HPE Aruba Networking Certified Professional - Campus Access (ACP-CA) Practice Test

These questions are part of the practice quiz. Start practicing

• Which feature supported by SNMPv3 provides an advantage over SNMPv2c?
• Which standard supported by some Aruba APs enables accurate location of wireless client devices within a few meters?
• In the SVI example, which VLAN ID is used for the SVI?
• Which technology allows VLAN information to be dynamically added to a trunk?
• What is the first-hop protocol feature recommended for a VSX L3 gateway in Aruba CX configurations?
• Which action may help fix DHCP issues on a pair of Aruba CX switches with APs connected to VLAN 1000?
• What is the default value for config-revision on core devices used in this environment?
• One advantage of using OCSP vs CRLs for certificate validation?
• To create a new SVI for a separate routing table on Aruba CX 6300 VSF, assuming the correct layer-2 VLAN exists, which action is used?
• With Aruba Cloud Guest, visitors report the captive portal keeps appearing after devices sleep. Which solution should be enabled to address this?
• Which technology should be implemented to keep Wi‑Fi 6 clients connected to the best performing APs when a closer AP has lower performance?
• When configuring UBT on a switch, what happens if a gateway role is not specified?
• Which default AOS-CX user role provides Web UI access to the Logs page and GET-only REST API access for /logs/event?
• In AOS10 Tunneled mode, which component handles IPSec Phase 1 negotiation on the Access Point side?
• Which approach should be used to establish the keepalive connection between two Aruba CX 8325 switches for VSX?
• Which VLAN is used for client traffic in the preconfigured design?
• Which LLDP-MED capability enables voice VLANs to be automatically configured for VoIP phones?
• What is the primary benefit of VSX clustering when used with Aruba CX switches?
• Which line defines the SVI for VLAN 20 in the sample?
• What is the calculated EIRP for AP1 given Ptx 16 dBm, antenna gain 8 dBi, and 4 dB cable loss?
• Which statement is true about 802.11k?
• When deploying a bonded 40 MHz wide channel, what is the approximate difference in the noise floor perceived by a client compared to an unbonded 20 MHz channel?
• A company deployed 200 AP-635 APs, but the network isn’t working as expected. What is the correct action to fix the issue?
• With Aruba CX 6200 switches, which command sequence protects client ports from forming layer-2 loops when uplinks are configured on 1/1/25 and 1/1/26?
• How is Dynamic Multicast Optimization (DMO) implemented in an Aruba wireless network?
• Which NetConductor component simplifies the creation of overlays using an intuitive graphical user interface and automatic generation of configuration instructions that are pushed to switches and gateways?
• Which statement about redistribution of static routes with a route-map named 'connected-routes' is true in Aruba OS CX?
• Using Aruba best practice what should be enabled for visitor networks where encryption is needed but authentication is not required?
• Which protocol provides authenticated access to retrieve data from a Management Information Base (MIB)?
• By default, Best Effort has higher priority than which traffic type?
• In Aruba CX VSX configuration, which statement about VRRP and Active Gateway on a VLAN is true?
• Which command sequence correctly enables DHCP snooping on a switch and configures VLANs and interface trust to prevent rogue DHCP servers from affecting the network?
• What is the correct method to allow VLAN 100 on a VSX pair inter-switch-link 256 for port 1/45 and 2/45?
• What is AP1's radio output power?
• Describe the difference between Class of Service (CoS) and Differentiated Services Code Point (DSCP).
• In an ArubaOS 10 architecture with an AP and a gateway, what happens when the WLAN is configured with OWE?
• Which Aruba stacking technology supports up to 10 devices per stack?
• With Aruba CX 6300, how do you configure IP address 10.10.10.1 for interface 1/1/1 in default state?
• In an environment with IP cameras and headless scanners that do not support 802.1X, how can MPSK help secure these devices?
• What should you implement to ensure PoE devices receive their correct power definitions when 802.1X is used on edge ports?
• Which QoS concept is described as using access categories based on the IEEE 802.11e QoS standard?
• In a VSX pair, what is the purpose of the keepalive link?
• In port-access configuration for AP onboarding, which object defines the device-specific settings for APs?
• In the described deployment, which VLAN is used for wireless client traffic?
• BSS coloring is applied to which element to help reduce interference?
• What is the difference in dB between AP2 EIRP and AP1 EIRP based on the given data?
• Which app must the office manager use on their phone to onboard new branch devices into Aruba Central?
