1. Match the solution components of NetConductor (Options may be used more than once or not at all)
Client Insights – Built in , AI powered client visibility and fingerprinting capability that leverages infrastructure telemetry and ML based classification models to eliminate network blind spots
Cloud Auth – Enables fictionless onboarding of end users and client devices either through MAC address-based authentication or through integrations with common cloud identity stores
Fabric Wizard – Simplifies the creation of the overlays using an intuitive graphical user interface and automatic generation of configuration instructions that are pushed to switches and gateways
Policy Manager – Defines user and device groups and creates the associated traffic routing and access enforcement rules for the physical network
2. What is the order of operations tor Key Management service for a wireless client roaming from AP1 to AP2?
> Client associates & authenticates to AP1
> Cache the clients information
> Get AP1 neighbor AP list
> Generate Pairwise Master Key keys for AP1 neighbours
> Share Pairwise Master Key along with VLAN and user role to target APs.
3. Select the Aruba stacking technology matching each option (Options may be used more than once or
not at all.)
> Support up to 10 devices per stack = VSF
> Support 2 devices per stack = VSX
> Individual ISL links up to 400G are supported = VSX
> Individual ISL links up to 50G are supported = VSF
> A maximum aggregate ISL bandwidth of 200G is supported = VSF
4. Match the terms below to their characteristics (Options may be used more than once or not at all.)
> Unicast : A device with IP address 10.1.3.7 in a network wants to send the traffic stream to a device with IP address 10.13.4.2 in the other network
> Multicast : One/more senders and one/more recipients participate in data transfer traffic
> IP Directed Broadcast : Sent to all hosts on a remote network
> Broadcast : Sent to all NICs on the same network segment as the source NIC
5. List the WPA 4-Way Handshake functions in the correct order.
> Proves knowledge of the PMK
> Exchanges messages for generating PTK
> Distributes an encrypted GTK to the client
> Sets first initialisation vector (IV)
6. Match the appropriate QoS concept with its definition. (Options may be used more than once or not
at all.)
> Class of Service = a method for classifying network traffic at layer 2 by marking 802.1q vlan ethernet frames with one of eight service classes
> Differentiated Services = a method for classifying network traffic at layer 3 by marking packets with one of 64 different service classes.
> WMM (WiFi Multimedia) = a method for classifying network traffic using access categories based on the IEEE 802.11e QoS standard
> Best Effort Service = a method where traffic is treated equally on a first come first served manner
7. Match the topics of an AOS10 Tunneled mode setup between an AP and a Gateway. (Options may be
used more than once or not at all.)
> Authenticator = Access Point
> Negotiate IPSEC Phase 1 = Access Point & Gateway
> Radius Proxy = Device Designated Gateway
> Negotiate IPSEC Phase 2 = Overlay Tunnel Orchestrator (OTO)
8. Match each PoE power class to Its corresponding 802.3 standard. (Options may he used more than
once or not at all)
> 802.3af = Class 3 (15.4w)
> 802.3at = Class 4 (30w)
> 802.3bt = Class 6 (60w)
> 802.3bt = Class 8 (90w)
9. Match the topics with the underlying technologies (Options may be used more than once or not at
all.)
> Centralized Overlay = UBT
> Distributed Overlay = EVPN-VXLAN
> Encapsulated in UDP = EVPN-VXLAN
> Generic Routing Encapsulation (GRE) = UBT
10. List the firewall role derivation flow in the correct order
> Server derived role
> User derived role
> Authentication default role
> Initiation role assigned
hpe7-a01 – Click to return to the main bank of questions