Try 100% Updated HPE6-A75 Exam Questions [2021]
Pass HPE6-A75 Exam - Real Questions & Answers
NEW QUESTION 23
Why is a terminate session enforcement profile used during posture checks with 802.1 x authentication?
- A. To remediate the client applications and firewall do that updates can be installed
- B. To blacklist the user when they are in an unhealthy posture state
- C. To send a RADIUS CoA message from the ClearPass server to the client
- D. To force the user to re-authenticate and run through the service flow again
- E. To disconnect the user for 30 seconds when they are in an unhealthy posture state
Answer: C
NEW QUESTION 24
Refer to the exhibit.
Several interfaces on an AOS-Switch enforce 802. IX to a RADIUS server at 10.254.378.521. The interface 802. IX settings are shown in the exhibit, and 802. IX is also enabled globally. The security team have added a requirement tor port security on the interfaces as well. Before administrators enable port security, which additional step must they complete to prevent issues?
- A. Enable eavesdropping protection on the interfaces.
- B. Set an 802. l X client limit on the interfaces.
- C. Enable DHCP snooping on VLAN 20.
- D. Manually add legitimate MAC addresses to the switch authorized MAC list.
Answer: C
NEW QUESTION 25
Refer to the exhibit.
An AD user's department attribute is configured as *HR". The user connects on Monday using their Windows Laptop to a switch that belongs to the Device Group HQ. Which role is assigned to the user in ClearPass?
- A. Vendor
- B. iOS Device
- C. Executive
- D. Remote Employee
- E. HR Local
Answer: D,E
NEW QUESTION 26
An administrator deploys an AP at a branch office. The branch office has a private WAN circuit that provides connectivity to a corporate office controller. An Ethernet port on the AP is connected to a network storage device that contains sensitive information. The administrator is concerned about sending this traffic in clear-text across the private WAN circuit.
What can the administrator do to prevent this problem?
- A. Enable AP encryption for wired ports.
- B. Redirect the wired port traffic to an AP-to-controller GRE tunnel.
- C. Enable IPSec encryption on the AP's wired ports.
- D. Convert the campus AP into a RAP.
Answer: C
NEW QUESTION 27
A university wants to deploy ClearPass with the Guest module. They have two types of users that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.
How should the service be setup in the Policy Manager for this Network?
- A. Guest User Repository as the authentication source and the Active Directory server as the authorization source
- B. Active Directory server as the authentication source, and Guest User Repository as the authorization source
- C. Either the Guest User Repository or Active Directory server should be the single authentication source
- D. Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources
- E. Guest User Repository and Active Directory server both as authentication sources
Answer: E
NEW QUESTION 28
The administrator expects the AP to connect to a cluster, but the AP tails to connect. The administrator examines the configuration of an AP from apboot mode shown in the exhibit. What can the administrator determine about the configuration of the AP?
- A. The AP is configured to terminate on a non-cluster Mobility Controller.
- B. The AP is configured to terminate on a Mobility Controller in a cluster.
- C. The AP is configured as a RAP to terminate on a Mobility Master.
- D. The AP is configured as a RAP to terminate on a stand-alone controller.
Answer: C
NEW QUESTION 29
An administrator deploys Aruba Mobility Controller 7005s to a company's branch offices. The administrator wants to disable the console port to prevent unauthorized access to the controllers.
Which controller command should the administrator use to implement this policy?
- A. no mgmt-user console
- B. mgmt-user console-block
- C. no console enable
- D. console disable
Answer: B
NEW QUESTION 30
Refer to the exhibit.
Controllers are configured m a cluster as shown in the exhibit. These are the network details.
* A Mobility Master (MM) manages the cluster.
* The cluster contains two controllers: C l and C2.
* API and AP2 use CI as their Active AP Anchor Controller (A-AAC). with C2 as their Standby AAC (S-AAC).
* AP3 and AP4 use C2 as their A-AAC, with CI as their S-AAC.
User1 establishes a wireless connection via API, where the Active User Anchor Controller (A-UAC) assigned is CI. with C2 as the standby. What happens when User I roams the wireless network and eventually their session is handled by AP3?
