HPE6-A85.Cap10

Choose the options below that accurately compare the Wi-Fi radio frequency (RF) bands. (Select two.). 2.4 GHz RF energy is less affected by absorption, as is caused when signals flow through office walls and other obstructions. 5 GHz RF energy supports more channels, which means there are less problems with co-channel interference. The 6 GHz band is supported in the 802.11ac and 802.ax standards. In a typical corporate deployment, channel bonding is used to improve performance for all RF bands.

Which statements below accurately compare Aruba AirMatch vs Aruba ClientMatch? (Select three.). AirMatch automatically tunes AP settings to optimize your RF environment. ClientMatch helps balance the client load across APs. ClientMatch helps balance the client load across RF bands. ClientMatch minimizes channel coupling, where adjacent radios are assigned to the same channel.

When defining a WLAN, you can statically configure the VLAN, or allow the VLAN to be derived based on the client MAC address or RADIUS response attributes. True. False.

Which of the following security mechanisms are most suitable for employees connecting to an enterprise-class deployment? (Select three.). 802.1X. WPA3. PSK. Captive Portal. External RADIUS server authentication.

Match the AAA service (Authentication, Authorization, and Accounting) to an appropriate description. Permit or deny access based on credentials and/or digital certificates. Control authenticated user capabilities. Track user activity.

In Figure 10-56, which device would be the acuthenticator?. Endpoint. Switch. Authentication server. AD/LDAP/CA server.

Which of the options below accurately compares 802.1X authentication vs. captive portal authentication? (Select three.). They both occur at layer 3 of the OSI model. 802.1X authentication is typically used for corporate employee access. Captive portal authentication is often used for guest access. 802.1X authentication requires clients to authenticate to a authentication server as soon as the endpoint connects.

During 802.1X client authentication, which devices can perform the authenticator role? (Select two.). Supplicant. AP. Switch. Authentication server. RADIUS.

Match the AAA service (Authentication, Authorization, and Accounting) to an appropriate description. Very strong security, mitigates risk of password authentication. Requires the overhead of managing CA services, certificate distribution, and management. May have relatively limited support as compared to other methods. Enables chaining of machine and user authentication with tokens. Easier to implement than some other methods, but slightly weaker security.

Your colleague is asking about the role-based ArubaOS Firewall. Which statements below can you leverage to improve their understanding? (Select three.). It can enforce different rules based on user identity and assigned role but increases the reliance on VLANs and subnets for security. A role is a group of settings that controls client traffic. A role can include rules that leverage Deep Packet Inspection (DPI) and Web Content Classification (WebCC). It can leverage roles derived from a authentication server.

Which options below can help you explain Aruba guest access captive portal options to your colleagues? (Select four.). Cloud Guest is relatively simple to implement, even for multisite environments. Cloud Guest includes self-registration and social login features. The Cloud Guest splash page is not customizable. External captive portal can be implemented with ClearPass or a third-party solution. The external captive portal performs client authentication, while the splash page remains hosted on Aruba Central. You might use the external captive portal if you have very high customization and/or scalability requirements.

You can use the Guest app to configure profiles for splash pages that originate from your Aruba Central account. True. False.

For guest users to access the internet, they must enter a username and password. True. False.

You can set a guest splash page to Type = Authenticated, so guests can login using sponsored access or social networking credentials. True. False.

Instead of creating guest user credentials yourself, you can allow guests to self-register. True. False.

Match the authentication and encryption options to the appropriate WLAN security option (Open, WPA Personal, and WPA Enterprise). Options can be used more than once. Pre-shared key (PSK). WPA3 Advanced Encryption Standard (AES). Opportunistic Wireless Encryption: AES. WPA2: Advanced Encryption Standard (AES). 802.1X.

During the WPA four-way handshake, the Pairwise Master Key (PMK) is used to encrypt data, while the Message Integrity Check (MIC) keys are used for hashing, a frame integrity check. True. False.

Opportunistic Wireless Encryption (OWE) adds encryption to an open SSID that eliminates Man-in-the-Middle (MITM) attacks. True. False.

When using WPA2 Personal as your WLAN security option, your security could be subject to offline dictionary attacks. WPA3 Personal mitigates such attacks. True. False.

Aruba provides a multi-PSK (mPSK) feature to improve security for devices that lack 802.1X authentication support. True. False.

Which options below describe significant features of Aruba Central’s Cloud authentication? (Select all.). It offers a single point of visibility and control over all network infrastructure and related security services. It makes it easy to onboard, monitor, and troubleshoot client connections. It integrates in cloud identity stores like Google Workspace and Azure Active Directory. Artificial intelligence (AI) Insights give you continuous, indepth visibility into connected client behavior.

You can leverage Aruba Central’s Topology pane to ease troubleshooting tasks, by quickly seeing how devices interconnect. True. False.

When analyzing system status LEDs on an Aruba AP, you see a green light repeatedly blinking on for one second, then off for one second. What does this indicate?. The device is fully functional. The device is operating in restricted power mode. There is a system error. The device is booting.

Match the Aruba AP firmware upgrade feature (standard upgrade, live upgrade, and firmware compliance) with its appropriate descriptions. Options can be used more than once. See a list of supported firmware versions per in-group device. Minimize impact in a production network. Good to use during a planned maintenance window. AP upgrade sequence is based on AirMatch partitions. Ensures that devices in a group all run a specific OS version. May disrupt connectivity.

A colleague asks you for advice about the SNMP. Which statements below should you use to help your colleague? (Select three.). An SNMP manager queries SNMP agents for information. The SNMP manager typically provides a GUI for network managers to review all gathered SNMP information. The SNMP manager stores a hierarchical database – a Management Information Base (MIB) for each device. For the best security, your colleague should deploy SNMP version 3.

Match each Aruba AIOps core component (AI Insights, AI Search, and AI Assist) with an appropriate description. Natural language queries for fast troubleshooting. Proactive anomaly detection and optimization. Automated Aruba TAC trouble ticket generation.

Typically, you use Aruba Central’s Alerts & Events page at the end of a troubleshooting session to review your activities. True. False.

Which statements below are true about Aruba’s User eXperience Insight (UXI) solution? (Select three.). The solution includes front-end sensors that request and generate traffic, much like an actual end user. The solution includes a cloud-based UI and intelligent analytics. One advantage of this solution is that it provides intelligent views from a network device perspective. The solution can test the entire client experience, from the Wi-Fi connection, through the network, and up to and including end-user applications.

To perform the password recovery process on an AOS-CX device, you must connect via the console port and power cycle the switch. True. False.

Both the erase all zeroize and erase-startup commands delete the startup checkpoint. True. False.

You can reset an AP’s CLI password from Aruba Central. True. False.

When using the command show logging -r, the “-r” means to list log entries in reverse chronological order. True. False.

Examine CLI output. What does the highlighted output indicate? (Select two.). There is no entry for this AP in Aruba Activate. The AP has no internet access. Aruba’s Activate service is offline. The AP is currently being provisioned by Aruba Central.

Aruba Instant AP (IAP) radios can act as spectrum monitors, to gather spectrum data while servicing clients. True. False.

You are using Aruba Central’s troubleshooting tools to analyze some network issues. Which actions can you perform using these tools? (Select all that apply.)). Ping test. Bounce an interface. Blink the switch locator LED. Start a remote console session to a device.