NEW QUESTION 1
What is one difference between BPDU protection and root guard?

• A. BPDU protection works with RPVST+, RSTP, and MST
• B. Root guard works with RSTP or MSTP, but not RPVST+.
• C. BPDU protection blocks a port if it receives any BPDU, but root guard blocks a port only if the BPDU indicates a better root path.
• D. BPDU protection is typically implemented on edge ports, but root guard is typically implemented on uplinks with theroot port role.
• E. BPDU protection drops BPDUs received on a port, but does not block the por
• F. Root guard blocks the port if it receives a BPDU.

Answer: B

NEW QUESTION 2
OSPF Area 1 has two ABRs. One ABR is configured with this range for Area 1: 10.10.0.0/16. The other ABR is not configured with a range for Area 1.
Which type of issue occurs due to this mismatch?

• A. The ABRs create a discontinuous area and disrupt intra-area routing between devices within Area 1.
• B. The ABR core would send Area 1 traffic destined to the other switch through an access switch.
• C. The ABRs lose adjacency entirely and cannot route traffic between each other at all.
• D. The ABRs lose adjacency in Area 1 and must route all traffic to each other through Area 0.

Answer: A

NEW QUESTION 3
The implementation plan for AOS-Switches calls for them to implement port-based tunneled node. The Aruba Mobility Controllers that will support the AOS-Switches run software 8.1. The controllers will also support APs, are managed by Mobility Master, and use clustering.
Which issue with this plan needs to be addressed?

• A. The controllers cannot support tunneled node with AOS-Switches when they are managed by the Mobility Master.
• B. The switches cannot connect to controllers that also support APs.
• C. The controllers must have their software updated before they can support the switches.
• D. The switches must use role-based tunneled node to work with clustering controller

Answer: A

NEW QUESTION 4
Network administrators decide to change OSPF Area 1 to a stub area in order to solve some performance issues. No routes are redistributed into area 1.
What is one implication of making this change?

• A. Endpoints in Area 1 will no longer be able to reach external networks.
• B. Routing devices in area 1 will no longer exchange Type 1 and Type 2 LSAs with each other.
• C. Endpoints in Area 1 will no longer be able to reach endpoints in other areas.
• D. Routing devices in area 1 will temporarily lose adjacency while the change is mad

Answer: A

NEW QUESTION 5
Refer to the exhibit.

What must the network administrator do on Switch-1 to enable this switch to advertise 192.0.2.0/24 to the router at 192.168.1.1?

• A. Redistribute OSPF routes into the BGP process
• B. Enter a static route to 192.0.2.0/24 to the black hole.
• C. Enter the network 192.168.1.0/24 command in the BGP context.
• D. Enable eBGP multihop to the 192.168.1.1 neighbo

Answer: B

NEW QUESTION 6
Refer to the exhibit.

Network administrators set up PIM-DM to route multicast traffic from Server 1 to clients in VLAN 24. The multicasts are not active now, but the administrators want to determine which path the multicasts will take.
What should the administrators check to help them calculate this path?

• A. If Switch-2 or Switch-3 has the highest IP address on a VLAN that runs PIM-DM.
• B. If Switch-2 or Switch-3 is listed as an RP in the Switch-1 RP set
• C. What the next hop is for the unicast route that Switch-1 uses to reach 10.2.2.2
• D. If the Switch-2 DR priority on VLAN 10 is higher than the Switch-3 DR priority on VLAN 11

Answer: C

NEW QUESTION 7
A customer wants to authenticate AOS-Switch managers to a RADIUS server. Managers should be assigned either read- only or full read-write level access based on the Service-Type VSA in their user account.
What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

• A. RADIUS-based command authorization
• B. a manager and operator password
• C. privileged-mode login authentication
• D. SNMPv3 and SNMPv3 restricted acces

Answer: A

NEW QUESTION 8
A network administrator sets up MAC-Auth and captive portal to Aruba ClearPass on AOS-Switches. The solution seems to work for most guests. However, some guests open their browsers and are not redirected to the captive portal. How should the administrator address the likely cause of the issue?

• A. Set the RADIUS server time window to 0 because some guest computers likely have the incorrect system time.
• B. Replace MAC-Auth on switch ports with Web-Auth because this authentication method offers more reliability with captive portal.
• C. Reconfigure the captive portal URL hash key on some of the switches, which likely have the wrong password.
• D. Replace expired certificates on the switches and set their usage to captive portal since some guests have an HTTPS homepage.

