Refined HP HPE6-A42 Exam Guide Online

NEW QUESTION 1
What is required for a WLAN that uses WPA2-Enterprise security?

• A. a Web server to host a login portal
• B. a shared password to secure access to the WLAN
• C. RADIUS server or servers
• D. a policy to allow unauthenticated users to receive RADIUS

Answer: C

NEW QUESTION 2
Which task can an Aruba Air Monitor (AM) perform?

• A. Analyze wireless traffic patterns at the application level.
• B. Optimize RF through the AP channel and transmit power plans.
• C. Analyze RF signals to determine the cause of non-802.11 interference.
• D. Prevent client connections to rogue APs.

Answer: D

NEW QUESTION 3
Refer to the exhibit.

A network administrator needs to specify a RADIUS server for an employee WLAN on an Aruba solution. What must the administrator enter in the Shared key field?

• A. the password defined as the preshared key for the WLAN on the Mobility Master (MM) and on authorized wireless clients
• B. the password configured in a user account with administrative rights on the RADIUS server
• C. the password configured for RADIUS clients on the RADIUS server
• D. the password defined for authorized wireless clients on the RADIUS server and also distributed to authorized wireless clients

Answer: A

NEW QUESTION 4
A company has a Mobility Master (MM)-based solution. How does a Mobility Controller (MC) behave if it loses contact with all MM nodes?

• A. The MC loses all licenses and cannot support APs or clients.
• B. The MC retains its current licenses for 30 days.
• C. The MC contacts Aruba Activate and uses the licensing limits defined there.
• D. The MC maintains only licenses that have been locally installed on it.

Answer: B

NEW QUESTION 5
A company wants to provide wireless access for visitors with their Aruba solution. Which configuration feature enables the guest to access the wireless network without authentication?

• A. use of internal captive portal with email registration
• B. addition of custom rules to control access for unauthenticated guests
• C. use of internal captive portal with authentication
• D. redirection of guests to an external captive portal that provides encryption services

Answer: B

NEW QUESTION 6
Refer to the exhibit.

A company has a Mobility Master (MM)-based solution with a guest WLAN. During the captive portal redirection, users who access a non-HTTPS Website see the error shown in the exhibit.
How can a network administrator prevent this error?

• A. Enable automatic CPSec certificate deployment.
• B. Replace the default Mobility Master certificate with a certificate that has the correct hostname.
• C. Replace the default server certificate for mobility controllers with a certificate signed by a trusted CA.
• D. Reconfigure the guest WLAN to use EAP methods that rely on passwords rather than certificates.

Answer: C

NEW QUESTION 7
An Aruba Remote AP (RAP) operates in split-tunnel mode. How does the AP forward traffic?

• A. It sends all user traffic in a GRE tunnel to a central Mobility Controller (MC), and it sends control traffic in an IPsec tunnel to the controller.
• B. It sends traffic designed to the corporate network in an IPsec tunnel to a central Mobility Controller (MC), and it bridges other traffic locally.
• C. It sends user and control traffic in two separate IPsec tunnels to the Mobility Controller (MC).
• D. It sends all employee and control traffic in a GRE tunnel to a central Mobility Controller (MC), and it bridges all guest traffic locally.

Answer: B

NEW QUESTION 8
A company deploys an Aruba wireless solution for the first time. In which deployment is clustering supported?

• A. deployment as Mobility Masters (MMs)
• B. deployment as a standalone VMC
• C. deployment in 7000 Series standalone mode
• D. deployment in master-local mode

Answer: A

NEW QUESTION 9
A company has an Aruba Mobility Master (MM)-based solution. Where can network administrators look to monitor the health status of all controllers, APs, and clients?

• A. the top banner
• B. the MM Maintenance pages
• C. the Performance dashboard
• D. the Potential Issues dashboard

Answer: C

NEW QUESTION 10
When an Aruba solution uses AirMatch, which device generates the channel and power plan for an AP?

• A. the AirWave Management Platform
• B. the Mobility Master (MM)
• C. the Mobility Controller (MC) for the AP
• D. the AP itself

Answer: B

NEW QUESTION 11
An Aruba solution runs ArubaOS 8 and uses a standalone controller architecture. Which feature can administrators use to optimize the channel and power plan for the APs?

• A. ARM
• B. Rule Based Client Match
• C. AirMatch
• D. AppRF

Answer: A

NEW QUESTION 12
What is a valid way to deploy an Aruba Mobility Master (MM)?

• A. as a subscription-based service through the Aruba cloud
• B. as a role on a Mobility Controller 7030 that is deployed as a standalone controller
• C. as a virtual appliance on a server that meets the recommended hardware requirements
• D. as a role on a Mobility Controller 7240 that is deployed as a master controller

Answer: C

NEW QUESTION 13
Which deployment option for Aruba Controllers is new to ArubaOS 8?

• A. deployment as virtual appliances
• B. deployment in standalone mode
• C. deployment in master-local mode
• D. deployment as branch office controller

Answer: A

NEW QUESTION 14
Refer to the exhibit.

The exhibit shows output from a Mobility Master (MM) dashboard. What is a valid reason for the administrator to click the akamai square under applications?

• A. to create filter rules in order to control wireless user access to this application
• B. to download a report about the usage of this application over time
• C. to see more details about this application, such as a list of aggregated sessions
• D. to see the break down for only roles, destinations, WLANs and devices that use this application

Answer: C

NEW QUESTION 15
Refer to the exhibits. Exhibit 1

Exhibit 2

Exhibit 3

A network administrator creates a guest WLAN on an Aruba Mobility Manager (MM). The exhibits show some of the settings for the WLAN. The administrator does not change the policies for those roles.
How does the firewall control guest clients when they first connect to the WLAN?

• A. It permits them to send any DHCP traffic and DNS and web traffic to the Interne
• B. It redirects web traffic destined to the private network to a login portal.
• C. It permits them to send any DHCP and DNS and it redirects all web traffic to a login portal.
• D. It permits them to send any DHCP and RADIUS traffi
• E. It redirects all web traffic destined to the Internet to a login portal and drops web traffic destined to the private network.
• F. It does not permit them to send any traffic until they are authenticated.

Answer: D

NEW QUESTION 16
Which pre-defined role allows DHCP, DNS, and internal captive portal redirection for a guest WLAN?

• A. exam_guest-guest-logon
• B. authorized
• C. guest-logon
• D. guest

Answer: C

NEW QUESTION 17
Refer to the exhibit.

Based on the exhibit, what is the maximum number of APs that this Mobility Master (MM) solution can support?

• A. 1
• B. 32
• C. 500

Answer: C

NEW QUESTION 18
A company has an Aruba solution that supports an employee WLAN. How can network administrators control in which subnets users receive IP addresses?

• A. Set the VLANs associated with desired subnets in the WLAN settings.
• B. Configure firewall policies that permit the desired subnet, and add them to the initial role for the WLAN.
• C. In the WLAN settings, configure User role rules with the desired subnet addresses as match criteria.
• D. Assign switch ports connected to APs to VLANs associated with the desired subnets.

Answer: A

NEW QUESTION 19
Which feature is unique to 802.11ac Wave 2 access points?

• A. band steering
• B. multiple spatial streams
• C. 40MHz channel bonding
• D. multi-user MIMO (MU-MIMO)

Answer: D

NEW QUESTION 20
A company has an Aruba Mobility Master (MM)-based solution with a WLAN that assigns users to VLANs 10–19. The company wants the Aruba solution to act at Layer 3 to route wireless user traffic.
What must network administrators configure to permit the solution to forward traffic correctly?

• A. VLAN 10–19 interfaces and proper IP settings on the MM nodes
• B. trunk ports that support VLANs 10–19 on the managed Mobility Controllers (MCs)
• C. VLAN 10–19 interfaces on the Mobility Controllers (MCs) as the default gateway for wireless users
• D. trunk ports that support VLANs 10-19 on the MM nodes

Answer: C

NEW QUESTION 21
What are two criteria that distinguish different Aruba Mobility Controller (MC) models from each other?

• A. firewall speed and ability to act as a standalone controller or not
• B. number of supported users and firewall throughput
• C. number of supported APs and ability to support 802.11ac APs or not
• D. number of supported users and ability to support 802.11ac APs or not

Answer: B

NEW QUESTION 22
A network administrator configures an Aruba Mobility Master (MM)-based solution to provide wireless access to employees. The solution must meet these criteria:
Authenticate users to a network RADIUS server
Enforce different Aruba firewall rules based on the user department How can the administrator meet these criteria in the simplest way?

• A. Have the RADIUS server assign users in different departments to different VLAN
• B. Apply firewall policies based on IP ranges.
• C. Have the RADIUS server send different roles for users in different department
• D. Apply role-basedfirewall policies.
• E. Create multiple zones on the M
• F. Assign different departments and sets of firewall policies to different zones.
• G. Create a different WLAN and SSID for each departmen
• H. Apply different firewall policies to each WLAN.

Answer: B

NEW QUESTION 23
A company has an Aruba solution. The company wants to host a guest login portal with this solution, and the login portal must gie guests the option to create their own login accounts.
How can a network administrator help meet these criteria?

• A. Choose the Internal captive portal with email registration option for the guest WLAN.
• B. Make sure to create a guest provisioning account for the guest WLAN.
• C. Disable authentication in the captive portal profile for the guest WLAN.
• D. Choose ClearPass or the other external captive portal option for the guest WLAN.

Answer: D

NEW QUESTION 24
A network administrator configures this policy:

Users to which this policy applies are unable to receive IP addresses with DHCP. How should the administrator fix the issue?

• A. Change user to any in the user any svc-dhcp permit rule.
• B. Move the user any svc-dhcp permit rule to the bottom of the list.
• C. Remove the deny rule from the policy.
• D. Use the correct service alias in the user any svc-dhcp permit rule.

Answer: D

NEW QUESTION 25
......