Summer Special - 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: c4sdisc65

HPE6-A71 PDF

$38.5

$109.99

3 Months Free Update

  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions

HPE6-A71 PDF + Testing Engine

$61.6

$175.99

3 Months Free Update

  • Exam Name: Aruba Certified Mobility Professional Exam
  • Last Update: May 29, 2024
  • Questions and Answers: 171
  • Free Real Questions Demo
  • Recommended by Industry Experts
  • Best Economical Package
  • Immediate Access

HPE6-A71 Engine

$46.2

$131.99

3 Months Free Update

  • Best Testing Engine
  • One Click installation
  • Recommended by Teachers
  • Easy to use
  • 3 Modes of Learning
  • State of Art Technology
  • 100% Real Questions included

HPE6-A71 Practice Exam Questions with Answers Aruba Certified Mobility Professional Exam Certification

Question # 6

An administrator supports Aruba Mobility Controllers (MCs) managed by a Mobility Master (MM) in a noncluster deployment. The administrator performs these tasks on the MM for the MCs:

  • Enables L3 IP mobility for the respective VAPs on the MCs
  • Creates a L3 domain and places the MCs in the domain

However, roaming does not work when users roam from an AP connected to one controller in the domain to an AP connected to a different controller in the domain.

What must the administrator do to fix this problem?

D18912E1457D5D1DDCBD40AB3BF70D5D

A.

Configure the same VLANs on the Mobility Controllers in the L3 domain.

B.

Re-provision the APs associated with the Mobility Controllers.

C.

Enable L3 IP Mobility globally on the Mobility Controllers.

D.

Create a home-agent-to-foreign-agent mapping table.

Full Access
Question # 7

An administrator implements per-user tunneled node that involves ArubaOS-Switches and Aruba Mobility Controllers (MCs). What always happens when a wired client connects to the network?

A.

All switch traffic is tunneled to the controller.

B.

The switch performs user authentication.

C.

The tunnel fails unless VMCs are used.

D.

Wired users map to an AAA profile on the controller.

Full Access
Question # 8

An administrator currently manages an L2 cluster with Aruba Mobility Controllers (MCs) that run ArubaOS 8.x. What happens when the administrator enables AP load balancing?

A.

AP load balancing occurs when the rebalance and unbalance thresholds are met.

B.

Users must re-authenticate if they are moved from one controller to another because load balancing is performed.

C.

Balancing of users is based on a hash of their IP address.

D.

AP load balancing is triggered based on the amount of user traffic that users generate.

Full Access
Question # 9

Refer to the exhibit.

HPE6-A71 question answer

An administrator implements AP licensing on a Mobility Master (MM).

Network engineers at CampusA want to deploy an additional 100 APs. Currently all of the AP licenses in CampusA and CampusB are allocated, but only 200 of the AP licenses in CampusC are allocated.

  • Each campus is responsible to purchase its own AP licenses.
  • There are 900 AP licenses deployed in the global pool.
  • There are three dedicated pools.
  • From the global pool, 300 AP licenses are assigned to each dedicated pool.

What can the administrator do to add capacity for CampusA in alignment with campus policies?

A.

Allow CampusA to share from the CampusC pool.

B.

Add 100 more AP licenses and assign them to the CampusA pool.

C.

Move 100 licenses from the CampusC pool to the global pool.

D.

Add 100 more AP licenses to the global pool.

Full Access
Question # 10

Refer to the exhibits.

Exhibit 1: WLAN VAP configuration

HPE6-A71 question answer

Exhibit 2: Microsoft NPS server configuration

HPE6-A71 question answer

Exhibit 3: Server group configuration for the VAP.

HPE6-A71 question answer

An employee authenticates with the username employee and the correct password. However, once the user authenticates, an administrator notices that the employee is assigned the authenticated role and not the desired employee role.

What should the administrator do to solve this problem?

A.

Add a new server group rule on the controller.

B.

Associate the user to the employee group in Microsoft NPS.

C.

Change the server group name on the controller.

D.

Reference the employee role in the WLAN VAP on the controller.

