PostTest Day 03

A network administrator is managing a network that deploys a multicast service. The administrator has multiple streams successfully being routed by PIM-DM in

the network. The administrator then adds a new stream with a destination address of 239.0.0.1. However, clients who have not joined the stream are receiving it.

What should the administrator do to fix this problem?

• Verify that IGMP is enabled between the switches connecting the multicast source and receivers

• Change the destination multicast address to 239.1.1.1

• Define the 239.0.0.1 stream on the rendezvous point (RP)

• Define the 239.0.0.1 stream on the PIM candidate bootstrap router

What are the commands to disable SSH and HTTPS services from the default ices from the default VRF?

• Core-1(config)# no ssh server Core-1(config)# no Core-1(config)# no https-server

• Core-1# no ssh server vrf default Core-1# no https-server vrf default

• Core-1(config)# no ssh server enable Core-1(config)# no https-server enable

• Core-1(config)# no ssh server vrf default Core-1(config)# no https-server

  vrf default

What command will save your configuration on an Aruba AOS-CX switch so that your changes automatically load on next reboot?

• copy running-config checkpoint startup-config

• copy startup-config running-config

• copy running-config initial-checkpoint

• copy running-config default

Core# configure terminal

Core(config)# vrf Green

Core(config-vrf)# exit

Core(config)#

Core(config)# interface vlan 50

Core(config-if-vlan)# ?

Given the configuration on the CORE switch shown above, what command would follow to assign the switched virtual interface (SVI) vlan 50 to the VRF created?

• Core(config-if-vlan)# vrf attach Green

• Core(config-if-vlan)# ip vpn-instance Green

• Core(config-if-vlan)# ip vrf forwarding Green

• Core(config-if-vlan)# routing-context Green vrf

A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer

verifies that the AOS-CX switch is configured for NTP and is successfully synchronized. What should be done to fix this issue?

• Ensure the engineer’s web browser is configured for the same timezone as the AOS-CX switch

• Ensure the engineer’s PC is synchronized to the same NTP server as the AOS-CX switch

• Ensure NetEdit and the AOS-CX switch are synchronized to the same NTP server

• Enable trust settings for the AOS-CX switch’s SSL certificate

Which two commands will save the running-config so that changes will be that changes will be loaded automatically on the next reboot? (Choose two.)

• write memory

• save

• copy config config1 config startup-config

• copy running-config startup-config

• copy running-config checkpoint boot-config

What is required when implementing captive portal an AOS-CX switches?

• Certificate installed on the switch

• Web server running on the switch

• Device fingerprinting

• AAA server

A network administrator is implementing BGP for a larger network. The network has over 20 exit points across 15 different BGP routers. The administrator does

not want to implement a fully-meshed iBGP peering between all BGP routers.

Which feature should the administrator implement to reduce the number of peers the administrator needs to define?

• Next-hop-self

• BFD

• Peer-Groups

• Route reflectors

What is true about VSX? (Choose two.)

• VSX is ideal for Campus access ideal for Campus access layer deployments where ease of deployment is needed

• VSX allows upgrading members with near zero downtime or loss of packets

• VSX is available on all Aruba OS-CX switches except the 6300F model

• VSX is implemented on static port switches. VSX-plus needed to stack chassis together

• VSX run separate control planes to reduce latency and improve performance

What are best practices when implementing VSX on AOS-CX switches? (Choose two.)

• The ISL lag should use the default MTU size

• Timers should be left at their default values

• The default system MAC addresses should be used

• The keepalive connection should use a direct layer-3 connection

• The ISL lag should use at least 10GbE links or faster