EMT Practice Test

1. Question Content...

---

Question1: The security policy for a company requires that switches use SNMPv3 and accept all read-only SNMPv2c messages. The network administrator enables SNMPv3. Which additional action should the network administrator take to comply with this policy?

Question2: Refer to the exhibit.

Switch-1 runs BGP. What should the network administrator do to permit Switch-1 to establish a neighbor relationship with Router-1?

Question3: Refer to the exhibits.
Exhibit 1

Exhibit 2

In the exhibits, VLAN 20 under a device name indicates that the device is configured with that VLAN. The exhibits also indicate whether VLAN 20 is statically configured on each link, either as an untagged or a tagged VLAN. If the link has no label, VLAN 20 is not statically configured on that link.
A network administrator needs to deploy AOS-Switches that use port-based tunneled node. The plan calls for tunneled-node endpoints to be assigned to VLAN 20 and for the Aruba Mobility Controller to handle the tunneled-node traffic at Layer 2. Which exhibit shows the correct plan for VLAN 20 in the wired infrastructure?

Question4: Refer to the exhibit.

A network administrator wants to add the protections of root guard to the network. Based on the spanning tree topology, on which ports should the network administrator implement root guard?

Question5: A customer wants to authenticate AOS-Switch managers to a RADIUS server. The CIO wants to assign different rights to different management users for granular control over their rights and privileges. What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

Question6: Refer to the exhibit.

The exhibit shows configurations for interface 5 and VLAN 20. Note that DHCP snooping and ARP protection are also enabled.
A network administrator finds that interface 5 on an AOS-Switch is disabled. The administrator re-enables the interface, but it shuts down again. What should the administrator investigate?

Question7: Refer to the exhibits.
Exhibit 1

Exhibit 2

Exhibit 1 shows the topology for the network. The network administrator sees the log entries shown in Exhibit 2. Which type of failure is indicated?

Question8: Refer to the exhibit.

Several interfaces on an AOS-Switch enforce 802.1X to a Radius server at 10.254.202.202. The interface
802.1X settings are shown in the exhibit, and 802.1X is also enabled globally. The security team have added a requirement for port security on the interfaces as well. Before administrators enable port security, which additional step must they complete to prevent issues?

Question9: Refer to the exhibits.
Exhibit 1

Exhibit 2

Network administrators are alerted to high interface utilization on a switch by a management solution. They examine the utilization on the uplink interfaces several times an hour during problem times. The exhibit shows output typical of times of congestion. The administrators want to allocate bandwidth fairly and reduce congestion on the uplinks.
What could help meet these requirements?

Question10: The implementation plan for AOS-Switches calls for them to implement port-based tunneled node. The Aruba Mobility Controllers that will support the AOS-Switches run software 8.1. The controllers will also support APs, are managed by Mobility Master, and use clustering.
Which issue with this plan needs to be addressed?

Question11: Refer to the exhibit.

Every switch in the exhibit will route traffic. The company requires a topology in which failover for switch-to- switch links is exclusively handled by the routing protocol and occurs as quickly as possible. Which topology should the administrator use?

Question12: Refer to the exhibits.
Exhibit 1

Exhibit 2

Switch-1 has a power issue that causes it to fail. When Switch-1 comes back up, endpoints lose connectivity for a few minutes. The network administrator decides to enter this command on Switch-1:
Switch-1 (config)# vlan 10 vrrp vrid 10 preempt-delay-time 120
Exhibit 2 shows the VRRP configuration just after the change. What is the effect of this change?

Question13: Two AOS-Switches connect on VLAN 10 in OSPF Area 1, which is defined as a stub area on both. Which mismatch can cause OSPF routers to lose adjacency?

Question14: An AOS-Switch enforces 802.1X. It receives an Access-Accept with this HPE VSA from its Radius server:
Attribute Name and ID = HPE-User-Role (25) Value = contractor
The switch then rejects the client. What is one requirement for the switch to accept the message and authorize the client?

Question15: A network administrator configures DHCP snooping on VLAN 2. How does the switch handle DHCP traffic that arrives in this VLAN on an untrusted interface?

Question16: A company wants to implement 802.1X authentication to authenticate client devices on AOS-Switch ports.
The company has a RADIUS server that uses PEAP MSCHAP-v2 for the authentication method. What is one task administrators should complete before they implement the plan?

Question17: Refer to the exhibits.

