Aruba Certified Campus Access Mobility Expert Written Exam

Question 1

A network administrator wants to configure an 802.1X supplicant for a wireless network that includes the following:
* AES encryption
* EAP-MSCHAPv2-based user and machine authentication
* Validation of server certificate in Microsoft Windows 10
The network administrator creates a WLAN profile and selects the Change connection settings option. Then the network administrator changes the security type to Microsoft: Protected EAP (PEAP) and enables user and machine authentication under Additional Settings.
What must the network administrator do next to accomplish the task? (Select two)

A. Enable user authentication

B. Enable server certificate validation

C. Change default RC4 encryption for AES

D. EAP-TLS-based user and machine authentication

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

What is me recommended configuration to ensure link aggregation is consistent in a campus topology using VSX with two aggregation switches and downlinks to access switches?

A. Use a custom LACP hash algorithm for improved load Balancing.

B. Use the command "vsx-sync mclag-interfaces" under the VSX context.

C. Keep the MTU values at the default setting for GRE and VXLAN communications

D. Use the command "vsx-sync active-gateways" under the VSX context.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

You are troubleshooting a WLAN deployment with APs and gateways set up with an 802.1X tunneled SSIO.
End-users are complaining that they can't connect to die enterprise SSID. Which possible AP tunnel states could be the cause of the Issue? (Select two.)

A. SM_STATE_CONNECTED

B. SM_STATE_SURVIVED

C. SM_STATE_RE KEYING

D. SM_STATE_SURVIVING

E. SM_STATE_CONNECTING

Correct Answer: C,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

A customer's infrastructure is set up to use both primary and secondary gateway clusters on the SSID profile cased on best practices. Why do they have an equal split of their 120 APs across the primary and secondary gateway clusters?

A. The primary and secondary gateway clusters are up. but the cluster preemption Is not enabled

B. The secondary gateway cluster is a homogeneous cluster with six nodes.

C. The primary and secondary gateway clusters are up. and the cluster preemption is enabled

D. The primary gateway cluster is a heterogeneous cluster with six nodes.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Based on best practices if an SSID is configured Tor a primary and secondary gateway cluster with cluster preemption enabled, which will decide if the APs move to the secondary gateway cluster if all of the nodes in the primary gateway cluster are down?

A. cluster leader in the secondary gateway cluster

B. cluster leader in the primary gateway cluster

C. tunnel orchestrator for LAN tunnel service in HPE Aruba Networking Central

D. every AP individually

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

A customer has interfering devices that are seen over the air. They contact you and ask you to configure RAPIDS to help identify interfering and rogue APs.
HPE Aruba Networking Central identifies a rogue AP and displays the connected switch port.
How can HPE Aruba Networking Central identify which switch port the AP is connected to?

A. From the AP MAC address table

B. From the switch MAC address table

C. From the switch LLDP neighbors table

D. Device profiling on the switch

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Which option shows the correct Banawidth Control for 1024 kbps down and 2048 Kops up for the SSID?

A.

B.

C.

D.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

An OSPF router has learned a path to an external network by both an E1 and an E2 advertisement. Both routes have the same path cost. Which path will the router prefer?

A. Both routes will be suppressed until the path conflict has been resolved.

B. The router will prefer the E1 path.

C. The router will use both paths equally utilizing ECMP.

D. The router will prefer the E2 path.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

A customer is starting to test AAA on their edge switch interfaces. The client device support team is concerned about clients being denied access to the network due to mistakes in configuration or reachability to the authentication servers.
What should be enabled to address the concerns of the client device support team? (Select two)

A. Configure onboarding-method concurrent

B. Configure auth-mode multi-device

C. Configure port-access radius-override

D. Configure the critical role

E. Configure the fallback role

Correct Answer: D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

HP Aruba Certified Campus Access Mobility Expert Written - HPE7-A07 Exam Practice Test

Latest Update

Useful Links

Contact Us