EMT Practice Test

1. Question Content...

---

Question1: What is true regarding VSX and keepalives on AOS-CX switches?

Question2: When cutting and pasting configurations into NetEdit, which character is used to enter commands within the context of the previous command?

Question3: How is NetEdit installed at a customer location?

Question4: A company has a few servers in a secure, remote location storing highly-confidential documents connected to two AOS-CX 6400 switches configured in a VSX pair The AOS-CX switches perform access control with 802 1X and will be implementing user-based tunneling (UBT) so that Aruba gateway application inspection and stateful firewall policies can be applied to the traffic. The gateways are running version 84 and implement the AP, PEF, and RFP licenses Which licensing is needed for the two AOS-CX switches?

Question5: Which concept is implemented using Aruba's dynamic segmentation?

Question6: Examine the attached exhibit.

The network administrators is trying to add a remote location as area 3 to the network shown in the diagram.
Based on current connection restrictions, the administrator cannot connect area 3 directly to area 0. The network is using AOS-CX switches.
Which feature should the administrator implement to provide connectivity to the remote location?

Question7: An administrator wants to drop traffic from VLAN 6 (10.1.6.0/24) to VLAN 5 (10.1.5.0/24), but allow all other traffic. What is correct configuration to accomplish this?

Question8: What is a concept associated with PIM sparse mode (SM)?

Question9: Which AOS-CX feature is used to prevent head-on-line (HOL) blocking?

Question10: A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

Question11: When implementing user-based tunneling on an AOS-CX switch, which component defines the primary and backup Aruba gateways?

Question12: An administrator is managing a pair of core AOS-CX switches configured for VSX Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX.OSPF is running between theaggregation and core layers To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.
What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?

Question13: An administrator is implementing a multicast solution in a multi-VLAN network. Which statement is true about the configuration of the switches in the network?

Question14: Examine the configuration performed on newly deployed AOS-CX switches:

After performing this configuration, the administrator notices that the switch ports always remain in the EAP start state. What should the administrator do to fix this problem?

Question15: An administrator is implementing a multi-area OSPF network. The network contains a backbone (area 0) and two other areas (1 and 2) connected to ABRs in the backbone The network has one routing switch connected to a service provider located in area 2 Which network design would minimize the number of routes in the routing switches' link state databases (LSDBs) while still allowing full connectivity?

Question16: Examine the following AOS-CX switch configuration:

Which statement correctly describes what is allowed for traffic entering interface 1/1/3?

Question17: Examine the attached diagram

Two AOS-CX switches are configured for VSX at the access layer, where servers attached to them. An SVI interface is configured for VLAN 10 and serves as the default gateway for VLAN 10. The ISL link between the switches fails, but the keepalive interface functions. Active gateway has been configured on the switches.
What is correct about access from the servers to the Core?

Question18: A switch will apply a device profile to a port based on which pieces of information? (Select two.)

Question19: Examine the configuration of Core-1 and Core-2. AOS-CX switches configured as a VSX stack:
Core1: Interlace lag 256
no shutdown
no routing
vlan trunk allowed all
lacp mode active Interface 1/1/46
no shutdown
lag 256 Interface 1/1/47
no shutdown
lag 256
VSX
Inter-switch-link lag 256
vsx-sync vsx-global
exit
Cofe2: interlace lag 250
no shutdown
no routing
vlan trunk allowed all
lacp mode active
Interlace 1/1/46
no shutdown
lag 256 Interface 1/1/47
no shutdown
lag 256 vsx
inter-switch-link lag 256
exit
When using the "show vsx status" command, the two switches fall to connect and successfully synchronize. What should the administrator do to fix this issue?

Question20: A customer has twenty AOS-CX switches that will be managed by NetEdit and would like support for NetEdit these switches will exist in the network for at least five years.
Which type of licensing should be used by this customer?

Question21: What is the purpose of the transit VLAN when implementing dynamic segmentation policies involving AOS-CX switches and an Aruba gateway solution?

Question22: Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:
Switch# show port-access role clearpass
Role information:
Name : icxarubadur_employee-3044-2
Type : clearpass
Status: failed, parsing_failed
Reauthentication Period :
Authentication Mode :
Session Timeout :
The downloadable user roles are not being downloaded to the AOS-CX switch. Based on the above output, what is the problem?

Question23: An administrator is supporting a network with the access layer consisting of AOS-CX 6300 and 6400 switches. The administrator needs to quickly deploy Aruba IAPs and security cameras in the network, ensuring that the correct QoS and VLAN settings are dynamically applied to the switch ports. Currently, switches are not configured to do device authentication, and no authentication server exists in the network.
Which AOS-CX feature should the administrator use to dynamically assign the policy settings to the correct switch ports?

