EMT Practice Test

1. Question Content...

---

Question1: A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

Question2: Examine the following AOS-CX configuration:

Based on this configuration, which statement is correct regarding IoT traffic?

Question3: Examine the following AOS-CX switch configuration:

Which statement correctly describes what is allowed for traffic entering interface 1/1/3?

Question4: Examine the following ACL rule policies:
Permit traffic from 10.2.2.1 through 10.2.2.30 to anywhere
Permit traffic from 10.2.2.40 through 10.2.2.55 to anywhere
Deny all others
Based on this policy, place the following ACL rule statements in the correct order to accomplish the above filtering policy.

Question5: What is correct regarding the operation of VSX and multicasting with PIM-SM routing configured?

Question6: A company has recently upgraded their campus switching infrastructure with AOS-CX switches. They have implemented 802.1X authentication on access ports where laptop and IOT devices typically connect. An administrator has noticed that for POE devices, the AOS-CX switch ports are delivering the maximum wattage to the port instead of what the device actually needs.
Concerned about this waste of electricity, what should the administrator implement to solve this problem?

Question7: Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:

The downloadable user roles are not being downloaded to the AOS-CX switch Based on the above output , what is the problem?

Question8: A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AAA.
Each switch has the two servers defined. A network engineer notices the following command configured on the AOS-CX switches:
radius-server tracking user-name monitor password plaintext aruba123
What is the purpose of this configuration?

Question9: Which statement is correct regarding ACLs and TCAM usage?

Question10: What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Question11: Examine the configuration performed on newly deployed AOS-CX switches:

After performing this configuration, the administrator notices that the switch ports always remain in the EAP start state. What should the administrator do to fix this problem?

Question12: Which AOS-CX feature is used to prevent head-on-line (HOL) blocking?

Question13: A network administrator is implementing NAE on AOS-CX switches. When attempting to create an agent on a particular switch, the agent appears in the NAE Agents panel with a red triangle error symbol and a status of
"Unknown".
What is the cause of this issue?

Question14: A network administrator is implementing NAE on AOS-CX switches. When attempting to create an agent on a particular switch, the agent appears in the NAE Agents panel with a red triangle error symbol and a status of
"Unknown".
What is the cause of this issue?

Question15: How is NetEdit installed at a customer location?

Question16: A network administrator is attempting to troubleshoot a connectivity issue between a group of users and a particular server. The administrator needs to examine the packets over a period of time from their desktop; however, the administrator is not directly connected to the AOS-CX switch involved with the traffic flow.
What is correct regarding the ERSPAN session that needs to be established on an AOS-CX switch? (Choose two.)

Question17: A company is implementing a new wireless design and needs it to support high availability even during times of switch system upgrades. The solution will involve Aruba Mobility Controller (MC) and Aruba AP connections requiring POE Which campus AOS-CX switch solution and virtual switching should the company implement at the campus access layer?

Question18: Which protocols are used by NetEdit to interact with third-party devices? (Choose two.)

Question19: An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

Question20: An AOS-CX switch is configured to implement downloadable user roles. Examine the AOS-CX switch output:

Based on this output, what is the state of the user's access?

Question21: Examine the configuration performed on newly deployed AOS-CX switches:

After performing this configuration, the administrator notices that the switch ports always remain in the EAP start state. What should the administrator do to fix this problem?

Question22: An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as pnmary and secondary The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.
What would cause this problem?

Question23: Examine the AOS-CS switch output:

Based on this output, what is correct?

Question24: Examine the commands entered on an AOS-CX switch:

What is true regarding this configuration for traffic received on interface 100?

Question25: A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8 4 code The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches The company wants to leverage the same security and firewall policies for both wired and wireless traffic.
Which solution should the company implement?

Question26: Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

Question27: A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches. The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes.
Which solution should the administrator implement?

Question28: An administrator is defining a VSX LAG on a pair of AOS-CX switches that are defined as primary and secondary. The VSX LAG fails to establish successfully with a remote switch; however, after verification, the remote switch is configured correctly. The administrator narrows down the problem to the configuration on the AOS-CX switches.
What would cause this problem?

