QUESTION: 53

DRAG DROP (Drag and Drop is not supported)
What is the order of operations tor Key Management service for a wireless client roaming from AP1 to AP2?

See Explanation section for answer.

Answer(s): A

Explanation:

https://www.arubanetworks.com/techdocs/Instant_85_WebHelp/Content/instant-ug/wlan-ssid- conf/conf-fast-roam.htm

Reveal Solution Next Question

A customer is looking Tor a wireless authentication solution for all of their loT devices that meet the following requirements
- The wireless traffic between the IoT devices and the Access Points must be encrypted
- Unique passphrase per device
- Use fingerprint information to perform role-based access Which solutions will address the customer's requirements? (Select two.)

MPSK and an internal RADIUS server
MPSK Local with MAC Authentication
ClearPass Policy Manager
MPSK Local with EAP-TLS
Local User Derivation Rules

Answer(s): C,D

Explanation:

The correct answers are C and D.
MPSK (Multi Pre-Shared Key) is a feature that allows multiple PSKs to be used on a single SSID, providing device-specific or group-specific passphrases for enhanced security and deployment flexibility for headless IoT devices
1. MPSK requires MAC authentication against a ClearPass Policy Manager server, which returns the encrypted passphrase for the device in a RADIUS VSA
2. ClearPass Policy Manager is a platform that provides role- and device-based network access control for any user across any wired, wireless and VPN infrastructure
3. ClearPass Policy Manager can also use device profiling and posture assessment to assign roles based on device fingerprint information
4. MPSK Local is a variant of MPSK that allows the user to configure up to 24 PSKs per SSID locally on the device, without requiring ClearPass Policy Manager
5. MPSK Local can be combined with EAP-TLS (Extensible Authentication Protocol-Transport Layer Security), which is a secure authentication method that uses certificates to encrypt the wireless traffic between the IoT devices and the access points6. EAP-TLS can also use device certificates to perform role-based access control
6. Therefore, both ClearPass Policy Manager and MPSK Local with EAP-TLS can meet the customer's requirements for wireless authentication, encryption, unique passphrase, and role-based access for their IoT devices.
MPSK and an internal RADIUS server is not a valid solution, because MPSK does not support internal RADIUS servers and requires ClearPass Policy Manager789.
MPSK Local with MAC Authentication is not a valid solution, because MAC Authentication does not encrypt the wireless traffic or use fingerprint information for role-based access.
Local User Derivation Rules are not a valid solution, because they do not provide unique passphrase per device or use fingerprint information for role- based access101112.

Reveal Solution Next Question

QUESTION: 55

You are troubleshooting an issue with a pair of Aruba CX 8360 switches configured with VSX Each switch has multiple VRFs. You need to find the IP address of a particular client device with a known MAC address You run the "show arp" command on the primary switch in the pair but do not find a matching entry for the client MAC address.
The client device is connected to an Aruba CX 6100 switch by VSX LAG. Which action can be used to find the IP address successfully? A)

B)

C)

D)

Option A
Option B
Option C
Option D

Answer(s): B

Explanation:

The show arp command displays the ARP table for a specific VRF or all VRFs on the switch. The ARP table contains the IP address to MAC address mappings for hosts that are directly connected to the switch or reachable through a gateway. If the client device is connected to another switch by VSX LAG, the ARP entry for the client device will not be present on the primary switch unless it has communicated with it recently. Therefore, to find the IP address of the client device, the administrator should run the show arp command on the secondary switch in the VSX pair, specifying the VRF name that contains the client device's subnet.

Reference:

https://techhub.hpe.com/eginfolib/Aruba/OS-CX_10.04/5200-6692/GUID-9B8F6E8F-9C7A-4F0D- AE7B-9D8E6C5B6A7F.html

Reveal Solution Next Question

QUESTION: 56

Which statements regarding Aruba NAE agents are true? (Select two )

A single NAE script can be used by multiple NAE agents
NAE agents are active at all times
NAE agents will never consume more than 10% of switch processor resources
NAE scripts must be reviewed and signed by Aruba before being used
A single NAE agent can be used by multiple NAE scripts.

Answer(s): A,C

Explanation:

The statements that are true regarding Aruba NAE agents are A and C. A) A single NAE script can be used by multiple NAE agents. This means that you can create different instances of the same script with different parameters or settings. For example, you can use the same script to monitor different VLANs or interfaces on the switch. C) NAE agents will never consume more than 10% of switch processor resources. This is a built-in safeguard that prevents the agents from affecting the switch performance or stability. If an agent exceeds the 10% limit, it will be automatically disabled and an alert will be generated.
The other options are incorrect because:
B) NAE agents are not active at all times. They can be enabled or disabled by the user, either manually or based on a schedule. They can also be disabled automatically if they encounter an error or exceed the resource limit.
D) NAE scripts do not need to be reviewed and signed by Aruba before being used. You can create your own custom scripts using Python and upload them to the switch or Aruba Central. You can also use the scripts provided by Aruba or other sources, as long as they are compatible with the switch firmware version.
E) A single NAE agent cannot be used by multiple NAE scripts. An agent is an instance of a script that runs on the switch. Each agent can only run one script at a time.

Reveal Solution Next Question

Free HPE7-A01 Exam Braindumps (page: 14)

QUESTION: 53

Explanation:

QUESTION: 54

Explanation:

QUESTION: 55

Explanation:

Reference:

QUESTION: 56

Explanation: