HPE6-A45無料問題集「HP Aruba Certified Switching Professional」

質問 1

Which benefit is provided by MD5 authentication for BGP?

（A）It validates that BGP messages arrive from an authorized device.

（B）It enables users to authenticate to a server across BGP AS boundaries.

（C）It verifies that received BGP routes have valid next hop IP addresses.

（D）It protects BGP routing information from eavesdroppers.

正解：A 解答を投票する

質問 2

Refer to the exhibit.

The access layer AOS-Switches currently run DHCP snooping on VLAN 2 and connection rate filtering on edge ports. They are at default settings for ARP protection. A network administrator then enters these commands on each of the access layer switches:
Switch(config)# arp-protect vlan 2 Switch(config)# arp-protect
Which behavior accurse?

（A）The switches can prevent ARP poisoning attacks, but legitimate communications with VLAN 2 could also be disrupted.

（B）The switches will forward legitimate traffic and prevent ARP poisoning attacks, but interfere with connection rate filtering.

（C）The switches will not apply ARP protection due to interference from DHCP snooping, so the commands have no effect on current behavior.

（D）The switches can now prevent ARP poisoning attacks and do not interfere with legitimate communications.

正解：D 解答を投票する

質問 3

A company has a Unified Communications and Collaboration (UCC) solution.
* Users run softphones on their desktops and laptops.
* The UCC solution is configured to use a certain range of Layer 4 ports for VoIP traffic.
* The user devices connect to AOS-Switches.
A network administrator needs to configure the AOS-Switches to prioritize only the VoIP traffic. Where can the administrator configure a DSCP value to meet this goal?

（A）on the interfaces that connect to the user devices

（B）on the interfaces through which the VoIP traffic is forwarded

（C）on the VLAN to which the user devices are assigned

（D）in a global UDP port-based QoS policy

正解：B 解答を投票する

質問 4

Refer to the exhibits.
Exhibit 1

Exhibit 2

Network administrators are alerted to high interface utilization on a switch by a management solution. They examine the utilization on the uplink interfaces several times an hour during problem times. The exhibit shows output typical of times of congestion. The administrators want to allocate bandwidth fairly and reduce congestion on the uplinks.
What could help meet these requirements?

（A）a per-queue rate limit on interfaces 1 and 2

（B）an outbound rate limit on interfaces 1 and 2

（C）a broadcast rate limit on each edge port

（D）an outbound rate limit on each edge port

正解：C 解答を投票する

質問 5

Which potential security issue does the captive portal URL hash key on an AOS-Switch help to prevent?

（A）unauthorized users to read the captive portal redirect URL in the AOS-Switch config

（B）hackers to eavesdrop on the RADIUS messages sent to ClearPass

（C）users to change values in the URL that directs them to the captive portal

（D）unauthenticated guests to receive access before they log in to the captive portal

正解：C 解答を投票する

質問 6

What is a reason to implement PIM-DM as opposed to PIM-SM?

（A）to obtain the simplest setup in a network with high bandwidth

（B）to control exactly which multicast groups are routed through the network

（C）to permit a higher density of rendevous point (RP) routers in the network core

（D）to conserve bandwidth over WAN links

正解：A 解答を投票する

質問 7

Refer to the exhibit.

An AOS-Switch has an extended ACL that is applied to several physical interfaces.
- New interfaces have been brought online.
- The ACL has been applied to them as well.
A network administrator sees the output in the exhibit and is concerned that the switch will reach the limit for rules.
What can the administrator do to address this concern?

（A）Enable ACL grouping, and apply ACLs as shared ACLs.

（B）Reconfigure the ACL as a standard ACL, and then reapply it.

（C）Resequence the ACL with less space in between the entries.

（D）Remove static ACLs, and have the RADIUS server send dynamic ACLs.

正解：C 解答を投票する

質問 8

What is a reason for hello packets between two OSPF routers?

（A）to permit an OSPF adjacency between two VSF fabrics

（B）to establish an area that is not directly connected to the backbone Area 0

（C）to permit OSPF to operate between two routers that also run VRRP

（D）to monitor connectivity with the neighbor, but not exchange the routing table

正解：D 解答を投票する

質問 9

A network administrator configures DHCP snooping on VLAN 2. How does the switch handle DHCP traffic that arrives in this VLAN on an untrusted interface?

（A）It accepts both client and server packets as long as they match the DHCP binding table.

（B）It accepts packets from a DHCP server, but drops client packets.

（C）It accepts client packets, but drops packets from a DHCP server.

（D）It drops all DHCP traffic and logs a security event.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Refer to the exhibit.

An AOS-Switch has the ACL shown in the exhibit. A network administrator then enters these commands:
Switch(config)# mac-access-list standard myACL
Switch(config-std-macl)# deny 007d.45cc.0000 0000.0000.ffff
How does this ACL treat these frames:
1 = 007d.45cc.ffff 2 = 007d.45cc.0000

（A）It denies frame 1 and permits frame 2.

（B）It permits both frames.

（C）It permits frame 1 and denies frame 2.

（D）It denies both frames.

正解：A 解答を投票する

HPE6-A45 無料問題集「HP Aruba Certified Switching Professional」

弊社を連絡する

関連リンク

トップ試験