Free HPE Campus Access Switching Expert Written Exam Practice Questions

Sample Practice Questions

Try these 10 sample questions from the HPE Campus Access Switching Expert Written Exam practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1An AOS-CX 6200 has a route to a management server only in the management VRF. A ping to its address without a VRF argument reports that the network is unreachable. Which command change selects the intended routing table?

   1. A.Add vrf mgmt to the ping command.Correct answer: A
   2. B.Add vrf default to the ping command.
   3. C.Specify only the management interface as the ping source.
   4. D.Specify only a source address from the default VRF.

   Explanation: The guide states: "The user meant to ping out the management vrf, but forgot to add vrf mgmt to the ping command." Without a VRF argument the default VRF is used; selecting only a source does not select the management routing table.

   Reference: AOS-CX 10.13 Diagnostics and Supportability Guide (6200 Switch Series) — Ping > Troubleshooting > Network is unreachable, p. 81

2. 2A customer requires an AOS-CX 6200 trunk to send native VLAN 20 frames with an 802.1Q tag. The VLAN already exists and is allowed on the trunk. Which interface command meets this requirement?

   1. A.vlan trunk native 20
   2. B.vlan trunk native 20 tagCorrect answer: B
   3. C.vlan access 20
   4. D.no vlan trunk native 20 tag

   Explanation: The documentation states: "Enables tagging on a native VLAN. Only incoming packets that are tagged with the matching VLAN ID are accepted." The tag form enables the required native VLAN tagging; the other commands do not enable that setting.

   Reference: AOS-CX 10.13 vlan trunk native tag — vlan trunk native tag

3. 3A four-member AOS-CX VSF stack uses a healthy ring topology. One VSF link fails, with all members still powered. What topology does the remaining stack assume?

   1. A.A chain connecting the members.Correct answer: A
   2. B.Two independent stack fragments.
   3. C.An unchanged ring with both paths intact.
   4. D.A single standalone conductor with all members removed.

   Explanation: The guide states: "If the stack topology is a ring, it will degenerate to a chain when a VSF link in the stack fails." The remaining path keeps the members connected but removes ring redundancy.

   Reference: AOS-CX 10.13 Virtual Switching Framework Guide — Frequently asked questions > What happens if a VSF link fails?, p. 95

4. 4An AOS-CX 6300 trunk receives untagged frames. Its native VLAN is 20, but the trunk allowed list excludes VLAN 20. What happens to those frames?

   1. A.They are assigned to VLAN 1 and forwarded.
   2. B.They are assigned to VLAN 20 and forwarded.
   3. C.They are dropped on ingress.Correct answer: C
   4. D.They are forwarded on every allowed VLAN.

   Explanation: The guide states: "If the native VLAN is not included in the allowed list, all untagged frames that ingress on the trunk interface are dropped." The native VLAN must be permitted on the trunk for those untagged frames.

   Reference: AOS-CX 10.13 Layer-2 Bridging Guide: Trunk interface — Trunk interface > Allowed VLANs

5. 5An ArubaOS AP suffers performance loss from a nearby non-Wi-Fi interferer. The engineer raises non-Wi-Fi interference immunity. What tradeoff should be considered?

   1. A.A small reduction in AP range.Correct answer: A
   2. B.A small increase in AP range.
   3. C.Reduced immunity to non-Wi-Fi interference.
   4. D.The AP's range is guaranteed to remain unchanged.

   Explanation: The guide describes increasing interference immunity as "causing the AP to lose a small amount of range." An engineer should account for that coverage tradeoff.

   Reference: ArubaOS 8 CLI Guide: show rf dot11g-radio-profile — Non-Wi-Fi Interference Immunity

6. 6An AOS-CX OSPF interface is configured passive and an adjacent router cannot form a neighbor relationship on it. Which setting explains the behavior?

   1. A.The interface participates but sends and receives no OSPF packets.Correct answer: A
   2. B.The interface participates and exchanges OSPF packets normally.
   3. C.The interface sends OSPF packets but does not receive them.
   4. D.The interface neither participates in OSPF nor advertises its network.

   Explanation: The guide states: "The interface participates in OSPF but does not send or receive packets on that interface." An OSPF neighbor cannot exchange hello packets through that passive interface.

   Reference: AOS-CX 10.13 IP Routing Guide: Configuring OSPF interface settings — Configuring OSPF interface settings

7. 7A customer wants to prevent unauthorized DHCP servers connected to user access ports from issuing network settings. Which AOS-CX feature distinguishes trusted server ports from untrusted user ports?

   1. A.DHCP snooping.Correct answer: A
   2. B.Dynamic ARP inspection.
   3. C.IP source lockdown.
   4. D.MAC lockdown.

   Explanation: The guide states: "DHCP snooping helps prevent such problems by distinguishing between trusted ports connected to legitimate DHCP servers and untrusted ports connected to general users." The security design assigns trust to legitimate DHCP server-facing ports and inspects untrusted ports.

   Reference: AOS-CX 10.13 IP Services Guide — DHCP snooping, p. 135

8. 8A management login design requires the switch to try the next configured authentication method after a reachable AAA server rejects credentials. Which setting enables this behavior?

   1. A.aaa authentication allow-fail-throughCorrect answer: A
   2. B.no aaa authentication allow-fail-through
   3. C.aaa authentication login default local
   4. D.aaa authorization commands default local

   Explanation: The guide states: "If this feature is enabled, the next server or authentication method is tried after an authentication failure." Authentication fail-through governs the handling of an explicit authentication failure.

   Reference: AOS-CX 10.13 Security Guide: aaa authentication allow-fail-through — aaa authentication allow-fail-through

9. 9Before running an AOS-CX TDR cable diagnostic on a working production link, what operational effect should be scheduled for?

   1. A.The test brings down the tested link.Correct answer: A
   2. B.The tested link stays up throughout the test.
   3. C.Every other switch port is also shut down.
   4. D.The tested link is brought down only after testing completes.

   Explanation: The guide states: "The cable diagnostics test will bring down the link, which will take more time to complete the test." The test disrupts the tested link and should be planned accordingly.

   Reference: AOS-CX 10.13 Diagnostics Guide: Cable diagnostics tests — Cable diagnostics tests

10. 10A packet analyzer misses traffic when several busy 10G source ports are mirrored simultaneously to one 10G destination. Their combined traffic can exceed 10 Gbps. What limitation should the engineer investigate?

    1. A.The combined mirrored traffic can oversaturate the destination.Correct answer: A
    2. B.The destination handles each 10G source on a separate physical output.
    3. C.The mirror session reserves 10 Gbps of destination bandwidth per source.
    4. D.The mirror session increases destination bandwidth to match its sources.

    Explanation: The guide states: "A mirror session with multiple 10G sources can overwhelm a single 10G destination and important data may be lost." Reduce aggregate mirrored traffic or provide sufficient destination capacity.

    Reference: AOS-CX 10.13 Monitoring Guide: Mirroring — Mirroring