NEW QUESTION 1
Refer to the exhibits.
Exhibit 1

Exhibit 2

A network administrator wants to set up mirroring of traffic from port 1 on Switch-1 to port 1 on Switch-2. Exhibit-2 shows the commands that the administrator enters. The mirroring does not work correctly.
What must the administrator do to correct the error?

• A. Change the port ID on Switch 1 to 50001, so that it is unique from the port ID on Switch-2.
• B. Re-configure the mirror endpoint command on Switch-2 with the IP addresses reversed in order.
• C. Remove the commands and re-enter them on Switch-1 first and then on Switch-2.
• D. Specify the mirror endpoint command in Switch-1 and the mirror 1 remote-ip command on Switch-2.

Answer: B

NEW QUESTION 2
Refer to the exhibits. Exhibit 1

Exhibit 2

A network administrator needs to understand why endpoints that use Switch-3 as their default router can no longer reach some resources. The exhibit shows the OSPF link state database (LSDB) on Switch-1 when the OSPF solution was first deployed and the current LSDB.
What is a likely place to find the issue?

• A. in the connectivity status between Switch-3 and Switch-1
• B. in the connectivity status between Switch-1 and Switch-2
• C. in the Switch-1 OSPF Area 1 configuration settings
• D. in the Switch-3 OSPF Area 1 configuration settings

Answer: B

NEW QUESTION 3
Refer to the exhibit.

Switch-1 runs BGP. What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?

• A. Configure 192.168.1.2 as a neighbor manually within the BGP context.
• B. Specify 192.168.1.0/30 with the network command in the BGP context.
• C. Enable BGP on VLAN 100.
• D. Set the BGP AS number to 46501.

Answer: A

NEW QUESTION 4
An AOS-Switch needs to be configured to support tunneled node in role-based mode. The Mobility Controller administrators tell the switch administrators that the AOS-Switch will integrate with a cluster of Mobility Controllers. The cluster virtual IP address is 10.1.1.10.
How should switch administrator integrate the AOS-Switch with the cluster?

• A. Double-check the settings with the Mobility Controller administrators because the planned configuration is incomplete with the switch settings.
• B. Configure the virtual IP address as the tunneled-node-server address, tunneled node will work, but the clustering features will not provide redundancy.
• C. Configure the virtual IP address as the tunneled-node-server addres
• D. The switch will automatically learn controller IP addresses to which to tunnel various traffic.
• E. Configure the virtual IP address for the primary tunneled-node-server and an actual controller IP address for the backup tunneled-node-server in order to receive redundancy.

Answer: B

NEW QUESTION 5
Refer to the exhibits.


The network administrator enters the commands shown in Exhibit 2, and Switch-1 and Switch-2 exchange keepalive messages. What is the expected behavior if Switch-1 later fails to receive keepalive messages from Switch-2?

• A. Switch-1 disables interface 1 for 10 seconds, and then re-enables i
• B. The same process repeats twic
• C. If the issue persists, the switch disables the interface permanently.
• D. After two consecutive missed keep-alive packets, Switch-1 disables interface 1, and the interface stays disabled until the issue is fixed.
• E. After two consecutive missed keep-alive packets, Switch-1 sends SNMP traps, and Link 1 stays up until the issue is fixed.
• F. Switch-1 disables interface 1 for 10 seconds and then re-enables i
• G. The interface continues to be reenabled and disabled every 10 seconds until the issue is fixed.

Answer: B

NEW QUESTION 6
Refer to the exhibit.

Why are these switches unable to achieve adjacency?

• A. Switch-1 and Switch-2 use different area types for Area 1.
• B. Switch-2 does not support every area that Switch-1 does.
• C. The area range is incorrect on Switch-1 and missing on Switch-2.
• D. They have the same priority and cannot elect a Designated Router (DR).

Answer: A

NEW QUESTION 7
Two AOS-Switches are directly interconnected. The network administrator wants to prevent broadcast storms and other Layer 2 issues that could occur if there is physical damage to a cable.
Which technology should the administrator implement on the connected switch interfaces?

• A. MAC Lockdown
• B. Bidirectional Forwarding Detection (BFD)
• C. Spanning Tree Root Guard
• D. Unidirectional Link Detection (UDLD)

Answer: D

NEW QUESTION 8
Network administrators need to inspect all traffic that arrives on an AOS-Switch in VLAN 2 and is destined to TCP ports 50000-50010. They want to send the traffic to a protocol analyzer connected to the switch for deeper inspection.
What else must they create to achieve their goal?

• A. an extended IP ACL that selects the TCP traffic, apply the ACL to interfaces VLAN 2, and specify interfaces in VLAN 2 as monitor ports
• B. a traffic class that selects the TCP traffic, map the class to the mirror session in a policy to VLAN 2
• C. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer
• D. a traffic class that selects the TCP traffic, and apply the traffic class directly to the interface that connects to the protocol analyzer
• E. an extended IP ACL that selects the TCP traffic, apply the ACL to the mirror session, and specify interfaces in VLAN 2 as monitor ports

Answer: B

NEW QUESTION 9
Refer to the exhibits.
Exhibit 1

Exhibit 2

In the exhibits, VLAN 20 under a device name indicates that the device is configured with that VLAN. The exhibits also indicate whether VLAN 20 is statically configured on each link, either as an untagged or a tagged VLAN. If the link has no label, VLAN 20 is not statically configured on that link.
A network administrator needs to deploy AOS-Switches that use port-based tunneled node. The plan calls for tunneled- node endpoints to be assigned to VLAN 20 and for the Aruba Mobility Controller to handle the tunneled-node traffic at Layer 2. Which exhibit shows the correct plan for VLAN 20 in the wired infrastructure?

