Certified HPE6-A45 Exam Questions 2021

NEW QUESTION 1
Refer to the exhibit.

An AOS-Switch has an extended ACL that is applied to several physical interfaces.
- New interfaces have been brought online.
- The ACL has been applied to them as well.
A network administrator sees the output in the exhibit and is concerned that the switch will reach the limit for rules. What can the administrator do to address this concern?

• A. Resequence the ACL with less space in between the entries.
• B. Enable ACL grouping, and apply ACLs as shared ACLs.
• C. Reconfigure the ACL as a standard ACL, and then reapply it.
• D. Remove static ACLs, and have the RADIUS server send dynamic ACL

Answer: A

NEW QUESTION 2
Refer to the exhibit.

The network administrator enables DHCP snooping globally and on VLAN 2. An additional step is mandatory for DHCP snooping to operate correctly and for clients to receive DHCP settings.
What is the additional mandatory step?

• A. Define trk1 as a trusted DHCP port.
• B. Define an authorized DHCP server.
• C. Enable ARP protection.
• D. Define edge ports as untrusted DHCP port

Answer: D

NEW QUESTION 3
A company wants to implement RADIUS authentication of all managers who log in to AOS-Switches via SSH.
The RADIUS server also sends VSAs that indicate which commands users can enter, and switches must honor these.
What must the administrator do to meet the company’s requirements?

• A. Set the command access level to manager mode; also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable.
• B. Set RADIUS for aaa authentication ssh login, also enable authentication privilege-login mode, which allows the switch to accept all RADIUS VSAs.
• C. Set command authorization to RADIUS, also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable.
• D. Set RADIUS for aaa authentication ssh enable, which allows the switch to accept all RADIUS VSA

Answer: B

NEW QUESTION 4
A network administrator needs to configure PIM across several AOS-Switches in the same routing domain. What correctly describes how they can implement PIM modes?

• A. Switches at the network edge should run PIM-SM, while switches at the network core should run PIM-DM.
• B. All switches must use PIM-DM only or all switches must use PIM-SM only for the solution to work.
• C. Different interfaces on the same switch can run in different modes, but the mode must match the neighbor.
• D. Switches at the network core should run PIM-DM, while switches at the network edge should run PIM-S

Answer: B

NEW QUESTION 5
A network administrator plans to apply DSCP 46 to all traffic on a port. What is required for this configuration to work?

• A. The port has trust set to default.
• B. A DSCP map that sets 46 to a priority value.
• C. The port has trust set to DSCP.
• D. A QoS policy selects traffic with DSCP 46.

Answer: C

NEW QUESTION 6
An AOS-Switch enforces 802.1X. It receives an Access-Accept with this HPE VSA from its Radius server: Attribute Name and ID = HPE-User-Role (25) Value = contractor
The switch then rejects the client. What is one requirement for the switch to accept the message and authorize the client?

• A. The initial user role must be set to the factory default permit any role.
• B. User role authorization must be enabled globally on the switch.
• C. An aaa authentication local user group must have the contractor name.
• D. The RADIUS server settings must permit dynamic authorizatio

Answer: D

NEW QUESTION 7
A network administrator needs to create a QoS policy on an AOS-Switch. What is one component that the administrator must create before the policy?

• A. an extended IPv4 ACL
• B. a traffic behavior
• C. an extended MAC ACL
• D. a traffic class

Answer: D

NEW QUESTION 8
A company has AOS-switches, Aruba ClearPass, and Aruba AirWave. A network administrator needs to find the source of a performance issue that often occurs at the start of the day and early in the afternoon. Which action is likely to give the administrator the most useful information for the investigation?

• A. Access the Network Device view on ClearPass.
• B. Use the configuration audit tool on AirWave.
• C. View the current running config on each switch.
• D. View usage patterns on the switches on AirWav

Answer: A

NEW QUESTION 9
Refer to the exhibits. Exhibit 1

Exhibit 2

Switch-1 has a power issue that causes it to fail. When Switch-1 comes back up, endpoints lose connectivity for a few minutes. The network administrator decides to enter this command on Switch-1:
Switch-1 (config)# vlan 10 vrrp vrid 10 preempt-delay-time 120
Exhibit 2 shows the VRRP configuration just after the change. What is the effect of this change?