- A. The AP3's A-AAC switches to C1, and the user's A-UAC remains on C2.
- B. The AP3's A-AAC switches to C2, and the user's A-UAC remains on C1.
- C. The AP3's A-AAC switches to C1, and the user's A-UAC remains on C1.
- D. The AP3's A-AAC switches to C2, and the user's A-UAC remains on C2.
Answer: D
NEW QUESTION 31
Refer to the exhibit.
Based on the Enforcement Policy configuration, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?
- A. Deny Access Profile
- B. EMPLOYEE_VLAN
- C. HR VLAN
- D. RestrictedACL
- E. Remote Employee ACL
Answer: A
NEW QUESTION 32
A network administrator configures V5F settings on two Aruba 2930F switches. The switches form two separate VSF fabrics. What should the administrator check?
- A. that the domain ID matches on both switches
- B. that LLDP MAD is configured on both members
- C. that the switch with the lower priority has the lower member ID
- D. that each switch is assigned a unique VSF priority
Answer: C
NEW QUESTION 33
Which ArubaOS CLl command can an administrator execute to determine if AP load balancing is enabled in a cluster?
- A. show lc-cluster group-membership
- B. show aaa cluster essid
- C. show ap active
- D. show switches
Answer: A
NEW QUESTION 34
An administrator creates service-based policies for AirGroup on the Mobility Master (MM). The administrator can define location-based policy limits based on which information?
- A. AP names, AP groups, controller names, and controller groups
- B. AP Fully Qualified Location Names (FQLNs) and controller Fully Qualified Domain Names (FQDNs)
- C. AP names, AP groups, and AP Fully Qualified Location Names (FQLNs)
- D. Controller names, controller groups, and controller Fully Qualified Domain Names (FQDNs)
Answer: C
NEW QUESTION 35
An administrator implements a standalone controller that runs ArubaOS 8.x. Which feature should the administrator configure to optimize the RF operation for the company's WLAN?
- A. AirMatch
- B. Zones
- C. ARM
- D. Clustering
Answer: A
NEW QUESTION 36
in a VPN that uses certificate-based authentication, which component must be configured on the Mobility Master (MM) to allow a RAP to successfully connect to a Mobility Controller (MC)
- A. RAP IPSec pre-shared key
- B. RAP whitelist
- C. WLAN and new RAP group
- D. RAP VPN username and password
Answer: B
NEW QUESTION 37
OSPF is configured on an AOS-Switch, and the network administrator sets the router ID to 10.0.0.1. The administrator wants to be able to reach the switch at this ID from any location throughout the OSPF system. The administrator also needs the router ID to De stable and available, even if some links on the switch fail.
What should the administrator do?
- A. Configure 10.0.0.1 on a loopback interface, and enable OSPF on that interface.
- B. Configure 10.0.0.1 as a manual OSPF neighbor on each switch in the OSPF system.
- C. Configure 10.0.0.1 as a secondary IP address on the switch 00BM poet.
- D. Make sure that 10.0.0.1 is the IP address on the VLAN with the lowest ID.
Answer: A
NEW QUESTION 38
Refer to the exhibit.
An administrator implements AP licensing on a Mobility Master (MM).
* Each campus is responsible to purchase its own AP licenses.
* There are 900 AP licenses deployed in the global pool
* There are three dedicated pools.
* From the global pool, 300 AP licenses are assigned to each dedicated pool.
Network engineers at CampusA want to deploy an additional 100 APs. Currently all of the AP licenses in CampusA and CampusB are allocated, but only 200 of the AP licenses m CampusC are allocated.
What can the administrator do to add capacity for CampusA in alignment with campus policies?
- A. Allow CampusA to share from the CampusC pool.
- B. Move 100 licenses from the CampusC pool to the global pool.
- C. Add 100 more AP licenses to the global pool.
- D. Add 100 more AP licenses and assign them to the CampusA pool.
Answer: D
NEW QUESTION 39
......
HPE6-A75 Exam Questions Get Updated [2021] with Correct Answers: https://pdfvce.trainingdumps.com/HPE6-A75-valid-vce-dumps.html
