HPE Aruba Network Switching Professional (HPE7-A08) Certification Sample Questions

02. Interface 1/1/20 of a CX 6300 is hard-set with speed 100-full. The attached legacy device auto-negotiates and has fallen back to half duplex, and the link shows late collisions and slow transfers. Which two actions resolve the duplex mismatch?
(Select two.)
a) Enable flow control on 1/1/20 to absorb the retransmissions
b) Hard-set the device's NIC to 100 Mbps full duplex
c) Replace the patch cable with a shielded Category 6A cable
d) Configure speed auto on 1/1/20 so that both ends negotiate

03. A data center team chooses the CX 10000 so that stateful firewall policy is enforced in the switch data path between servers, including flows between servers in the same rack. Where in the leaf-spine fabric should the CX 10000 be placed to meet this goal?
a) As a one-armed service node attached to the border leaf
b) As an access switch in the user closets that feed the fabric
c) As the top-of-rack leaf that the servers attach to directly
d) As the spine, so that every inter-rack flow passes through it

04. ClearPass Policy Manager already authenticates wired clients on CX access switches. It must now profile those endpoints by device category and track each session's start, stop and client IP address. Which two switch configurations supply ClearPass with this data?
(Select two.)
a) ClearPass added as an extra ip helper-address on each client VLAN interface
b) RADIUS dynamic authorization enabled, with ClearPass as its client
c) RADIUS accounting for port-access sessions, sent to ClearPass
d) DHCP snooping enabled, with the uplink toward ClearPass set as trusted

05. BPDU guard is enabled on every user-facing edge port of a CX 6300 stack. Whenever a user connects a small unmanaged switch that sends BPDUs, the port is disabled and stays down until the help desk re-enables it by hand. The policy owner wants such ports to recover automatically after a few minutes while keeping the protection in place.
Which configuration meets this requirement?
a) no spanning-tree bpdu-guard on each edge port
b) spanning-tree bpdu-guard timeout 300 in the global context
c) spanning-tree bpdu-filter on each edge port
d) errdisable recovery cause bpduguard in the global context

06. Each PC on an AOS-CX access switch connects through the pass-through port of an IP phone. VLAN 10 is the data VLAN and VLAN 20 is reserved for voice. The phones must learn VLAN 20 automatically through LLDP-MED, while the PCs keep sending untagged traffic.
Which configuration meets these requirements?
a) Mark VLAN 20 with voice; phone ports as access ports in VLAN 20 only
b) Mark VLAN 20 with voice; VLAN 20 native and VLAN 10 tagged on the phone ports
c) Leave VLAN 20 unmarked; VLAN 10 native and VLAN 20 tagged on the phone ports
d) Mark VLAN 20 with voice; VLAN 10 native and VLAN 20 tagged on the phone ports

07. A campus is migrating from a legacy switch estate that does not run AOS-CX to CX switches. The draft migration plan proposes converting each legacy configuration line by line and cutting over closet by closet. Which two steps should be added to the plan?
(Select two.)
a) Record neighbors, routes and MAC and ARP counts before cutover for comparison afterwards
b) Inventory the features each legacy configuration uses and map each one to its AOS-CX equivalent
c) Paste the legacy VLAN, routing and port settings into the CX switch and fix any rejected lines
d) Upgrade every legacy switch to its latest firmware so that its configuration imports cleanly

08. Users report slow transfers to a server farm reached through uplink 1/1/49 of a CX 6300. show interface utilization reports 1/1/49 at 6% RX and 97% TX utilization over the 300-second interval, and show interface 1/1/49 error-statistics shows no errors.
Which conclusion and next step does this output support?
a) The transceiver on 1/1/49 is failing, so the optic should be replaced
b) The receive direction is congested, so the ingress rate limits on 1/1/49 should be raised
c) A duplex mismatch is throttling the link, so both ends should auto-negotiate
d) The uplink is saturated on transmit; add capacity or apply QoS for critical traffic

09. A new routed uplink, 1/1/49, connects a CX 6300 access stack to the campus core. Hosts in VLAN 30 can ping their default gateway on the stack, but nothing beyond the stack is reachable. Which two checks address the most likely failure points?
(Select two.)
a) Run show vlan 30 to confirm that uplink 1/1/49 is listed as a member of VLAN 30
b) Run show spanning-tree to confirm that uplink 1/1/49 is forwarding for VLAN 30
c) Run show ip interface 1/1/49 to confirm it is routed with the expected link address
d) Run show ip route to confirm a default or core route points to the core next hop

10. Two CX 6300 switches are joined by trunk 1/1/49. Switch A's end of the trunk has vlan trunk native 10, and switch B's end has vlan trunk native 20. Untagged frames from VLAN 10 on switch A arrive in VLAN 20 on switch B, and hosts in both VLANs see addresses that do not belong to their subnet.
What is the correct remediation?
a) Configure the same native VLAN on both ends of the trunk
b) Clear the MAC address tables on both switches so hosts relearn
c) Delete VLAN 20 on switch B so the untagged frames are dropped
d) Change 1/1/49 on both switches to an access port in VLAN 10