Full Access
Question # 11

Which forwarding mode is used for a WLAN if a RAP needs to decrypt all user traffic and forward it locally?

A.

Split-tunnel

B.

Bridge

C.

Tunnel

D.

Decrypt-tunnel

Full Access
Question # 12

An administrator wants to use AirWave to manage the configuration policy settings of a set of ArubaOS-Switches. Where should the administrator perform this action?

A.

in Groups

B.

in Device Setup

C.

in APs/Devices

D.

in AMP Setup

Full Access
Question # 13

Refer to the exhibit.

HPE6-A71 question answer

What can be determined from the command output shown in the exhibit?

A.

The synchronized data is protected by VRRP.

B.

The command was executed on the standby Mobility Master (MM).

C.

The synchronization period is at its default value.

D.

The other Mobility Master (MM) is the active license server.

Full Access
Question # 14

An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.

Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?

A.

Whitelist the RAP’s IP address on the MC.

B.

Define the RAP’s IPSec pre-shared key in Activate.

C.

Whitelist the RAP’s certificate on the MC.

D.

Configure a VPN address pool in Activate.

Full Access
Question # 15

An administrator sets up a firewall policy that implements split-tunneling for RAPs. Which firewall rule action should the administrator specify for traffic that the RAP should forward directly to the Internet?

A.

split-tunnel

B.

route:src-nat

C.

route:dst-nat

D.

permit

Full Access
Question # 16

An administrator deploys a RAP at a branch office. The RAP should send all employee corporate traffic to the Mobility Controller (MC) and Internet traffic should stay local.

Which forwarding mode should the administrator configure for the employee WLAN to allow for this forwarding?

A.

Tunnel

B.

Decrypt-tunnel

C.

Bridge

D.

Split-tunnel

Full Access
Question # 17

Refer to the exhibit.

HPE6-A71 question answer

The branch office RAP shown in the exhibit provides secure wireless employee access. Because of security concerns, the company’s security policy does not allow wireless guest access. Some customers that visit the Branch office need Internet access. A RAP’s Ethernet Port 3 is used for wired guest access and Port2 is used for wired employee access. When employees connect to Port2, they are authenticated successfully and split-tunnel policy allows them access to both corporate and Internet resources from the Branch office. Guest users, however, cannot access Internet resources on Port 3.

How can the administrator provide guest users Internet access?

A.

Implement ClientMatch to handle the employee and guest user traffic correctly.

B.

Implement the MultiZone feature on the RAP.

C.

Configure a bridge role for the wired RAP port.

D.

Create a guest VAP that allows wired RAP port access.

Full Access
Question # 18

Which network components are tracked by Aruba Clarity? (Choose two.)

A.

Wireless associations

B.

DNS lookups

C.

AP and controller health

D.

WLAN health

E.

Client health

Full Access
Question # 19

An administrator mistakenly configures the wrong VLAN setting on a managed controller's interface. This

causes the controller to lose management access to the Mobility Master (MM). The administrator knows that the auto roll-back feature will revert the managed controller to a previous configuration that was used prior to the change.

Which command can the administrator use to validate that the rollback process is successful?

A.

show debug

B.

show switches

C.

show config status

D.

show controller-ip

Full Access
Question # 20

Which configuration command needs to be executed on an Aruba Mobility Controller (MC) to forward AP statistical data to an AirWave Management Platform (AMP)?

A.

snmp-server

B.

tunneled-node-server

C.

ssh-server

D.

mgmt-server

Full Access
Question # 21

An administrator needs to support Unified Communications and Collaboration (UCC) in a company’s network. The network infrastructure requires the OpenFlow protocol to support SDN-capable applications.

Which controller topology meets these requirements?

A.

Zones

B.

Standalone Mobility Controller

C.

Mobility Master-Mobility Controller

D.

Master-Local

Full Access
Question # 22

What is true about Aruba controllers under normal operations in a Mobility Master (MM)-Mobility Controller (MC) architecture?

A.

The Mobility Master can push a full configuration to a Mobility Controller.

B.

ARM must be used to optimize wireless performance.

C.

The APs can terminate on both Mobility Masters and Mobility Controllers.

