HP Delta-Aruba Certified Switching Professional Sample Questions:

1. Refer to the exhibit.

The network administrator enables DHCP snooping globally and on VLAN 2. An additional step is mandatory for DHCP snooping to operate correctly and for clients to receive DHCP settings.
What is the additional mandatory step?

A) Define edge ports as untrusted DHCP ports.
B) Enable ARP protection.
C) Define an authorized DHCP server.
D) Define trk1 as a trusted DHCP port.

2. An AOS-Switch needs to be configured to support tunneled node in role-based mode. The Mobility Controller administrators tell the switch administrators that the AOS-Switch will integrate with a cluster of Mobility Controllers. The cluster virtual IP address is 10.1.1.10.
How should switch administrator integrate the AOS-Switch with the cluster?

A) Configure the virtual IP address for the primary tunneled-node-server and an actual controller IP address for the backup tunneled-node-server in order to receive redundancy.
B) Configure the virtual IP address as the tunneled-node-server address. The switch will automatically learn controller IP addresses to which to tunnel various traffic.
C) Double-check the settings with the Mobility Controller administrators because the planned configuration is incomplete with the switch settings.
D) Configure the virtual IP address as the tunneled-node-server address, tunneled node will work, but the clustering features will not provide redundancy.

3. Refer to the exhibit.

Switch-1 and Switch-2 are AOS-Switches, which are iBGP peers. ISP 1 and ISP 2 advertise some routes to the same Internet destinations. Switch-1 and Switch-2 must select between these routes based on AS path length.
What is required for Switch-1 and Switch-2?

A) eBGP and iBGP administrative distance set to the same value
B) Multihop enabled for the connection to the iBGP neighbor
C) ECMP disabled for BGP
D) iBGP synchronization enabled

4. An AOS-Switch implements tunneled node.
Which benefit does the PAPI enhanced security key provide?

A) It validates the signature for firmware pushed to the switch dynamically.
B) It authenticates control traffic between the switch and its Mobility Controller.
C) It encrypts traffic sent and received by tunneled-node endpoints.
D) It provides an extra layer of authentication for endpoints on tunneled-node ports.

5. Refer to the exhibit.

A network administrator sets up prioritization for an application that runs between Device 1 and Device 2.
However, the QoS for the application is not what the administrator expects.
How can the administrator check if the network infrastructure prioritizes traffic from Device 1 and Device 2?

A) Run a packet capture on Device 1, run the application, and look in the packet capture for a high value DSCP in the IP header.
B) Set up RMON alarms on the switches that trigger when a high number of packets are dropped. Then, run the application and check for the alarm.
C) Run a packet capture on Device 2, run the application, and look in the packet capture for a high value DSCP in the IP header.
D) Clear interface statistics on the switches. Then, run the application and check the interface queue statistics for the switch-to-switch links.

Solutions: