D. Remove the IP address in VLAN 40.
Answer: A
NEW QUESTION 41
A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.
Since not all locations own public IP addresses, the security team is not able to configure strict firewall polices at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.
What should the network administrator do to ensure the solution is functional and secure?
- A. Block all ports to the MMs except UDP 500 and 4500.
- B. Deploy an MC at the datacenter as a VPN concentrator.
- C. Install a PEFV license, and configure firewall policies that protect the MM.
- D. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.
Answer: A
NEW QUESTION 42
A network administrator has deployed an Airwave Management Platform (AMP) server and integrated it with a Mobility Master (MM) - Mobility Controller (MC) based WLAN. The AMP server already has all Aruba Mobility devices including Access Points (APs) in the "UP" devices list.
What are two actions the administrator can execute upon the APs under "Airwave>Devices>Monitor"? (Choose two.)
- A. Run Spectrum Analysis locally.
- B. Invoke MC's show commands for that Access Point.
- C. Re-provision the Access Point.
- D. Open the WebUI of the MC where the AP terminates.
- E. Disable and change the mode of the AP's radios.
Answer: A,B
NEW QUESTION 43
Refer to the exhibit.
After deploying several cluster pairs, the network administrator notices that all APs assigned to Cluster1 communicate with MC1 instead of being distributed between members of the cluster. Also, no IP addresses are shown under the Standby IP column.
What should the network administrator do to fix this situation?
- A. Apply the same cluster profile to both members.
- B. Rename the cluster profile as "CLUSTER1".
- C. Enable Cluster AP load balancing.
- D. Place MCs at the same hierarchical group level.
Answer: B
NEW QUESTION 44
Refer to the exhibit.
A network administrator wants to allow contractors to access the WLAN named EmployeesNet. In order to restrict network access, the network administrator wants to assign this category of users to the contractor user role. To do this, the network administrator configures ClearPass in a way that it returns the Aruba-User-Role with the contractor value.
When testing the solution, the network administrator receives the wrong role.
What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?
- A. Check the Download role from the CPPM option in the AAA profile.
- B. Create server deviation rules in the server group.
- C. Set contractor as the default role in the AAA profile.
- D. Create Contractor firewall role in the M.
Answer: A
NEW QUESTION 45
Refer to the exhibit.
A network administrator has a Mobility Master (MM) Mobility Controller (MC) architecture along with the MC in the DMZ for terminating RAPs. The network firewall has been provisioned to allow access to the MC in the DMZ for both UDP 500 and 4500. Then he proceeds to provision an AP as shown in the exhibit.
Which additional configuration steps must the administrator to assure RAPs successfully contact the MC? (Choose two.)
- A. Add the RAP1 entry in the CPsec whitelist at the MM level.
- B. Create the RAP1 account in the InternalDB of the MC.
- C. Create the RAP1 account in the InternalDB of the MM.
- D. Create an IP local pool and PSK at the device node level.
- E. Create an IP local pool and PSK at the /mm/mynode level.
Answer: A,E
NEW QUESTION 46
A company with 535 users deploys an Aruba solution with more than 1000 Aruba APs, two 7220 Mobility Controllers, and a single Mobility Master (MM) virtual appliance at the campus server farm. The MCs run a HA Fast failover group in dual mode and operate at 50% AP capacity.
If there is an MM or MC failure, the network administrator must ensure that the network is fully manageable and the MC load does not exceed 80%.
What can the network administrator do to meet these requirements?
- A. Place the APs in two different AP-Groups.
- B. Add an MC and an MM in the server farm.
- C. Enable oversubscription in the HA group.
- D. Place the APs in the same hierarchy level.
- E. Add an MM and enable DC redundancy.
- F. Create a cluster with AP load balancing.
Answer: E
NEW QUESTION 47
A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.
While all users authenticate with [email protected] type of credentials, radius1 has user accounts with the domain name portion.
Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: A
NEW QUESTION 48
A network administrator wants to receive a warning level alarm every time the noise floor rises above -82 dBm on any of the AP radios.
Which alarm definition must the network administrator create to accomplish this?
Answer:
Explanation:
NEW QUESTION 49
Refer to the exhibit.
A network administrator adds a Mobility Controller (MC) in the /mm level and notices that the device does not show up in the managed networks hierarchy. The network administrator accesses the CLI. executes the show switches command, and obtains the output shown in the exhibit.
What is the reason that the MC does not appear as a managed device in the hierarchy?
- A. The digital certificate of the MC is not trusted by the MM.
- B. The IP address of the MC does not match the one that was defined in the MM.
- C. The network administrator has not moved the device into a group yet.
- D. The network administrator added the device using the wrong Pre-Shared Key (PSK).
Answer: B
NEW QUESTION 50
......
Download Real HP HPE6-A79 Exam Dumps Test Engine Exam Questions: https://www.exam4tests.com/HPE6-A79-valid-braindumps.html