Question29: An administrator of a company has concerns about upgrading the access layer switches. The users rely heavily on wireless and VoIP telephony. Which is the best recommendation to ensure a short downtime for the users during upgrading the access layer switches?

Question30: A network administrator wants to replace older access layer switches with AOS-CX 6300 switches.
Which virtual switching technology can the administrator implement with this solution?

Question31: A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer verifies that the AOS-CX switch is configured for NTP and is successfully synchronized. What should be done to fix this issue?

Question32: Examine the following AOS-CX configuration:

Based on this configuration, which statement is correct regarding IoT traffic?

Question33: Which AOS-CX switches support weighted fair queuing (WFQ)?

Question34: An AOS-CX switch is configured to implement downloadable user roles Examine the AOS-CX switch output:
Access11config i$ show aaa authentication port-access interface ail client-status Port Access Client Status Details

Based on this output what is the state of the users access'?

Question35: How is voice traffic prioritized correctly on AOS-CX switches?

Question36: An administrator implements interim accounting for guest users so that ClearPass can track the amount of bandwidth that guests upload and download. Guests that abuse bandwidth consumption should be disconnected from the network. The administrator configures the following on the AOS-CX access switches:

After performing this configuration, the administrator notices that guest users that have exceeded the guest bandwidth limit are not being disconnected. Upon further investigation, Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.
What is causing this issue?

Question37: An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

Question38: Examine the AOS-CX switch output:

Based on this output, what is correct?

Question39: A network engineer is having a problem adding a custom-written script to an AOS-CX switch's NAE GUI.
The script was written in Python and was successfully added on other AOS-CX switches. The engineer examines the following items from the CLI of the switch:

What should the engineer perform to fix this issue?

Question40: A network engineer is having a problem adding a custom-written script to an AOS-CX switch's NAE GUI.
The script was written in Python and was successfully added on other AOS-CX switches. The engineer examines the following items from the CLI of the switch:

What should the engineer perform to fix this issue?

Question41: A company has implemented 802 1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AAA Each switch has the two servers defined A network engineer notices the following command configured on the AOS'CX switches:
radius-server tracking user-name monitor password plaintext arubal23
What is the purpose of this configuration?

Question42: Which concept is implemented using Aruba's dynamic segmentation?

Question43: A network administrator is managing a network that deploys a multicast service The administrator has multiple streamssuccessfully being routed by PIM-DM in the network The administrator then adds a new stream with a destination addressof 239.0.0 1. However clients who have not joined the stream are receiving it.What should the administrator do to fix this problem?

Question44: Examine the VSX-related configuration of the core layer AOS-CX switch:

A network administrator is troubleshooting a connectivity issue involving the VSX LAG (link aggregation) between the core and access layer switch, during HW replacement of one of the core switches.
Which configuration should the administrator add to the core switch to fix this issue?

Question45: When an AOS-CX switch uses a temporary copy of the Configuration State database, what kind of analysis does NetEdit perform to ensure that the configuration is correct?

Question46: An administrator has an AOS-CX switch configured with:

Based on the above configuration, how many OSPF routes will routing switches see in Area 1?

Question47: How is NetEdit installed at a customer location?

Question48: Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:
Switch# show port-access role clearpass
Role information:
Name : icxarubadur_employee-3044-2
Type : clearpass
Status: failed, parsing_failed
Reauthentication Period :
Authentication Mode :
Session Timeout :
The downloadable user roles are not being downloaded to the AOS-CX switch. Based on the above output, what is the problem?

Question49: Which concept is implemented using Aruba's dynamic segmentation?

Question50: Examine the network exhibit:

The ACL configuration defined on Core-1 is as follows:
If telnet was being used, which device connection would be permitted and functional in both directions?
(Choose two.)

Question51: An administrator is supporting a network with the access layer consisting of AOS-CX 6300 and 6400 switches. The administrator needs to quickly deploy Aruba IAPs and security cameras in the network, ensuring that the correct QoS and VLAN settings are dynamically applied to the switch ports. Currently, switches are not configured to do device authentication, and no authentication server exists in the network.
Which AOS-CX feature should the administrator use to dynamically assign the policy settings to the correct switch ports?

