Get HPE6-A85 Exam Practice Questions - Real and Updated

Answer : A

To provide an LACP connection with the maximum available bandwidth, one should configure a link aggregation group (LAG) using all available ports that can be used for data transfer. Since the SFP56 ports are used for stacking, the next best option is to use the 2 SFP28 ports and as many SmartRate 5G (SR5) ports as possible on each switch, which would allow for a 16-member LAG, with 2 SFP28 and 6 SR5 ports on each switch contributing to the LAG.

Answer : A

The best technology to use for dropping excessive broadcast traffic on ingress to an ArubaOS-CX switch is rate limiting. Rate limiting is a feature that allows network administrators to control the amount of traffic that enters or leaves a port or a VLAN on a switch by setting bandwidth thresholds or limits. Rate limiting can be used to prevent network congestion, improve network performance, enforce service level agreements (SLAs), or mitigate denial-of-service (DoS) attacks. Rate limiting can be applied to broadcast traffic on ingress to an ArubaOS-CX switch by using the storm-control command in interface configuration mode. This command allows network administrators to specify the percentage of bandwidth or packets per second that can be used by broadcast traffic on an ingress port. If the broadcast traffic exceeds the specified threshold, the switch will drop the excess packets.

The other options are not technologies for dropping excessive broadcast traffic on ingress because:

DWRR queuing: DWRR stands for Deficit Weighted Round Robin, which is a queuing algorithm that assigns different weights or priorities to different traffic classes or queues on an egress port. DWRR ensures that each queue gets its fair share of bandwidth based on its weight while avoiding starvation of lower priority queues. DWRR does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.

QoS shaping: QoS stands for Quality of Service, which is a set of techniques that manage network resources and provide different levels of service to different types of traffic based on their requirements. QoS shaping is a technique that delays or buffers outgoing traffic on an egress port to match the available bandwidth or rate limit. QoS shaping does not drop excessive broadcast traffic on ingress, but rather smooths outgoing traffic on egress.

Strict queuing: Strict queuing is another queuing algorithm that assigns different priorities to different traffic classes or queues on an egress port. Strict queuing ensures that higher priority queues are always served before lower priority queues regardless of their bandwidth requirements or weights. Strict queuing does not drop excessive broadcast traffic on ingress, but rather schedules outgoing traffic on egress.

Answer : A

The correct command to add a static route to a class-c-network 10.2.10.0 via a gateway of 172.16.1.1 is ip-route 10.2.10.0/24 172.16.1.1 . This command specifies the destination network address (10.2.10.0) and prefix length (/24) and the next-hop address (172.16.1 .1) for reaching that network from the switch. The other commands are either incorrect syntax or incorrect parameters for adding a static route. Reference: https://www.arubanetworks.com/techdocs/AOS-CX_10_04/NOSCG/Content/cx-noscg/ip-routing/static-routes.htm

To add a static route in network devices, including Aruba switches, the correct command format generally includes the destination network, subnet mask (or CIDR notation for the mask), and the next-hop IP address. The command 'ip route 10.2.10.0/24 172.16.1.1' correctly specifies the destination network '10.2.10.0' with a class C subnet mask indicated by '/24', and '172.16.1.1' as the next-hop IP address. This command is succinct and follows the standard syntax for adding a static route in many network operating systems, including ArubaOS-CX. The other options either have incorrect syntax or include additional unnecessary parameters that are not typically part of the standard command to add a static route.

Answer : A

On Aruba switches, the Link Layer Discovery Protocol (LLDP) is enabled by default on all ports. This protocol is an industry-standard network discovery protocol that is used for network devices to advertise their identity, capabilities, and neighbors on a locally managed network, typical in an IEEE 802 network. This is beneficial for network mapping and troubleshooting purposes. Since LLDP is enabled by default, there is no need for any additional configuration on Switch 1 port 1/1/24 to receive LLDP messages from Router 1, as long as LLDP is not disabled on the port.

Answer : A

The part of WPA Key Hierarchy that is used to encrypt and/or decrypt data is Pairwise Temporal Key (PTK). PTK is a key that is derived from PMK Pairwise Master Key (PMK) is a key that is derived from PSK Pre-shared Key (PSK) is a key that is shared between two parties before communication begins , ANonce Authenticator Nonce (ANonce) is a random number generated by an authenticator (a device that controls access to network resources, such as an AP) , SNonce Supplicant Nonce (SNonce) is a random number generated by supplicant (a device that wants to access network resources, such as an STA) , AA Authenticator Address (AA) is MAC address of authenticator , SA Supplicant Address (SA) is MAC address of supplicant using Pseudo-Random Function (PRF). PTK consists of four subkeys:

KCK Key Confirmation Key (KCK) is used for message integrity check

KEK Key Encryption Key (KEK) is used for encryption key distribution

TK Temporal Key (TK) is used for data encryption

MIC Message Integrity Code (MIC) key

The subkey that is specifically used for data encryption is TK Temporal Key (TK). TK is also known as Pairwise Transient Key (PTK). TK changes periodically during communication based on time or number of packets transmitted.

The other options are not part of WPA Key Hierarchy because:

PMK: PMK is not part of WPA Key Hierarchy, but rather an input for deriving PTK.

KCK: KCK is part of WPA Key Hierarchy, but it is not used for data encryption, but rather for message integrity check.

Nonce: Nonce is not part of WPA Key Hierarchy, but rather an input for deriving PTK.