[UPDATED] HP HPE6-A79 Certification Exam Questions [Q12-Q32]

Posted On September 21, 2022

[UPDATED] HP HPE6-A79 Certification Exam Questions

Quickly and Easily Pass HP Exam with HPE6-A79 real Dumps

HP HPE6-A79 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure and validate IAP-VPN to a controller for remote access Analyze a scenario to determine AirWave scalability requirements
Topic 2	Configure a guest WLAN and validate client connectivity Configure and validate a multizone solution Create triggers and custom reports in AirWave
Topic 3	Analyze customer requirements to determine the need for a multizone deployment Analyze customer requirements to determine roles, firewall policies, and rule requirements
Topic 4	Configure and validate remote connectivity using RAP or a branch office solution Configure and validate Aruba WLAN solutions
Topic 5	Troubleshoot client connectivity and network access Validate client connectivity to a secure WLAN
Topic 6	Analyze an entire WLAN infrastructure to determine the licensing requirements Analyze customer requirements to determine the need for QoS
Topic 7	Integrate and monitor devices with AirWave Monitor and optimize the RF environment
Topic 8	Configure a WLAN with WPA2 PSK Mac authentication for role derivation Configure and validate a complex multisite high availability mobility environment

NEW QUESTION 12
Refer to the exhibit.

The network administrator must ensure that the configuration will force users to authenticate periodically every eight hours. Which configuration is required to effect this change?

Set the reauth-period to 28800 enable reauthentication in the dotlx profile.

Set the reauth-period to 28800 enable reauthentication in the AAA profile.

Set the reauth-period to 28800 enable reauthentication in both dotlx and AAA profile.

Set the reauth-period to 28800 in the dotlx profile and enable reauthentication in the AAA profile.

NEW QUESTION 13
Refer to the exhibits.

A network administrator deploys User Based Tunneling (UBT) in a corporate network to unify the security policies enforcement. When users authenticate with 802.1X, ClearPass shows Accept results, and sends the Aruba-User-Role attribute as expected. However, the AOS-CX based switch does not seem to build the tunnel to the Mobility Controller (MC) for this user.
Why does the switch fail to run UBT for the user?

The switch has not fully associated to the MC.

ClearPass is sending the wrong Vendor ID.

The switch is not configured with the gateway-role.

ClearPass is sending the wrong VSA type.

The switch is not configured with the port-access role.

NEW QUESTION 14
Refer to the exhibits.

A user reports slow response time to a network administrator and suggests that there might be a problem with the WLAN. The user’s phone supports 802.11ac in the 5 GHz band. The network administrator finds the user in the Mobility Master (MM) and reviews the output shown in the exhibit.
What can the network administrator conclude after analyzing the data?

The low SNR forces the client to back off to low MCs. therefore speed is low and retransmits are high.

Client health is poor, but SNR is fair. TX power must be increased in both the client and the AP.

Since SNR is good, then the high retransmit rate must be due a hidden node scenario or high interference.

High Successful frame count and high Max Speed is an indication of a healthy client. Connection will improve at anytime.

NEW QUESTION 15
Refer to the exhibit.

A network administrator is validating client connectivity and executes the show command shown in the exhibit. Which authentication method was used by a wireless station?

EAP authentication

802.1X machine authentication

MAC authentication

802.1X user authentication

NEW QUESTION 16
A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.

While all users authenticate with [email protected] type of credentials, radius1 has user accounts with the domain name portion.
Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?

Option A

Option B

Option C

Option D

NEW QUESTION 17
A company with 50 small coffee shops in a single country requires a single mobility solution that solves connectivity needs at both the main office and branch locations. Coffee shops must be provisioned with local WiFi internet access for customers.
The shops must also have a private WLAN that offers communication to resources at the main office to upload sales, request supplies through a computer system, and make phone calls if needed. In order to simplify network operations, network devices at the coffee shops should be cloud managed.
Which technologies best meet the company needs at the lowest cost?

IAPVPN

SD-Branch

Activate with RAPs

BOC with CAPs

NEW QUESTION 18
Refer to the exhibit.

