HP HPE6-A45 Free Practice Questions

NEW QUESTION 1
A network administrator applies the ACL shown in the exhibit. Which source IP address does the myList ACL deny?

• A. 10.1.0.10
• B. 10.1.1.10
• C. 10.1.2.10
• D. 10.2.1.10

Answer: D

NEW QUESTION 2
A network administrator wants to use an ACL, acl1, to control traffic from devices in VLAN 12 as the traffic is routed out of VLAN 12. The ACL should not control traffic within the VLAN.
Which keyword should the administrator enter at the administrator enter at the end of this command: Switch(config)# vlan 12 ip access-group acl1

• A. in
• B. out
• C. vlan-in
• D. vlan-out

Answer: B

NEW QUESTION 3
Refer to the exhibit.

The network administrator enables DHCP snooping globally and on VLAN 2. An additional step is mandatory for DHCP snooping to operate correctly and for clients to receive DHCP settings.
What is the additional mandatory step?

• A. Define trk1 as a trusted DHCP port.
• B. Define an authorized DHCP server.
• C. Enable ARP protection.
• D. Define edge ports as untrusted DHCP port

Answer: D

NEW QUESTION 4
Refer to the exhibit.

A network administrator sets up prioritization for an application that runs between Device 1 and Device 2. However, the QoS for the application is not what the administrator expects.
How can the administrator check if the network infrastructure prioritizes traffic from Device 1 and Device 2?

• A. Run a packet capture on Device 2, run the application, and look in the packet capture for a high value DSCP in the IP header.
• B. Set up RMON alarms on the switches that trigger when a high number of packets are droppe
• C. Then, run the application and check for the alarm.
• D. Clear interface statistics on the switche
• E. Then, run the application and check the interface queue statistics for the switch-to-switch links.
• F. Run a packet capture on Device 1, run the application, and look in the packet capture for a high value DSCP in the IP header.

Answer: A

NEW QUESTION 5
Refer to the exhibits. Exhibit 1

Exhibit 2

A company does not require authentication for security, but AOS-Switches are set up to use local MAC authentication (LMA) to assign the correct VLAN and priority to IP phones. IP phones and computers belong to different VLANs. Each device is supposed to connect to a specific port, but sometimes users connect their devices to the wrong ports and cannot receive access without help from IT.
How can a network administrator configure the switches to eliminate this issue?

• A. Set the address limit to 2 on the switch ports that apply LMA.
• B. Create a user role that applies the user VLAN, and set this role as the initial role.
• C. Add the MAC addresses for computers to the myPhones MAC group.
• D. Apply LMA to all edge switch ports, and set the unauth VLAN to the user VLA

Answer: C

NEW QUESTION 6
Refer to the exhibits. Exhibit 1.

Exhibit 2.

The exhibits show the current operational state for routes on Switch-3 to send all traffic to 172.16.0.0/16 through Switch- 2 during normal operation.
Which single configuration change creates the desired behavior?

• A. Set a cost in the redistribute static command on Switch-2 to change the external LSA metric.
• B. Change the OSPF external metric type to 1 on Switch-1, and set a cost on Switch-3 VLAN 104.
• C. Change the OSPF external metric type to 1 on Switch-1, and set a cost on Switch-3 VLAN 108.
• D. Set a cost in the redistribute static command on Switch-1 to change the external LSA metri

Answer: D

NEW QUESTION 7
Refer to the exhibit.

Switch-1 runs BGP. What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?

• A. Configure 192.168.1.2 as a neighbor manually within the BGP context.
• B. Specify 192.168.1.0/30 with the network command in the BGP context.
• C. Enable BGP on VLAN 100.
• D. Set the BGP AS number to 46501.

Answer: A

NEW QUESTION 8
A network administrator configures DHCP snooping on VLAN 2. How does the switch handle DHCP traffic that arrives in this VLAN on an untrusted interface?

• A. It accepts packets from a DHCP server, but drops client packets.
• B. It drops all DHCP traffic and logs a security event.
• C. It accepts both client and server packets as long as they match the DHCP binding table.
• D. It accepts client packets, but drops packets from a DHCP serve

Answer: A

NEW QUESTION 9
Which technologies can prevent split brain in a VSF fabric that includes Aruba 2930F switches?