• What is AP2's antenna gain?
• Which command list satisfies configuring an SVI on an Aruba CX switch with VLAN 25, IPv4 address 10.105.43.1/24, IPv6 address fd00:5708::f02d:4df6/64, and VRF eng, using the least number of commands?
• In AOS 10, which session-based ACL configuration will only allow ping from wired stations to wireless clients but will not allow ping from wireless clients to wired stations?
• In the SVI example, which VRF is the VLAN attached to?
• What is the purpose of Round Trip Time measurements in 802.11mc technology?
• What is the antenna gain of AP1?
• On an Aruba CX 6000 switch, when a client port detects a loop and the do-not-disable parameter is used, what is the immediate consequence?
• Using AP1 specifications, what is the calculated EIRP?
• A wireless deployment uses cloud-hosted RADIUS and the security team wants to protect RADIUS traffic between APs and the RADIUS server. Which configuration is appropriate?
• To meet the requirement of allowing ping from the IT management VLAN to the user VLAN while denying ping from the user VLAN to the IT management VLAN on Aruba CX 6300s, which ACL approach is correct?
• during ZTP a gateway was misconfigured causing internet access issues. What action should the technician take to start the ZTP process correctly?
• Which line assigns an IP address to the VLAN 20 interface in the sample?
• Which stacking technology supports individual ISL links up to 400G?
• In the WPA 4-Way Handshake, which action occurs after the PMK is proven?
• Which default management role should have been assigned for a user who needed firmware upgrades and a privilege level of 15?
• Which IEEE 802.11 amendment defines mechanisms for APs and clients to dynamically measure available radio resources?
• Which of the following represents the correct order of the WPA 4-Way Handshake steps?
• Which choice lists the correct order for the firewall role derivation steps in the given flow?
• Which line assigns the IP address to VLAN 30's SVI in the sample?
• Which default AOS-CX user role provides View switch configuration and REST API PUT/POST access?
• When the primary VSX node is replaced and the system MAC is replaced, which description applies to VSX MAC handling?
• Which LLDP-MED feature allows APs to request power as needed from PoE-enabled switch ports?
• Which feature allows a device to remain operational when the remote authentication server is unreachable?
• Which option best describes Aruba best practices for Central design when you need GUI configuration for gateways and APs but template configuration for switches?
• What is the best practice for handling voice traffic with dynamic segmentation on AOS-CX switches?
• What does MPSK stand for in Aruba wireless configurations?
• Which encapsulation is used by EVPN-VXLAN overlays?
• What is the IP address of the DHCP server in the scenario?
• In a high-density network design, which technology best minimizes contention overhead by dedicating subcarriers to clients?
• What is the calculated EIRP for AP2 given Ptx 13 dBm, antenna gain 12 dBi, and 3 dB cable loss?
• ERSPAN on AOS-CX: which encapsulation protocol is used?
• In the described deployment, which subnet is used for switch management?
• In the firewall role derivation flow, which step comes immediately after 'User derived role'?
• During initial VSX configuration, how is the system MAC determined?
• To enable a VLAN on a LAG-based inter-switch link named LAG256, which command correctly allows VLAN 100?
• What term describes multiple virtual MAC addresses used for load sharing in a VSX environment?
• In the Aruba CX 6300 port-access example, which interface is configured for the port-access commands?
• User Based Tunneling (UBT) uses which encapsulation?
• Which sequence correctly lists the firewall role derivation flow in the correct order?
• In EVPN-VXLAN, which overlay is described by the term Distributed Overlay?
• In an Aruba CX VSX pair, which information does the Inter-Switch Link protocol configuration use?
• Which of the following is a typical step in configuring DHCP Snooping to prevent rogue servers, as shown in example configurations?
• For devices that do not support 802.1X authentication, which MPSK approach automatically provides unique pre-shared keys for devices?
• Weak Wi‑Fi coverage in one area, with better signal across the hall, is most likely caused by what?
• A Microbranch group has APs online in Aruba Central but no VPN tunnels form. The most likely cause is a firewall issue blocking GRE tunneling between the AP and gateway. Which option confirms this?
• What is the antenna cable loss for AP1?
• Given AP1 transmits at 20 dBm, antenna gain of 7 dBi, and a 3 dB cable loss, what is the calculated EIRP?
• In a distributed overlay fabric, how would you explain the role of policy enforcement with Group Based Policy ID?
• When configuring an Aruba CX VSX Inter-Switch Link Protocol, what is the default Hello interval?