Exhibit 2

The network administrator configures the commands shown in Exhibit 2. Which mismatch will cause an issue?

Question18: What is one difference between BPDU protection and root guard?

Question19: Refer to the exhibits.
Exhibit 1

Exhibit 2

Exhibit 1 shows a portion of the BGP routing table when the BGP solution was first deployed. Exhibit 2 shows the same portion at the current time. What can explain the current state?

Question20: Refer to the exhibits.
Exhibit 1

Exhibit 2

Switch-1 and Switch-2 are configured to provide VRRP in VLAN 2. The default gateway for VLAN 2 is set to the VRRP virtual IP. Client-1 in VLAN 2 cannot ping its default gateway.
Based on the exhibits, what can administrators determine?

Question21: An AOS-Switch is configured to use captive portal and RADIUS to integrate with an Aruba ClearPass solution. What should the administrator do to enable the switch to accept change of authorization (CoA) messages from ClearPass?

Question22: A network administrator applies port security to a port with the send-alarm action. What does the switch do if it detects traffic from an unauthorized MAC address on the port?

Question23: Refer to the exhibit.

Switch-1 is an AOS-switch that is operating at factory default settings for QoS and has type of service disabled. It receives a frame with 802.1p value 5 on trk1, on VLAN 2. How does the switch treat the frame when it forwards it on TRK2?

Question24: Which technologies can prevent split brain in a VSF fabric that includes Aruba 2930F switches?

Question25: Network administrators need to configure a BGP neighbor on an AOS-Switch. What defines the neighbor as an iBGP neighbor?

Question26: Network administrators need to track when traffic matches deny entry in an ACL applied to a port. They want the alert to be sent to a syslog server that is already set up to send logs.
What should administrators do to enable alerts?

Question27: A company has AOS-switches, Aruba ClearPass, and Aruba AirWave. A network administrator needs to find the source of a performance issue that often occurs at the start of the day and early in the afternoon.
Which action is likely to give the administrator the most useful information for the investigation?

Question28: AOS-Switches authenticate guests to ClearPass with captive portal. An administrator notices that some guests are unable to reach the captive portal page. What will resolve this issue?

Question29: Refer to the exhibits.


The network administrator enters the commands shown in Exhibit 2, and Switch-1 and Switch-2 exchange keepalive messages. What is the expected behavior if Switch-1 later fails to receive keepalive messages from Switch-2?

Question30: Refer to the exhibits.
Exhibit 1

Exhibit 2

Exhibit 2 shows IGMP groups on Switch-2, which runs IGMP but not PIM. Switch-1 and Switch-3 do not have IGMP or PIM enabled. Client 1 begins to forward multicasts to 239.1.1.1.
Which clients receive the multicasts?

Question31: What is a reason to implement PIM-DM as opposed to PIM-SM?

Question32: A network administrator needs to create a backplane stack with four AOS-Switches. The administrator wants to choose which switch becomes the commander. Which procedure meets those needs?

Question33: A network administrator needs to create a QoS policy on an AOS-Switch. What is one component that the administrator must create before the policy?

Question34: Refer to the exhibit.

An AOS-Switch has an extended ACL that is applied to several physical interfaces.
- New interfaces have been brought online.
- The ACL has been applied to them as well.
A network administrator sees the output in the exhibit and is concerned that the switch will reach the limit for rules.
What can the administrator do to address this concern?

Question35: Refer to the exhibits.
Exhibit 1

Exhibit 2

A company does not require authentication for security, but AOS-Switches are set up to use local MAC authentication (LMA) to assign the correct VLAN and priority to IP phones. IP phones and computers belong to different VLANs. Each device is supposed to connect to a specific port, but sometimes users connect their devices to the wrong ports and cannot receive access without help from IT.
How can a network administrator configure the switches to eliminate this issue?

Question36: Which switches can be deployed in a mesh topology for backplane stacking?

Question37: Refer to the exhibit.

A company requires distribution layer switches that can provide Layer 2 and Layer 3 redundancy. The exhibit shows the proposal for these switches. Which change to the proposal will help meet the company's requirements?

Question38: What is the minimum requirement for a device to pass local MAC authentication (LMA) on an AOS-Switch?

Question39: Refer to the exhibit.

Switch-1 and Switch-2 connect on interface A23. The switches experience a connectivity issue. The network administrator sees that both switches show this interface as up. The administrator sees the output shown in the exhibit on Switch-1.
What is a typical issue that could cause this output?