Aruba Certified Switching Expert v1.0
Question 1
DRAG DROP -
Match the steps to identify the customer requirements with a valid requirement. (Each option may be used once, more than once, or not at all.)
Answer : 2, 4, 1, 3
Question 2
When planning a new wired network for a customer, you need to create an NAE script that could enable a backup interface if all interfaces in an area are down. Which statement correctly describes the script needed?
- A. You should have a class Agent(NAE), that defines a Rule to monitor the interfaces in the area, and with one or more Actions that define the condition that triggers an action to be done.
- B. You should have a class Agent(NAE), that defines a Monitor to monitor the interfaces in the area, and with one or more Actions that define the condition that triggers an action to be done.
- C. You should have a class Agent(NAE), that defines a Monitor to monitor the interfaces in the area, and with one or more Rules that define the condition that triggers an action to be done.
- D. You should have a class Policy(NAE), that defines a Rule to monitor the interfaces in the area, and with one or more Actions that define the condition that triggers an action to be done.
Answer : D
Question 3
You have created an OSPF neighbor configuration with ArubaOS-CX 8320 VSX and third-party switch. The OSPF peering fails. In the event logs you see the following entries:
Which statement is true about the above events?
- A. The third-party switch should be configured with key chain authentication.
- B. Third-party switch should be configured with MD5 authentication.
- C. The ArubaOS-CX switch requires plain-text authentication with OSPF.
- D. The ArubaOS-CX switch does not expect authentication with OSPF.
Answer : C
Question 4
A network has recently implemented access-lists on switched virtual interfaces on an Aruba 8325 switch. The intention is to apply a filter from VLANs 301-310 to a list of web servers and to allow all other traffic. While applying newly-created access lists to the switch, it is noted that there are messages displayed on the switch as seen:
Assuming the switch has exhausted its TCAM entries, which command(s) will provide the simplest method to solve the issue?
- A. access-list ip acl-webservers 10 permit tcp web-clients web-servers group web-ports count
- B. object-group ip address web-servers reset object-group ip address web-servers range 192.168.0.1 192.168.0.10
- C. access-list all reset
- D. object-group ip address web-clients 10 192.168.120.0/255.255.254.0 no 20
Answer : A
Question 5
A customer with an ArubaOS-CX 6300M switch is having a performance issue on the network and has received complaints about users experiencing intermittent connectivity. After performing troubleshooting, it is determined that many of the local websites on the LAN that users are unable to reach are resolved to an invalid MAC address.
What are the minimum steps that should be performed to mitigate this condition? (Choose two.)
- A. Implement dhcpv4-snooping.
- B. Enable ‘arp inspection untrusted’ on the end-user physical ports.
- C. Enable ‘arp inspection’ on the end-user VLAN.
- D. Implement ARP ACLs to define trusted MAC address to IP bindings.
- E. Enable ‘arp inspection’ on the end-user physical ports.
Answer : AB
Question 6
A customer is installing a new ArubaOS-CX switch. The customer does not change the factory default QoS configuration. The switch receives an 802.1Q tagged VOIP frame on a port. The header contains a DSCP value of EF(46) and the frame has an 802.1p value of 5.
How will the switch forward the frame?
- A. Forwards it based on the 802.1p value in the frame
- B. Forwards it based on the DSCP value in the frame
- C. Forwards the frame with best effort forwarding
- D. The switch trusts the settings and it forwards the frame with the current settings
Answer : C
Question 7
DRAG DROP -
Match the BGP path selection criteria attributes. (Each option may be used once, more than once, or not at all.)
Answer : 3, 4, 1, 2
Question 8
A customer utilizes a mix of ArubaOS-CX 8325 switches (SW-1 and SW-2) and other third-party routing switches (SW-3 and SW-4) to perform OSPF routing. It is observed that the third-party switches have a default OSPF cost of 1 for all interfaces.
With the initially default parameters for OSPF on the ArubaOS-CX switches and all ports configured to be routed ports, what action needs to be taken to allow traffic to take the best path between CLIENT-A and CLIENT-B?
- A. Set switches SW-1 and SW-2 to OSPF “reference-bandwidth 100”.
- B. Utilize Equal-cost multi-path routing to aggregate more bandwidth on the WAN.
- C. Set the OSPF cost parameters on all third-party switch interfaces according to speed.