• A. Switch-1 and Switch-2 both become Master in their own VRRP virtual router due to the delay timer mismatc
• B. The mismatch must be fixed.
• C. Switch-1 now waits to take over as Master if it fails and recover
• D. This should prevent the connectivity issue from occurring again.
• E. Switch-1 experiences an internal error in the VRRP proces
• F. This error causes Switch-2 to take over as Master for VLAN 2.
• G. Switch-1 continues to act as it did before the preempt delay time was se
• H. Administrators must plan additional changes to fix the issue.

Answer: C

NEW QUESTION 10
An AOS-Switch runs IGMP on A VLAN.
What is a requirement for the switch to be a potential IGMP querier on that VLAN?

• A. The switch must run PIM-SM or PIM-DM on that VLAN.
• B. The switch must have an IP address on that VLAN.
• C. The switch must have IGMP fast leave disabled globally.
• D. The switch must have at least one IGMP group configured on it manuall

Answer: B

NEW QUESTION 11
A network administrator needs to set up an AOS-Switch to use port-based tunneled node for connected
devices. However, the administrator wants the switch to forward traffic without tunneling if it cannot reach a tunneled- node server.
What should the administrator do?

• A. Apply the tunneled-node profile to ports, and set the local-switching-fallback option.
• B. Make sure that the switch has an IP address on the untagged VLAN assigned to the ports.
• C. Configure a local switching profile on the Mobility Controller that acts as tunneled-node server.
• D. Set the switch to role-based tunneled node, and make sure it uses the default initial user rol

Answer: D

NEW QUESTION 12
Refer to the exhibits. Exhibit 1.

Exhibit 2.

The company wants to minimize congestion on Link 1. Which spanning tree implementation meets this goal?

• A. Instance 1 = VLANs 4-5 Instance 2 = VLANs 6-7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 1 Switch 3 instance 2priority = 0
• B. Instance 1 = VLANs 4,6 Instance 2 = VLANs 5,7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 1 Switch 3 instance 2priority = 0
• C. Instance 1 = VLANs 4,6 Instance 2 = VLANs 5,7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1Switch 3 instance 1 priority = 0 Switch 3 instance 2 priority = 1
• D. Instance 1 = VLANs 4-5 Instance 2 = VLANs 6-7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 0 Switch 3 instance 2priority = 1

Answer: C

NEW QUESTION 13
An AOS-Switch implements tunneled node.
Which benefit does the PAPI enhanced security key provide?

• A. It validates the signature for firmware pushed to the switch dynamically.
• B. It encrypts traffic sent and received by tunneled-node endpoints.
• C. It authenticates control traffic between the switch and its Mobility Controller.
• D. It provides an extra layer of authentication for endpoints on tunneled-node port

Answer: C

NEW QUESTION 14
Refer to the exhibit.

A network administrator wants to add the protections of root guard to the network. Based on the spanning tree topology, on which ports should the network administrator implement root guard?

• A. 3-24
• B. 1 and 2
• C. A1 and A2
• D. 2 and A3

Answer: C

NEW QUESTION 15
A network administrator enters this command: Switch(config)# aaa authorization user-role enable How does this affect device authentication?

• A. The local manager and operator accounts will no longer work unless they are associated with a user role on the switch.
• B. Authenticated devices must receive their dynamic settings, such as VLAN ID and ACLs, from the RADIUS server Access-Accept.
• C. Authenticated devices will be defined proper access if the RADIUS server sends any VSA except the user role VSA
• D. Role-based mode will no longer be available with tunneled node to prevent conflicts with the AAA user role

Answer: B

NEW QUESTION 16
The security plan for AOS-Switches requires protection from incoming malware traffic: generated from a wormor virus-infected host.
Which feature should be implemented to provide the required protection?

• A. DHCP snooping
• B. connection-rate filtering
• C. port security
• D. proxy ARP

Answer: B

NEW QUESTION 17
Network administrators need to track when traffic matches deny entry in an ACL applied to a port. They want the alert to be sent to a syslog server that is already set up to send logs.
What should administrators do to enable alerts?

• A. Specify the log option for the ACL entry, and enable ACL debugging.
• B. Set the debug destination to session, and enable ACL debugging.
• C. Enable ACL debugging, and enable SNMP port security traps.
• D. Specify the log option for the ACL entry, and enable SNMP port security trap

Answer: D