• A. A
• B. B
• C. C
• D. D

Answer: B

NEW QUESTION 10
An AOS-Switch enforces 802.1X. It receives an Access-Accept with this HPE VSA from its Radius server: Attribute Name and ID = HPE-User-Role (25) Value = contractor
The switch then rejects the client. What is one requirement for the switch to accept the message and authorize the client?

• A. The initial user role must be set to the factory default permit any role.
• B. User role authorization must be enabled globally on the switch.
• C. An aaa authentication local user group must have the contractor name.
• D. The RADIUS server settings must permit dynamic authorizatio

Answer: D

NEW QUESTION 11
A company starts to have issues with too many rules in the dynamic ACLs applied to AOS-Switch ports. Administrators decide to remove some of the common rules from the dynamic ACLs and enforce them in an ACL applied to the users’ VLAN instead.
What is one rule that administrators should keep in mind to ensure that the new ACLs control traffic as they expect?

• A. ACLs applied to VLANs cannot control ICMP traffic, do the dynamic ACLs must include the ICMP rules.
• B. Administrators should add an explicit deny at the end of the dynamic ACLs, so traffic will hit VLAN ACL.
• C. Traffic must be permitted by both the dynamic ACL and the VLAN ACL in order to be permitted.
• D. If a port supports multiple clients, every dynamic ACL applied to one client filters traffic for all client

Answer: C

NEW QUESTION 12
Refer to the exhibits. Exhibit 1.

Exhibit 2.

The company wants to minimize congestion on Link 1. Which spanning tree implementation meets this goal?

• A. Instance 1 = VLANs 4-5 Instance 2 = VLANs 6-7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 1 Switch 3 instance 2priority = 0
• B. Instance 1 = VLANs 4,6 Instance 2 = VLANs 5,7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 1 Switch 3 instance 2priority = 0
• C. Instance 1 = VLANs 4,6 Instance 2 = VLANs 5,7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1Switch 3 instance 1 priority = 0 Switch 3 instance 2 priority = 1
• D. Instance 1 = VLANs 4-5 Instance 2 = VLANs 6-7Switch 2 instance 1 priority = 0 Switch 2 instance 2 priority = 1 Switch 3 instance 1 priority = 0 Switch 3 instance 2priority = 1

Answer: C

NEW QUESTION 13
Refer to the exhibit.

Both Switch-1 and Switch-2 redistribute RIP routes into OSPF. The network administrator wants routers in Area 1 to receive the redistributed routes from Switch-1 but not from Switch-2.
What should the administrator do to achieve this goal?

• A. Configure Area 1 as a stub area, with no summaries on Switch-2.
• B. Configure Area 1 as a stub area, and import the routes with a low metric on Switch-2.
• C. Configure Area 1 as a Not So Stubby Area (NSSA) on all routing devices in Area 1.
• D. Configure a subnet range for Area 1 on Switch-2, and set the no-advertise optio

Answer: C

NEW QUESTION 14
An AOS-Switch needs to use captive portal to integrate with an Aruba ClearPass Guest solution. The solution should allow guests to connect their own devices to the network, be redirected to a portal, log in, and be granted access transparently.
What is one setting administrators should configure for this solution?

• A. ClearPass should be defined as the enhanced Web Auth (EWA) server.
• B. RADIUS MAC-Auth should be enabled on the guest ports.
• C. Web-Auth should be enabled on the guest ports.
• D. BYOD redirect should be enabled globall

Answer: B

NEW QUESTION 15
Which technologies can prevent split brain in a VSF fabric that includes Aruba 2930F switches?

• A. ARP MAD or OOBM MAD
• B. VLAN MAD or ARP MAD
• C. OOBM MAD or LLDP MAD
• D. LLDP MAD or VLAN MAD

Answer: C

NEW QUESTION 16
Refer to the exhibits.
Exhibit 1

Exhibit 2

The IP phone in the exhibit is set up to complete 802.1x authentication to the network. How can the netwotk administrator prevent a user on the computer from receiving network access without authentication?

• A. Set an 802.1X client limit on interface 1.
• B. Set up the MAC filter on interface 1.
• C. Enable static mode port security on interface 1.
• D. Enable MAC-based VLANs on interface 1.

Answer: A

NEW QUESTION 17
An administrator wants to ensure that an AOS-Switch forwards all traffic that it receives on interface 1 with high priority.
- Switches should also communicate the high priority to other switches across the traffic path.
- The switch has type of service disabled.
- The administrator plans to apply 802.1p priority 5 to interface 1.
What should the administrator check to ensure that the configuration will work properly?

• A. Interface 1 receives traffic with a tag.
• B. The AOS-Switch is configured to use eight queues.
• C. The forwarding path for the traffic uses VLAN tags.
• D. An 802.1p-to-DSCP map exists for priority 5.

Answer: A