HPE Aruba Networking Certified Professional - Campus Access (ACP-CA) Practice Test

These questions are part of the practice quiz. Start practicing

• In an Aruba CX VSX setup, which component is used to inform the ISL configuration based on MAC addresses?
• Which VLANs are allowed on the trunk in the correct port-access configuration for the APs?
• Which command sequence correctly enables DHCP snooping on a switch and configures VLANs and interface trust to prevent rogue DHCP servers from affecting the network?
• Which action may help fix DHCP issues on a pair of Aruba CX switches with APs connected to VLAN 1000?
• What is the IP address of the DHCP server in the scenario?
• Which default AOS-CX user role provides Web UI access to the Logs page and GET-only REST API access for /logs/event?
• To add a third member JL726A to an Aruba CX VSF stack, which command sequence on the existing switch correctly joins the new member?
• What is a primary benefit of BSS coloring?
• Where do servers typically attach in a VSX deployment at the Access-Aggregation layer?
• How can you onboard a new UXI device when the sensor has no cellular connection?
• during ZTP a gateway was misconfigured causing internet access issues. What action should the technician take to start the ZTP process correctly?
• Which configuration correctly enforces one VoIP phone and one device on Aruba CX 6300?
• What is the subnet mask used for the IPv4 address configured on the SVI in the example?
• Which statement best describes QoS (Quality of Service)?
• Which MSTP-related setting must be identically configured with MSTP to load-balance VLANs on Access-1 switches?
• In a high-density network design, which technology best minimizes contention overhead by dedicating subcarriers to clients?
• Which IEEE 802.11 amendment defines mechanisms for APs and clients to dynamically measure available radio resources?
• Which option best describes Aruba best practices for Central design when you need GUI configuration for gateways and APs but template configuration for switches?
• Which ClearPass component supports deploying client certificates to corporate-managed devices during onboarding?
• Which default management role should have been assigned for a user who needed firmware upgrades and a privilege level of 15?
• After configuration, which default management role should have been assigned for the user?
• In the firewall role derivation flow, which step comes last?
• In AOS 10, which session-based ACL configuration will only allow ping from wired stations to wireless clients but will not allow ping from wireless clients to wired stations?
• By default, Best Effort has higher priority than which traffic type?
• Which line defines the SVI for VLAN 20 in the sample?
• Which NetConductor component enables frictionless onboarding of end users and client devices either through MAC address-based authentication or integrations with cloud identity stores?
• With Aruba Cloud Guest, visitors report the captive portal keeps appearing after devices sleep. Which solution should be enabled to address this?
• In an environment with IP cameras and headless scanners that do not support 802.1X, how can MPSK help secure these devices?
• One advantage of using OCSP vs CRLs for certificate validation?
• In a distributed overlay fabric, how would you explain the role of policy enforcement with Group Based Policy ID?
• What should you implement to ensure PoE devices receive their correct power definitions when 802.1X is used on edge ports?
• Which statement is true about 802.11k?
• Which technology minimizes flooding for a legacy layer-2 application across a campus connected via layer-3?
• In the Aruba CX 6300 port-access example, which interface is configured for the port-access commands?
• Which statement about port-access configuration in the example is accurate for enabling multi-domain with a limit of two devices?
• When the primary VSX node is replaced and the system MAC is replaced, which description applies to VSX MAC handling?
• What does the line 'interface vlan 20' indicate in the sample configuration?
• To meet the requirement of allowing ping from the IT management VLAN to the user VLAN while denying ping from the user VLAN to the IT management VLAN on Aruba CX 6300s, which ACL approach is correct?
• What term describes multiple virtual MAC addresses used for load sharing in a VSX environment?
• What is the default value for config-revision on core devices used in this environment?
• Which standard supported by some Aruba APs enables accurate location of wireless client devices within a few meters?
• A customer wants to deploy a Gateway and take advantage of all the SD-WAN features. Which ArubaOS 10 persona option should be selected?
• What is a primary Active Gateway feature unique to Aruba CX VSX configuration?
• Which choice lists the correct order for the firewall role derivation steps in the given flow?
• Which feature allows a device to remain operational when the remote authentication server is unreachable?
• For headless IoT devices that do not support 802.1x, which approach is recommended?
• In VLAN trunk configuration, what does the native VLAN specify?
• What is AP1's radio output power?
• A customer wants wired authentication across CX switches and needs to authenticate a single computer connected through a VoIP phone. Which feature should be enabled?
