Question 1

DRAG DROP
Match the appropriate QoS concept with its definition.

Accepted Answer

QoS Quality of Service (QoS) is a set of techniques that manage network resources and provide different levels of service to different types of traffic based on their
requirements. QoS can improve network performance, reduce latency, increase throughput, and prevent congestion. concept and its definition. Here is my

Question 2

Two independent ArubaOS-CX 6300 switches with Spanning Tree (STP) settings are interconnected with two cables between ports 1/1/1 and 1/1/2 All four ports
have "no
shutdown" and "no routing" commands
How will STP forward or discard traffic on these ports?

Accepted Answer

The way that STP Spanning Tree Protocol. STP is a network protocol that ensures a loop-free topology for any bridged Ethernet local area network by preventing
redundant paths between switches or bridges from creating loops that cause broadcast storms, multiple frame transmission, and MAC table instability. STP
creates a logical tree structure that spans all of the switches in an extended network and blocks any redundant links that are not part of the tree from forwarding
data packets3. will forward or discard traffic on these ports is as follows:
? STP will elect a root bridge among the two switches based on their bridge IDs,
which are composed of a priority value and a MAC address. The switch with the lower bridge ID will become the root bridge and will forward traffic on all its ports.
? STP will assign a role and a state to each port on both switches based on their
port IDs, which are composed of a priority value and a port number. The port with the lower port ID will become the designated port and will forward traffic, while

/HPE6-A85-exam/ (60 Q&As)
the port with the higher port ID will become the alternate port and will discard traffic.
? In this scenario, since both switches have two cables connected between ports 1/1/1 and 1/1/2, there will be two possible paths between them, creating a loop.
To prevent this loop, STP will block one of these paths by discarding traffic on one of the ports on each switch.
? Assuming that both switches have the same priority value (default is 32768), the switch with the lower MAC address will have the lower bridge ID and will
become the root bridge. The root bridge will forward traffic on both ports 1/1/1 and 1/1/2.
? Assuming that both ports have the same priority value (default is 128), port 1/1/1
will have a lower port ID than port 1/1/2 on both switches because it has a lower port number. Port 1/1/1 will become the designated port and will forward traffic,
while port 1/1/2 will become the alternate port and will discard traffic.
? Therefore, the switch with the lower MAC address will discard traffic on one port
(port 1/1/2), while the switch with the higher MAC address will also discard traffic on one port (port 1/1/2).
References: 3 https://en.wikipedia.org/wiki/Spanning_Tree_Protocol

Question 3

When performing live firmware upgrades on Aruba APs. which technology partitions all the APs based on RF neighborhood data minimizing the impact on clients?

Accepted Answer

Aruba AirMatch is a feature that optimizes RF Radio Frequency. RF is any frequency within the electromagnetic spectrum associated with radio wave
propagation. When an RF current is supplied to an antenna, an electromagnetic field is created that then is able to propagate through space. performance and
user experience by using machine learning algorithms and historical data to dynamically adjust AP power levels, channel assignments, and channel width.
AirMatch performs live firmware upgrades on Aruba APs by partitioning all the APs based on RFneighborhood data and minimizing the impact on clients. AirMatch
uses a rolling upgrade process that upgrades one partition at a time while ensuring that adjacent partitions are not upgraded simultaneously. References:
https://www.arubanetworks.com/assets/ds/DS_AirMatch.pdfhttps://www.arubanetworks.co m/techdocs/ArubaOS_86_Web_Help/Content/arubaossolutions/arm/AirMatch.htm

Question 4

What is an advantage of using Layer 2 MAC authentication?

Accepted Answer

Layer 2 MAC authentication is a method of authenticating devices based on their MAC addresses without requiring any client-side configuration or credentials. The
switch sends the MAC address of the device to an authentication server such as ClearPass or RADIUS, which checks if the MAC address is authorized to access
the network. If yes, the switch grants access to the device based on the assigned role and policies. If no, the switch denies access or redirects the device to a
captive portal for further authentication. References:https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/ar ubaossolutions/1-overview/mac-authentication.htm

Question 5

DRAG DROP
A network administrator with existing IAP-315 access points is interested in Aruba Central and needs to know which license is required for specific features Please
match the required license per feature (Matches may be used more than once.)