Answer: D

NEW QUESTION 9
A network administrator wants to use an ACL, acl1, to control traffic from devices in VLAN 12 as the traffic is routed out of VLAN 12. The ACL should not control traffic within the VLAN.
Which keyword should the administrator enter at the administrator enter at the end of this command: Switch(config)# vlan 12 ip access-group acl1

• A. in
• B. out
• C. vlan-in
• D. vlan-out

Answer: B

NEW QUESTION 10
Refer to the exhibit.

Switch-1 and Switch-2 connect on interface A23. The switches experience a connectivity issue. The network administrator sees that both switches show this interface as up. The administrator sees the output shown in the exhibit on Switch-1.
What is a typical issue that could cause this output?

• A. asymmetric routing introduced by a routing protocol
• B. an issue with VLAN mismatch
• C. mismatched subnet mask on the VLAN for the link
• D. a jumbo frame mismatch

Answer: A

NEW QUESTION 11
Refer to the exhibit.

The routing switches shown in the exhibit run OSPF on the links between each other. The commander in the Switch-1 VSF fabric goes down. Traffic is disrupted for several seconds.
What should a network administrator do to support a faster failover in a similar situation?

• A. Configure echo mode BFD on the VLAN that connects Switch-1 and Switch-2.
• B. Add VRRP on the VLAN between Switch-1 and Switch-2.
• C. Configure graceful restart, or nonstop OSPF, on Switch-1 and Switch-2, with a proper timer.
• D. Create a redundant virtual link between Switch-1 and Switch-2.

Answer: A

NEW QUESTION 12
A network administrator can set the OSPF metric type on an AOS-Switch to Type 1 or Type 2. What is the difference?

• A. A Type 2 metric marks external routes that can be advertised in NSSAs, while a Type 1 metric marks external routes that can only be advertised in normal areas.
• B. A Type 2 metric assigns cost to a 100 Gbps link, while a Type 1 metric assigns cost 1 to all links Mbps or higher.
• C. A Type 2 metric is assigned to multiple external routes that are aggregated together, while a Type 1 metric does not permit external route aggregation.
• D. A Type 2 metric stays the same as the external route is advertised, while a Type 1 metric increments with internal OSPF link costs.

Answer: D

NEW QUESTION 13
A company has a wireless Aruba solution and wired users that connect to AOS-Switches. The company wants deep insight into the types of applications that wired users run. The company also wants more control over the traffic. What can the company do to meet these goals?

• A. Use tunneled node to send traffic through an Aruba Mobility Controller
• B. Configure extended IP ACLs on the AOS-Switches to filter the traffic.
• C. Configure RMON receives on the switches.
• D. Set up remote traffic mirroring between the AOS-Switches and Aruba Mobility Controller

Answer: A

NEW QUESTION 14
What must an OSPF router do when it receives a link state update?

• A. It must participate in a new election for the Designated Router and Backup DR.
• B. It must initiate a graceful restart timer.
• C. It must re-establish adjacency with its Designated Router and Backup DR.
• D. It must run the shortest path first algorith

Answer: D

NEW QUESTION 15
Refer to the exhibit.

A network administrator needs to deploy AOS-Switches that implement port-based tunneled node. Their Aruba controller has IP address 10.1.10.5/24. The architect has assigned tunneled-node endpoints to VLAN 20.
What is one issue with the current configuration planned for VLAN 20 on the switch?

• A. VLAN 20 must have GRE enabled on it.
• B. VLAN 20 cannot have an IP address.
• C. VLAN 20 must have an IP address in the same subnet as the controller.
• D. VLAN 20 must not enable jumbo frame

Answer: D

NEW QUESTION 16
What is a reason to implement port security on an AOS-Switch?

• A. to simplify provisioning for devices such as IP phones or printers
• B. to enhance the security of an 802.1X solution
• C. to filter traffic at the edge, based on multiple criteria in the MAC header
• D. to control management access to the switch CLI based on device, as well as user credentials

Answer: B

NEW QUESTION 17
A network administrator needs to configure an AOS-Switch to classify traffic. Comparing QoS policy and global policy, what is one function that only a class-based QoS policy can fulfill?

• A. Apply a DSCP to HTTP traffic from some sources but not other sources.
• B. Apply a DSCP rather than an 802.1p value to classified traffic.
• C. Override the incoming DSCP in the received traffic.
• D. Override the DSCP or priority applied directly to an interfac

Answer: B