• Using AP2 specifications, what is the calculated EIRP?
• Describe the difference between Class of Service (CoS) and Differentiated Services Code Point (DSCP).
• What is the calculated EIRP for AP2 given Ptx 13 dBm, antenna gain 12 dBi, and 3 dB cable loss?
• Which protocol provides authenticated access to retrieve data from a Management Information Base (MIB)?
• In a VSX pair, what is the purpose of the keepalive link?
• In an Aruba CX VSX pair, which information does the Inter-Switch Link protocol configuration use?
• Which ports are configured as uplinks on the Aruba CX 6100 48G switch in the described setup?
• To enable a VLAN on a LAG-based inter-switch link named LAG256, which command correctly allows VLAN 100?
• What is the correct method to allow VLAN 100 on a VSX pair inter-switch-link 256 for port 1/45 and 2/45?
• Which sequence correctly lists the firewall role derivation flow in the correct order?
• Which device family is used in the wireless client deployment described (for the switches paired with the APs)?
• What is the antenna cable loss for AP1?
• Which default AOS-CX user role provides View switch configuration and REST API PUT/POST access?
• Using AP1 specifications, what is the calculated EIRP?
• Which ClearPass component is used to onboard devices and provision credentials or certificates automatically?
• What enables plug-and-play provisioning of Aruba access points in a client network?
• In the described deployment, which VLAN is used for wireless client traffic?
• Which NetConductor component provides built-in AI-powered client visibility and fingerprinting capability that leverages infrastructure telemetry and ML-based classification models to eliminate network blind spots?
• In EVPN-VXLAN, which overlay is described by the term Distributed Overlay?
• Which component is used by the Aruba Network Analytics Engine (NAE)?
• Which attribute is commonly used by Policy Based Routing to select traffic for routing, such as to a specific VRF or next hop?
• The property redistributes connected routes on Aruba OS CX. Which of the following statements about redistribute connected is true?
• Which AP mode sends captured RF data to Aruba Central for waterfall plots?
• Which line assigns the IP address to VLAN 40's SVI in the sample?
• In the firewall role derivation flow, which step comes immediately after 'User derived role'?
• In an ArubaOS 10 architecture with an AP and a gateway, what happens when the WLAN is configured with OWE?
• Which line assigns an IP address to the VLAN 20 interface in the sample?
• Which encapsulation is used by EVPN-VXLAN overlays?
• With Aruba CX 6200 switches, which command sequence protects client ports from forming layer-2 loops when uplinks are configured on 1/1/25 and 1/1/26?
• In a VRF-enabled Aruba network, what is the primary purpose of a VRF in relation to OSPF routing?
• You need an Aruba CX solution that will warn the helpdesk when devices behind unmanaged switches cause outages on edge ports. Which configuration option is correct?
• A Microbranch group has APs online in Aruba Central but no VPN tunnels form. The most likely cause is a firewall issue blocking GRE tunneling between the AP and gateway. Which option confirms this?
• In a VSX deployment, what does the term Active gateway refer to?
• Which feature supported by SNMPv3 provides an advantage over SNMPv2c?
• Which protocol is used to retrieve data stored in a Management Information Base (MIB)?
• Which NetConductor component defines user and device groups and creates the associated traffic routing and access enforcement rules for the physical network?
• To create a new SVI for a separate routing table on Aruba CX 6300 VSF, assuming the correct layer-2 VLAN exists, which action is used?
• Which stacking technology supports individual ISL links up to 400G?
• What is Aruba-recommended best practice for hardening that only applies to Aruba CX 6300 series switches with dedicated management ports?
• In a VSX deployment, which interface commonly acts as the default gateway for VLAN 10?
• What is the most likely cause of wired guest disconnect CoA not being applied when ClearPass reports a disconnect, given the following configuration and behavior?
• Which VLAN is used for client traffic in the preconfigured design?
• Which Aruba stacking technology supports up to 10 devices per stack?
• Which statement about the route-map based redistribution of static routes is true when using 'redistribute static route-map connected-routes' with a permit in the route map named 'connected-routes'?
• On an Aruba CX 6000 switch, when a client port detects a loop and the do-not-disable parameter is used, what is the immediate consequence?
• With 200 AP-515 and 75 AP-565 APs deployed and 802.1X authentication in use, which feature should be enabled to ensure the best roaming experience for Wi-Fi calling?
• Which QoS concept is described as using access categories based on the IEEE 802.11e QoS standard?
