Real Exam Questions HPE6-A45 Dumps Exam Questions in here [Sep-2021]
Get Latest Sep-2021 Conduct effective penetration tests using HPE6-A45
NEW QUESTION 89
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator sets up PIM-DM to route traffic from the multicast source to clients in VLAN 24. The server begins to forward multicasts, and the clients are set up to receive them. However, the multicasts do not reach the clients.
Based on the output, what should the administrator verify?
- A. that Switch-1 has selected Switch-2 as its RP for 239.1.1.1
- B. that state refreshes are enabled on Switch-2
- C. that Switch-2 has PIM-DM enabled on VLAN 10
- D. that VLAN 24 on Switch-1 runs both IGMP and PIM-DM
Answer: C
NEW QUESTION 90
Refer to the exhibit.
Endpoints in VLAN 2 connect directly to this switch. These devices should only be able to send DHCP, DNS, HTTP, and HTTPS traffic. However, they are able to send any traffic. Based on the exhibit, what is the issue?
- A. The ACL lacks a deny ip any any statement at the end
- B. The ACL is applied in the wrong direction
- C. The name of the ACL applied to VLAN 2 is incorrect
- D. The switch does not have an IP address on VLAN 2
Answer: C
NEW QUESTION 91
Refer to the exhibits.
Exhibit 1
Exhibit 2
A company does not require authentication for security, but AOS-Switches are set up to use local MAC authentication (LMA) to assign the correct VLAN and priority to IP phones. IP phones and computers belong to different VLANs. Each device is supposed to connect to a specific port, but sometimes users connect their devices to the wrong ports and cannot receive access without help from IT.
How can a network administrator configure the switches to eliminate this issue?
- A. Add the MAC addresses for computers to the myPhones MAC group.
- B. Apply LMA to all edge switch ports, and set the unauth VLAN to the user VLAN.
- C. Create a user role that applies the user VLAN, and set this role as the initial role.
- D. Set the address limit to 2 on the switch ports that apply LMA.
Answer: A
NEW QUESTION 92
Refer to the exhibits.
Exhibit 1
Exhibit 2
A company does not require authentication for security, but AOS-Switches are set up to use local MAC authentication (LMA) to assign the correct VLAN and priority to IP phones. IP phones and computers belong to different VLANs. Each device is supposed to connect to a specific port, but sometimes users connect their devices to the wrong ports and cannot receive access without help from IT.
How can a network administrator configure the switches to eliminate this issue?
- A. Add the MAC addresses for computers to the myPhones MAC group.
- B. Apply LMA to all edge switch ports, and set the unauth VLAN to the user VLAN.
- C. Create a user role that applies the user VLAN, and set this role as the initial role.
- D. Set the address limit to 2 on the switch ports that apply LMA.
Answer: A
NEW QUESTION 93
Refer to the exhibit.
Switch-1 and Switch-2 are configured to provide VRRP in VLAN 2. Based on the output, what will happen when a client in VLAN 2 sends an ARP request for its default gateway IP address?
- A. Both Switch-1 and Switch-2 will respond, and each will respond with its own MAC Address.
- B. Only Switch-2 will respond, and it will respond with the virtual MAC address for VRID 2.
- C. Only Switch-2 will respond, and it will respond with its own MAC address.
- D. Both Switch-1 and Switch-2 will respond, and both will respond with the virtual MAC address for VRID
2.
Answer: B
NEW QUESTION 94
Refer to the exhibits.
Exhibit 1
Exhibit 2
Switch-1 and Switch-2 are configured to provide VRRP in VLAN 2. The default gateway for VLAN 2 is set to the VRRP virtual IP. Client-1 in VLAN 2 cannot ping its default gateway.
Based on the exhibits, what can administrators determine?
- A. This is the expected behavior, and Switch-1 should still be able to route traffic for Client-1.
- B. The VRRP preempt delay time has not yet expired, and administrators should try to ping the gateway again in several minutes.
- C. Preempt mode is enabled on both Switch-1 and Switch-2, so the Master role continues to alternate between them, and the pings go astray.
- D. Switch-1 and Switch-2 have the same virtual router ID. The conflict interferes with connectivity.
Answer: B
NEW QUESTION 95
Exhibit
Switch-1 runs BGP. What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?
- A. Configure 192.168.1.2 as a neighbor manually within the BGP context
- B. Specify 192.168.1.2 as a neighbor manually within the BGP context
- C. Enable BGP on VLAN 100
- D. Set the BGP AS number to 46501
Answer: D
NEW QUESTION 96
Refer to the exhibit.
The exhibit shows configurations for interface 5 and VLAN 20. Note that DHCP snooping and ARP protection are also enabled.
A network administrator finds that interface 5 on an AOS-Switch is disabled. The administrator re-enables the interface, but it shuts down again. What should the administrator investigate?
