[Q12-Q28] Tested Material Used To HPE6-A79 Test Engine Exam Questions in here [Jun-2022]

Rate this post

Tested Material Used To HPE6-A79 Test Engine Exam Questions in here [Jun-2022]

Penetration testers simulate HPE6-A79 exam PDF

HP HPE6-A79 Exam Syllabus Topics:

Topic	Details
Topic 1	Monitor the Spectrum Analyzer dashboard on the Mobility Controller Configure a secure WLAN and integrate it with an existing infrastructure
Topic 2	Analyze customer requirements to determine the need for a multizone deployment Analyze customer requirements to determine roles, firewall policies, and rule requirements
Topic 3	Analyze a complex highly available multi-controller environment to determine mobility requirements Analyze functional requirements to create a solution design and implementation plan
Topic 4	Implement advanced services and security solutions Analyze a scenario to determine remote access requirements
Topic 5	Configure and validate remote connectivity using RAP or a branch office solution Configure and validate Aruba WLAN solutions
Topic 6	Configure and validate IAP-VPN to a controller for remote access Analyze a scenario to determine AirWave scalability requirements
Topic 7	Configure and validate a WLAN to support voice and video optimization Analyze an entire WLAN infrastructure to determine the architectural requirements
Topic 8	Troubleshoot client connectivity and network access Validate client connectivity to a secure WLAN
Topic 9	Configure a guest WLAN and validate client connectivity Configure and validate a multizone solution Create triggers and custom reports in AirWave
Topic 10	Configure a WLAN with WPA2 PSK Mac authentication for role derivation Configure and validate a complex multisite high availability mobility environment
Topic 11	Analyze an entire WLAN infrastructure to determine the licensing requirements Analyze customer requirements to determine the need for QoS
Topic 12	Integrate and monitor devices with AirWave Monitor and optimize the RF environment

NO.12 Refer to the exhibit.

A network administrator wants to allow contractors to access the WLAN named EmployeesNet. In order to restrict network access, the network administrator wants to assign this category of users to the contractor user role. To do this, the network administrator configures ClearPass in a way that it returns the Aruba-User-Role with the contractor value.
When testing the solution, the network administrator receives the wrong role.
What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?

Check the Download role from the CPPM option in the AAA profile.

Set contractor as the default role in the AAA profile.

Create Contractor firewall role in the M.

Create server deviation rules in the server group.

NO.13 An organization wants to deploy a WLAN infrastructure that provides connectivity to these client categories:
* Employees
* Contractors
* Guest users
* Corporate IoT legacy devices that support no authentication or encryption Employees and contractors must authenticate with company credentials and get network access based on AD group membership. Guest users are required to authenticate with captive portal using predefined credentials. Only employees will run L2 encryption.
Which implementation plan fulfills the requirements while maximizing the channel usage?

Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal and L2 fail through.

Create a single VAPto run WPA2-AES and 802.1x authentication. MAC authentication L2 fail through, captive portal, and VIA support.

Create VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal.

Create VAP1 to run WPA2-AES and 802.1x authentication, and VAP2 to run opensystem encryption with MAC authentication and captive portal.

NO.14 Refer to the exhibit.

A network administrator has created AAA profile for the corporate VAP. In addition to the regular Radius based authentication, the administrator needs to be able to disconnect the users from either of the two servers that are part of the “Radius” server group.
What must the administrator do next in order to achieve this goal?

Use the “Radius” server group as the RADIUS Accounting Server Group in the AAA profile.

Create two new RFC 3576 servers and assign them as the RFC 3576 servers in the AAA profile.

Use the “Radius’ server group as both the Accounting Server Group and the RFC 3576 server in the AAA profile.

Use the “Radius’ server group as the RFC 3576 server in the AAA profile.