• Which AP models are mentioned for the remote office deployment?
• A company deployed 200 AP-635 APs, but the network isn’t working as expected. What is the correct action to fix the issue?
• How is Dynamic Multicast Optimization (DMO) implemented in an Aruba wireless network?
• Which LLDP-MED feature allows APs to request power as needed from PoE-enabled switch ports?
• Which app must the office manager use on their phone to onboard new branch devices into Aruba Central?
• Which design consideration would prevent using all four Aruba 7200 Series Gateways and two 7000 Series Gateways in a cluster?
• What is the primary purpose of a VRF in routing?
• In AOS10 Tunneled mode, which component handles IPSec Phase 1 negotiation on the Access Point side?
• In the described deployment, which subnet is used for switch management?
• You need to ensure voice traffic sent through an ArubaOS-CX switch arrives with minimal latency. What is the best scheduling technology to use for this task?
• Which command should the administrator use to examine information on which role the guest user has been assigned?
• A maximum aggregate ISL bandwidth of 200G is supported by which stacking technology?
• BSS coloring is applied to which element to help reduce interference?
• What is an OSPF transit network?
• Which statement about redistribution of connected routes on Aruba OS CX is true?
• What is the primary benefit of BSS coloring?
• In the firewall role derivation flow, which step comes immediately after 'Server derived role'?
• How is Multicast Transmission Optimization implemented in an Aruba wireless network?
• Which two solutions address the requirements for an IoT wireless authentication solution that requires encrypted traffic, unique per-device passphrases, and fingerprint-based role-based access?
• Which component is used to group APs for matching by system description in IAP onboarding?
• What is the first-hop protocol feature recommended for a VSX L3 gateway in Aruba CX configurations?
• Which command configures OSPF as passive on VLAN interfaces 20, 30, and 40?
• In Aruba CX VSX configuration, which statement about VRRP and Active Gateway on a VLAN is true?
• What is AP2's antenna cable loss?
• To fix a WPA3-OWE SSID issue when expanding to the 6 GHz band, which SSID setting should be used?
• In the example LAG configuration, which LACP mode is used on the LAG interface?
• For devices that do not support 802.1X authentication, which MPSK approach automatically provides unique pre-shared keys for devices?
• What is the primary benefit of VSX clustering when used with Aruba CX switches?
• What does the 802.3bz standard describe?
• Weak Wi‑Fi coverage in one area, with better signal across the hall, is most likely caused by what?
• What is a feasible option to protect PAPI traffic between AOS-CX switches and the gateway running AOStO?
• With Aruba CX 6300 VSF, how would you create a new OSPF configuration for a separate routing table when the layer-2 VLAN already exists?
• In the Aruba CX 6300 VSF stack sample, which VLANs are configured?
• Which line assigns an IP address to the VLAN 30 interface in the sample?
• Which technology on a CX 6200 helps keep a legacy layer-2 application communicating across layer-3 sites?
• Which feature is best to drop excessive broadcast traffic on an ingress port or ArubaOS-CX switch?
• In port-access configuration for AP onboarding, which object defines the device-specific settings for APs?
• To address unencrypted tunnels between CX switches and Aruba Gateways after a security audit, which action must be performed?
• Which default management role should have been assigned to allow firmware upgrades on an AOS-CX switch?
• ERSPAN on AOS-CX: which encapsulation protocol is used?
• In a VLAN environment, what is the function of the SVI?
• In the WPA 4-Way Handshake, which action occurs after the PMK is proven?
• If servers in a subnet must be routed to a dedicated router and their SVI is on the core routing switch, which configuration best achieves this routing requirement?
• What is the correct order of operation for key management service for a wireless client roaming from AP1 to AP2?
• Which Aruba stacking technology supports two devices per stack?
• Which approach should be used to establish the keepalive connection between two Aruba CX 8325 switches for VSX?
• What is the calculated EIRP for AP1 given Ptx 16 dBm, antenna gain 8 dBi, and 4 dB cable loss?
• Which line assigns the IP address to VLAN 30's SVI in the sample?
• In a VSX environment with multiple VRFs, if you cannot find the IP address of a client device with a known MAC address on the primary switch, which command should you run to locate the IP address across VRFs?
• Which NetConductor component simplifies the creation of overlays using an intuitive graphical user interface and automatic generation of configuration instructions that are pushed to switches and gateways?
• What is the best practice for handling voice traffic with dynamic segmentation on AOS-CX switches?