• In a VSX deployment, which interface commonly acts as the default gateway for VLAN 10?
• If servers in a subnet must be routed to a dedicated router and their SVI is on the core routing switch, which configuration best achieves this routing requirement?
• With 200 AP-515 and 75 AP-565 APs deployed and 802.1X authentication in use, which feature should be enabled to ensure the best roaming experience for Wi-Fi calling?
• Which feature is best to drop excessive broadcast traffic on an ingress port or ArubaOS-CX switch?
• In a ClearPass CoA workflow, which step is essential on the switch to enable dynamic authorization?
• What is the correct order of operation for key management service for a wireless client roaming from AP1 to AP2?
• Which statement best describes the VLAN creation line in the Aruba CX sample?
• After configuration, which default management role should have been assigned for the user?
• Which statement correctly describes the EIRP calculation formula?
• In an Aruba CX VSX setup, which component is used to inform the ISL configuration based on MAC addresses?
• Which ports are configured as uplinks on the Aruba CX 6100 48G switch in the described setup?
• Which QoS concept uses 64 service classes at layer-3 by marking packets?
• A customer wants wired authentication across CX switches and needs to authenticate a single computer connected through a VoIP phone. Which feature should be enabled?
• Which statement about the route-map based redistribution of static routes is true when using 'redistribute static route-map connected-routes' with a permit in the route map named 'connected-routes'?
• Which two solutions address the requirements for an IoT wireless authentication solution that requires encrypted traffic, unique per-device passphrases, and fingerprint-based role-based access?
• Which line assigns the IP address to VLAN 40's SVI in the sample?
• Which technology minimizes flooding for a legacy layer-2 application across a campus connected via layer-3?
• What enables plug-and-play provisioning of Aruba access points in a client network?
• Which NetConductor component defines user and device groups and creates the associated traffic routing and access enforcement rules for the physical network?
• In the firewall role derivation flow, which step comes immediately after 'Server derived role'?
• Which device family is used in the wireless client deployment described (for the switches paired with the APs)?
• Where do servers typically attach in a VSX deployment at the Access-Aggregation layer?
• Which IEEE 802.11 standard uses Round Trip Time measurements and Fine Time Measurements to calculate distance to an AP?
• In the Aruba CX 6300 VSF stack sample, which VLANs are configured?
• What is a primary Active Gateway feature unique to Aruba CX VSX configuration?
• In the linkup delay timer configuration for a VSX environment, which action helps reduce the time before routing adjacencies form?
• The property redistributes connected routes on Aruba OS CX. Which of the following statements about redistribute connected is true?
• A customer wants to deploy a Gateway and take advantage of all the SD-WAN features. Which ArubaOS 10 persona option should be selected?
• Which command should the administrator use to examine information on which role the guest user has been assigned?
• A client connecting to an 802.1X SSID configured in tunnel mode with default AP-group settings sends Access-Accept to the AP through which tunnel after the RADIUS server responds?
• Which ClearPass component supports deploying client certificates to corporate-managed devices during onboarding?
• Which command configures OSPF as passive on VLAN interfaces 20, 30, and 40?
• To align with Aruba best practices for a standardized network design in Aruba Central, which approach should be used?
• What is a primary benefit of BSS coloring?
• To add a third member JL726A to an Aruba CX 6200F VSF stack, which command sequence correctly joins the new member to the existing stack?
• In a VSX environment, what is the purpose of the command vsx-sync dhcp-relay?
• In AOS10 Tunneled mode, which component provides RADIUS proxy functionality?
• How can you onboard a new UXI device when the sensor has no cellular connection?
• Which MSTP-related setting must be identically configured with MSTP to load-balance VLANs on Access-1 switches?
• You need an Aruba CX solution that will warn the helpdesk when devices behind unmanaged switches cause outages on edge ports. Which configuration option is correct?
• To address unencrypted tunnels between CX switches and Aruba Gateways after a security audit, which action must be performed?
• You need to ensure voice traffic sent through an ArubaOS-CX switch arrives with minimal latency. What is the best scheduling technology to use for this task?
• What is the primary purpose of a VRF in routing?
• Which AP models are mentioned for the remote office deployment?
• What is AP2's antenna cable loss?
• Which VLANs are allowed on the trunk in the correct port-access configuration for the APs?
• In a remote-office rollout with VLANs 100 (mgmt), 200 (clients), and 300 (guests), which port-access configuration correctly enables AP onboarding?
