EMT Practice Test

1. Question Content...

---

Question1: A company is implementing AOS-CX switches at the access layer. The company wants to implement access control for employees and guests.
Which security features will require a ClearPass server to be installed and used by the company?

Question2: An administrator is implementing a multi-area OSPF network. The network contains a backbone (area 0) and two other areas (1 and 2) connected to ABRs in the backbone The network has one routing switch connected to a service provider located in area 2 Which network design would minimize the number of routes in the routing switches' link state databases (LSDBs) while still allowing full connectivity?

Question3: How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

Question4: What is correct regarding the configuration of ACLs on AOS-CX switches?

Question5: An administrator is managing a VSX pair of AOS-CX switches An administrator configures the following on the primary AOS-CX switch:

Question6: An administrator will be implementing tunneling between AOS-CX switches and Aruba gateways. Which list of protocols must minimally be allowed by an intermediate firewall between two sets of devices?

Question7: Examine the following AOS-CX configuration:

Based on this configuration, which statement is correct regarding IoT traffic?

Question8: What is required when implementing captive portal an AOS-CX switches?

Question9: An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities. The campus involves a core, as well as multiple access layers. Which feature should the administrator implement to allow both VSX-capable core switches to process traffic sent to the default gateway in the campus VLANs?

Question10: The company has just upgraded their access layer switches with AOS-CX switches and implemented an AAA solution with ClearPass. The company has become concerned about what actually connects to the user ports on the access layer switch, Therefore, the company is implementing 802.1X authentication on the AOS-CX switches. An administrator has globally enabled 802.1X, and has enabled it on all the access ports connected to user devices, including VoIP phones, security cameras, and wireless Aruba IAPs. Wireless users are complaining that they successfully authenticate to the IAPs; however, they do not have access to network resources. Previously, this worked before 802.1X was implemented on the AOS-CX switches.
What should the company do to solve this problem?

Question11: A switch will apply a device profile to a port based on which pieces of information? (Select two.)

Question12: An administrator is looking for a data center switching solution that will greatly reduce the likelihood of dropped frames when uplink congestion is experienced. Which AOS-CX switch queuing feature meets the administrator's needs?

Question13: A company uses NetEdit to manage a network of 700 AOS-CX switches and approximately 1,000 other SNMP-capable devices.
Which management solution should the company use to monitor all the devices, as well as see a topology picture of how all the devices are connected together?

Question14: Examine the network exhibit.

A network administrator is implementing OSPF on a VSX pair of aggregation switches: Agg1 and Agg2. VLANs 10 and 20 are connected to layer-2 access switches. Agg-1 and Agg-2 are configured as the default gateway for VLANs 10 and 20, with active gateway enabled.
What is the best practice for configuring OSPF on the aggregation switches and their connection to the Core switch?

Question15: Examine the VSX-related configuration of the core layer AOS-CX switch:

A network administrator is troubleshooting a connectivity issue involving the VSX LAG (link aggregation) between the core and access layer switch, during HW replacement of one of the core switches.
Which configuration should the administrator add to the core switch to fix this issue?

Question16: An administrator wants to track what configuration changes were made on a switch What should the administrator implement to see the configuration changes on an AOS-CX switch?

Question17: What is a best practice concerning voice traffic and dynamic segmentation on AOS-CX switches?

Question18: Examine the AOS-CS switch output:

Based on this output, what is correct?

Question19: What is correct regarding multicasting and AOS-CX switches?

Question20: What must a network administrator implement in order to run an NAE script on an AOS-CX switch?

Question21: A network has two AOS-CX switches connected to two different service providers. The administrator is concerned about bandwidth consumption on the service provider links and learned that the service providers were using the company as a transit AS.
Which feature should the administrator implement to prevent this situation?

Question22: An administrator implements interim accounting for guest users so that ClearPass can track the amount of bandwidth that guests upload and download. Guests that abuse bandwidth consumption should be disconnected from the network. The administrator configures the following on the AOS-CX access switches:

After performing this configuration, the administrator notices that guest users that have exceeded the guest bandwidth limit are not being disconnected. Upon further investigation, Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.
What is causing this issue?

Question23: An administrator is configuring BGP and has two connections to a service provider to two different local routers.
Which BGP metric should the administrator configure to influence which local router the service provider will use to reach certain routes?

Question24: A network administrator is managing a network that deploys a multicast service. The administrator has multiple streams successfully being routed by PIM-DM in the network. The administrator then adds a new stream with a destination address of 239.0.0.1. However, clients who have not joined the stream are receiving it.
What should the administrator do to fix this problem?

Question25: A company is implementing a new wireless design and needs it to support high availability, even during times of switch system upgrades. The solution will involve Aruba Mobility Controller (MC) and Aruba AP connections requiring POE. Which campus AOS-CX switch solution and virtual switching should the company implement at the campus access layer?

Question26: An administrator of a large campus network needs a solution that will provide root cause analytics to quickly identify problems so that they can quickly be fixed.
Which AOS-CX switch feature should the administrator utilize to help with root cause analytics?

Question27: A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer verifies that the AOS-CX switch is configured for NTP and is successfully synchronized. What should be done to fix this issue?

Question28: What is a concept associated with PIM sparse mode (SM)?

Question29: A company has recently purchased a ClearPass AAA solution. Their network consists of AOS-CX switches at the access layer. The company is implementing a rollout of IoT devices for smart building management to control the lighting and HVAC systems. The network administrator is concerned about allowing secure access to these devices since they only support MAC-Auth.
Which ClearPass feature should the administrator leverage to help determine that MAC address spoofing is not occurring for this group of devices?

Question30: What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Question31: A company has a few servers in a secure, remote location storing highly-confidential documents connected to two AOS-CX 6400 switches configured in a VSX pair The AOS-CX switches perform access control with 802 1X and will be implementing user-based tunneling (UBT) so that Aruba gateway application inspection and stateful firewall policies can be applied to the traffic. The gateways are running version 84 and implement the AP, PEF, and RFP licenses Which licensing is needed for the two AOS-CX switches?

Question32: Examine the network topology.

Company XYZ has two connections to a service provider (ISP1). Here is the configuration of Router1:

Here is the configuration of Router2:

Based on configuration of Router1 and Router2, which BGP metric is being manipulated?

Question33: A network administrator is tasked to set up BGP in the company's network. The administrator is defining an eBGP peering between an AOS-CX switch and a directly-connected service provider. The administrator has configured the following on the AOS-CX switch:

However, when using the "show bgp all summary" command, the state does not display "Established" for the eBGP peer. What must the administrator configure to fix this issue?

Question34: A network administrator is implementing NAE on AOS-CX switches. When attempting to create an agent on a particular switch, the agent appears in the NAE Agents panel with a red triangle error symbol and a status of "Unknown".
What is the cause of this issue?

Question35: When implementing deficit weighted round robin queuing, what importance does the weight value have?

Question36: How does an administrator install a script and create an agent and actions for the Network Analysis Engine running on AOS-CX switches?

Question37: A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

Question38: An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

Question39: A network engineer for a company with 896 users across a multi-building campus wants to gather statistics on an important switch uplink and create actions based on issues that occur on the uplink. How often does an NAE agent gather information from the current state database in regard to the uplink interfaces?