NO.15 Refer to the exhibits.
Exhibit 1

Exhibit 2

Exhibit 3

A network administrator wants to allow contractors to access the corporate WLAN named EmployeesNet with the contractor role in VLAN 40. When users connect, they do not seem to get an IP address. After some verification checks, the network administrator confirms the DHCP server (10.254.1.21) is reachable from the Mobility Controller (MC) and obtains the outputs shown in the exhibits.
What should the network administrator do next to troubleshoot this problem?

Permit UDP67 to the contractor role.

Remove the IP address in VLAN 40.

Configure the DHCP helper address.

Confirm there is an IP pool for VLAN 40.

NO.16 A company plans to build a resort that includes a hotel with 1610 rooms, a casino, and a convention center. The company is interested in a mobility solution that provides scalability and a service-based approach, where they can rent the WLAN infrastructure at the convention center to any customer (tenant) that hosts events at the resort.
The solution should provide:
* Seamless roaming when users move from the hotel to the casino or the convention center
* Simultaneous propagation of the resort and customer-owned SSIDs at the convention center
* Null management access upon resort network infrastructure to the customers (tenants)
* Configuration and monitor rights of rented SSIDs to the customers (tenants) Which deployment meets the requirements?

Deploy an MM-MC infrastructure with multizone AP’s, with one zone for tenant SSIDs.

Deploy lAPs along with AirWave. and deploy role-based management access control.

Deploy lAPs with zone based SSIDs and manage them with different central accounts.

Deploy an MM-MC infrastructure, and create different hierarchy groups for MCs and APs

Deploy lAPs. and manage them with different central accounts.

NO.17 Refer to the exhibits.
Exhibit 1

Exhibit 2

A network administrator adds a new Mobility Controller (MC) to the production Mobility Master (MM) and deploys APs that start broadcasting the employee SSID in the West wing of the building. Suddenly, the employees report client disconnects. When accessing the MM the network administrator notices that the MC is unreachable, then proceeds to access the MC’s console and obtains the outputs shown in the exhibits.
What should the network administrator do next to solve the current problem?

Open a TAC case and send the output of tar crash.

Kill two zombie processes then reboot the MC.

Verify the license pools in the MM.

Decommission the MC from the MM, and add it again.

NO.18 Refer to the exhibit.

A network administrator deploys DSCP based prioritization in the entire wired network to improve voice quality for a SIP-based IP telephony system used by the company. However, users report that calls they make from WLAN have poor audio quality, while desktop phones do not experience the same problem. The network administrator makes a test call and looks in the datapath session table.
Based on the output shown in the exhibit, what is one area that the network administrator should focus on?

UCC based DSCP correction

WMM support on the WLAN

Dynamic Multicast Rate Optimization

wired network congestion

NO.19 Refer to the exhibit.

An organization provides WiFi access through a corporate SSID with an Aruba Mobility Master (MM) – Mobility Controller (MC) network that includes PEF functions. The organization wants to have a single firewall policy configured and applied to the employee role.
This policy must allow users to reach Web, FTP, and DNS services, as shown in the exhibit. Other services should be exclusive to other roles. The client NICs should receive IP settings dynamically.
Which policy design meets the organization’s requirements while minimizing the number of policy rules?

Option A

Option B

Option C

Option D

NO.20 Refer to the exhibit.

The network administrator must ensure that the configuration will force users to authenticate periodically every eight hours. Which configuration is required to effect this change?

Set the reauth-period to 28800 enable reauthentication in the dotlx profile.

Set the reauth-period to 28800 enable reauthentication in the AAA profile.

Set the reauth-period to 28800 enable reauthentication in both dotlx and AAA profile.

Set the reauth-period to 28800 in the dotlx profile and enable reauthentication in the AAA profile.

NO.21 A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.

While all users authenticate with [email protected] type of credentials, radius1 has user accounts with the domain name portion.
Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?

Option A

Option B

Option C

Option D

NO.22 Refer to the exhibit.