• With Aruba CX 6300 VSF, how would you create a new OSPF configuration for a separate routing table when the layer-2 VLAN already exists?
• Which Aruba stacking technology supports two devices per stack?
• What is the inter-switch link used to connect two Aruba CX switches in a VSX pair?
• In a VLAN environment, what is the function of the SVI?
• An AOS 10 gateway, which device persona is only available when configuring a gateway-only group?
• Between AP1 and AP2, which access point yields the higher EIRP based on the given values?
• How is Multicast Transmission Optimization implemented in an Aruba wireless network?
• Which NetConductor component enables frictionless onboarding of end users and client devices either through MAC address-based authentication or integrations with cloud identity stores?
• A maximum aggregate ISL bandwidth of 200G is supported by which stacking technology?
• What is the most likely cause of wired guest disconnect CoA not being applied when ClearPass reports a disconnect, given the following configuration and behavior?
• Which statement about port-access configuration in the example is accurate for enabling multi-domain with a limit of two devices?
• Which statement best describes QoS (Quality of Service)?
• To prevent traffic drop after the aggregation layer comes online, which linkup delay timer configuration is recommended?
• In VLAN trunk configuration, what does the native VLAN specify?
• In a VSX environment with multiple VRFs, if you cannot find the IP address of a client device with a known MAC address on the primary switch, which command should you run to locate the IP address across VRFs?
• Which stacking technology supports individual ISL links up to 50G?
• Which attribute is commonly used by Policy Based Routing to select traffic for routing, such as to a specific VRF or next hop?
• Using AP2 specifications, what is the calculated EIRP?
• Which AP mode sends captured RF data to Aruba Central for waterfall plots?
• Which line assigns an IP address to the VLAN 30 interface in the sample?
• Which configuration correctly enforces one VoIP phone and one device on Aruba CX 6300?
• Which technology on a CX 6200 helps keep a legacy layer-2 application communicating across layer-3 sites?
• Which ClearPass component is used to onboard devices and provision credentials or certificates automatically?
• Which line assigns an IP address to the VLAN 40 interface in the sample?
• To automatically resume the port operational state after a loop on a client port is cleared on Aruba CX 6100 48G, which command enables the re-enable timer for the relevant port range?
• Which statement about redistribution of connected routes on Aruba OS CX is true?
• In a VRF-enabled Aruba network, what is the primary purpose of a VRF in relation to OSPF routing?
• What is an OSPF transit network?
• To add a third member JL726A to an Aruba CX VSF stack, which command sequence on the existing switch correctly joins the new member?
• Which component is used to group APs for matching by system description in IAP onboarding?
• For headless IoT devices that do not support 802.1x, which approach is recommended?
• Which NetConductor component provides built-in AI-powered client visibility and fingerprinting capability that leverages infrastructure telemetry and ML-based classification models to eliminate network blind spots?
• Which 802.11 standard is commonly associated with fast roaming and handoff between access points?
• What is Aruba-recommended best practice for hardening that only applies to Aruba CX 6300 series switches with dedicated management ports?
• In a VSX deployment, what does the term Active gateway refer to?
• In the firewall role derivation flow, which step comes last?
• Which protocol is used to retrieve data stored in a Management Information Base (MIB)?
• Which default management role should have been assigned to allow firmware upgrades on an AOS-CX switch?
• In Policy Based Routing, which element defines the action that selects a next hop for matched traffic?
• How many VMAC addresses are supported for IPv4 and IPv6 stacks simultaneously in Aruba CX VSX?
• For Aruba CX 6400 switches, what does virtual output queuing (VOQ) implement that differs from most typical campus switches?
• What does the 802.3bz standard describe?
• What is a feasible option to protect PAPI traffic between AOS-CX switches and the gateway running AOStO?
• In the example LAG configuration, which LACP mode is used on the LAG interface?
• What does the line 'interface vlan 20' indicate in the sample configuration?
• Which component is used by the Aruba Network Analytics Engine (NAE)?
• What is the primary benefit of BSS coloring?
• What is the subnet mask used for the IPv4 address configured on the SVI in the example?
• To fix a WPA3-OWE SSID issue when expanding to the 6 GHz band, which SSID setting should be used?
• Which IP networking term describes traffic sent to a device on a remote network identified by a specific IP address?
• In the described remote-office network, which VLAN ID is designated for management traffic?
• Which design consideration would prevent using all four Aruba 7200 Series Gateways and two 7000 Series Gateways in a cluster?