- D. No action is required.
Answer : C
Question 9
Which statement is true regarding remote mirroring?
- A. The ArubaOS-CX switch supports a maximum of two mirroring sessions.
- B. The same source/destination address can be used in multiple sessions.
- C. When mirroring destination is tunnel, a DSCP value can be set on the tunnel.
- D. Per session multiple destination addresses can be configured.
Answer : B
Question 10
A customer is migrating from a Cisco VSS system to an ArubaOS-CX VSX cluster. In order to provide default gateway functionality, the local network administrator creates VLAN interfaces. The network administrator then migrates successfully from Cisco to Aruba.
The next day a manager asks if the solution is redundant. The network administrator realizes that there is no redundancy on the default gateway functionality.
What is the preferred solution with the least amount of configuration and disturbance?
- A. For every VLAN interface, configure an active gateway IP with the same IP address as already present in the first VSX node. Configure this on both switches.
- B. Remove the IP address on every VLAN interface, and replace it with another one in the same subnet. Configure active gateway IP with the default gateway address on every VLAN interface on both switches.
- C. For every VLAN interface, configure a VRRP IP address with the same IP address as already present in the first VSX node. Configure this on both switches.
- D. Remove the IP address on every VLAN interface, and replace it with another one in the same subnet. Configure VRRP with the default gateway address as virtual IP-address per VLAN.
Answer : D
Question 11
The customer is considering implemented the following VSX configuration that will host an Aruba mobility cluster servicing 9000 dual stack employee devices.
The client’s default gateways will be hosted on the VSX stack. The customer is seeking advice about how to ensure ArubaOS-CX VSX best practices have been applied.
What advice can you offer the customer? (Choose two.)
- A. The ISL Bandwidth should be upgraded.
- B. Agg-1 and Agg-2’s hardware forwarding table profile should be changed to “L3-agg”.
- C. The “system-mac” of Agg-1 should be changed to an unused address from the unicast private address range.
- D. The vsx linkup-delay timer is unnecessarily high; it should be reduced to prevent excessive delay of packet forwarding when a VSX peer joints an existing master.
- E. The Keepalive interface should be changed to interface LAG2 so there is redundancy through the mobility cluster.
- F. The keepalive subnet is misconfigured, it has an inappropriate address on Agg-1.
Answer : DF
Question 12
You are providing consulting services to a customer who has recently deployed a pair of ArubaOS-CX 8320s utilizing the VSX feature. Your task is to explain how the customer can harden the ArubaOS-CX operating system and protect the control plane.
Which statements about control plane polices are true? (Choose two.)
- A. To protect the 00B port, the CoPP policy must be applied to the loopback interface.
- B. The default CoPP is always applied at first boot.
- C. Default CoPP policy applies to default VRF, and a same or new policy can be applied to custom VRF when they are created.
- D. The amount of individual CoPP entries is limited, and only one policy can be active at a time.
- E. IPv4 and IPv6 traffic requires separate CoPP policies and can have different thresholds for each type of traffic.
Answer : AC
Question 13
Which functionalities of ClearPass can be added in a wired network that implements dynamic segmentation? (Choose two.)
- A. Profiling
- B. Downloadable User Roles
- C. Multi Factor Authentication
- D. Fingerprinting
- E. Dynamic VLANs
Answer : BE
Question 14
Refer to the exhibit.
Aruba CX 6300 switch has routes in three different VRFs as per the example above. The user needs to leak routes between VRF: Secure and VRF: Dev, and also between VRF: default and VRF: Dev.
The customer is not able to establish routing between directly connected networks 10.100.50.0/24 and 10.102.26.0/24. Which statement is true regarding the routing troubleshooting?
- A. Route Distinguisher needs to be set to:1 for default VRF.
- B. Route leaking is supported between non-default VRFs only.
- C. Multi-protocol BGP routing needs to be defined for route leaking.
- D. Route leaking between default and non-default VRFs is supported with Aruba CX 8400.
Answer : C
Question 15
Which statement is true about NAE scripts?
- A. The System Resource Monitor is the only script installed on the system by default.
- B. The System Resource Monitor and Health Monitor are the only scripts installed on the system by default.
- C. No script is installed on the system by default.
- D. The Health Monitor is the only script installed on the system by default.
Answer : D