D.

Any controller can perform local configurations.

Full Access
Question # 23

Which Aruba Unified Communications and Collaboration (UCC) deployment mode should be used when UCC is disabled on the Mobility Controllers (MCs)?

A.

Heuristics mode

B.

WMM mode

C.

ALG mode

D.

SDN-API mode

Full Access
Question # 24

Refer to the exhibit. What can the determined from the command shown in the exhibit?

HPE6-A71 question answer

A.

All the controllers run in standalone mode.

B.

MM2 is the Mobility Master.

C.

VRRP is used for Mobility Master redundancy.

D.

All the controllers run in a cluster.

Full Access
Question # 25

An administrator mistakenly configures the wrong VLAN setting on a managed controller’s interface. This causes the controller to lose management access to the Mobility Master (MM).

Which mechanism will then attempt to restore the previous working configuration on the managed controller?

A.

disaster recovery

B.

auto-rollback

C.

restore config

D.

bulk configuration

Full Access
Question # 26

In the WebUI of an Aruba Mobility Controller (MC), where recommended approach for this process generate a tech support file that the Aruba Technical Support team can use to help customers?

A.

Diagnostics> Technical Support> System Information

B.

Maintenance> Copy logs> download logs

C.

Configuration> System> Logging

D.

Diagnostics>Technical Support> Copy Logs

Full Access
Question # 27

An administrator sets up a network scan set in AirWave to scan a subnet to identify devices for a firmware upgrade. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access. However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.

What should the administrator have done before running the network scan?

A.

Define a scan credentials set for the devices.

B.

Monitor the devices for needed firmware upgrades.

C.

Change the default credentials of the devices.

D.

Manually upgrade the firmware of the devices.

Full Access
Question # 28

Which methods can be used to configure RAP redundancy when connected to two redundant Aruba Mobility Controllers (MCs) in the DMZ? (Select two.)

A.

Virtual IP address of the two controllers.

B.

Active and Standby AAC.

C.

Primary and backup LMS IP addresses.

D.

IPSec High Availability (HA) between two cluster members.

E.

AirWave direction to RAPs redundant Mobility Controllers.

Full Access
Question # 29

Refer to the exhibit.

HPE6-A71 question answer

An administrator configures a policy for an AP Group. Port 3 of a RAP is a trunk that connects to a switch at a branch office. VLAN 1 is untagged and VLANs 10 (for data) and 11 (for voice) are tagged. The administrator applies an ACL inbound on Port 3 of the RAP.

How does this configuration affect traffic on Port 3?

A.

It filters traffic from VLAN 10 and 11, but allows traffic from VLAN1.

B.

It filters traffic form VLAN 1, but allows traffic from VLANs 10 and 11.

C.

It allows all traffic form VLANs 1, 10, and 11.

D.

It filters traffic from VLANs 1, 10, and 11.

Full Access
Question # 30

A customer uses an SIP application that is not supported by Aruba United Communications and Collaboration (UCC). Which voice deployment mode should the administrator implement on Aruba Mobility Controllers (MCs) to support this application?

A.

Heuristic mode

B.

SDN-API mode

C.

QoS-mode

D.

WMM-only mode

Full Access
Question # 31

Where would an administrator define the split-tunneling mode for a RAP located at a branch office?

A.

the Firewall policy on the RAP

B.

the AAA policy on the controller

C.

the Firewall policy on the controller

D.

the VAP profile on the controller

Full Access
Question # 32

An administrator supports an Aruba wireless network. The administrator configures as AAA profile referenced in a WLAN profile, where:

  • The initial role assigned in the AAA profile is logon
  • The MAC authentication default role is guest
  • The 802.1X authentication role is authenticated

ClearPass is used to verify the 802.1X user credentials. A user authenticates and is assigned the authenticated default role instead of the role assigned in the ClearPass server configuration.

What must the administrator do so that the ClearPass role is assigned to the user?

A.

Select the Server-derived roles User Role in the AAA profile.

B.

Verify the role exists on the controller.

C.

Create the Download Role from CPPM User Rule.

D.

Select the Server-derived roles in the Server Group section.

Full Access
Question # 33

Refer to the exhibit.

HPE6-A71 question answer

An administrator configures a split-tunnel policy to be used by RAPs at branch offices. Under the Configuration section on the Mobility master (MM) shown in the exhibit, where should the administrator configure the split-tunnel mode so that it can be deployed to the RAPs?

A.

WLAN

B.

Roles & Policies

C.

Access Points

D.

Services

Full Access
Question # 34

An administrator implements a cluster of four Aruba Mobility Controllers (MCs) managed by a Mobility Master (MM). An AP Group is configured with two VAPs and deployed to an AP that will connect to the cluster. Each AP contains two radios.

How many GRE tunnels will be built from the AP to the Active AP Anchor Controller (A-AAC)?

A.

2

B.

4

C.

5

D.

8

Full Access
Question # 35

An administrator needs to implement multiple configuration changes on a set of Aruba Mobility Controllers

(MCs) that involve both VLAN and interface configurations at the same time. The controllers are deployed in a cluster.

How can the administrator accomplish this task?

A.

Apply pending changes, and schedule the changes to occur at a similar time.

B.

Create a template and deploy the changes by use of the bulk configuration update feature.

C.

Use AirWave to deploy the changes to respective controllers in the cluster.

D.

Use the Live Update (in-service update) feature for a cluster of controllers.

Full Access
Question # 36

An administrator configures an ArubaOS-Switch for per-user tunneled node. Which protocols does the switch use to establish and maintain a connection with the Aruba Mobility Controller (MC)? (Select two.)

A.

GRE

B.

SSL

C.

PAPI

D.

IPSec

Full Access
Question # 37

Refer to the exhibit.

HPE6-A71 question answer

A user uses a wireless client for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user’s wireless session?

A.

The user is configured for PEAP, but the WLAN profile implemented EAP-TLS.

B.

The AP has reached the limit for number of users connected to the radio.

C.

The user misconfigured the Windows Managed Network Settings profile.

D.

The user is associated with a failed 802.1X/EAP authentication

Full Access
Question # 38

A network of Mobility Controllers (MCs) is managed by a Mobility Master (MM). An administrator misconfigures the IP addressing on an MC and the MC loses connectivity to the MM.

How should the administrator fix this problem?

A.

Restore the previous configuration on the Mobility Master.

B.

Use the disaster recovery mode on the Mobility Master.

C.

Use the auto-recovery mode on the Mobility Master.

D.

Use the disaster recovery mode on the Mobility Controller.

Full Access
Question # 39

An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic. But, when users connect with their wired desktops, they have full access to corporate resources.

What must the administrator do to restrict desktop usage based on the users’ role assignment?

A.

Apply a server-derived role privacy to the RAP port.

B.

Identify the RAP port as untrusted.

C.

Implement ACLs on the RAP port.

D.

Implement per-user tunnel node on the RAP.

Full Access
Question # 40

Refer to the exhibit.

HPE6-A71 question answer

A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user’s wireless session?

A.

The AP has reached the limit for number of users that are allowed to connect to the radio.

B.

The controller cannot reach the AAA server to perform the authentication.

C.

The user is configured for PEAP, but the WLAN profile on the controller implemented EAP-TLS.

D.

The user misconfigured the Managed Network Settings profile in Windows.

Full Access
Question # 41

An administrator wants to implement bandwidth limits for guest users to restrict their Internet usage. On the Mobility Master (MM), where would the administrator define these limits?

A.

User role

B.

Firewall policy

C.

AAA policy

D.

802.1X policy

Full Access
Question # 42

An administrator configures the MultiZone feature for a company network, where a mobility cluster is the primary zone and a standalone controller in the company’s DMZ represents a secondary data zone. The administrator configures two AP Groups and respective VAPs for the zones on the Mobility Master (MM) in the primary zone. When the APs boot up and establish connections to both zones, the administrator notices that no data connections are established to the data zone.

What must the administrator do to fix this problem?

A.

Configure the same AP Groups and VAPs on the standalone controller, and associate the MultiZone APs to both groups.

B.

