Pass the HP Aruba Certified Design Professional (ACDP) V1 HPE6-A47 Questions and answers with ValidTests

ClearPass OnConnect is a feature of the ClearPass Policy Manager that allows wired authentication on switches that do not support 802.1X or RADIUS protocols. ClearPass OnConnect uses SNMP to monitor and control the switch ports based on the device profiles and policies defined in ClearPass12. ClearPass OnConnect can provide the following benefits for the customer:

It can enable wired authentication without requiring any changes to the existing switch infrastructure or the end-user devices. This can save the customer’s budget and time, as well as minimize the network disruption and user impact.

It can provide visibility and control over the wired devices, such as printers, IoT devices, and laptops, that connect to the network. ClearPass OnConnect can identify the device type, user role, and location, and apply the appropriate access policies based on the customer’s security and compliance requirements. For example, ClearPass OnConnect can allow only authorized devices and users to access certain network resources, or quarantine or block any unknown or non-compliant devices.

It can integrate with the other components of the Aruba solution, such as the MCs, MMs, APs, AirWave, and ClearPass Guest, to provide a consistent and unified network management and security solution across the wired and wireless networks. For example, ClearPass OnConnect can leverage the device profiles and policies from ClearPass Guest, or share the network health and performance data with AirWave.

Therefore, by explaining this feature, the architect can justify the proposed solution and show how it can meet the customer’s needs and expectations for wired authentication, as well as wireless authentication.

References:

1: https://www.arubanetworks.com/techdocs/ClearPass/6.7/PolicyManager/index.htm#CPPM_UserGuide/Admin/OnConnect.htm

2: https://www.arubanetworks.com/assets/tg/TB_ClearPass_OnConnect.pdf

 References:https://www.arubanetworks.com/assets/ds/DS_7200Series.pdf

Aruba Mobility Controller Data Sheet (Aruba Networks)

Designing Aruba Solutions Study Guide (HPE Press)

The Aruba 2930F Switch Series is a stackable Layer 3 switch series that provides performance and ease of use for enterprises, small and medium-sized businesses, and branch office networks1. It comes with an enterprise-grade feature set that includes static and RIP routing, IPv6, ACLs, robust security, and QoS1. The 2930F Series supports more options for class-based Quality of Service (QoS) policies than the 2540 Series2. This feature is crucial for a customer who needs a wired network solution that can recognize and prioritize a wide array of different types of traffic, including casual Web browsing, voice, video, SAP Online, and file sharing.

References:

HPE Aruba Networking 2930F Switch Series

Why would the architect choose the 2930F rather than the 2540 Switch Series for this customer?

In the event of an MM outage, MCs continue to use their existing licenses for 30 days, and the network remains up. However, you cannot change the configuration items in the controller network. In addition, the MM manages many of the higher level functions that can cause issues in the network if the MM fails. Aruba recommends a backup MM for these situations. From an economic point of view, a backup MM for a VMM is free. If a customer has a hardware MM, the customer must purchase a backup hardware MM.

https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/vrrp/conf-stby-mm-l3red.htm

802.1X authentication without tunnelled node is a form of port-based network access control that uses the Extensible Authentication Protocol (EAP) to authenticate users and devices on a wired network. This form of authentication provides several benefits, such as:

It enables user access control and ensures only authorized users connect. This prevents unauthorized access to the network and its resources, and enhances security and compliance.

It allows dynamic assignment of VLANs and roles based on user identity and device type. This simplifies network management and improves user experience.

It supports multiple authentication methods, such as certificates, passwords, tokens, or biometrics. This provides flexibility and choice for users and administrators.

It integrates with Aruba ClearPass Policy Manager (CPPM) for centralized policy enforcement and visibility. This enables granular control and monitoring of wired user traffic and devices. References:

Aruba 2930M Switch Series - Data sheet)

Aruba ClearPass Policy Manager - Data sheet)

ArubaOS-Switch Wired Access with ClearPass - Configuration guide)

This answer is correct because it follows the best practice design for routing the wireless traffic in a VHD wireless solution. By having the MCs act at Layer2, the architectcan enable the use of clustering, which provides high availability, load balancing, and seamless roaming for wireless users. By having the core routing switches act as the default gateway, the architect can avoid tunneling the wireless traffic to the MCs, which reduces the network overhead and latency. This also allows the core routing switches to apply security policies and QoS to the wireless traffic based on the user roles assigned by the MCs. References:

Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47) - Chapter 6)

Aruba Validated Reference Design: Very High Density 802.11ac Networks - Chapter 4)

Aruba Mobility Controller Clustering - Data sheet)

The maximum bandwidth possible between the aggregation and core layers using 8 strands of OM4 Multi-Mode fiber can be up to 200 Gbps1. This is because each strand of OM4 fiber can support up to 25 Gbps of bandwidth, and with 8 strands, the total bandwidth can reach up to 200 Gbps1. However, the actual bandwidth can be influenced by various factors such as the quality of the fiber, the type of transceivers used, and the distance between the aggregation and core layers1.

References:

What is IP and Ethernet aggregation? - Ciena

Aruba 5400R zl2 Switch Series Data Sheet

Aruba 5400R zl2 Switch Series Installation and Getting Started Guide

ArubaOS-Switch and ArubaOS-CX Transceiver Guide

 A metal firewall is a significant RF obstacle that can be difficult to see visually and might require access to blueprints. A metal firewall is a type of fire-resistant barrier that is made of metal or metal-clad materials and is used to separate different sections of a building or a network. A metal firewall can block or attenuate RF signals that pass through it, causing coverage gaps, signal degradation, or interference in the wireless deployment. A metal firewall can also reflect RF signals, creating multipath fading or distortion in the wireless environment. Therefore, an architect needs to identify the location and thickness of any metal firewalls in the building and account for their impact on the RF design. A metal firewall may require additional access points, antennas, or cabling to provide adequate coverage and performance across the wireless deployment. A metal firewall may also affect the channel planning, transmit power settings, and antenna orientation of the access points and radios. A metal firewall can be difficult to see visually, as it may be hidden behind walls, ceilings, or floors, or blended with other materials.Therefore, an architect might need access to blueprints or other sources of information to locate and measure any metal firewalls in the building. References:

RF Design | Validated Solution Guide - Aruba

Managing and Optimizing RF Spectrum for Aruba WLANs | PDF - SlideShare

RF Optimization - Aruba

Advanced RF Design & Troubleshooting | PPT - SlideShare

This answer is correct because it matches the scenario for which the Aruba backplane stacking technology is designed. Aruba backplane stacking technology allows up to 10 switches to be interconnected using high-speed backplane cables, creating a single logical device with a single IP address and configuration. This simplifies the management and operation of the network, as well as the redundancy design, as the stack can operate in ring or chain topology and provide fast failover in case of link or switch failure. This technology is suitable for customers who need to deploy a pair of aggregation switches in the same closet, as it reduces the number of devices and links to manage, and provides high availability and scalability for the network.

The other options are incorrect because:

B. The customer needs to simplify the deployment of core switches which are located in different closets for redundancy purposes. This scenario is not suitable for Aruba backplane stacking technology, as it requires the switches to be physically close to each other and connected with backplane cables. A better option for this scenario would be to use Aruba Virtual Switching Framework (VSF) technology, which allows up to twoswitches to be interconnected using standard Ethernet links, creating a virtual switch that can span across different closets or racks.

C. The customer needs to expand the network and make it possible for the current core switches to support more MAC forwarding and ARP entries. This scenario is not suitable for Aruba backplane stacking technology, as it does not increase the MAC or ARP table size of the switches. The MAC and ARP table size is determined by the hardware specifications of each switch model, and stacking them together does not change that. A better option for this scenario would be to upgrade the core switches to a higher-end model that supports more MAC and ARP entries, or to segment the network into smaller subnets to reduce the MAC and ARP traffic.

D. The customer needs to deploy a switch at a branch office and have the switch automatically discover and join the network stack at the main office. This scenario is not suitable for Aruba backplane stacking technology, as it requires the switches to be on the same LAN and connected with backplane cables. A better option for this scenario would be to use Aruba Central, which is a cloud-based management platform that allows remote provisioning and monitoring of Aruba switches and other devices. Aruba Central can automatically discover and join the switch to the network, and apply the configuration and policies from the main office.

References:

Aruba 2930M Switch Series - Data sheet)

ArubaOS-Switch Virtual Switching Framework - Configuration guide)

Aruba Central - Data sheet)