NEW QUESTION 1
A network administrator enters this command: Switch(config)# aaa authorization user-role enable How does this affect device authentication?

• A. The local manager and operator accounts will no longer work unless they are associated with a user role on the switch.
• B. Authenticated devices must receive their dynamic settings, such as VLAN ID and ACLs, from the RADIUS server Access-Accept.
• C. Authenticated devices will be defined proper access if the RADIUS server sends any VSA except the user role VSA
• D. Role-based mode will no longer be available with tunneled node to prevent conflicts with the AAA user role

Answer: B

NEW QUESTION 2
AOS-Switches authenticate guests to ClearPass with captive portal. An administrator notices that some guests are unable to reach the captive portal page. What will resolve this issue?

• A. Permit DNS on the ClearPass Portal
• B. Permit DHCP on the ClearPass Portal.
• C. Permit HTTP or HTTPS on the ClearPass Portal.
• D. Permit Allow All MAC-Auth on the ClearPass Porta

Answer: A

NEW QUESTION 3
Refer to the exhibit.

Switch-1 runs BGP. What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?

• A. Configure 192.168.1.2 as a neighbor manually within the BGP context.
• B. Specify 192.168.1.0/30 with the network command in the BGP context.
• C. Enable BGP on VLAN 100.
• D. Set the BGP AS number to 46501.

Answer: A

NEW QUESTION 4
Refer to the exhibit.

A network administrator needs to deploy AOS-Switches that implement port-based tunneled node. Their Aruba controller has IP address 10.1.10.5/24. The architect has assigned tunneled-node endpoints to VLAN 20.
What is one issue with the current configuration planned for VLAN 20 on the switch?

• A. VLAN 20 must have GRE enabled on it.
• B. VLAN 20 cannot have an IP address.
• C. VLAN 20 must have an IP address in the same subnet as the controller.
• D. VLAN 20 must not enable jumbo frame

Answer: D

NEW QUESTION 5
A network administrator needs to create a backplane stack with four AOS-Switches. The administrator wants to choose which switch becomes the commander. Which procedure meets those needs?

• A. Boot all of the switches at the same time and then connect the backplane stacking link
• B. Then, access the desired commander, and make sure it has member ID 1.
• C. Configure backplane switches settings on each switch while disconnecte
• D. Make sure the desired commander has priority value 1. Then, connect the switches.
• E. Boot up the desired commander first and make sure stacking is enabled on i
• F. Then, connect the stacking links and boot the other switches.
• G. Configure backplane switching settings on each switch while disconnecte
• H. Make sure the desired commander has member ID 1. Then, connect the switches.

Answer: D

NEW QUESTION 6
Refer to the exhibit.

What must the network administrator do on Switch-1 to enable this switch to advertise 192.0.2.0/24 to the router at 192.168.1.1?

• A. Redistribute OSPF routes into the BGP process
• B. Enter a static route to 192.0.2.0/24 to the black hole.
• C. Enter the network 192.168.1.0/24 command in the BGP context.
• D. Enable eBGP multihop to the 192.168.1.1 neighbo

Answer: B

NEW QUESTION 7
A network uses MSTP and has AOS-Switches at the access layer. The company wants edge ports on the access layer switches to meet these criteria:
They prevent all rogue switches that run STP, RSTP, or MSTP from connecting to the network.
If a rogue switch connects and is then replaced by a proper endpoint, the port recovers automatically without IT staff involvement.
How should the network administrator set up the edge ports to meet these requirements?

• A. Enable loop protection with a timeout period.
• B. Enable BPDU filtering.
• C. Enable both root guard and BPDU protection.
• D. Enable BPDU protection with a timeout perio

Answer: D

NEW QUESTION 8
An AOS-Switch runs IGMP on A VLAN.
What is a requirement for the switch to be a potential IGMP querier on that VLAN?

• A. The switch must run PIM-SM or PIM-DM on that VLAN.
• B. The switch must have an IP address on that VLAN.
• C. The switch must have IGMP fast leave disabled globally.
• D. The switch must have at least one IGMP group configured on it manuall

Answer: B

NEW QUESTION 9
OSPF Area 1 has two ABRs. One ABR is configured with this range for Area 1: 10.10.0.0/16. The other ABR is not configured with a range for Area 1.
Which type of issue occurs due to this mismatch?

• A. The ABRs create a discontinuous area and disrupt intra-area routing between devices within Area 1.
• B. The ABR core would send Area 1 traffic destined to the other switch through an access switch.
• C. The ABRs lose adjacency entirely and cannot route traffic between each other at all.
• D. The ABRs lose adjacency in Area 1 and must route all traffic to each other through Area 0.

Answer: A

NEW QUESTION 10
What must an OSPF router do to ensure nonstop routing should a standby member take over as commander when the original VSF commander fails?

• A. It must run the shortest path first algorithm.
• B. It must participate in a new election for the Designated Router.
• C. It must initiate a graceful restart.
• D. It must re-establish adjacency with its Designated Route

Answer: C

NEW QUESTION 11
Refer to the exhibits. Exhibit 1

Exhibit 2

The exhibits show the current operational state for routes on Switch-3. The company wants Switch-3 to send all traffic to 172.16.0.0/16 through Switch-2.
Which single configuration change creates the desired behavior?