• With Aruba CX 6300, how do you configure IP address 10.10.10.1 for interface 1/1/1 in default state?
• When deploying a bonded 40 MHz wide channel, what is the approximate difference in the noise floor perceived by a client compared to an unbonded 20 MHz channel?
• Which statement best describes the VLAN creation line in the Aruba CX sample?
• Given AP1 transmits at 20 dBm, antenna gain of 7 dBi, and a 3 dB cable loss, what is the calculated EIRP?
• In the linkup delay timer configuration for a VSX environment, which action helps reduce the time before routing adjacencies form?
• When configuring UBT on a switch, what happens if a gateway role is not specified?
• Which 802.11 standard is commonly associated with fast roaming and handoff between access points?
• What is the inter-switch link used to connect two Aruba CX switches in a VSX pair?
• Which IP networking term describes traffic sent to a device on a remote network identified by a specific IP address?
• To add a third member JL726A to an Aruba CX 6200F VSF stack, which command sequence correctly joins the new member to the existing stack?
• To align with Aruba best practices for a standardized network design in Aruba Central, which approach should be used?
• Between AP1 and AP2, which access point yields the higher EIRP based on the given values?
• In the SVI example, which VRF is the VLAN attached to?
• In the SVI example, which VLAN ID is used for the SVI?
• When configuring an Aruba CX VSX Inter-Switch Link Protocol, what is the default Hello interval?
• What is the difference in dB between AP2 EIRP and AP1 EIRP based on the given data?
• An AOS 10 gateway, which device persona is only available when configuring a gateway-only group?
• Which statement about redistribution of static routes with a route-map named 'connected-routes' is true in Aruba OS CX?
• Which LLDP-MED capability enables voice VLANs to be automatically configured for VoIP phones?
• During initial VSX configuration, how is the system MAC determined?
• Which technology allows VLAN information to be dynamically added to a trunk?
• Which of the following is a typical step in configuring DHCP Snooping to prevent rogue servers, as shown in example configurations?
• Which QoS concept uses 64 service classes at layer-3 by marking packets?
• In a VSX environment, what is the purpose of the command vsx-sync dhcp-relay?
• In a remote-office rollout with VLANs 100 (mgmt), 200 (clients), and 300 (guests), which port-access configuration correctly enables AP onboarding?
• In the described remote-office network, which VLAN ID is designated for management traffic?
• What is the purpose of Round Trip Time measurements in 802.11mc technology?
• What does MPSK stand for in Aruba wireless configurations?
• Which of the following represents the correct order of the WPA 4-Way Handshake steps?
• Which line assigns an IP address to the VLAN 40 interface in the sample?
• What is the antenna gain of AP1?
• In Policy Based Routing, which element defines the action that selects a next hop for matched traffic?
• How many VMAC addresses are supported for IPv4 and IPv6 stacks simultaneously in Aruba CX VSX?
• In a ClearPass CoA workflow, which step is essential on the switch to enable dynamic authorization?
• For Aruba CX 6400 switches, what does virtual output queuing (VOQ) implement that differs from most typical campus switches?
• In AOS10 Tunneled mode, which component provides RADIUS proxy functionality?
• To prevent traffic drop after the aggregation layer comes online, which linkup delay timer configuration is recommended?
• To automatically resume the port operational state after a loop on a client port is cleared on Aruba CX 6100 48G, which command enables the re-enable timer for the relevant port range?
• Which stacking technology supports individual ISL links up to 50G?
• Which technology should be implemented to keep Wi‑Fi 6 clients connected to the best performing APs when a closer AP has lower performance?
• Which IEEE 802.11 standard uses Round Trip Time measurements and Fine Time Measurements to calculate distance to an AP?
• Using Aruba best practice what should be enabled for visitor networks where encryption is needed but authentication is not required?
• User Based Tunneling (UBT) uses which encapsulation?
• A client connecting to an 802.1X SSID configured in tunnel mode with default AP-group settings sends Access-Accept to the AP through which tunnel after the RADIUS server responds?
• A wireless deployment uses cloud-hosted RADIUS and the security team wants to protect RADIUS traffic between APs and the RADIUS server. Which configuration is appropriate?
• Which statement correctly describes the EIRP calculation formula?
• What is AP2's antenna gain?
• Which command list satisfies configuring an SVI on an Aruba CX switch with VLAN 25, IPv4 address 10.105.43.1/24, IPv6 address fd00:5708::f02d:4df6/64, and VRF eng, using the least number of commands?