A client connecting to a tunneled open network is receiving the wrong VLAN Your customer has a gateway and has sent over a packet capture from a switch port mirror taken from the upstream switch with a packet capture from the IPsec tunnel and the GRE tunnel to help Identify the VLAN being sent from the controller to the AP. Where will you see the VLAN assignment? A.The GRE tunnel will include the VLAN lag assignment B.VLAN tag assignment win not he captured in any of the packet captures C.IPsec tunnel will include the VLAN tag assignment D.VLAN tag assignment win be included in the port mirror Answer: D

After onboarding three new AOS 10 gateways using the full-setup methodinto the same Central group, a customer cannot log in to one of the gateways using the HPE Aruba Networking Central remote console due to an incorrect password. A.The admin password created using full-setup does not match the global Central admin password. B.The admin password created during the run-setup process is not configured to allow me remote console access C.The admin password created during the full-setup process does not match the Central group admin password D.The admin password created at the Central group level has expired Answer: C

Which statements accurately describe OSPF Graceful Restart (when the restarting router is able to Keep its forwarding tables across the restart)? (Select two.) A.The GR helper role is supported on AOX-CX 6100 switches. B.VSF Failover and Graceful-Restart require a VSF secondary member in the VSF stack C.Bidirectional Forwarding Detection for OSPF and GR are mutually exclusive features. D.OSPF Routers listen for Grace-LSAs on each network segment where there is an OSFP adjacency. E.You must ensure your VSF stack has a secondary member when acting as a GR helper Answer: A, D

A network technician racked up two 9240 mobility gateways in a single cluster that will be terminating 1700 APs in a medium-sized branch office Next, the technician cabled the gateways with two SFP28 Direct Attach Copper (DAC) cables, distributed between a two-member core switching stack and powered them up. What must the network administrator do next regarding the gateway configuration to ensure maximum wired bandwidth utilization? A.Map two physical ports to a port channel on each gateway. B.Make an ports trunk interfaces and permit data VLANs C.Disable the spanning tree and allocate unique VLANs to each port. D.Manually set 25Gbps speeds on all ports. Answer: A

You recently added ClearPass as an authentication server to an HPE Aruba Networking Central group. RADIUS authentication with Local User Roles (LUR) works fine Out the same access points cannot use Downloadable User Roles (DUR). What should he corrected in this configuration to fa the issue with DUR? A.Add a new Enforcement Policy of type ‘’WEBAUTH’’on ClearPass and associate it with the matching service on ClearPass B.Add the correct IP addresses or IP subnets of the Network Access Devices(NADs) under the "Devices" tabon ClearPass C.Replace the AP's expiree digital certificate using the "crypto pki-import pem serverCert" command. D.Add the correct values for "CPPM username" and "CPPM Password" m the authentication server configuration on HPEAruba Networking Central Answer: B

You are testing the use of the automated port-access role configuration process using RadSec authentication over VXLAN. During your testing you observed that the RadSec connection will fan during the digital certificate exchange What would be the cause of this Issue? A.The RadSec server was defined on the switch using an IPv6 address that was unreachable B.Tracking mode was set to "dead-only", and the RadSec server was marked as unreachable. C.The switch is configured to establish a TLS connection with a proxy server, not the radius server. D.The RADIUS TCP packets are Being dropped and the TLS tunnel is not established. Answer: D

A customer would like to allow their IT Helpdesk to configure loT devices to connect lo a single SSID using a unique PSK that other devices cannot use. Which solution would you recommend? A. MPSK AES with MAC Auth B. MPSK Local C. MPSK AES with Cloud Auth D. MPSK AES with ClearPass Answer: D

An OSPF router has learned a pain 10 an external network by Doth an E1 and an E2 advertisement Both routes have the same path cost Which path will the router prefer? A.The router will prefer the E1 path. B.The router will use Doth paths equally utilizing ECMP. C.The router will prefer the E2 path. D.Both routes will be suppressed until the path conflict has been resolved. Answer: A