Configure the same AP Group in the data zone as it is in the primary zone, and configure the VAPs in the data zone.

C.

Have the MultiZone APs initially boot from the standalone controller in the data zone.

D.

Create different AP groups and VAPs on the Mobility Master and standalone controllers, and associate the MultiZone APs to both groups.

Full Access
Question # 43

An administrator creates a user role that department A in a company uses. Various other roles exist for other departments. All employees connect to the same ESSID, which authenticates to an external AAA server. How should the administrator configure to assign the appropriate roles to the employees?

A.

implement default roles

B.

implement server-derived roles

C.

implement user roles

D.

implement AAA profile roles

Full Access
Question # 44

An administrator wants to implement AAA in an Aruba wireless environment that references two ClearPass servers for redundancy. To use these servers, what must the administrator create that will be referenced in the AAA profile?

A.

ClearPass Group

B.

Server matching rules

C.

Server Group

D.

Server Load Balancing

Full Access
Question # 45

What is true about clustering and AP connections to cluster members?

A.

The AP will always stay connected to the LMS IP address configured in the AP profile.

B.

During rebalancing, the active load is redistributed first.

C.

The default thresholds are 75% for the Rebalanced Threshold and 25% for the Unbalanced Threshold.

D.

AP load balancing is disabled by default.

Full Access
Question # 46

An administrator moves an AP from Campus 1 to Campus 2. At the Campus 2, the moved AP does not connect to a controller and download an AP Group configuration.

Which process should the administrator perform to reset the AP back to its initial default state?

A.

From apboot mode, execute purgeenv.

B.

From the AP’s ArubaOS CLI, execute write erase all.

C.

From the controller’s ArubaOS, execute write erase all.

D.

From apboot mode, execute factory_reset.

Full Access
Question # 47

An administrator wants to simulate network traffic and analyze results in an Aruba wireless network to test components such as WPA-2, DHCP, and other protocols. Which Aruba solution implements these functions?

A.

Clarity Live

B.

AirWave VisualRF

C.

AirWave RAPIDS

D.

Clarity Synthetic

Full Access
Question # 48

Refer to the exhibit.

HPE6-A71 question answer

An administrator implements the MultiZone feature. The administrator sets up five zones as shown in the exhibit.

-Zone A has six controllers that form a cluster.

-Zone B has three controllers that from a cluster.

-Zones C, D, and E have a single standalone controller each.

A total of 13 VAPs are created across the five zones. A zone needs to accept RAP connections form branch offices. All zones have the same AP Group name. One of the zones will not accept connections from the MultiZone APs.

Which could be a cause of this problem?

A.

RAPs are used in the configuration.

B.

The number of zones exceeds the maximum limit of four zones.

C.

AP Group names are different for each zone.

D.

The number of VAPs exceeds the maximum limit of 12 VAPs.

Full Access
Question # 49

An administrator manages an Aruba wireless network. Users authenticate to the wireless network using PEAP, where their credentials are validated by the controller’s local database. The company purchases Android tablets to use with an inventory tracking system. The administrator notices that many of the users of these devices use their normal username and password to authenticate, which allows the tablet to access all resources that the user can access from their wireless computers. This is a security violation.

Which Aruba Mobility Controller (MC) feature should the administrator configure to restrict tablet access to a web portal for authentication, where an appropriate post-authentication policy can be applied to these tablets?

A.

AirMatch

B.

AP fingerprinting

C.

Server-derived roles

D.

User-derived rules

Full Access
Question # 50

Which license type must an administrator purchase to use Spectrum Monitoring?

A.

RFP

B.

VMC

C.

PEFV

D.

PEFNG

Full Access
Question # 51

An administrator has multiple AAA servers, some Microsoft RADIUS and some ClearPass. When 802.1X users authenticate, the administrator wants to ensure that the authentication requests are handled by the appropriate AAA server. Users enter their username in this format: username@domain_name.

What must the administrator implement to ensure the correct AAA server processes the authentication request?

A.

server matching rules for the VAP profile

B.

server matching rules for the server group

C.

server matching rules for the AAA profile

D.

server matching rules for the 802.1X profile

Full Access