NEW QUESTION 1
Refer to the exhibits. Exhibit 1

Exhibit 2

The exhibits show the current operational state for routes on Switch-3. The company wants Switch-3 to send all traffic to 172.16.0.0/16 through Switch-2.
Which single configuration change creates the desired behavior?

• A. Change the OSPF external metric type to 1 on Switch-1 and Switch-3.
• B. Change the OSPF external metric type to 2 on Switch-1 and Switch-2.
• C. Set a cost in the redistribute static command on Switch-2.
• D. Set a cost in the router ospf area 0.0.0.1 stub command on Switch-1.

Answer: C

NEW QUESTION 2
Refer to the exhibits.
Exhibit 1

Exhibit 2

Exhibit 1 shows a portion of the BGP routing table when the BGP solution was first deployed. Exhibit 2 shows the same portion at the current time. What can explain the current state?

• A. Due to changes in the private network, Switch-1 can no longer reach 192.168.2.1.
• B. Switch-1 can no longer reach ISP 1 at 192.168.1.1.
• C. Due to changes at ISP 1, Switch-1 now selects a different best route.
• D. An administrator has applied a route map on Switch-1 that filters advertised route

Answer: C

NEW QUESTION 3
An AOS-Switch runs IGMP on A VLAN.
What is a requirement for the switch to be a potential IGMP querier on that VLAN?

• A. The switch must run PIM-SM or PIM-DM on that VLAN.
• B. The switch must have an IP address on that VLAN.
• C. The switch must have IGMP fast leave disabled globally.
• D. The switch must have at least one IGMP group configured on it manuall

Answer: B

NEW QUESTION 4
A network administrator needs to set up an AOS-Switch to use port-based tunneled node for connected
devices. However, the administrator wants the switch to forward traffic without tunneling if it cannot reach a tunneled- node server.
What should the administrator do?

• A. Apply the tunneled-node profile to ports, and set the local-switching-fallback option.
• B. Make sure that the switch has an IP address on the untagged VLAN assigned to the ports.
• C. Configure a local switching profile on the Mobility Controller that acts as tunneled-node server.
• D. Set the switch to role-based tunneled node, and make sure it uses the default initial user rol

Answer: D

NEW QUESTION 5
Two AOS-Switches connect on VLAN 10 in OSPF Area 1, which is defined as a stub area on both. Which mismatch can cause OSPF routers to lose adjacency?

• A. The administrator adds the backbone area to just one of the routers.
• B. The administrator enables graceful restart, or nonstop switching, on just one of the routers.
• C. The administrator enables jumbo frames on VLAN 10 on just one of the routers.
• D. The administrator adds the no-summary option to Area 1 on just one of the router

Answer: B

NEW QUESTION 6
Refer to the exhibit.

Switch-1 and Switch-2 are configured to provide VRRP in VLAN 2. Based on the output, what will happen when a client in VLAN 2 sends an ARP request for its default gateway IP address?

• A. Only Switch-2 will respond, and it will respond with its own MAC address.
• B. Only Switch-2 will respond, and it will respond with the virtual MAC address for VRID 2.
• C. Both Switch-1 and Switch-2 will respond, and both will respond with the virtual MAC address for VRID 2.
• D. Both Switch-1 and Switch-2 will respond, and each will respond with its own MAC Addres

Answer: B

NEW QUESTION 7
A company wants to implement role-based tunneled node on AOS-Switches. Which solution should be included in the plan to help apply the roles?

• A. a RADIUS server, such as Aruba ClearPass
• B. an SNMP server, such as Aruba AirWave
• C. Aruba Mobility Manager (MM)
• D. Aruba Meridian

Answer: A

NEW QUESTION 8
An AOS-Switch is configured to use captive portal and RADIUS to integrate with an Aruba ClearPass solution.
What should the administrator do to enable the switch to accept change of authorization (CoA) messages from ClearPass?