A network administrator has Mobility Master (MM) – Mobility Controller (MC) based network and has fully integrated the MCs with ClearPass for RADIUS-based AAA services. The administrator is testing different ways to run user role derivation.
Based on the show command output, what method has the administrator use for assigning the “corp” role to client with MAC xx:xx:xx:xx:xx:xx?

Dynamic Authorization using VSA attributes.

Dynamic Authorization using IETF attributes.

Server Derivation Rules using IETF attributes.

User Derivation Rules using the client’s MAC.

NEW QUESTION 19
Refer to the exhibits.

A network administrator has fully deployed a WPA3 based WLAN with 802.1X authentication. Later he defined corp-employee as the default user-role for the 802.1X authentication method in the aaa profile. When testing the setup he realizes the client gets the “guest” role.
What is the reason “corp-employee” user role was not assigned?

The administrator forgot to map a dotlx profile to the corp-employee aaa profile.

The administrator forgot to enable PEFNG feature set on the Mobility Master.

MC 1 has not received the configuration from the mobility master yet.

The Mobility Master lacks MM-VA licenses; therefore, it shares partial configuration only.

NEW QUESTION 20
A network administrator has updated the ArubaOS code of a standalone Mobility Controller (MC) that is used for User-Based Tunneling (UBT) to a newer early release. Ever since the MC seems to reject PAPI sessions from the switch with the 10.1.10.10 IP address. Also the controller’s prompt is now followed by a star mark: “(MC_VA) [mynode] *#” When opening a support ticket, an Aruba TAC engineer asks the administrator to gather the crash logs and if possible replicate UBT connection attempts from the switch while running packet captures of PAPI traffic on the controller and obtain the PCAP files. The administrator has a PC with Wireshark and TFTP server using the 10.0.20.20 IP address.
What commands must the administrator issue to accomplish these requests? (Choose two.)

Option A

Option B

Option C

Option D

Option E

NEW QUESTION 21
Refer to the exhibit:

A company acquires ten barcode scanners to run inventory tasks. These WiFi devices support WPA2-PSK security only. The network administrator deploys a WLAN named scanners using the configuration shown in the exhibit.
What must the network administrator do next to ensure that the scanner devices successfully connect to their SSID?

Set internal as the MAC authentication server group.

Add scanner MAC addresses in user derivation rules.

Enable L2 Authentication Fail Through.

Add scanner MAC addresses in the internal database.

NEW QUESTION 22
Refer to the exhibit.

A network administrator is evaluating a deployment to validate that a user is assigned the proper role and reviews the output in the exhibit. How is the role assigned to user?

The MC assigned the role based on Aruba VSAs.

The MC assigned the machine authentication default user role.

The MC assigned the default role based on the authentication method.

The MC assigned the role based on server derivation rules.

NEW QUESTION 23
A customer wants a WLAN solution that permits Aps to terminate WPA-2 encrypted traffic from different SSIDs to different geographic locations where non-related IT departments will take care of enforcing security policies. A key requirement is to minimize network congestion, overhead, and delay while providing data privacy from the client to the security policy enforcement point. Therefore, the solution must use the shortest path from source to destination.
Which Aruba feature best accommodates this scenario?

Inter MC S2S IPsec tunnels

RAPs

Multizone Aps

VIA

Inter MC GRE tunnels

NEW QUESTION 24
Refer to the exhibit.

A network administrator adds a Mobility Controller (MC) in the /mm level and notices that the device does not show up in the managed networks hierarchy. The network administrator accesses the CLI. executes the show switches command, and obtains the output shown in the exhibit.
What is the reason that the MC does not appear as a managed device in the hierarchy?

The network administrator added the device using the wrong Pre-Shared Key (PSK).

The network administrator has not moved the device into a group yet.

The digital certificate of the MC is not trusted by the MM.

The IP address of the MC does not match the one that was defined in the MM.

NEW QUESTION 25
A network administrator wants to receive a major alarm every time a controller or an Aruba switch goes down for either a local or an upstream device failure. Which alarm definition must the network administrator create to accomplish this?

NEW QUESTION 26
Refer to the exhibit.