Question52: A network engineer for a company with 896 users across a multi-building campus wants to gather statistics on an important switch uplink and create actions based on issues that occur on the uplink. How often does an NAE agent gather information from the current state database in regard to the uplink interfaces?

Question53: When implementing deficit weighted round robin queuing, what importance does the weight value have?

Question54: Examine the attached diagram.

The two PCs are located in VLAN 11 (10.1.11.0/24). Which example defines how to implement active gateway on the VSX core for VLAN 11?

Question55: A network administrator is attempting to troubleshoot a connectivity issue between a group of users and a particular server. The administrator needs to examine the packets over a period of time from their desktop; however, the administrator is not directly connected to the AOS-CX switch involved with the traffic flow.
What is correct regarding the ERSPAN session that needs to be established on an AOS-CX switch?
(Choosetwo.)

Question56: Examine the network exhibit.

A company has a guest implementation for wireless and wired access. Wireless access is implemented through a third-party vendor. The company is concerned about wired guest traffic traversing the same network as the employee traffic. The network administrator has established a GRE tunnel between AOS-CX switches where guests are connected to a routing switch in the DMZ.
Which feature should the administrator implement to ensure that the guest traffic is tunneled to the DMZ while the employee traffic is forwarded using OSPF?

Question57: A company is implementing a new wireless design and needs it to support high availability, even during times of switch system upgrades. The solution will involve Aruba Mobility Controller (MC) and Aruba AP connections requiring POE. Which campus AOS-CX switch solution and virtual switching should the company implement at the campus access layer?

Question58: A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code.
The solution leverages a third-party AAA solution. The company is replacing existing access switches withAOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies forboth wired and wireless traffic.
Which solution should the company implement?

Question59: A company has just purchased AOS-CX switches. The company has a free and open-source AAA solution.
The company wants to implement access control on the Ethernet ports of the AOS-CX switches.
Which security features can the company implement given the equipment that they are using?

Question60: What are best practices when implementing VSX on AOS-CX switches? (Choose two.)

Question61: A network administrator is managing a network that deploys a multicast service. The administrator has multiple streams successfully being routed by PIM-DM in the network. The administrator then adds a new stream with a destination address of 239.0.0.1. However, clients who have not joined the stream are receiving it.
What should the administrator do to fix this problem?

Question62: An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

Question63: An administrator is managing a network comprised of AOS-CX switches deployed at the aggregation layer. The switches are paired in a VSX stack and run the OSPF routing protocol. The administrator is concerned about how long it takes for OSPF to converge when one of the VSX switches has to reboot.
What should the administrator to do speed up the OSPF convergence of the switch that is rebooting?

Question64: What is the correct way of associating a VRF instance to either a VLAN or an interface?

Question65: Examine the following AOS-CX switch configuration:

Which statement correctly describes what is allowed for traffic entering interface 1/1/3?

Question66: Examine the AOS-CS switch output:

Based on this output, what is correct?

Question67: Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:
Switch# show port-access role clearpass
Role information:
Name : icxarubadur_employee-3044-2
Type : clearpass
Status: failed, parsing_failed
Reauthentication Period :
Authentication Mode :
Session Timeout :
The downloadable user roles are not being downloaded to the AOS-CX switch. Based on the above output, what is the problem?

Question68: A network administrator is implementing NAE on AOS-CX switches. When attempting to create an agent on a particular switch, the agent appears in the NAE Agents panel with a red triangle error symbol and a status of
"Unknown".
What is the cause of this issue?

Question69: How does PIM build the IP multicast routing table to route traffic between a multicast source and one or more receivers?

Question70: Examine the attached diagram.

The two PCs are located in VLAN 11 (10.1.11.0/24). Which example defines how to implement active gateway on the VSX core for VLAN 11?

Question71: What is correct regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility Controllers (MCs)?

Question72: A network administrator is implementing OSPF, where there are two exit points. Each exit point has a stateful, application inspection firewall to implement company policies.
What would the best practice be to ensure that one firewall will see both directions of the traffic, preventing asynchronous connections in the network?