• A. ARP MAD or OOBM MAD
• B. VLAN MAD or ARP MAD
• C. OOBM MAD or LLDP MAD
• D. LLDP MAD or VLAN MAD

Answer: C

NEW QUESTION 10
Two AOS-Switches connect on VLAN 10 in OSPF Area 1, which is defined as a stub area on both. Which mismatch can cause OSPF routers to lose adjacency?

• A. The administrator adds the backbone area to just one of the routers.
• B. The administrator enables graceful restart, or nonstop switching, on just one of the routers.
• C. The administrator enables jumbo frames on VLAN 10 on just one of the routers.
• D. The administrator adds the no-summary option to Area 1 on just one of the router

Answer: B

NEW QUESTION 11
A customer wants access layer switches that support routing, ACLs, backplane stacking, and Smart rate ports. The customer asks about Aruba 5400R z 12 switches.
Which Aruba Switch model would better meet the customer’s requirements?

• A. 2530
• B. 2930F
• C. 3810
• D. 8400

Answer: C

NEW QUESTION 12
A company deploys AOS-Switches at sites with inexperienced IT staff. The main office network administrators want to monitor thresholds to generate alerts on branch switches. What should be set up for this purpose?

• A. an SNMP trap
• B. an RMON alarm
• C. an auto-config server
• D. an sFlow instance

Answer: A

NEW QUESTION 13
What must an OSPF router do when it receives a link state update?

• A. It must participate in a new election for the Designated Router and Backup DR.
• B. It must initiate a graceful restart timer.
• C. It must re-establish adjacency with its Designated Router and Backup DR.
• D. It must run the shortest path first algorith

Answer: D

NEW QUESTION 14
Refer to the exhibits. Exhibit 1.

Exhibit 2.

The company wants to minimize congestion on Link 1. Which spanning tree implementation meets this goal?

• A. Instance 1 = VLANs 4-5 Instance 2 = VLANs 6-7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 1 Switch 3 instance 2priority = 0
• B. Instance 1 = VLANs 4,6 Instance 2 = VLANs 5,7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 1 Switch 3 instance 2priority = 0
• C. Instance 1 = VLANs 4,6 Instance 2 = VLANs 5,7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1Switch 3 instance 1 priority = 0 Switch 3 instance 2 priority = 1
• D. Instance 1 = VLANs 4-5 Instance 2 = VLANs 6-7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 0 Switch 3 instance 2priority = 1

Answer: C

NEW QUESTION 15
Refer to the exhibit.

Network administrators want the network to use PIM-DM to route multicasts from Server 1 to receivers in VLAN 24. Which protocols should the administrators enable on which VLANs on Switch-1?

• A. PIM-DM on VLAN 24; IGMP and PIM-DM on VLAN 10
• B. IGMP on VLAN 24; IGMP on VLAN 10
• C. IGMP on VLAN 24; PIM-DM on VLAN 10
• D. IGMP and PIM-DM on VLAN 24; PIM-DM on VLAN 10
• E. IGMP and PIM-DM on VLAN 24; PIM-DM on VLAN 10

Answer: C

NEW QUESTION 16
Refer to the exhibit.

Every switch in the exhibit will route traffic. The company requires a topology in which failover for switch-to-switch links is exclusively handled by the routing protocol and occurs as quickly as possible. Which topology should the administrator use?

• A. A
• B. B
• C. C
• D. D

Answer: B

NEW QUESTION 17
Network administrators need to inspect all traffic that arrives on an AOS-Switch in VLAN 2 and is destined to TCP ports 50000-50010. They want to send the traffic to a protocol analyzer connected to the switch for deeper inspection.
What else must they create to achieve their goal?