Question24: An administrator will be deploying HPE Aruba Networking Switch Multi-Edit Software to manage an Aruba solution. What does Switch Multi-Edit Software support?

Question25: An administrator will be deploying NetEdit to manage an Aruba solution. What does NetEdit support?

Question26: How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

Question27: Examine the AOS-CX configuration:

The switches have a default factory password setting NetEdit fails to access the configuration of the AOS-CX switches. What should the administrator do to solve this problem?

Question28: Examine the following AOS-CX configuration:

Based on this configuration, which statement is correct regarding IoT traffic?

Question29: A company is implementing a new wireless design and needs it to support high availability, even during times of switch system upgrades. The solution will involve Aruba Mobility Controller (MC) and Aruba AP connections requiring POE. Which campus AOS-CX switch solution and virtual switching should the company implement at the campus access layer?

Question30: A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code.
The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.
Which solution should the company implement?

Question31: A network administrator wants to replace older access layer switches with AOS-CX 6300 switches.
Which virtual switching technology can the administrator implement with this solution?

Question32: A network engineer is using NetEdit to manage AOS-CX switches. The engineer notices that a lot of thirdparty VoIP phones are showing up in the NetEdit topology. The engineer deletes these, but they are automatically rediscovered by NetEdit and added back in.
What should the administrator do to solve this problem?

Question33: Examine the network exhibit:

The ACL configuration defined on Core-1 is as follows:
If telnet was being used, which device connection would be permitted and functional in both directions?
(Choose two.)

Question34: What is correct regarding multicasting and AOS-CX switches?

Question35: An access layer AOS-CX has no OoS configuration on it. The switch receives an 802.1Q tagged VoIP frame on a port. The frame has an 802.1p value of 6. The IP header has a DSCP value of EF46 How will the switch forward this frame?

Question36: An administrator in a company of 349 users has a pair of AOS-CX switches with connections to external networks. Both switches are configured for OSPF. The administrator wants to import external routes on both switches, but assigns different seed metrics to the routes, as well as imports them as external type-1 routes.
What is the best way for the administrator to accomplish this?

Question37: The AOS-CX mobile app allows a network engineer or technician to perform which tasks? (Choose two.)

Question38: A company is implementing AOS-CX switches at the access layer. The company wants to implement access control for employees and guests.
Which security features will require a ClearPass server to be installed and used by the company?

Question39: A network administrator is attempting to troubleshoot a connectivity issue between a group of users and a particular server. The administrator needs to examine the packets over a period of time from their desktop; however, the administrator is not directly connected to the AOS-CX switch involved with the traffic flow.
What is correct regarding the ERSPAN session that needs to be established on an AOS-CX switch? (Choose two.)

Question40: An administrator will be implementing tunneling between AOS-CX switches and Aruba gateways. Which list of protocols must minimally be allowed by an intermediate firewall between two sets of devices?

Question41: An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

Question42: An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling. How should the administrator protect this traffic?

Question43: Examine the VSX-related configuration of the core layer AOS-CX switch:

A network administrator is troubleshooting a connectivity issue involving the VSX LAG (link aggregation) between the core and access layer switch, during HW replacement of one of the core switches.
Which configuration should the administrator add to the core switch to fix this issue?

Question44: Which option correctly defines how to identify a VLAN as a voice VLAN on an AOS-CX switch?

Question45: Which AOS-CX switches support weighted fair queuing (WFQ)?

Question46: A network administrator is implementing OSPF, where there are two exit points. Each exit point has a stateful, application inspection firewall to implement company policies.
What would the best practice be to ensure that one firewall will see both directions of the traffic, preventing asynchronous connections in the network?

Question47: A network engineer for a company with 896 users across a multi-building campus wants to gather statistics on an important switch uplink and create actions based on issues that occur on the uplink. How often does an NAE agent gather information from the current state database in regard to the uplink interfaces?

Question48: What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Question49: Which protocols are used by NetEdit to interact with third-party devices? (Choose two.)

Question50: A company uses NetEdit to manage a network of 700 AOS-CX switches and approximately 1,000 other SNMP-capable devices.
Which management solution should the company use to monitor all the devices, as well as see a topology picture of how all the devices are connected together?

Question51: What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?

Question52: A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS-CX switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.
What is correct about how the company should implement a security solution where the wired traffic is processed by the gateways?

Question53: A network has an ABR that connects area 0 and 1. A network engineer configures a summarized route for area 0. The ABR is a designated router (DR) for the segment it uses to connect to area 1.
Which LSA type is assigned to this route when the summarized route is advertised into area 1 by the ABR?