- A. a device that sends unauthorized ARP messages
- B. a loop on the interface
- C. rogue DHCP server
- D. a device that sends too much unicast traffic
Answer: B
NEW QUESTION 97
Refer to the exhibit.
The routing switches shown in the exhibit run OSPF on the links between each other. The commander in the Switch-1 VSF fabric goes down. Traffic is disrupted for several seconds.
What should a network administrator do to support a faster failover in a similar situation?
- A. Create a redundant virtual link between Switch-1 and Switch-2.
- B. Configure echo mode BFD on the VLAN that connects Switch-1 and Switch-2.
- C. Configure graceful restart, or nonstop OSPF, on Switch-1 and Switch-2, with a proper timer.
- D. Add VRRP on the VLAN between Switch-1 and Switch-2.
Answer: B
NEW QUESTION 98
Refer to the exhibits.
Exhibit 1.
Exhibit 2.
The VoIP phone connects, authenticates successfully, and is dynamically assigned to tagged VLAN 6. The endpoint connected to the phone does not authenticate but starts to send untagged traffic.
How does the switch handle this traffic?
- A. It forwards the traffic in VLAN 6.
- B. It drops the traffic.
- C. It relays the traffic to the RADIUS server for authentication.
- D. It forwards the traffic in VLAN 5.
Answer: C
NEW QUESTION 99
The security plan for AOS-Switches calls for ARP protection. For ARP protection to function properly, which other feature should also be implemented?
- A. DHCP snooping
- B. MAC lockout
- C. proxy ARP
- D. connection-rate filtering
Answer: A
NEW QUESTION 100
Refer to the exhibit.
A network administrator sets up 802.1X authentication to a RADIUS server on an AOS-Switch. The RADIUS server and user devices are both set up to use PEAP MSCHAPv2. The administrator tests the authentication and sees the output shown in the exhibit. Which issue could cause this output?
- A. The switch port is set for user mode 802.1X, but the RADIUS server is set for port mode
- B. The administrator entered the wrong password for the test account
- C. The RADIUS shared secret does not match on the switch and the server
- D. The switch does not have a certificate for port-access installed on the switch
Answer: C
NEW QUESTION 101
An AOS-Switch has type of service disabled on it globally. The administrator enters:
AOS-Switch(config)# interface 1 qos trust device aruba-ap
What is the effect of this command?
- A. if the AOS-Switch is integrated with an Aruba Mobility Controller, it uses QoS settings sent by the controller to classify traffic received on interface 1
- B. if interface connects to an Aruba AP, the switch marks all traffic received on the interface with a higher than default priority value
- C. if interface 1 connects to an Aruba AP, it uses the incoming DSCP and a global DSCP map to prioritize traffic received on this interface
- D. if the AOS-Switch is integrated with an Aruba Mobility Controller, it uses QoS settings send by the controller to prioritize traffic sent on interface 1
Answer: D
NEW QUESTION 102
A company has AOS-Switches, Aruba ClearPass, and Aruba AirWave, Anetwork administrator needs to find the source of a performance issue that often occurs at the start of the day and early in the afternoon. Which action is likely to give the administrator the most useful information for the investigation?
- A. Use the configuration audit tool on AirWave.
- B. Access the Network Device view on ClearPass.
- C. View the current running config on each switch
- D. View usage patterns on the swithes on AirWave.
Answer: A
NEW QUESTION 103
An AOS-Switch enforces 802.1X it receives an Access-Accept with this HPE VSA from its RADIUS server.
The switch then rejects the client. What is one requirement for the switch to accept the message and authorizes the client?
- A. The RADUS server settings must permit dynamic authorization
- B. The initial user role must be set to the factory default permit any role.
- C. User role authorization must be enabled globally on the switch.
- D. An aaa authentication local user group must have the contractor name.
Answer: B
NEW QUESTION 104
A company wants to implement 802.1X authentication to authenticate client devices on AOS-Switch ports. The company has a RADIUS server that uses PEAP MSCHAP-v2 for the authentication method. What is one task administrators should complete before they implement the plan?
- A. Set up an isolated VLAN in the network for the 802.1X communications.
- B. Configure DHCP services on the AOS-Switches for pre-authenticated clients.
- C. Ensure client devices trust the RADIUS server certificate.
- D. Install personal certificates on client devices.
Answer: A
NEW QUESTION 105
Refer to the exhibits.
Exhibit 1.
Exhibit 2.
The VoIP phone connects, authenticates successfully, and is dynamically assigned to tagged VLAN 6. The endpoint connected to the phone does not authenticate but starts to send untagged traffic.
How does the switch handle this traffic?
- A. It forwards the traffic in VLAN 6.
- B. It drops the traffic.
- C. It relays the traffic to the RADIUS server for authentication.
- D. It forwards the traffic in VLAN 5.
Answer: C
NEW QUESTION 106
......
Authentic Best resources for HPE6-A45 Online Practice Exam: https://www.premiumvcedump.com/HP/valid-HPE6-A45-premium-vce-exam-dumps.html