A network administrator deploys DSCP based prioritization in the entire wired network to improve voice quality for a SIP-based IP telephony system used by the company. However, users report that calls they make from WLAN have poor audio quality, while desktop phones do not experience the same problem. The network administrator makes a test call and looks in the datapath session table.
Based on the output shown in the exhibit, what is one area that the network administrator should focus on?

UCC based DSCP correction

WMM support on the WLAN

Dynamic Multicast Rate Optimization

wired network congestion

NEW QUESTION 27
An Aruba WiFi solution for a football stadium includes 2500 APs, two Mobility Masters (MM), and eight Mobility Controllers (MCs). Key requirements are seamless roaming and even distribution of APs and clients, even during a MC failure.
Which MC’s deployment option offers seamless roaming, and even AP client distribution among all MCs before and after a MC failure?

a two-member HA group in dual mode

an eight-member L2-connected cluster

two four-member L2-connected clusters

an eight-member HA group in dual mode

NEW QUESTION 28
Refer to the exhibits.
Exhibit 1

Exhibit 2

A network administrator integrates a current Mobility Master (MM) – Mobility Controller (MC) deployment with a RADIUS server to authenticate a wireless user, the network administrator realizes that the client machine is not failing into the it_department role, as shown the exhibits.
Which configuration is required to map the users into the proper role, based on standard attributes returned by the RADIUS server in the Access Accept message?

aaa server-group Corp-Network
set role condition Filter-Id equals it-role set-value it_department

aaa server-group Corp-employee
set role condition Filter-Id value-of

aaa server-group Corp-employee
set role condition Filter-Id equals it-role set-value it_department

aaa server-group ClearPass
set role condition Filter-Id equals it_department set-value it-role

aaa server-group Corp-Network
set role condition Filter-Id equals it_department set-value it-role

NEW QUESTION 29
Refer to the exhibit.

A 7008 Branch Office Controller (BOC) is deployed in a remote office behind a core router. This core does not support 802.1q encapsulation. The Mobility Controller (MC) is the gateway for two tunneling mode SSIDs, as shown in the exhibit.
Which two different configuration options ensure that wireless users are able to reach the branch network through the router? (Choose two.)

Configure all ports of the BOC as access ports on the controller VLAN, and change the gateway of clients to the core router IP.

Configure the uplink of the BOC as an access port on the controller VLAN, and add static routes in the router for the SSID VLAN subnets.

Configure the uplink of the BOC as a trunk port that permits the controller and the SSID VLANs. The controller VLAN must be native.

Configure the uplink of the BOC as an access port on the controller VLAN, and enable NAT for the SSID VLANs.

Configure the uplink of the BOC as a trunk port, tagging the controller and the SSOD VLANs, and enable NAT for the SSID VLANs.

NEW QUESTION 30
A network administrator has racked up a 7210 Mobility Controller (MC) that will be terminating 200+ Aps on a medium-size branch office. Next, the technician cabled the appliance with 4SPF+ Direct Attached Cables (DACs) distributed between two-member switching stack and powered it up.
What must the administrator do next in the MCs to assure maximum wired bandwidth utilization?

Map the four physical ports to port channel 0.

Disable spanning tree and allocate unique VLANs to each port.

Manually set 10Gbps speeds on all ports.

Configure the same MSTP region that the switches have.

Make all ports trunk interfaces and permit data VLANs.

NEW QUESTION 31
Refer to the exhibit.

A network administrator deploys a new Mobility Master (MM) – Mobility Controller (MC) network. To test the solution, the network administrator accesses the console of a pair of APs and statically provisions them. However, one of the APs does not propagate the configured SSIDs. The network administrator looks at the logs and sees the output shown in the exhibit.
Which actions must the network administrator take to solve the problem?

Create another AP group in the MC’s configuration, and re-provision one AP with a different group.

Re-provision one of the APs with a different name, and add new entries with the proper group in the whitelist.

Re-provision the AP with a different group, and modify the name of one AP in the whitelist.

Re-provision one of the APs with a different name or modify the name in the whitelist.

NEW QUESTION 32
A fully functional WLAN is deployed in a campus network using the following script.

Which part of the script can a network administrator re-use to assign a different default role to users when they connect to the same SSID in a second building?