Online Access Free HPE6-A29 Exam Questions

An administrator manages an Aruba Mobility Controller. The administrator wants to detect and prevent a rogue AP from advertising a fake SSID in the corporate network. This rule requires the controller to look for a small offset between the radio and Ethernet MAC addresses of the rogue AP.
Which license should be installed on the controller to detect and prevent this attack?

• A.PEFNG
• B.PEFV
• C.RFProtect
• D.WIPS

A company wants to implement a wireless solution based on the use of server-side certificates. Which EAP options meet this criteria?

• A.EAP-MD5 and EAP-GTC
• B.PEAP and EAP-TLS
• C.PEAP and EAP-GTC
• D.EAP-TLS and EAP-GTC

Referring to the above screen capture, on which Controller can you create a VLAN?

• A.Controller 10.1.20.100 and 10.254.1.3 only
• B.None of the Controllers
• C.Controller 10.1.10.100 only
• D.Controller 10.254.1.101 only
• E.All three Controllers

An administrator creates a firewall policy on an Aruba Mobility Controller and applies it to a trunk port that is marked as trusted. No specific AAA profile is configured for the VLAN. A user in VLAN 11, which is marked as untrusted, sends traffic to the port.
What happens with the traffic?

• A.The traffic is untrusted and the global AAA profile is applied.
• B.The traffic is untrusted and is always dropped.
• C.The traffic is trusted and the firewall policy determines if the traffic is permitted or dropped.
• D.The traffic is trusted and is always permitted.

An administrator manages a network that includes three campuses. The network uses Aruba Mobility Controllers and Aruba APs. Each campus is managed, where each campus has its own master-local topology.
The administrator wants to simplify the operations of Control Plane Security (CPSec) to allow APs to be centrally provisioned but can be placed in any campus.
What must the administrator do to allow an AP to securely connect to any controller in any campus?

• A.Set up a third-party solution to provide root Certificate Authority (CA) and subordinate CA services.
• B.Set up each master controller as a CPSec Trust Anchor at each of the three campuses.
• C.Set up three cluster domains with a single CPSec Trust Anchor for the entire network.
• D.Set up one master controller as a CPSec Trust Anchor and the other master controllers as cluster members.