Free HPE6-A85: Aruba Certified Campus Access Associate Exam Questions and Answers

A network administrator captures traffic on an access switch port while a lab PC downloads a firmware image from a TFTP server. Which transport layer protocol and destination port does the PC use for its initial request to the server?

• AA. TCP port 69
• BB. UDP port 69
• CC. TCP port 21
• DD. UDP port 161

Which AAA function records the resources a user consumes during a session, such as session duration and bytes transferred?

• AA. Accounting
• BB. Posture assessment
• CC. Authentication
• DD. Authorization

An administrator is creating a new WLAN in a UI group of APs in HPE Aruba Networking Central. Employees must connect to the SSID with 802.1X authentication validated by an existing ClearPass Policy Manager server. Which two settings must the administrator configure? (Choose two.)

Select 2 answers.

• AA. The ClearPass server as the primary authentication server
• BB. The Enterprise security level for the SSID
• CC. A pre-shared key of 8 to 63 characters
• DD. A captive portal splash page of the Internal type

Which cabling type is appropriate for a 10 Gbps link of 8 km between two campus buildings?

• AA. OM4 multimode fiber
• BB. Single-mode fiber
• CC. Category 6a copper
• DD. Category 8 copper

What is the purpose of the keepalive link between two AOS-CX switches configured as a VSX pair?

• AA. To detect whether the peer switch is still operating when the inter-switch link fails
• BB. To carry data traffic for VLANs that are not allowed on the multi-chassis LAG
• CC. To elect the root bridge for the spanning tree instances on the pair
• DD. To synchronize MAC address and ARP tables between the two VSX peers

A switch receives a unicast Ethernet frame whose destination MAC address is not in its MAC address table. What does the switch do?

• AA. Floods the frame out all other ports in the same VLAN
• BB. Drops the frame and returns an ICMP destination unreachable message
• CC. Sends the frame only to the port connected to the default gateway
• DD. Holds the frame in a queue until an ARP reply is received

An administrator creates a new 802.1X SSID that will use an existing ClearPass Policy Manager as its RADIUS server. What must be configured in ClearPass so that it accepts RADIUS requests from the gateway or APs?

• AA. A network device entry with the device IP address and a RADIUS shared secret
• BB. A service rule that matches the SSID broadcast frequency band
• CC. An enforcement profile that lists the SSID name and VLAN ID
• DD. A role mapping policy that lists the serial numbers of the APs

Two AOS-CX switches are connected by a trunk port with the following configuration on both ends. VLAN 30 exists on both switches, and users in VLAN 30 on each switch cannot reach each other. switch(config)# interface 1/1/49 switch(config-if)# no shutdown switch(config-if)# no routing switch(config-if)# vlan trunk native 1 switch(config-if)# vlan trunk allowed 10,20 What should the administrator do to fix the problem?

• AA. Change the native VLAN of the trunk to 30 on both switches
• BB. Configure the port as an access port with vlan access 30
• CC. Enable routing on the interface and assign it an IP address
• DD. Add VLAN 30 to the trunk allowed VLAN list on both switches

A host in VLAN 20 is configured with the IP address 10.1.20.77/26. Which IP address can the administrator assign to the VLAN 20 SVI so that the host can use it as its default gateway?

• AA. 10.1.20.30
• BB. 10.1.20.63
• CC. 10.1.20.100
• DD. 10.1.20.130

An administrator needs to find out which hosts and applications generate the most traffic on a congested uplink of an AOS-CX switch. The data must show source and destination IP addresses and ports. Which monitoring tool should the administrator use?

• AA. Syslog events sent to a log server
• BB. Traceroute from the switch to a remote server
• CC. sFlow samples sent to a flow collector
• DD. SNMP polling of interface octet counters