A 7008 Branch Office Controller (BOC) is deployed in a remote office behind a core router. This core does not support 802.1q encapsulation. The Mobility Controller (MC) is the gateway for two tunneling mode SSIDs, as shown in the exhibit.
Which two different configuration options ensure that wireless users are able to reach the branch network through the router? (Choose two.)

Configure all ports of the BOC as access ports on the controller VLAN, and change the gateway of clients to the core router IP.

Configure the uplink of the BOC as an access port on the controller VLAN, and add static routes in the router for the SSID VLAN subnets.

Configure the uplink of the BOC as a trunk port that permits the controller and the SSID VLANs. The controller VLAN must be native.

Configure the uplink of the BOC as an access port on the controller VLAN, and enable NAT for the SSID VLANs.

Configure the uplink of the BOC as a trunk port, tagging the controller and the SSOD VLANs, and enable NAT for the SSID VLANs.

NO.23 An organization has several RAPs at different locations that broadcast two SSIDs. The internet-only SSID is in bridge/always mode, and the corporate SSID is in split-tunneling/standard mode. The network administrator deploys 10 more RAPs in different locations.
Users can successfully connect to the corporate SSID that is propagated by a RAP at a remote location. However, they report that it takes too long to access public internet web sites.
What is one part of the configuration that should be checked by the network administrator to verify this RAP deployment?

User roles policies

IP pool

Operating mode

Assigned VLAN

NO.24 Refer to the exhibit.

Based on the output shown in the exhibit, which channel offers the highest quality?

Channel 1

Channel 6

Channel 11

Channel 14

NO.25 Refer to the exhibit.

A network administrator has a Mobility Master (MM) Mobility Controller (MC) architecture along with the MC in the DMZ for terminating RAPs. The network firewall has been provisioned to allow access to the MC in the DMZ for both UDP 500 and 4500. Then he proceeds to provision an AP as shown in the exhibit.
Which additional configuration steps must the administrator to assure RAPs successfully contact the MC? (Choose two.)

Create the RAP1 account in the InternalDB of the MC.

Create an IP local pool and PSK at the device node level.

Create the RAP1 account in the InternalDB of the MM.

Add the RAP1 entry in the CPsec whitelist at the MM level.

Create an IP local pool and PSK at the /mm/mynode level.

NO.26 Refer to the exhibit.

A network administrator adds a Mobility Controller (MC) in the /mm level and notices that the device does not show up in the managed networks hierarchy. The network administrator accesses the CLI. executes the show switches command, and obtains the output shown in the exhibit.
What is the reason that the MC does not appear as a managed device in the hierarchy?

The network administrator added the device using the wrong Pre-Shared Key (PSK).

The network administrator has not moved the device into a group yet.

The digital certificate of the MC is not trusted by the MM.

The IP address of the MC does not match the one that was defined in the MM.

NO.27 Refer to the exhibits.
Exhibit 1

Exhibit 2

A network administrator integrates a current Mobility Master (MM) – Mobility Controller (MC) deployment with a RADIUS server to authenticate a wireless user, the network administrator realizes that the client machine is not failing into the it_department role, as shown the exhibits.
Which configuration is required to map the users into the proper role, based on standard attributes returned by the RADIUS server in the Access Accept message?

aaa server-group Corp-Network
set role condition Filter-Id equals it-role set-value it_department

aaa server-group Corp-employee
set role condition Filter-Id value-of

aaa server-group Corp-employee
set role condition Filter-Id equals it-role set-value it_department

aaa server-group ClearPass
set role condition Filter-Id equals it_department set-value it-role

aaa server-group Corp-Network
set role condition Filter-Id equals it_department set-value it-role

NO.28 Refer to the exhibits.

A user reports slow response time to a network administrator and suggests that there might be a problem with the WLAN. The user’s phone supports 802.11ac in the 5 GHz band. The network administrator finds the user in the Mobility Master (MM) and reviews the output shown in the exhibit.
What can the network administrator conclude after analyzing the data?