QUESTION: 53

Examine the commands entered on an AOS-CX switch:

What is true regarding this configuration for traffic received on interface 100?

The default next-hop address supersedes the two preceding next-hop addresses
The traffic is always dropped is the next-hop addresses are unreachable
The traffic will be routed with the IP routing table entries if the next-hop addresses are unreachable
The next-hop address of 1.1.1.1 is overwritten by the next-hop address of 2.2.2.2

Answer(s): C

Explanation:

"interface null: equivalent to the policy drop policing action. Any packets matching the class criteria for that policy entry will be dropped and not routed any further." https://www.arubanetworks.com/techdocs/AOS-CX/10.05/HTML/5200-7300/index.html#GUID- DC7E5E47-8F31-4DE4-B257-1A68665B2AF4.html
More than one next hop can be assigned with an ACL and they work by priority (based on the sequence number: lower sequence number -> higher priority). So next-hop 2.2.2.2 will be used if 1.1.1.1 is not reachable. If both are unreachable, then the packet will be routed looking at the default routing table, if no specific entry will be found, then the pacjet will be routed to the default next hop defined in the ACL.

Reveal Solution Next Question

QUESTION: 54

Examine the following ACL rule policies:
Permit traffic from 10.2.2.1 through 10.2.2.30 to anywhere Permit traffic from 10.2.2.40 through 10.2.2.55 to anywhere Deny all others
Based on this policy, place the following ACL rule statements in the correct order to accomplish the above filtering policy.

deny ip 10.2.2.31 255.255.255.255 any permit ip 10.2.2.40 255.255.255.248 any permit ip 10.2.2.48 255.255.255.248 any deny ip 10.2.2.32 255.255.255.224 any permit ip 10.2.2.0 255.255.255.192 any
permit ip 10.2.2.40 255.255.255.248 any permit ip 10.2.2.48 255.255.255.248 any permit ip 10.2.2.0 255.255.255.192 any deny ip 10.2.2.31 255.255.255.255 any deny ip 10.2.2.32 255.255.255.224 any
deny ip 10.2.2.31 255.255.255.255 any deny ip 10.2.2.32 255.255.255.224 any permit ip 10.2.2.40 255.255.255.248 any permit ip 10.2.2.48 255.255.255.248 any permit ip 10.2.2.0 255.255.255.192 any
deny ip 10.2.2.31 255.255.255.255 any permit ip 10.2.2.40 255.255.255.248 any deny ip 10.2.2.32 255.255.255.224 any permit ip 10.2.2.48 255.255.255.248 any permit ip 10.2.2.0 255.255.255.192 any

Answer(s): A

Reveal Solution Next Question

QUESTION: 55

A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS- CX
switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility
Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.
What is correct about how the company should implement a security solution where the wired traffic is processed by the gateways?

Implement downloadable user roles with a gateway role defined on the AOS-CX switches
Implement local user roles with a gateway role defined on the AOS-CX switches
Implement standards-based RADIUS VSAs to pass policy information directly to the AOS-CX switches and MCs
Implement downloadable user roles with a device role defined on the AOS-CX switches and MCs

Answer(s): B

Reveal Solution Next Question

QUESTION: 56

An administrator wants to leverage always-on PoE on AOS-CX switches.
Which statement is correct regarding this feature?

Provides up to 60W of power per port
Supports all AOS-CX switches
Provides surge protection for PoE and non-PoE ports
Requires NetEdit to implement

Answer(s): A

Reveal Solution Next Question

Free HPE6-A73 Exam Braindumps (page: 15)

QUESTION: 53

Explanation:

QUESTION: 54

QUESTION: 55

QUESTION: 56

Exam Discussions & Posts