• A. Change the OSPF external metric type to 1 on Switch-1 and Switch-3.
• B. Change the OSPF external metric type to 2 on Switch-1 and Switch-2.
• C. Set a cost in the redistribute static command on Switch-2.
• D. Set a cost in the router ospf area 0.0.0.1 stub command on Switch-1.

Answer: C

NEW QUESTION 12
The implementation plan for AOS-Switches calls for them to implement port-based tunneled node. The Aruba Mobility Controllers that will support the AOS-Switches run software 8.1. The controllers will also support APs, are managed by Mobility Master, and use clustering.
Which issue with this plan needs to be addressed?

• A. The controllers cannot support tunneled node with AOS-Switches when they are managed by the Mobility Master.
• B. The switches cannot connect to controllers that also support APs.
• C. The controllers must have their software updated before they can support the switches.
• D. The switches must use role-based tunneled node to work with clustering controller

Answer: A

NEW QUESTION 13
A network administrator configures DHCP snooping on VLAN 2. How does the switch handle DHCP traffic that arrives in this VLAN on an untrusted interface?

• A. It accepts packets from a DHCP server, but drops client packets.
• B. It drops all DHCP traffic and logs a security event.
• C. It accepts both client and server packets as long as they match the DHCP binding table.
• D. It accepts client packets, but drops packets from a DHCP serve

Answer: A

NEW QUESTION 14
Refer to the exhibit.

An AOS-Switch connects to an unmanaged switch in a meeting room. The exhibit shows security settings for this port. Users report that they sometimes lose connectivity and then get it back.
Which best practice should network administrators follow to avoid issue?

• A. The loop protection and port security actions should be set to match.
• B. Eavesdrop prevention should be disabled when report security is in limited-continuous mode.
• C. Port security and loop protection should not be enabled on the same port.
• D. Loop protection should operate in VLAN mode, rather than port mode, when port security is enable

Answer: B

NEW QUESTION 15
Refer to the exhibits.


The network administrator enters the commands shown in Exhibit 2, and Switch-1 and Switch-2 exchange keepalive messages. What is the expected behavior if Switch-1 later fails to receive keepalive messages from Switch-2?

• A. Switch-1 disables interface 1 for 10 seconds, and then re-enables i
• B. The same process repeats twic
• C. If the issue persists, the switch disables the interface permanently.
• D. After two consecutive missed keep-alive packets, Switch-1 disables interface 1, and the interface stays disabled until the issue is fixed.
• E. After two consecutive missed keep-alive packets, Switch-1 sends SNMP traps, and Link 1 stays up until the issue is fixed.
• F. Switch-1 disables interface 1 for 10 seconds and then re-enables i
• G. The interface continues to be reenabled and disabled every 10 seconds until the issue is fixed.

Answer: B

NEW QUESTION 16
Refer to the exhibit.

The company wants the fastest convergence and best load sharing of traffic over the links between Switch-1 and the VSF fabric. Which technology should the network administrator implement on these links?

• A. RPVST+
• B. MSTP
• C. loop protection
• D. LACP

Answer: D

NEW QUESTION 17
Network administrators want to gain insight into network utilization, traffic patterns, and the types of applications in use across the network over the long term.
Which technology can help them achieve this goal?

• A. RMON
• B. sFlow
• C. SNMP traps
• D. DiffServ

Answer: B

NEW QUESTION 18
A customer wants to authenticate AOS-Switch managers to a RADIUS server. Managers should be assigned either read- only or full read-write level access based on the Service-Type VSA in their user account.
What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

• A. RADIUS-based command authorization
• B. a manager and operator password
• C. privileged-mode login authentication
• D. SNMPv3 and SNMPv3 restricted acces

Answer: A

NEW QUESTION 19
The security policy for a company requires that switches use SNMPv3 and accept all read-only SNMPv2c messages. The network administrator enables SNMPv3. Which additional action should the network administrator take to comply with this policy?

• A. Disabled SNMPv3 inform timeouts.
• B. Enable SNMPv3 only operation.
• C. Enable SNMPv3 restricted mode.
• D. Disable SNMPv1/v2

Answer: C

NEW QUESTION 20
A customer wants to authenticate AOS-Switch managers to a RADIUS server. The CIO wants to assign different rights to different management users for granular control over their rights and privileges. What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

• A. RADIUS-based command authorization
• B. a manager and operator password
• C. authentication login privileges
• D. SNMPv3 and SNMPv3 restricted acces

Answer: C

NEW QUESTION 21
Refer to the exhibit.

Switch-1 and Switch-2 are AOS-Switches, which are iBGP peers. ISP 1 and ISP 2 advertise some routes to the same Internet destinations. Switch-1 and Switch-2 must select between these routes based on AS path length.
What is required for Switch-1 and Switch-2?

• A. iBGP synchronization enabled
• B. Multihop enabled for the connection to the iBGP neighbor
• C. ECMP disabled for BGP
• D. eBGP and iBGP administrative distance set to the same value

Answer: D

NEW QUESTION 22
A company has AOS-Switches deployed at sites with inexperienced IT staff. The main office network administrators want to track if configurations change on branch switches.
What should be set up for this purpose?

• A. an SNMP trap
• B. an RMON alarm
• C. an IP SLA profile
• D. an auto-config server

Answer: A

NEW QUESTION 23
......