Accepted Answer

a) Alerts on config changes via email - Foundation b) Group-based firmware compliance - Foundation c) Heat maps of deployed APs - Advanced d) Live upgrades
of an AOS10 cluster - Advanced
According to the Aruba Central Licensing Guide1, the Foundation License provides basic device management features such as configuration, monitoring, alerts,
reports, firmware management, etc. The Advanced License provides additional features such as AI insights, WLAN services, NetConductor Fabric, heat maps, live
upgrades, etc. https://www.arubanetworks.com/techdocs/central/2.5.3/content/pdfs/licensing-guide.pdf

/HPE6-A85-exam/ (60 Q&As)

Question 6

A customer has just implemented user and device certificates via a company-wide Group Based Policy (GPO) Which EAP method requires client certificates when
authenticating to the network?

Accepted Answer

EAP-TLS is an authentication method that requires client certificates when authenticating to the network. It provides mutual authentication between the client and
the server using public key cryptography and digital certificates. References:https://www.arubanetworks.com/techdocs/ClearPass/6.9/Guest/Content/CPPM
_UserGuide/EAP-TLS/EAP-TLS.htm

Question 7

DRAG DROP
Match the switching technology with the appropriate use case.

Accepted Answer

USE CASE: a) Controls the dynamic addition and removal of ports to groups
Technology: 3) LACP
USE CASE: b) Tags Ethernet frames with an additional VLAN header Technology: 1) 802.1Q
USE CASE: c) Used to authenticate EAP-Capable client on a switch port Technology: 2) 802.1X
USE CASE: d) Used to identify a voice VLAN to an IP phone Technology: 4) LLDP The following table summarizes the switching technologies and their use cases:
Technology
Use case
1) 802.1Q
* 802.1Q is a standard that defines how to create and manage virtual LANs (VLANs) on a network. VLANs allow network administrators to logically segment a
network into different broadcast domains, improving security, performance, and manageability. 802.1Q tags Ethernet frames with an additional VLAN header that
contains a VLAN identifier (VID), which indicates which VLAN the frame belongs to1.
2) 802.1X
* 802.1X is a standard that defines how to provide port-based network access control (PNAC) on a network. PNAC allows network administrators to authenticate
and authorize devices before granting them access to network resources. 802.1X uses the Extensible Authentication Protocol (EAP) to exchange authentication
messages between a supplicant (a device that wants to access the network), an authenticator (a device that controls access to the network, such as a switch), and
an authentication server (a device that verifies the credentials of the supplicant, such as a RADIUS server)2.
3) LACP
LACP stands for Link Aggregation Control Protocol, which is part of the IEEE 802.3ad standard that defines how to bundle multiple physical links into a single
logical link, also known as a link aggregation group (LAG) or an EtherChannel. LAGs provide increased bandwidth, load balancing, and redundancy for network
connections. LACP controls the dynamic addition and removal of ports to groups, ensuring that only ports with compatible configurations can form a LAG3.
4) LLDP
LLDP stands for Link Layer Discovery Protocol, which is part of the IEEE 802.1AB standard that defines how to discover and advertise information about
neighboring devices on a network. LLDP operates at Layer 2 of the OSI model and uses TLVs (type-length-value) to exchange information such as device name,
port number, VLAN ID, capabilities, and power requirements. LLDP can be used to identify a voice VLAN to an IP phone by sending a TLV that contains the voice
VLAN ID and priority.
References: 1 https://en.wikipedia.org/wiki/IEEE_802.1Q2 https://en.wikipedia.org/wiki/IEEE_802.1X3 https://en.wikipedia.org/wiki/Link_aggregation
https://en.wikipedia.org/wiki/Link_Layer_Discovery_Protocol

Question 8

What is the recommended VSF topology? (Select two.)

Accepted Answer

Only: Daisy chain plus MAD and ring are the recommended VSF topologies for Aruba switches. They provide high availability and redundancy for the VSF stack.

/HPE6-A85-exam/ (60 Q&As)
MAD (Multiple Active Detection) is a mechanism to detect and resolve split-brain scenarios in a VSF stack.
References:https://www.arubanetworks.com/techdocs/AOS-CX/10.04/HTML/5200- 6790/GUID-D6EF042E-EEEF-49F7-B67E-4CAC41CCB24D.html

Question 9

What is the ideal Aruba access switch for a cost-effective connection to 200-380 clients, printers and APs per distribution rack?