• A. an extended IP ACL that selects the TCP traffic, apply the ACL to interfaces VLAN 2, and specify interfaces in VLAN 2 as monitor ports
• B. a traffic class that selects the TCP traffic, map the class to the mirror session in a policy to VLAN 2
• C. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer
• D. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer
• E. an extended IP ACL that selects the TCP traffic, apply the ACL to the mirror session, and specify interfaces in VLAN 2 as monitor ports

Answer: B

NEW QUESTION 18
A company wants to implement RADIUS authentication of all managers who log in to AOS-Switches via SSH.
The RADIUS server also sends VSAs that indicate which commands users can enter, and switches must honor these.
What must the administrator do to meet the company’s requirements?

• A. Set the command access level to manager mode; also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable.
• B. Set RADIUS for aaa authentication ssh login, also enable authentication privilege-login mode, which allows the switch to accept all RADIUS VSAs.
• C. Set command authorization to RADIUS, also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable.
• D. Set RADIUS for aaa authentication ssh enable, which allows the switch to accept all RADIUS VSA

Answer: B

NEW QUESTION 19
Two 5400R AOS-Switches are OSPF neighbors. The network administrator wants routing to update as quickly as possible in the event of a failure on a neighboring switch.
Which technology should the administrator implement on the connected switch interfaces?

• A. MAC Lockdown
• B. Unidirectional Link Detection (UDLD)
• C. Bidirectional Forwarding Detection (BFD)
• D. Spanning Tree Root Guard

Answer: C

NEW QUESTION 20
Refer to the exhibits. Exhibit 1.

Exhibit 2.

The exhibits show the current operational state for routes on Switch-3. The company wants Switch-3 to prefer the link to Switch-1 over the link to Switch-2 for all intra-area, inter-area, and external traffic. What can the network administrator do to achieve this goal?

• A. Set the OSPF cost on VLAN 108 higher than 1 on Switch-2 and Switch-3.
• B. Set the OSPF administrative distance on Switch-2 higher than 110.
• C. Set the OSPF area type to normal on all of the switches in Area 1.
• D. Set the cost in the OSPF Area 1 stub command higher than 1 on Switch-2.

Answer: D

NEW QUESTION 21
Refer to the exhibit.

The network administrator wants to summarize routes as much as possible in between areas. What is the correct range to specify for the router OSPF Area 2 command on Switch-2?

• A. 10.0.0.0/20
• B. 10.0.0.0/21
• C. 10.0.8.0/21
• D. 10.0.16.0/21

Answer: D

NEW QUESTION 22
The implementation plan for AOS-Switches calls for them to implement port-based tunneled node. The Aruba Mobility Controllers that will support the AOS-Switches run software 8.1. The controllers will also support APs, are managed by Mobility Master, and use clustering.
Which issue with this plan needs to be addressed?

• A. The controllers cannot support tunneled node with AOS-Switches when they are managed by the Mobility Master.
• B. The switches cannot connect to controllers that also support APs.
• C. The controllers must have their software updated before they can support the switches.
• D. The switches must use role-based tunneled node to work with clustering controller

Answer: A

NEW QUESTION 23
Refer to the exhibit.

A network administrator wants to add the protections of root guard to the network. Based on the spanning tree topology, on which ports should the network administrator implement root guard?

• A. 3-24
• B. 1 and 2
• C. A1 and A2
• D. 2 and A3

Answer: C

NEW QUESTION 24
A network administrator needs to configure an AOS-Switch to classify traffic. Comparing QoS policy and global policy, what is one function that only a class-based QoS policy can fulfill?

• A. Apply a DSCP to HTTP traffic from some sources but not other sources.
• B. Apply a DSCP rather than an 802.1p value to classified traffic.
• C. Override the incoming DSCP in the received traffic.
• D. Override the DSCP or priority applied directly to an interfac

Answer: B

NEW QUESTION 25
What is one difference between BPDU protection and root guard?

• A. BPDU protection works with RPVST+, RSTP, and MST
• B. Root guard works with RSTP or MSTP, but not RPVST+.
• C. BPDU protection blocks a port if it receives any BPDU, but root guard blocks a port only if the BPDU indicates a better root path.
• D. BPDU protection is typically implemented on edge ports, but root guard is typically implemented on uplinks with theroot port role.
• E. BPDU protection drops BPDUs received on a port, but does not block the por
• F. Root guard blocks the port if it receives a BPDU.

Answer: B

NEW QUESTION 26
......