• A. Enable user-role authorization globally on the switch.
• B. Enable dynamic authorization in the RADIUS server settings.
• C. Enable tunneled node in role-based mode.
• D. Enable login privilege globally on the switc

Answer: B

NEW QUESTION 9
Refer to the exhibit.

The exhibit shows configurations for interface 5 and VLAN 20. Note that DHCP snooping and ARP protection are also enabled.
A network administrator finds that interface 5 on an AOS-Switch is disabled. The administrator re-enables the interface, but it shuts down again. What should the administrator investigate?

• A. a device that sends too much unicast traffic
• B. rogue DHCP server
• C. a loop on the interface
• D. a device that sends unauthorized ARP messages

Answer: C

NEW QUESTION 10
A customer wants access layer switches that support routing, ACLs, backplane stacking, and Smart rate ports. The customer asks about Aruba 5400R z 12 switches.
Which Aruba Switch model would better meet the customer’s requirements?

• A. 2530
• B. 2930F
• C. 3810
• D. 8400

Answer: C

NEW QUESTION 11
A network administrator needs to control traffic based on TCP or UDP application, as well as IP protocol, such as GRE or ICMP. What should the administrator configure for this purpose?

• A. a standard IP ACL and an extended MAC ACL only
• B. both a standard IP ACL and an extended MAC ACL
• C. an extended IP ACL only
• D. both a standard IP ACL and a standard MAC ACL

Answer: C

NEW QUESTION 12
A network uses MSTP and has AOS-Switches at the access layer. The company wants edge ports on the access layer switches to meet these criteria:
They prevent all rogue switches that run STP, RSTP, or MSTP from connecting to the network.
If a rogue switch connects and is then replaced by a proper endpoint, the port recovers automatically without IT staff involvement.
How should the network administrator set up the edge ports to meet these requirements?

• A. Enable loop protection with a timeout period.
• B. Enable BPDU filtering.
• C. Enable both root guard and BPDU protection.
• D. Enable BPDU protection with a timeout perio

Answer: D

NEW QUESTION 13
A company has a Unified Communications and Collaboration (UCC) solution. Users run softphones on their desktops and laptops.
The UCC solution is configured to use a certain range of Layer 4 ports for VoIP traffic. The user devices connect to AOS-Switches.
A network administrator needs to configure the AOS-Switches to prioritize only the VoIP traffic. Where can the administrator configure a DSCP value to meet this goal?

• A. in a global UDP port-based QoS policy
• B. on the interfaces through which the VoIP traffic is forwarded
• C. on the interfaces that connect to the user devices
• D. on the VLAN to which the user devices are assigned

Answer: B

NEW QUESTION 14
Refer to the exhibit.

The company wants the fastest convergence and best load sharing of traffic over the links between Switch-1 and the VSF fabric. Which technology should the network administrator implement on these links?

• A. RPVST+
• B. MSTP
• C. loop protection
• D. LACP

Answer: D

NEW QUESTION 15
Refer to the exhibit.

Switch-1 and Switch-2 connect on interface A23. The switches experience a connectivity issue. The network administrator sees that both switches show this interface as up. The administrator sees the output shows in the exhibit on Switch-1.
What is a typical issue that could cause this output?

• A. a hardware issue, such as a broken cable
• B. asymmetric routing introduced by a routing configuration error
• C. an issue with queuing, caused by mismatched QoS settings
• D. mismatched IP addresses on the VLAN for the link

Answer: A

NEW QUESTION 16
What is a reason to create a virtual link between two OSPF routers?

• A. to permit OSPF to operate between two routers that also run VRRP
• B. to create a connection between two areas that are not directly connected to Area 0
• C. to permit an OSPF adjacency between two VSF fabrics
• D. to monitor connectivity with the neighbor, but not exchange the routing table

Answer: B

NEW QUESTION 17
Refer to the exhibit.

The network administrator wants to summarize routes as much as possible in between areas. What is the correct range to specify for the router OSPF Area 2 command on Switch-2?

• A. 10.0.0.0/20
• B. 10.0.0.0/21
• C. 10.0.8.0/21
• D. 10.0.16.0/21

Answer: D