Accepted Answer

The ideal Aruba access switch for a cost-effective connection to 200-380 clients, printers and APs per distribution rack is the Aruba CX 6200. This switch series is
a cloud- manageable, stackable access switch series that is ideal for enterprise branch offices and campus networks, as well as SMBs. The CX 6200 series offers
the following benefits:
? Enterprise-class connectivity: The CX 6200 series supports ACLs, robust QoS,
and common protocols such as static and Access OSPF routing.
? Power and speed for users and IoT: The CX 6200 series provides built-in 1/10GbE uplinks and 30W to 60W of Class 4 to Class 6 PoE for powering devices such
as APs and cameras.
? Scalable growth made simple: The CX 6200 series supports Aruba Virtual Switching Framework (VSF) that allows you to quickly grow your network to eight
members in a single stack using high-performance built-in 10G SFP ports.
? Management flexibility: The CX 6200 series supports a choice of management, including cloud-based and on-prem Central, CLI, switch Web GUI and
programmability with AOS-CX operating system, and REST APIs.
The other options are not ideal because:
? Aruba CX 6400: This switch series is a high-availability modular switch series that is ideal for versatile edge access to data center deployments. It offers more
performance, scalability, and modularity than the CX 6200 series, but it is also more expensive and complex to deploy and manage. It may not be cost-effective for
connecting 200-380 clients per distribution rack.
? Aruba CX 6300: This switch series is a layer 3 stackable access and aggregation switch series that offers Smart Rate and High Power PoE. It offers more
features and performance than the CX 6200 series, but it is also more expensive and may not be necessary for connecting 200-380 clients per distribution rack.
? Aruba CX 6000: This switch series is a layer 2 access switch series that offers PoE. It offers less features and performance than the CX 6200 series, and it does
not support VSF stacking or routing protocols. It may not be sufficient for connecting 200-380 clients per distribution rack.
References: https://www.arubanetworks.com/products/switches/access/ https://www.arubanetworks.com/products/switches/access/6200-series/
https://www.arubanetworks.com/products/switches/access/6400-series/ https://www.arubanetworks.com/products/switches/access/6300-series/
https://www.arubanetworks.com/products/switches/access/6000-series/

Question 10

You need to drop excessive broadcast traffic on ingress to an ArubaOS-CX switch What is
the best technology to use for this task?

Accepted Answer

The best technology to use for dropping excessive broadcast traffic on ingress to an ArubaOS-CX switch is rate limiting. Rate limiting is a feature that allows
network administrators to control the amount of traffic that enters or leaves a port or a VLAN on a switch by setting bandwidth thresholds or limits. Rate limiting can
be used to prevent network congestion, improve network performance, enforce service level agreements(SLAs), or mitigate denial-of-service (DoS) attacks. Rate
limiting can be applied to broadcast traffic on ingress to an ArubaOS-CX switch by using the storm-control command in interface configuration mode. This
command allows network administrators to specify the percentage of bandwidth or packets per second that can be used by broadcast traffic on an ingress port. If
the broadcast traffic exceeds the specified threshold, the switch will drop the excess packets.
The other options are not technologies for dropping excessive broadcast traffic on ingress because:
? DWRR queuing: DWRR stands for Deficit Weighted Round Robin, which is a
queuing algorithm that assigns different weights or priorities to different traffic classes or queues on an egress port. DWRR ensures that each queue gets its fair
share of bandwidth based on its weight while avoiding starvation of lower priority queues. DWRR does not drop excessive broadcast traffic on ingress, but rather
schedules outgoing traffic on egress.
? QoS shaping: QoS stands for Quality of Service, which is a set of techniques that
manage network resources and provide different levels of service to different types of traffic based on their requirements. QoS shaping is a technique that delays
or buffers outgoing traffic on an egress port to match the available bandwidth or rate limit. QoS shaping does not drop excessive broadcast traffic on ingress, but
rather smooths outgoing traffic on egress.
? Strict queuing: Strict queuing is another queuing algorithm that assigns different
priorities to different traffic classes or queues on an egress port. Strict queuing ensures that higher priority queues are always served before lower priority queues
regardless of their bandwidth requirements or weights. Strict queuing does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on
egress.
References: https://en.wikipedia.org/wiki/Rate_limiting https://www.arubanetworks.com/techdocs/AOS-CX_10_08/NOSCG/Content/cx- noscg/qos/stormcontrol.htm https://www.arubanetworks.com/techdocs/AOS- CX_10_08/NOSCG/Content/cx-noscg/qos/dwrr.htm https://www.arubanetworks.com/techdocs/AOSCX_10_08/NOSCG/Content/cx- noscg/qos/shaping.htm https://www.arubanetworks.com/techdocs/AOS- CX_10_08/NOSCG/Content/cx-noscg/qos/strict.htm