Exact2Pass
Examine the attached exhibit.
The network administrators is trying to add a remote location as area 3 to the network shown in the diagram.
Based on current connection restrictions, the administrator cannot connect area 3 directly to area 0. The
network is using AOS-CX switches.
Which feature should the administrator implement to provide connectivity to the remote location?
Examine the following AOS-CX switch configuration:
Which access control entries would allow web traffic to the web servers 10.1.0.100 and 10.1.1.100?
Which does VOQ implement that is different from most typical campus switches?
An administrator has configured the following on an AOS-CX switch:
What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the
two specified servers?
An administrator is supporting a network with the access layer consisting of AOS-CX 6300 and 6400 switches. The administrator needs to quickly deploy Aruba IAPs and security cameras in the network, ensuring that the correct QoS and VLAN settings are dynamically applied to the switch ports. Currently, switches are not configured to do device authentication, and no authentication server exists in the network.
Which AOS-CX feature should the administrator use to dynamically assign the policy settings to the correct switch ports?
An administrator in a company of 349 users has a pair of AOS-CX switches with connections to external
networks. Both switches are configured for OSPF. The administrator wants to import external routes on both switches, but assigns different seed metrics to the routes, as well as imports them as external type-1 routes.
What is the best way for the administrator to accomplish this?
A company is implementing a new wireless design and needs it to support high availability, even during times of switch system upgrades. The solution will involve Aruba Mobility Controller (MC) and Aruba AP connections requiring POE. Which campus AOS-CX switch solution and virtual switching should the company implement at the campus access layer?
An administrator of a company has concerns about upgrading the access layer switches. The users rely
heavily on wireless and VoIP telephony. Which is the best recommendation to ensure a short downtime for the users during upgrading the access layer switches?
An AOS-CX switch is configured to implement downloadable user roles. Examine the AOS-CX switch output:
Based on this output, what is the state of the user’s access?
A network administrator is implementing a configuration plan in NetEdit. The administrator used NetEdit to push the configuration plan to the switch. Which option in the NetEdit planning section should the administrator select to save the configuration running on the switch to the startup-config?
An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.
What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?
Examine the partial output of the BGP routing table of an AOS-CX switch:
The switch is learning about four possible path to reach the 1.0.0.0/8 network. Based on this output, which next-hop route will the AOS-CX select to be placed in the IP routing table?
A network administrator wants to centralize the management of AOS-CX switches by implementing NetEdit.
How should the administrator purchase and/or install the NetEdit solution?
A network administrator is installing NetEdit. In order for NetEdit to manage the AOS-CX switches in the network, what must be defined on the AOS-CX switches? (Choose two.)
Which protocol does NetEdit use to discover devices in a subnet during the discovery process?
Examine the following ACL rule policies:
Permit traffic from 10.2.2.1 through 10.2.2.30 to anywhere
Permit traffic from 10.2.2.40 through 10.2.2.55 to anywhere
Deny all others
Based on this policy, place the following ACL rule statements in the correct order to accomplish the above
filtering policy.
An administrator creates an ACL rule with both the “count” and “log” option enabled. What is correct about the
action taken by an AOS-CX switch when there is a match on this rule?
An administrator has an aggregation layer of 8325CX switches configured as a VSX pair. The administrator is
concerned that when OSPF network changes occur, the aggregation switches will respond to the changes
slowly, and this will affect network connectivity, especially VoIP calls, in the connected access layer switches.
What should the administrator do on the aggregation layer switches to alleviate this issue?D18912E1457D5D1DDCBD40AB3BF70D5D
A network engineer for a company with 896 users across a multi-building campus wants to gather statistics on an important switch uplink and create actions based on issues that occur on the uplink. How often does an NAE agent gather information from the current state database in regard to the uplink interfaces?
A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS-CX
switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility
Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.
What is correct about how the company should implement a security solution where the wired traffic is
processed by the gateways?
Examine the network exhibit:
The ACL configuration defined on Core-1 is as follows:
If telnet was being used, which device connection would be permitted and functional in both directions?
(Choose two.)
An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and
secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.
What would cause this problem?
An administrator will be implementing tunneling between AOS-CX switches and Aruba gateways. Which list of protocols must minimally be allowed by an intermediate firewall between two sets of devices?
An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities. The campus involves a core, as well as multiple access layers. Which feature should the
administrator implement to allow both VSX-capable core switches to process traffic sent to the default gateway in the campus VLANs?
An administrator has an AOS-CX switch configured with:
router ospf 1
area 0
area 1 stub no-summary
It is the only ABR for area 1. The switch has the appropriate adjacencies to routing switches in areas 0 and 1.
The current routes in each area are:
Area 0: 5 routes (LSA Type 1 and 2)
Area 1: 10 routes (LSA Type 1 and 2)
External routes: 2 (LSA Type 5)
Based on the above configuration, how many OSPF routes will routing switches see in Area 1?
What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?
An administrator is implementing a multicast solution in a multi-VLAN network. Which statement is true about the configuration of the switches in the network?
An administrator is designing an access layer solution in a data center. A key requirement is to dual-home mission-critical server connections to two different switches, ensuring that the servers always have network access, even during switch software upgrades. This feature should support strictly-controlled provisioning.
What would best meet the administrator's needs when deploying AOS-CX switches?
When implementing user-based tunneling on an AOS-CX switch, which component defines the primary and backup Aruba gateways?
What are best practices when implementing VSX on AOS-CX switches? (Choose two.)
An administrator is implementing a downloadable user role solution involving AOS-CX switches. The AAA
solution and the AOS-CX switches can successfully authenticate users; however, the role information fails to
download to the switches. What policy should be added to an intermediate firewall to allow the downloadable
role function to succeed?
Examine the configuration performed on newly deployed AOS-CX switches:
After performing this configuration, the administrator notices that the switch ports always remain in the EAP start state. What should the administrator do to fix this problem?
